Privacy notice

1. Controller

The controller for personal data processed in connection with RheinTalent is:

MMIND GmbH
Duxgass 55
FL-9494 Schaan
Principality of Liechtenstein

Telephone: +41 76 458 32 96
Email: info@mmind.ai

No data protection officer has been appointed. Privacy enquiries may be sent directly to the address above.

2. Scope and legal bases

This privacy notice applies to rheintalent.li, its German and English pages, RheinTalent Notes, the newsletter subscription, contact options and personal data processed through the profile, registration and AI-assisted features offered by RheinTalent. Linked third-party services may be subject to additional privacy notices.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Liechtenstein Data Protection Act and other applicable Liechtenstein law. Depending on the processing, we rely in particular on:

• your consent under Article 6(1)(a) GDPR;
• steps taken at your request before entering into a contract or performance of a contract under Article 6(1)(b) GDPR;
• legal obligations under Article 6(1)(c) GDPR;
• our legitimate interests under Article 6(1)(f) GDPR, particularly in secure operation, responding to enquiries and improving RheinTalent.

3. Website access and server logs

Technically necessary connection data is processed when you visit the website. This may include your IP address, date and time, requested URL, referring URL, browser and device information, status data and error information.

This processing enables delivery of the website, stability, troubleshooting and protection against misuse and attacks. The legal basis is our legitimate interest in a secure and functional website under Article 6(1)(f) GDPR.

Hosting and security providers retain technical logs only for as long as necessary for operation, security, troubleshooting, abuse prevention or compliance with legal duties. Logs affected by a security incident may be retained until the investigation and any related legal proceedings have concluded.

4. Hosting and technical delivery

The website is provided using Lovable. Its European contact address is:

Lovable Labs AB
Regeringsgatan 25
111 53 Stockholm
Sweden

Privacy email: dpo@lovable.dev

Lovable works with affiliated companies and technical subprocessors. Cloudflare infrastructure may be used in particular to deliver and protect the website securely worldwide. Depending on the contract and processing, Lovable Labs Incorporated, 1111b South Governors Avenue, Dover, DE 19904, USA, may also act as a contracting party or data importer.

The technical data described in section 3 is processed as part of hosting. Where data is processed outside the European Economic Area, providers rely on recognised safeguards such as adequacy decisions, the EU-US Data Privacy Framework or standard contractual clauses. Further information is available in the Lovable privacy policy.

Lovable may provide aggregated project statistics, such as visitor numbers, page views, time on site, referring pages and device categories. We use this information to improve the website technically and editorially, based on our legitimate interest under Article 6(1)(f) GDPR. It is not used to create personal advertising profiles.

Source code is managed in an access-restricted GitHub project. GitHub does not receive profile, newsletter or contact data merely because someone visits rheintalent.li.

5. Registration, profiles and placement

When you use RheinTalent as talent or as a company, we process the data needed for registration, profile creation, job descriptions, matching, contact and placement. This may include your name, contact and login details, CV, career history, skills, interests, values, purpose information, vacancy data, company details, communication data and status information.

Processing is necessary to take steps at your request before entering into a contract and to provide the requested services under Article 6(1)(b) GDPR. Where we improve RheinTalent, prevent misuse or document processes, we rely on our legitimate interests under Article 6(1)(f) GDPR.

Talent profiles are generally shown to companies in anonymised form at first. Names and contact details are released only after the talent accepts a contact request. Mentoring content is not shared with employers unless the person concerned gives specific and purpose-bound consent.

6. AI-assisted features using Mistral AI

We use Mistral AI models through the Mistral API for structured profile creation, skill suggestions, purpose interviews, translations and explainable matching support. The provider is:

Mistral AI
15 rue des Halles
75001 Paris
France

Privacy email: privacy@mistral.ai

Depending on the feature used, selected profile information, CV data, skills, professional interests, purpose responses, vacancy information and related instructions may be sent to the API and processed to generate a response. This processing provides the requested RheinTalent function and is based on Article 6(1)(b) GDPR. Article 6(1)(f) GDPR may also apply to quality assurance, security and abuse prevention.

According to Mistral's published terms, input and output from the paid API are not used to train Mistral models. Mistral may generally retain API input and output for up to 30 rolling days for abuse monitoring unless a shorter period or Zero Data Retention is enabled for the account used. Further information is available in Mistral AI's privacy policy and Data Processing Addendum.

Merely visiting rheintalent.li or subscribing to the newsletter does not send your data to Mistral AI. AI output is used as support. We do not make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR.

7. RheinTalent Notes and newsletter

We process the following information when you subscribe to RheinTalent Notes:

• your email address;
• your first name, if you provide it voluntarily;
• your consent and technical subscription status information.

We process this information to manage and send the newsletter on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future through an unsubscribe link in a newsletter email or by contacting info@mmind.ai.

We use the following provider to manage contacts and send email:

Plus Five Five, Inc. (Resend)
2261 Market Street #5039
San Francisco, CA 94114
USA

Resend processes recipient addresses, sender details, message content and technical delivery and error data on our behalf. For transfers to the USA, Resend provides for the EU-US Data Privacy Framework and standard contractual clauses. Further information is available in Resend's privacy policy and Data Processing Addendum.

Newsletter data is stored until you unsubscribe or the purpose for sending the newsletter no longer applies. After you unsubscribe, your email address may be retained on a suppression list where necessary to prevent further messages and demonstrate compliance with the withdrawal. We do not sell address data or use it for third-party advertising.

8. Contacting us

If you contact us by email, telephone or another channel we provide, we process the contact details and content you share, together with the metadata needed for the communication. We use this information to respond to your enquiry, prepare a potential engagement or manage an existing business relationship.

The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual steps. In other cases, it is our legitimate interest in responding to enquiries and conducting business communications under Article 6(1)(f) GDPR.

Email is processed using Google Workspace. The EEA provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

We delete general enquiries once they have been resolved and no further retention is required. Data connected with proposals, engagements or business relationships is kept for as long as necessary for the relationship, the establishment or defence of claims and statutory retention duties.

9. External links, Google Fonts and cookies

The website links to the RheinTalent platform, MMIND.ai, professional networks, sources and other external services. Merely displaying a link generally does not send data to the external provider. Once you follow it, that provider's privacy terms apply.

Rheintalent.li uses Google Fonts to display typefaces. When font files are requested, your IP address in particular is transmitted to Google. According to Google, the Google Fonts API does not set cookies. The EEA provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is our legitimate interest in a consistent and technically reliable presentation under Article 6(1)(f) GDPR.

We currently use neither Google Analytics nor our own advertising or marketing cookies. Hosting and security providers may use technically necessary cookies or comparable features to prevent attacks, protect sessions and deliver the website reliably. If we introduce analytics, personalisation or marketing services later, we will update this privacy notice and, where required, the consent controls before activation.

10. Google Search Console, SEO and AI Search

We use Google Search Console to review the discoverability and technical presentation of rheintalent.li in Google Search. Search Console mainly provides aggregated performance information. This may include search queries, viewed pages, impressions, clicks, average position, countries and device categories.

We use this information for troubleshooting, search engine optimisation and improvement of public content. The legal basis is our legitimate interest in a technically sound and discoverable website under Article 6(1)(f) GDPR. Google Search Console does not add a separate tracking script to rheintalent.li. Measurement data is generated in connection with the use of Google Search.

If the Search Console connection is enabled in Lovable, Lovable may access the website's Search Console data and display it in the project environment. Lovable's SEO and AI Search features may review public pages, source code, metadata, search data and competitive information. Profile data, newsletter addresses and unpublished personal input are not made available for this purpose.

11. Recipients and international transfers

Personal data is available only to the internal teams and service providers that need it for the purposes described above. These include hosting and security providers, AI, newsletter and email providers and, where required, professional advisers and public authorities.

For recipients outside the EEA, we require an applicable adequacy decision or appropriate safeguards under Article 46 GDPR, particularly standard contractual clauses. Even with these safeguards, the level of data protection in a third country may differ from that in the EEA.

12. Retention

We retain personal data only for as long as necessary for the relevant purpose, provision of our services, security, establishment or defence of claims and statutory retention duties. The data is then deleted or anonymised. Specific retention periods used by individual providers are described in the relevant sections above.

13. Your rights

Where the legal requirements are met, you have in particular the right to:

• request access to your personal data (Article 15 GDPR);
• have inaccurate data corrected (Article 16 GDPR);
• request deletion of your data (Article 17 GDPR);
• request restriction of processing (Article 18 GDPR);
• receive data in a portable format (Article 20 GDPR);
• object to processing based on legitimate interests (Article 21 GDPR);
• withdraw consent at any time for the future (Article 7(3) GDPR).

To exercise your rights, contact info@mmind.ai. We may request suitable proof of identity where necessary to protect your data.

14. Right to complain

You may lodge a complaint with a data protection authority. The competent authority is:

Data Protection Authority of the Principality of Liechtenstein
Kirchstrasse 8
PO Box 684
FL-9490 Vaduz
Telephone: +423 236 60 90
Email: info.dss@llv.li
Website: www.datenschutzstelle.li

15. Data security

We and our service providers take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration and misuse. These measures include encrypted transmission, access restrictions and ongoing updates to the systems used. Absolute security of data transmission and storage cannot be guaranteed.

16. Changes

We update this privacy notice when RheinTalent, the providers we use or the law changes. In particular, we will update it before changing the newsletter system or activating additional AI, analytics or communication services. The version published on this website applies.