Privacy Policy.

1. Controller

This information applies to the corporate website mundiallabs.com. Our separate software products may have their own privacy notices.

2. Hosting and access logs

We host this website with Vercel Inc. When a page is requested, technical information may be processed: IP address, date and time, requested page, referrer (where supplied), browser and device information, and technical request/response data. This is necessary to deliver the website, detect errors and protect against abuse.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable delivery and operation of the site. Access information is processed for as long as needed for delivery, security and error diagnosis, according to the applicable Vercel service and retention settings.

Provider information: Vercel Privacy Notice.

3. Vercel Web Analytics

We use Vercel Web Analytics to understand aggregated website usage and improve our content. This includes page views, the page visited, the referring site, approximate location (such as country), browser, operating system and device category.

According to Vercel, Web Analytics does not use tracking cookies or persistent identifiers for tracking people across websites. A short-lived, daily rotating hash is used for aggregate visitor counts. Analytics data is available to us within a reporting window of up to 12 months on our current plan. We do not use advertising tracking or individual visitor profiles.

Purpose and legal basis: statistical evaluation and improvement of the website based on our legitimate interests (Article 6(1)(f) GDPR), to the extent personal data is processed. More information: Vercel Web Analytics Privacy and Compliance.

4. Contact by form or email

If you contact us through our contact form, we process the name, email address and message you submit to understand and answer your enquiry. The form is processed by a server-side function hosted on Vercel and delivered to our business mailbox using Google Workspace (Google LLC). We do not store the submitted message in a separate website database. For protection against automated abuse, the form also processes a hidden spam-check field and the time taken to complete the form.

If you write to us directly by email, your email address, message and related mail metadata are processed through Google Workspace and by us to respond.

Legal basis: Article 6(1)(b) GDPR for enquiries concerning a potential contract; otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries and protecting the form from abuse. We retain correspondence only as long as needed to answer the enquiry and comply with applicable record-retention obligations. We do not use enquiries for newsletters or unsolicited marketing.

Provider information: Google Workspace Cloud Data Processing Addendum.

5. Service providers, international transfers and retention

We use Vercel for website hosting, form processing and Web Analytics, and Google Workspace for our business email. Processing may occur outside the European Economic Area, including in the United States. These providers publish data processing terms and safeguards for international transfers, including EU Standard Contractual Clauses where applicable. Actual data location depends on the services and settings used.

Technical access information is retained according to Vercel's operational and security settings; aggregate analytics reports are accessible for up to 12 months; enquiries in our mailbox are kept only while needed for handling the matter or meeting statutory obligations. We review and delete correspondence that is no longer required.

Details: Vercel Data Processing Addendum and Google Workspace data processing terms.

6. Your data protection rights

Subject to the legal conditions, you have the right to request access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may object to processing based on legitimate interests for reasons related to your particular situation (Article 21).

To exercise your rights, email operations@mundiallabs.com. You also have the right to lodge a complaint with a data protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR on this corporate website.

7. Language selection and other technologies

The EN/DE language switch uses ordinary links to separate pages. It does not store a language preference in a cookie or in browser storage. The website does not include Google Analytics, advertising trackers, embedded social-media widgets, or third-party web fonts. Vercel Web Analytics itself does not use tracking cookies.

Last updated: 25 October 2026.