is a creative studio and branding agency for brands that like their ideas fresh and a little fizzy. We partner with curious minds and bold brands to craft identities, stories, and digital experiences that pop.

Legal Notice & Privacy Policy

Last updated: 20 May 2025

1. Scope of this Policy

This page contains both our legal notice (Impressum) and our privacy policy. It applies to visits to our website mimosaagency.com and its subpages, regardless of the device used to access it.

If anything is unclear or you have questions about this policy, you can contact us at any time using the contact details above.

2. Definitions

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (Article 4 GDPR).

“Processing” means any operation or set of operations which is performed on personal data, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure, erasure or destruction.

3. Controller

The controller responsible for the processing of your personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

4. Your Rights

You have the following rights under the GDPR:

Right of access (Article 15 GDPR)
To obtain confirmation and information about the personal data we process about you.
Right to rectification (Article 16 GDPR)
To have inaccurate personal data corrected.
Right to erasure (“right to be forgotten”) (Article 17 GDPR)
To request deletion of your personal data, subject to statutory retention obligations.
Right to restriction of processing (Article 18 GDPR)
To restrict how we process your data in certain cases.
Right to data portability (Article 20 GDPR)
To receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.
Right to object (Article 21 GDPR)
To object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

If and to the extent our processing is based on your consent (Article 6(1)(a) or Article 9(2)(a) GDPR), you may withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is generally:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

You are free to lodge your complaint with any other competent supervisory authority in the EU.

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

5. Using Our Website for Information Purposes

5.1 Processing Activity

If you visit our website without registering, contacting us or otherwise providing us with information, we only collect the personal data that your browser automatically transmits to our server. This typically includes:

  • IP address
  • Date and time of the request
  • Time zone difference from GMT
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred
  • Website from which the request comes (referrer URL)
  • Browser type and version
  • Operating system and interface
  • Language and version of the browser software

5.2 Purpose and Legal Basis

The data is stored because it is technically necessary to display the website and to ensure stability and security.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to make our website available to you in a fully functional, secure form.

5.3 Storage Period

As soon as the aforementioned personal data is no longer required to display the website and to ensure its security, it will be deleted. Temporary collection of data for the provision of the website is mandatory for the provision and operation of the site. Further storage may occur in individual cases if required by law.

5.4 Data Recipient

The data is transferred to and stored with our hosting provider, Framer.

5.5 Obligation to Provide Data

The provision of personal data is neither a statutory nor a contractual requirement, nor is it necessary to enter into a contract. However, if you do not provide this data (for example, by blocking transmission at network or browser level), you may not be able to access our website as intended.

6. Infrastructure & Hosting

Your personal data is stored and processed exclusively in Germany. Our systems have been designed and developed to meet all aspects of the GDPR.

We use Framer as our hosting provider. For more information on how Framer handles data and cookies, you may refer to Framer’s own documentation. We have concluded the necessary contractual arrangements with Framer to ensure that your data is processed in compliance with data protection requirements.

7. Use of Cookies

7.1 Current Use

At the moment, our website does not use cookies.

Cookies are small text files that are sent by a website to the browser of your end device when you visit a site and stored there. You can verify the presence of cookies using any open tool, such as independent cookie scanners.

Different types of cookies may be implemented in the future. If we start using cookies, we will update this policy accordingly and, where required, obtain your consent.

7.2 Browser Configuration

Most web browsers are preconfigured to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or none at all. Please note that you may then no longer be able to use all functions of websites that rely on cookies.

You can also use your browser settings to delete cookies already stored in your browser and to set your browser to notify you before cookies are stored.

Disabling the use of cookies may require a permanent cookie to be stored on your computer. If you delete this cookie afterwards, you may have to deactivate cookies again.

8. Analytics

8.1 Processing Activity

Our website uses a privacy-focused analytics service called Fathom Analytics to count visits, as well as Framer's own analytics suite. Both do not to collect personal information in a way that allows us to identify individual users.

To provide us with information, Fathom uses hashed counters to measure the total number of visitors over a period of time. The only information visible to Fathom is an IP address, a randomly assigned ID, and time on the page, which is then deleted 24 hours after your visit, according to Fathom’s documentation.

8.2 Purpose and Legal Basis

We use Framer Analytics and Fathom to understand how our website is used in the aggregate and to improve its content and performance. We do not track or identify individual visitors.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is operating a user-friendly, effective website and understanding its overall usage while protecting your privacy.

Where Fathom relies on additional safeguards (such as IP anonymisation and short retention periods) to comply with GDPR, these measures are implemented by Fathom. For details, please refer to Fathom’s own privacy and GDPR documentation.

8.3 Storage Period

Fathom deletes the limited technical data it collects (IP address, randomized ID, time on page) 24 hours after your visit, according to its published data handling information. Aggregated statistical data that no longer allows identification of individual visitors may be stored for longer.

8.4 Data Recipient & Transfers

The analytics data is processed by Fathom Analytics. We only receive aggregated, anonymized statistics and do not have access to raw personal data.

If, in individual cases, data is transferred outside the European Union, Fathom is required to ensure an adequate level of protection through appropriate safeguards (such as standard contractual clauses). For further details, please consult Fathom’s data protection information.

8.5 Obligation to Provide Data

You are not obliged to provide data for analytics. If you configure your browser or privacy tools to block analytics scripts, you can still use our website. In that case, your visit will not be included in our statistics.

You have a right to object to processing based on Article 6(1)(f) GDPR at any time. You can send us your objection by email or post using the contact details above.

9. Contacting Us

If you contact us by email or through any contact form on our website, we process the personal data you provide (such as your name, email address, and the content of your message) in order to respond to your inquiry.

The legal basis for this processing is Article 6(1)(b) GDPR if your request relates to an existing or potential contractual relationship, and Article 6(1)(f) GDPR in other cases (our legitimate interest in handling inquiries).

We store this data only for as long as necessary to process and document your request, subject to statutory retention requirements.

10. Obligation to Provide Data

The provision of your personal data is generally not required by law or contract, nor necessary to enter into a contract with us, unless otherwise stated in this policy or in specific contractual documents.

However, if you do not provide certain data (for example, when contacting us), we may not be able to respond to your request or provide the services you request.

11. Changes to this Policy

We may update this Legal Notice & Privacy Policy from time to time to reflect changes in legal requirements or in the way we operate our website and services. The current version is always available on this page. If we make material changes, we may inform you separately where appropriate.