Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about how we handle your personal data when you use our website. Personal data means all data by which you can be personally identified.

1.2 The controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is mevidual Germany GmbH, Nassaustraße 28, 65719 Hofheim am Taunus, Germany, phone: +49 (0) 6127 7064893, email: info@mevidual.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: "Parci Beckmann, Nassaustr. 28, D-65719 Hofheim am Taunus".

2) Data collected when you visit our website

2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect such data as your browser transmits to our web server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

The page of our website you visited
Date and time of access
Volume of data sent, in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (where applicable: in anonymised form)

This processing takes place pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are neither passed on nor used in any other way. However, we reserve the right to review the server log files subsequently should there be concrete indications of unlawful use.

2.2 For security reasons and in order to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

3) Hosting and content delivery network

Shopify

For the hosting of our website and the presentation of the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data are also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website are processed on the provider's servers. We have concluded a data processing agreement with the provider which ensures the protection of our site visitors' data and prohibits any unauthorised disclosure to third parties.

For transfers of data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted again when you close your browser (so-called "session cookies"), while others remain on your device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case you can find the storage period in the overview of the cookie settings of your web browser.

Insofar as personal data are also processed by individual cookies used by us, such processing takes place pursuant to Art. 6 (1) lit. b GDPR for the performance of the contract, pursuant to Art. 6 (1) lit. a GDPR where consent has been given, or pursuant to Art. 6 (1) lit. f GDPR in order to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit to the site.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting us

5.1 – OpenAI

In order to provide autonomous customer support, we have integrated an artificial-intelligence software solution from the following provider into this website: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

Data may also be transferred to: OpenAI OpCo, LLC, USA.

By means of an API-based integration, visitors can communicate preferences by entering text, which are then processed by the provider's language models in order to determine product recommendations matching those interests.

For this purpose, the provider's software may collect personal data of the enquiring person in order to examine the request automatically and then resolve it by autonomously initiating processing steps.

The collection and further processing of personal data serve exclusively to handle the specific request. The processing of a site visitor's input for the purposes of training and further developing the provider's AI language models is expressly prevented.

The data processing takes place on the basis of our legitimate interest in the effective support of our site visitors, in the optimal marketing of our offering and in the automation of customer support in order to relieve operational workload, pursuant to Art. 6 (1) lit. f GDPR.

Personal data collected are deleted – subject to any statutory retention periods to the contrary – once the provider's software determines, by means of automatic mathematical-statistical procedures, that the matter has been conclusively clarified.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors' data and prohibits any unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

5.2 WhatsApp Business

You have the option of contacting us via the messaging service WhatsApp provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example an order you have placed), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name pursuant to Art. 6 (1) lit. b GDPR in order to process and answer your request. On the same legal basis we may ask you via WhatsApp to provide further data (order number, customer number, address or email address) in order to assign your enquiry to a particular transaction.

If you use our WhatsApp contact for general enquiries (for example about our range of services, availability or our website), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data are only ever used to answer your request via WhatsApp. They are not passed on to third parties.

Please note that WhatsApp Business is granted access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in that address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account we use a mobile device whose address book contains exclusively the WhatsApp contact details of those users who have themselves contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their own device and by accepting the WhatsApp terms of use, to the transfer of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6 (1) lit. a GDPR. A transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is thereby excluded.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your related rights and the settings available to you for protecting your privacy, please refer to WhatsApp's privacy notices: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider which protects our site visitors' data and prohibits disclosure to third parties.

In the course of the processing operations described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which on the basis of an adequacy decision of the European Commission ensures compliance with the European level of data protection.

5.3 When you contact us (e.g. via the contact form or by email), personal data are processed exclusively for the purpose of handling and answering your request and only to the extent necessary for that purpose.

The legal basis for processing these data is our legitimate interest in answering your request pursuant to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data are deleted once it can be inferred from the circumstances that the matter concerned has been conclusively clarified, provided that no statutory retention obligations prevent this.

5.4 We offer participants in our waitlist the opportunity to join a WhatsApp channel and send an invitation link for this purpose by email. The channel is operated via WhatsApp, a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Whether you join the channel is your own decision; we do not transfer any of your data to Meta. If you join, Meta processes your data – including your telephone number – in accordance with its own provisions, over which we have no influence. You can find details of this in WhatsApp's privacy policy. The legal basis for sending the invitation link is our legitimate interest in informing waitlist participants, Art. 6 (1) lit. f GDPR.

5.5 Waitlist and referral programme (Prefinery)

To operate our "Founding 100" waitlist and the associated referral programme, we use the service Prefinery provided by Compulsivo, Inc. dba Prefinery, 1401 Lavaca St Ste 40823, Austin, TX 78701, USA, as a processor. The data processing agreement pursuant to Art. 28 GDPR forms part of the provider's terms of use.

When you sign up for the waitlist, we process your email address, the referral code assigned to you, the number of your confirmed referrals and your position on the waitlist. You confirm your registration via a link in a confirmation email (double opt-in); the time and the confirmation are logged. The registration form is only loaded once you actively request it – no connection to Prefinery is established before that. When the form is loaded, your IP address is transmitted to Prefinery for technical reasons.

As part of the programme we send you emails about your position on the waitlist, about your personal referral link including reminders to share it, about your discount codes and about the launch of Synthor GO!. The legal basis for operating the programme is Art. 6 (1) lit. b GDPR; for sending these emails it is additionally the consent you gave when signing up, pursuant to Art. 6 (1) lit. a GDPR in conjunction with Sec. 7 (2) no. 3 of the German Act against Unfair Competition (UWG). You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link at the end of every email; your participation in the referral programme then ends, as we can only send you the discount codes by email.

The processing takes place in the United States. For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which on the basis of the European Commission's adequacy decision of 10 July 2023 ensures compliance with the European level of data protection. The provider uses sub-processors; it makes a current list available at prefinery.com/sub-processors.

Your data are deleted when you unsubscribe from the waitlist, and at the latest twelve months after the end of the referral programme.

6) Comment function

In connection with the comment function on this website, in addition to your comment we also store information about the time the comment was created and the commenter name you have chosen, and publish these on this website. Furthermore, your IP address is logged and stored. This storage of the IP address takes place for security reasons and in case the data subject infringes the rights of third parties or posts unlawful content by means of a comment. We need your email address in order to contact you if a third party objects to your published content as unlawful.

The legal bases for storing your data are Art. 6 (1) lit. b and lit. f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

7) Data processing when opening a customer account

Pursuant to Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide them to us when opening a customer account. Which data are required to open an account can be seen from the input mask of the relevant form on our website.

You can delete your customer account at any time by sending a message to the above address of the controller. After your customer account has been deleted, your data will be erased provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent this, and we no longer have a legitimate interest in continued storage.

8) Data processing for order handling

8.1 Insofar as this is necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us are passed on to the engaged transport company and the engaged credit institution pursuant to Art. 6 (1) lit. b GDPR.

Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when ordering in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact details are used strictly for the purpose of notifications about updates we owe and are processed by us for this purpose only to the extent necessary for the respective information.

8.2 Use of payment service providers (payment services)

– Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method from the provider under which you pay in advance (for example credit card payment), the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order are passed on to the provider pursuant to Art. 6 (1) lit. b GDPR. In this case your data are passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

9) Retargeting / remarketing and conversion tracking

Meta Pixel with advanced matching

Within our online offering we use the service "Meta Pixel" in advanced matching mode, provided by: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

If a user clicks on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter with the help of "Meta Pixel". After the redirect, this URL parameter is then written into the user's browser by a cookie that our linked page itself sets. In addition, this cookie records specific customer data such as the email address, which we collect on our page linked to the Facebook or Instagram advertisement during processes such as completed purchases, account logins or registrations (advanced matching). The cookie is then read out and enables the transmission of the data, including the specific customer data, to Meta.

We use "Meta Pixel" with advanced matching in order to make our advertisements (so-called "ads") on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or display certain characteristics (e.g. interest in particular topics or products, determined on the basis of the websites visited), which we transmit to Meta (so-called "custom audiences").

In addition, we analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared with the standard variant of "Meta Pixel", the advanced matching function helps us to measure the effectiveness of our advertising campaigns more accurately, as more attributed conversions are recorded.

All transmitted data are stored and processed by Meta, so that an assignment to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta's data use policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display advertisements on and outside Facebook.

All processing operations described above, in particular the setting of cookies for reading out information on the device used, are only carried out if you have given us your express consent to do so pursuant to Art. 6 (1) lit. a GDPR. You can withdraw the consent you have given at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider which ensures the protection of our site visitors' data and prohibits any unauthorised disclosure to third parties.

The information generated by Meta is generally transferred to and stored on a Meta server; in this connection a transfer to servers of Meta Platforms Inc. in the USA may also occur.

10) Website functionalities

Google Sign-In

On our website we provide a single sign-on function from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In addition to a transfer of data to the provider's location named above, data may also be transferred to: Google LLC, USA.

If you have an account with the provider, you can use those account details to log in in order to create a user account or to register on our website.

When you visit this page, this login function may establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not logged into one. The provider thereby receives the information that you have visited our page. The information collected in this respect (including, where applicable, your IP address) is transmitted by your browser directly to a server of the provider and stored there. However, the information is not used to identify you personally and is not passed on to third parties.

These data processing operations take place pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a user-friendly and interactive design of our online presence.

If you click the login button in order to register on our website with the data of your account with the provider, the provider transmits to us – exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a GDPR – the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender).

We store and use the data transmitted by the provider in order to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided that you have released these to the provider. Conversely, on the basis of your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred by us to your account with the provider.

The consent given can be withdrawn vis-à-vis us at any time with effect for the future.

Further information on data protection at Google can be found here: https://business.safety.google/intl/en/privacy/

11) Rights of the data subject

11.1 Applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited in each case for the respective conditions of exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing and – where relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data are processed on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned are stored until you withdraw your consent.

Where statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, these data are routinely deleted after expiry of the retention periods, provided that they are no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data are processed on the basis of Art. 6 (1) lit. f GDPR, these data are stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for the purposes of direct marketing on the basis of Art. 6 (1) lit. f GDPR, these data are stored until you exercise your right to object under Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this policy about specific processing situations, stored personal data are otherwise deleted once they are no longer necessary for the purposes for which they were collected or otherwise processed.

Last updated: 07 October 2026