Legal information · Updated 29 September 2026
Privacy policy
This policy describes how personal data is processed when you visit mamumade.com or contact us by email. Separate privacy notices apply to the individual apps.
1. Controller
Martin Murk · mamumade
Im Tal 48–50
53940 Hellenthal
Germany
Email: datenschutz@mamumade.com
2. Hosting and server logs
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes hosting data on our behalf under a data processing agreement pursuant to Article 28 GDPR. The data centres used for this hosting are located in Germany.
Visits involve processing technical connection data, including IP address, date and time, requested address, HTTP status, transferred data volume, browser information and, where applicable, the referring page. This is necessary to deliver the website, maintain security and diagnose faults. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating a secure, reliable website.
According to STRATO, IP addresses used to detect and prevent attacks are stored for no more than seven days. IP addresses or hostnames in the access logs provided to us are anonymised by STRATO. We do not use these data to create personal usage profiles.
3. Cookies, language selection and local resources
The hub does not set cookies. Your browser’s preferred language is read locally to select German or English. If you explicitly choose a language, it is saved under “mamu-language” in your browser’s Local Storage until you delete the website data. This preference is shared by the hub, Cozymus and Trilane and is not sent to an external translation service.
Fonts, graphics, stylesheets and scripts are served from our own webspace. We do not use tracking pixels, analytics scripts, advertising services or embedded third-party fonts, videos, maps or social-media plugins. The hub has no contact form or registration.
The Cozymus and Trilane sections each have a contact form that uses a technically necessary session cookie for its security token and abuse prevention. The cookie is set when the contact page is opened and is restricted to /cozymus/ or /trilane/, respectively. Further details about form data and spam protection are provided in the Cozymus privacy notice (German) and Trilane privacy notice (German).
4. Email enquiries
When you email us, we process your email address, message and any other details you supply to handle your enquiry. Providing these details is voluntary; without a reachable contact address we cannot reply.
Contract-related enquiries are processed under Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR and our legitimate interest in answering your message. Technical email service providers may have access as part of their duties.
Messages are deleted when the enquiry has been resolved and there is no further reason to retain them. Where statutory retention duties apply, deletion follows their expiry. We do not use your data for advertising without an appropriate legal basis.
5. Secure transmission
The public website is served over HTTPS, encrypting data in transit between your browser and the webserver.
6. Your rights
Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).
You may withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal.
7. Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation under Article 21 GDPR. We will stop processing the data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, contact datenschutz@mamumade.com.
8. Complaints
You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, particularly in the member state of your habitual residence, workplace or the alleged infringement. The authority responsible for our location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).
9. Automated decisions
We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.