Book an intro call

Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

As of: October 2026. Here you can find out which data we process on this website, for what purpose and on what legal basis.

1. Controller

Lyanbird Studios GmbH (brand: Minotaurus), managing director Sascha Blum Am Wiebach 6a, 50189 Elsdorf, Germany Email: info@minotaurus.com

2. Hosting and server logs

The website is operated by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), with delivery preferably from the Frankfurt region. When you visit the site, Vercel processes technically necessary data (IP address, time, page accessed, browser identifier) in order to deliver and secure the website. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement with Vercel; transfers to the USA are based on the EU-U.S. Data Privacy Framework or standard contractual clauses.

3. Consent (cookie banner)

On your first visit, our own cookie banner asks which services you allow: "Statistics" (Google Analytics) and "Marketing" (Meta, TikTok, Google ads signals). None of these services is loaded before you decide. We store your choice in your browser (key mino_consent, 6 months) so that we don't ask again on every visit (Art. 6 (1) (c) GDPR in conjunction with § 25 (2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act). You can change or withdraw your choice at any time via "Cookie settings" in the footer; withdrawal applies to the future.

We use Google's consent mode (Consent Mode v2): by default, all storage for analytics and advertising is denied and is only enabled after your consent.

4. Analytics and marketing (only with consent)

The legal basis in each case is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). For services based in the USA or with a US parent company, transfers are based on the EU-U.S. Data Privacy Framework or standard contractual clauses.

Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), only with "Statistics" consent: we measure which pages are visited and which functions are used (e.g. page views, enquiries sent, appointments booked, chats started, use of the calculators). Cookies are set (including _ga, up to 2 years) and your IP address is processed in shortened form. Data is deleted after 14 months.

Meta Pixel and Meta Conversions API (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland), only with "Marketing" consent: we measure whether our ads on Facebook and Instagram lead to page views, enquiries, contacts and appointments, and build audiences for advertising. Cookies are set in the browser (including _fbp, _fbc, up to 90 days). When you send an enquiry, book an appointment or start the chat, we additionally transmit this event directly from our server to Meta so that it is counted reliably and only once. We send name, email address and phone number exclusively as an irreversible hash (SHA-256), plus IP address, browser identifier, the cookie identifiers and the page visited. We and Meta are joint controllers for this processing (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum.

TikTok Pixel and TikTok Events API (TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited), only with "Marketing" consent: we measure whether our ads on TikTok lead to page views, enquiries, contacts and appointments. Cookies are set in the browser (including _ttp, up to 13 months). For enquiries, bookings and chat starts, we additionally transmit the event from our server to TikTok, with email address and phone number only as a hash (SHA-256), plus IP address, browser identifier, cookie identifier and page visited. TikTok may also transfer data to third countries, including the USA and China.

Google ads signals (Google Ireland Limited), only with "Marketing" consent: with your consent, Google may also use the measurement data for measuring and personalising advertising.

Without consent, neither the pixels nor Google Analytics are loaded and no data is transmitted to Meta, TikTok or Google.

5. Fonts

The fonts Open Sans and Overpass are hosted on our own server. We embed the font Interstate via Adobe Fonts (Adobe Systems Software Ireland Ltd.); in doing so, your IP address is transmitted to Adobe so that the font can be loaded. The legal basis is our legitimate interest in a consistent presentation of our brand (Art. 6 (1) (f) GDPR).

6. Enquiries, appointment booking and free campaign

If you contact us via a form or the appointment booking, we process the information you provide (e.g. name, company, email, phone number, website, details of your role, revenue, budget and request) in order to respond to your enquiry and to initiate a possible contractual relationship (Art. 6 (1) (b) GDPR). We use your phone number only for queries about your enquiry or your appointment, not for advertising calls.

We forward enquiries internally to our communication service Slack (Slack Technologies, LLC / Salesforce, USA). For appointment booking, we check available times in our Google calendars and create the appointment via Google Calendar and Google Meet (Google Ireland Limited); you receive a calendar invitation by email. We have concluded data processing agreements with these providers; transfers to the USA are based on the EU-U.S. Data Privacy Framework or standard contractual clauses.

We store enquiries for as long as they are required for processing and delete them no later than twelve months after the last contact, provided that no contract is concluded and no statutory retention obligations apply.

7. Live chat

The live chat only appears when our team is available. Your messages, your name and your email address are transmitted to Slack so that we can reply there (Art. 6 (1) (b) GDPR). So that you can see the chat history on your next visit, we store it in your browser for up to 30 days.

8. Storage in your browser

Without consent, we only store in your browser what is necessary for the website to work (§ 25 (2) no. 2 TDDDG):

  • mino_lang (cookie, 1 year): your language choice, if you switch language
  • mino_consent (6 months): your choice in the cookie banner
  • mino_offer, mino_known, mino_offer_closed: whether the free campaign notice has already been shown, closed or used, and the details you entered there, so you can book the appointment later without entering them again
  • mino_chat_v2 (until you reset the chat): your chat history, if you use the chat
  • mino_origin, mino_fbclid, mino_ttclid, mino_gclid, mino_peek (until you close the tab): campaign parameters you arrived with, and whether the chat hint has already been shown

This information only leaves your browser when you send a form, book an appointment or use the chat; the click identifiers (fbclid, ttclid) only with "Marketing" consent.

9. Links to social networks

We only link to LinkedIn, Instagram and Trustpilot. Only when you click a link are you taken to the provider's website; the provider's privacy policy applies there.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. To do so, write to info@minotaurus.com.

You can also lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).

11. Job applications

We receive applications via our careers portal at Personio; there we provide separate information about the processing.

12. Changes

We will update this policy if the website or the legal situation changes. The version published here at any given time applies.