Privacy policy

The German version is authoritative.

On its public pages, mimi uses no cookies and no trackers, loads no external fonts and stores no IP addresses. The only thing counted, anonymously, is how often a card is opened.

1. Controller

Postal mail: Postfach 310126, 86062 Augsburg, Germany
Phone: +49 821 99980041
Email: info@stefanherzog.com

2. Hosting and Cloudflare

mimi runs on its own server in Germany. The pages are delivered through Cloudflare Inc. (USA) as a content delivery network and tunnel. Cloudflare acts as a processor and, as technically required, processes the IP address of the requesting device as well as date, time and requested address so that the connection can be established and attacks can be blocked. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and error-free operation of the service.

Cloudflare also processes data outside the European Union, in particular in the USA. The transfer is safeguarded by standard contractual clauses under Art. 46 GDPR.

The mimi server itself stores no IP addresses and keeps no access logs with IP address or user agent.

3. Anonymous view counters

For each card, the number of views is counted per day and per source (NFC chip, QR code, link, App Clip, Apple Wallet, app). Only these numbers are stored. No IP address, user agent, device identifier or cookie is stored, and no conclusions about individuals can be drawn. Card owners can see these numbers for their card. The legal basis is Art. 6(1)(f) GDPR.

4. Card data

A card shows the details that the respective card owner has provided for the card, for example name, title, organization, phone numbers, email address, postal address, office hours, website, logo and card image. This information can be viewed by anyone who uses the link, QR code or NFC chip of the card. Cards are blocked for search engines. The legal basis is the consent of the card owner under Art. 6(1)(a) GDPR. It can be withdrawn at any time, after which the card is deactivated and can no longer be opened.

5. Save contact and Apple Wallet

When the contact file (vCard) or the Wallet pass is requested, the card data is packaged into a file and transmitted. Nothing is stored on the server in the process. After adding it to Apple Wallet, Apple processes the pass under its own privacy terms. The pass contains no update address, so mimi learns nothing about how the pass is used.

6. App and App Clip

The app and the App Clip load the card from the mimi server. When pairing a card, the app redeems a one-time pairing code and receives an access token. The token is stored only locally on the device in the Keychain, and the server stores only a hash of it. Pairing can be removed in the app or by the operator. The app contains no advertising identifier, no analytics services and no third-party trackers. Writing to an NFC chip happens on the device only.

7. Cookies and fonts

The public pages set no cookies, so no cookie banner is needed. Only the admin area for the operator sets a technically necessary session cookie after login (Art. 6(1)(f) GDPR). All fonts come from the own server or from the operating system. There is no connection to Google Fonts or other external providers.

8. Contact by email

When contacting by email, the information provided is processed solely to handle the request. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted once the matter is closed and no statutory retention obligations apply.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). An informal email to the address above is sufficient. You also have the right to lodge a complaint with a supervisory authority. For Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Encryption

The pages are delivered encrypted via TLS throughout.

11. Last updated

This policy was last updated in October 2026 and will be adjusted when the technical implementation or the legal situation changes.

Back to mimi