Last Update 01.07.2026
Privacy and Cookie Policy
1. Introduction
At BuildingMinds (BuildingMinds GmbH, Schindler-Platz, 12105 Berlin, Germany and/or BuildingMinds Technology AG, Seestrasse 55, 6052 Hergiswil (NW, Switzerland) we are committed to protecting the privacy and security of our users, customers and suppliers as well as their representatives with regard to all products, services and websites or platforms we offer, as well as the information exchanged with us. Please read this document ("Privacy and Cookie Policy") carefully to understand our policies regarding the treatment of your personal data. This Privacy and Cookie Policy applies to persons who interact with us or our website www.buildingminds.com ("Site") and our BuildingMinds Platform ("Platform"), our products or services, and only to the extent that we act as a controller under the applicable data protection laws. You can find the contact details of our data protection officer in Section 3. In this Privacy and Cookie Policy, "BuildingMinds", "we" or "us" each refer to the company responsible for the relevant processing operation pursuant to Section 2.
2. Controllers responsible for the data processing
The controller responsible for the processing of data on the Site and on the Platform is:
BuildingMinds GmbH
Schindler-Platz, 12105 Berlin
Germany
The controller responsible for the processing of data in connection with the conclusion of online contracts via the self-service process on the Site is:
BuildingMinds Technology AG
Seestrasse 55, 6052 Hergiswil (NW)
Switzerland
Online contracts concluded via the self-service process are entered into with BuildingMinds Technology AG. The SaaS Terms and Conditions available at the following link apply: https://buildingminds.com/saas-terms-and-conditions
3. Contact details of the data protection officer
BuildingMinds GmbH has appointed an external data protection officer:
intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
If you have any questions or comments regarding this Privacy and Cookie Policy, your personal data or data privacy at BuildingMinds, please contact us at: privacy@buildingminds.com
4. Purpose of the Site and the Platform
The Site provides general information about BuildingMinds, its products, services and career opportunities.On the Site, there may be special forms through which interested Site visitors can request further information about BuildingMinds products and services or request their provision.The Platform may include, among other things, the following features and functionalities, depending on the Platform scope individually agreed upon in the Platform Services Agreement, Order Form, or Free Trial:
Integrated full-scale performance analytics
A digital building twin
Implementation of a Common Data Model
Enablement of closed-loop operations
Connected mobile and web applications
Integrate site and building master data as digital twin
Visualize 3D models as extension of digital twins if provided
Manage and report on energy performance certificates and green building certificates
Manage energy and resource consumption data of buildings and track across funds
Analyze the calculated operational emissions (operational CO2 footprint)
Analyze the stranding risk of single buildings or funds based on industry specific benchmarks
Simulate regulatory CO2 costs
Analyze the impact of retrofit measures on stranding risks, simulated energy and resource consumption data and operational emissions
Report data and KPIs for industry specific ESG reporting frameworks
Integrate and report on lease and operational cost data
Manage workspaces and track space utilization.
5. Purpose of this Privacy and Cookie Policy
This Privacy and Cookie Policy explains how we process your data as well as how we use cookies and other means of identification
BuildingMinds treats personal data in accordance with applicable data protection laws. To this end, we have issued this Privacy and Cookie Policy. It describes how we collect and further process personal data when you visit the Site or engage with us via the Site (e.g., submission of data through filling out forms, sending emails, subscribing to our newsletter), when you use our products or services, or when you otherwise interact with us. It also describes how we collect and further process personal data in the role of a controller when you use the Platform, use related products or services, such as connected mobile and web applications or demo/test versions of our products, or engage with us via the Platform, related products or services (e.g., through submitting data by way of filling out forms).This Privacy and Cookie Policy describes the type of personal data BuildingMinds collects, the method of collection and the purposes for which BuildingMinds may use, share or disclose such personal data.The term “personal data” in this Privacy and Cookie Policy means any information that identifies or could reasonably be used to identify any natural person.The term “controller” in this Privacy and Cookie Policy means anyone who, alone or jointly with others, determines the purposes and means of the processing of personal data.This Privacy and Cookie Policy is not necessarily a comprehensive description of our data processing activities. For registered customers and users of our products or services, further data protection statements (and/or general terms and conditions) are applicable and available.
If you provide us with personal data of other persons
If you provide us with personal data of other persons (such as family members, work colleagues), it is your responsibility to ensure the respective persons are aware of this Privacy and Cookie Policy and only provide us with their data if you are allowed to do so and such personal data is correct.
6. How we collect and process personal data
When, how and what kind of personal data we collect
BuildingMinds treats personal data in accordance with applicable data protection laws. We may collect your personal data in the course of our business, including through your use of our Site or Platform, related products and services.
We may receive data submitted by you
There may be special forms through which you can request further information about BuildingMinds products and services or request their provision. When you submit such a request or electronically pass any other information to BuildingMinds in any way (e.g., via an online contact form, email etc.) you may be asked to provide certain information, including, but not limited to, contact details (e.g., your name, title, company, address, phone number, email address or line of business).
We may automatically log certain technical information
By using our Site or Platform, related products and services, certain technical and other information is automatically disclosed by your computer or other electronic device that you use and logged by us (such as your network address, the type of your browser, the site that referred you to our Site or Platform) for operational and security purposes, and to better understand the usage of our Site, products and services. Please see section 16 of this Privacy and Cookie Policy “Cookies and other means of identification”.
7. Purpose of processing, categories of personal data, legal basis
Please consult the table below to see, when using our Site or Platform, related products and services, or interacting with us otherwise, for which purposes we process (use, store, share, etc.) personal data, which categories of personal data are being processed as well as the legal basis for such processing.
Purpose | Categories of Personal Data | Legal Basis |
|---|---|---|
When you visit the Site: The personal data we collect allows us to improve and personalize your experience on our Site or Platform, to optimize our content for you and for your computer or device, to allow you to participate in interactive features. | Example given: IP address, date and time, Network addressType of browserThe site that referred you to their site. | The processing of your personal data is necessary to administer and optimize our Site or Platform, related products and services. This may be to fulfill contractual obligations (vis-à-vis our customers) and/or to pursue legitimate interests (e.g., maintaining customer satisfaction and Site or Platform functionality, offering content, improving and developing new products and services). |
When you share your contact details with us: The personal data you share with us (e.g., name, company name, email address, phone number) to receive information about our products or services or request their provision allows us to evaluate and decide about your contract request, send you relevant information, inquire whether you want to subscribe to our newsletter or ask you via email whether you want your data to be stored in order to send you further sales-related information. | Contact details (e.g., name, company name, email address, phone number) | The processing of your personal data is necessary to provide you with the requested information or evaluate and decide about your contract request. This may be to take steps at your request prior to entering into a contract and/or to pursue our legitimate interests (e.g., to response to a request, send you offering content and further information on our products or services). |
When you subscribe to a newsletter: The personal data we collect allows us to send you newsletters to keep you updated on our products or services. | Name, company name, address, email address, phone number, information on the product or service you purchased or are interested in. | We process your personal data based on your consent to receive our newsletters. The processing of your personal data is necessary to enable us to provide you with our newsletters. You can unsubscribe from this service at any time by writing an email to privacy@buildingminds.com or by clicking on the unsubscribe link in those emails. |
When you submit data with a contact request: The personal data we collect allows us to process your specific request and our response thereto. | Contact details (e.g., name, company name, email address, phone number) and information on your contact request. | The processing of your personal data is necessary to administer your request and to provide an appropriate response. This may be to fulfill contractual obligations (vis-à-vis our customers) and/or to pursue legitimate interests (e.g., maintaining customer satisfaction, improving and developing new products and services) |
Third-party social networks (Social Media Plugins): When you interact with third party social networking features, such as “Like” functions or Social Media Plugins embedded in the Site or Platform, your personal data may be processed by such social media networks to allow you to participate in the respective interactive features offered by such social media networks. For data processed by third party social networks, such third parties are responsible. | You can learn more about how these features work by reviewing the privacy notices of the relevant third-party social networks. See Section 15 below. | You can learn more about the legal grounds on which these data are processed by reviewing the privacy notices of the relevant third-party social networks. See Section 15 below. |
When you apply for a job: In general, job applications are not handled through the Site, but through our online HR service tool Personio (www.personio.de) The personal data we collect in this process allows us to process your job applications. Details can be found in the Online Privacy Policy Online Applications. | Contact details (e.g., name, email address, phone number), your written application, CV and certificates/ diplomas | We process your personal data anticipating an employment contract. We do that on the basis of steps necessary for entering into a contract, and on the basis of our legitimate interests (e.g., offering job opportunities, business development). |
Booking an Appointment: The personal data we collect allows us to schedule an appointment between you and our product and services experts. | Contact details (e.g., name, company name, email address, phone number) and information on your appointment request, meeting-language | The processing of your personal data is necessary to administer your request and to provide an appropriate response. This may be to fulfill contractual obligations (vis-à-vis our customers) and/or to pursue legitimate interests (e.g., to manage appointments automatically and maintaining customer satisfaction). |
Contractual relations, including online contract conclusion (self-service): The personal data we collect allow us to initiate, conclude, perform and manage contractual relations with the company you represent. This also includes the conclusion of online contracts via the self-service process on the Site, including the creation of the contract, the assignment to the ordering company as well as the communication in connection with the conclusion and performance of the contract. | Contact information (e.g. name of the ordering or acting person, company name and business address of the ordering company, email address, telephone number) | The processing of your personal data is necessary in order to initiate, conclude, perform and document contractual relations with the company you represent, as well as to pursue our legitimate interests in an efficient, traceable and secure handling of our business relations, including the self-service ordering process. |
If you use the payment service Stripe: We use the payment service Stripe to process payment transactions as part of our self-service ordering process. When you place an order on our Site and make a payment, personal data is transmitted to Stripe and processed by Stripe in order to carry out the payment transaction. | Payment data (e.g. credit card number, expiry date, security code, bank details), contact and address data (e.g. name, email address, billing and delivery address, telephone number), transaction data (e.g. order amount, order number, time of the transaction), technical and device data (e.g. IP address, device ID, browser type). | The processing of your personal data in the course of payment handling is necessary in order to process the payment for the order of the company you represent. This is done in pursuit of our legitimate interests in an efficient, secure and traceable execution of the self-service ordering process. |
Sanctions list screening as part of our self-service ordering process: As part of our self-service ordering process on our Site, we use the service provider dilisense to carry out an automated check against international sanctions lists. This checks whether you or the company you represent is a sanctioned person, organisation or company. This check serves to comply with applicable sanctions-related prohibitions, in particular prohibitions on directly or indirectly making funds, economic resources, goods or services available to sanctioned persons, organisations or companies. | Name of the ordering person (first and last name) and company name of the company they represent | The processing of your personal data is necessary in order to comply with applicable legal obligations and prohibitions under the relevant sanctions law. These include, in particular, relevant EU sanctions regulations, e.g. in the area of counter-terrorism and country-related sanctions, as well as Swiss sanctions requirements, in particular the Embargo Act and the sanctions ordinances issued by the Federal Council on its basis. Sanctions law prohibits, among other things, directly or indirectly making funds, economic resources, goods or services available to sanctioned persons, organisations or companies. The sanctions list screening is necessary, on the one hand, in order to comply with legal obligations. On the other hand, we have a legitimate interest in complying with international sanctions regulations and avoiding breaches of trade prohibitions, which would be associated with considerable legal and economic risks for our company. Without providing your name and the company name of the company you represent, we cannot complete the ordering process. |
When you log in to the Platform or our mobile or web applications: The personal data we collect allow us to personalize your experience on our Platform or our mobile or web applications, to optimize our content for you and for your computer or other electronic device. | IP address, registration data, date and time. | The processing of your personal data is necessary to administer our Platform and related products and services. This may be to fulfil contractual obligations (vis-à-vis our customers) and/or to pursue other legitimate interests (e.g., maintaining Platform functionality, offering content). |
When you use our Platform: The personal data we collect allow us to optimise our content for you and for your computer or other electronic device (e.g. screen size and language) and to ensure access to and availability of your data. We use Microsoft Azure to host our Platform and store the data therein. We use Mixpanel to analyse user behaviour on the Platform in order to improve the user experience and develop new features for our Platform. We use Grafana and Sentry for logging, monitoring and error tracking on the BuildingMinds Platform. | IP address, session duration, location (according to IP address), operating system, user behaviour, type of browser and device, user name and email address | The processing of your personal data is essential to provide our Platform and the related products and services. This may be to fulfil contractual obligations (vis-à-vis our customers) and/or to pursue other legitimate interests (e.g. maintaining customer satisfaction and Platform functionality, offering content, improving and developing new products and services). The interest in continuing this processing for reasons of stability and functionality regularly outweighs the data subject's right to object. The legal basis for the use of Mixpanel is your prior consent. We use Grafana and Sentry on the basis of our legitimate interest in the technical monitoring and error analysis of our Platform. |
When you use our chatbot: You can interact with our chatbot on our website and platform. We will collect and process personal data provided by you that is necessary to manage your request. | Contact details (e.g., name, company name, email address), IP address, date and time. | The processing of your personal data is essential to manage your request. |
When you use a demo/test version of our products or services. When you use a demo/test version of our services or products, we collect and process personal data that is necessary to provide the access to the demo/test. We also collect personal data to ensure stability and security of the demo/test. | Registration data, IP address, email address | The processing of your personal data is essential to provide our demo/test versions. This may be to fulfil contractual obligations (requested demo/test for contracted Proof of Concept or Free Trial) or to pursue other legitimate interests (e.g., maintaining functionality, offering content, security, stability). The interest in continuing this processing due to stability and functional reasons regularly outweighs the data subject’s right to object. |
Fulfilment of legal obligations: We may process personal data to fulfil legal obligations or suppress illegal content on our platform. | Registration data, IP address, email address | The processing of personal data is necessary to fulfil legal obligations. |
8. Automated decision-making including profiling
As part of our self-service ordering process on our Site (see Section 7. Purpose of processing, categories of personal data, legal basis), we carry out an automated check against international sanctions lists. The sanctions list screening is carried out in a fully automated manner. This checks whether you or the company you represent is a sanctioned person, organisation or company.
If the comparison results in a match, the order is automatically rejected. This therefore constitutes an automated decision under applicable data protection law (e.g. pursuant to Art. 22(1) GDPR) that produces legal effects or similarly significantly affects you. The automated rejection is carried out in order to comply with applicable sanctions-related prohibitions, in particular prohibitions on directly or indirectly making funds, economic resources, goods or services available to sanctioned persons, organisations or companies.
The logic underlying the decision consists of a name comparison: your details, in particular the name of the ordering person and the company name of the company they represent, are compared with the entries of the aforementioned sanctions lists. In the event of a match, it is assumed that the ordering process may not be completed due to applicable sanctions-related requirements.
Retention period
The sanctions list screening is carried out exclusively for the duration of the ordering process. The result (match or no match) is not stored by us.
Your rights regarding automated decisions
Within the scope of applicable data protection law, you have the right to
request that the automated decision be reviewed by an authorised person,
express your own point of view, and
contest the decision.
If your order has been rejected as a result of the automated sanctions list screening, you can contact the contact details mentioned in this Privacy and Cookie Policy in order to arrange a manual review of the process by an employee.
9. How long do we retain your personal data
How long do we retain your personal data
BuildingMinds takes every reasonable step to ensure that your personal data is only processed for the minimum period necessary for the purposes set out in this Privacy and Cookie Policy. We process and retain your personal data as long as required:
for the purposes for which we collected it;for the performance of our contractual obligations, i.e., for the duration of the entire business or employment relationship (from the initiation, during the performance of the contract until it is terminated); orfor compliance with legal obligations or other purposes pursued with the processing, as well as beyond this duration in accordance with legal retention and documentation obligations.
Personal data may also be retained:
for the period during which claims can be asserted against BuildingMinds; insofar as we are otherwise legally obliged to do so; orif legitimate business interests require further retention (e.g., for evidence and documentation purposes).
As soon as your personal data are no longer required for the above-mentioned purposes and if no other legal grounds require keeping that data, they will be deleted or anonymized.
10. Transfer of personal data to other parties (in-/outside of the EEA and/or Switzerland)
Who has access to your personal data
We may, pursuant to valid legal process, such as a search warrant, subpoena, or court/governmental order, allow access to any information (including such categories of personal data) provided to BuildingMinds, in order to comply with such process and to protect our rights and property.
We may share your personal data with third parties who provide services for us
Your personal data may be transferred to third parties who support us in providing our services, for example hosting providers, technical support providers, payment service providers, providers of compliance checks and others. Where such service providers process personal data on our behalf, this is done on the basis of appropriate data protection agreements and only for the purposes described in this Privacy and Cookie Policy.
We may transfer your personal data outside of the European Economic Area (EEA) and Switzerland
As BuildingMinds is a worldwide acting company, your personal data may be transferred to countries in which a different level of data protection applies than in the country from which you transferred the personal data. In the event of a transfer of personal data to a country outside the European Economic Area (EEA), Switzerland or other countries with a recognised adequate level of data protection, BuildingMinds systematically ensures the application of an appropriate level of protection for such personal data through recognised means (e.g. by concluding standard contractual clauses on the processing of personal data in accordance with the model clauses of the EU Commission, on the basis of an applicable adequacy decision or other recognised transfer mechanisms). You can request further information about such measures (including copies where applicable) by contacting BuildingMinds via the contact details mentioned above.
We do not sell your personal data
Except as otherwise set forth in this Privacy and Cookie Policy or other data protection statements applicable in specific circumstances, we do not sell, trade, license or rent your personal data with any third parties.
11. Your rights
How to access your personal data and to make use of your other rights
Subject to applicable law, you have the following rights in respect of your personal data. You can exercise these rights by submitting your request to privacy@buildingminds.com.You will need to include your personal details as well as some means of verifying your identity (e.g., copy of identity card or driving license). If the request is submitted by a person other than you, without providing evidence that the request is legitimately made on your behalf, the request will be rejected. Please also note that some of these rights may be limited where BuildingMinds has an overriding interest or legal obligation to continue to process your personal data.
11.1 Access right and data portability
You have the right to obtain confirmation of whether BuildingMinds processes personal data in relation to you and, if so, gain access to a copy thereof, according to Art. 15 GDPR For certain kinds of data, you may also have a right to data portability.
11.2 Right of rectification and right to erasure
You have the right to rectify according to Art. 16 GDPR or obtain the erasure according to Art. 17 GDPR of your personal data, provided that the applicable legal requirements are met. The right to erasure is subject to various exceptions, notably as regards personal data whose processing is necessary to support litigation or for compliance with statutory retention requirements.
11.3 Right to restriction, right to object and right of consent withdrawal
You have the right to object to the processing of your personal data according to Art. 21 GDPR and we will implement such request
if we are relying on our own or someone else’s legitimate interests to process your personal data, except
if we can demonstrate compelling legal grounds for the processing of your personal data.
You can object to the use of your data for advertising purposes using electronic mail at any time without incurring any costs other than the transmission costs according to the basic tariffs. You also have the right to request restriction of processing of your personal data according to Art. 18 GDPR in accordance with legal requirements, e.g., when the processing is unlawful and you oppose an erasure.Where any processing is based on consent, you have the right to withdraw such consent at any time (without this affecting the processing prior to the consent withdrawal).
11.4. Right to lodge a complaint with the supervisory authorities
You have the right to lodge a complaint with the supervisory authority, in particular the data protection authority that is competent for your place of residence or the lead supervisory authority for BuildingMinds, namely:
For the data processing for which BuildingMinds GmbH is responsible:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin Entrance: Alt-Moabit 60
Tel.: +49 30 13889-0
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de
For the data processing for which BuildingMinds Technology AG is responsible (conclusion of online contracts via the self-service process on the Site), the Swiss supervisory authority is also competent:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern, Switzerland
12. How we protect your Personal Data
Security and confidentiality of your personal data
We are committed to keeping your personal data provided secure and we have implemented appropriate information security policies, rules and technical measures to protect your personal information that we have under our control from unauthorized access, improper use or disclosure, unauthorized modification and unlawful destruction or accidental loss. All of our employees, partners, consultants, workers and data processors (i.e., those who process your personal data on our behalf, for the purposes listed above), who have access to, and are associated with the processing of your personal data, are obliged to respect the confidentiality of such data.
13. Personal data of children
No collection of personal data from children
Our Site, Platform, products and services are not directed at children. We do not knowingly collect personal data from children. Should we become aware that personal data of a child has been provided to us without the required consent, we will delete such data, unless a statutory retention obligation prevents us from doing so.
14. Links to other websites
We may provide links to other websites
This Privacy and Cookie Policy applies to the Site or Platform, related products and services, but not to websites owned by third parties. We may provide links to other websites which we believe may be of interest to you. However, due to the nature of the internet, we cannot guarantee the privacy standards of such websites or assume responsibility for the contents of websites other than the BuildingMinds Site or Platform.
This Privacy and Cookie Policy is not intended to be applicable to any linked, non-BuildingMinds website.
Whenever you open a link to other websites, you should exercise caution and read the privacy policies of the website in question.
15. Use of Social Media Plugins and other third party services
15.1 What are Social Media Plugins (e.g. Facebook, X, YouTube or LinkedIn)
Social Media Plugins allow websites to integrate social media functionality for the convenience of users. Such Social Media Plugins are independent extensions of the providers of the respective social media network. BuildingMinds has no influence over the type and amount of data collected through such Social Media Plugins and stored by their providers. If you use Social Media Plugins you will be sending identifiable information to the respective social media platform. If one Social Media Plugin provider has placed cookies on your system, it can record your browsing behavior and create detailed user profiles using tracking data.
15.2 How we use Social Media Plugins
The functions of Social Media Plugins are deactivated by default to prevent any automatic disclosure of the user data to the provider. Social Media Plugins only send data once they have been activated, i.e., clicked by the user. Your Internet browser then sends the log files (including your IP address) directly to the Social Media Plugin provider’s server where they may be stored. The server may be located outside the EU or the EEA (e.g., in the USA). If you want to prevent a data exchange between your system and Social Media Plugins, you should log out of the social media before using the Site. You should also activate private mode in your browser's data privacy settings. It also helps to deactivate or limit cookies in your browser settings so that third parties cannot track your browsing behaviour. You can also prevent Social Media Plugins from loading altogether by using a script blocker as an add-on in your browser. Any comments or activity arising from persons using Social Media Plugins is not controlled or endorsed by BuildingMinds and BuildingMinds shall not be held responsible or liable for such. Persons who share BuildingMinds’ content via Social Media Plugins are not authorized to speak for or represent BuildingMinds. Their views and opinions must be strictly regarded as their own and not BuildingMinds'. This Privacy and Cookie Policy is not intended to be applicable to any linked, non-BuildingMinds website. Whenever you open a link to other websites, you should exercise caution and read the privacy policies of the website in question.
15.3 Details on how third-party sites and social media platforms may collect your personal data
For further information about the purpose and scope of data collection and the processing and use of your data by social media platform, as well as your rights and options to protect your data, please review the privacy statements of the respective providers. In the context of our online platforms, we link to our Social Media pages of the following providers:
X (formerly Twitter): X is operated by X Corp., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland ("X"). An overview of the X plug-ins and what they look like is available here: https://dev.twitter.com/web/overview; for X's data Online Privacy and Cookie Policy visit: twitter.com/privacy
YouTube: Youtube is operated on de.youtube.com by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland. For more information on privacy visit: https://policies.google.com/privacy.
LinkedIn: LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn”). An overview of the LinkedIn plug-ins and what they look like is available here: https://developer.linkedin.com/plugins; for LinkedIn’s data Online Privacy and Cookie Policy visit: www.linkedin.com/legal/privacy-policy
16. Cookies and other means of identification
16.1 What is a cookie
A cookie is a small file that is placed on your computer or mobile device by websites you visit. Cookies are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the website.
16.2 What does a cookie do
A cookie may store or retrieve information on your browser. This information might be about you, your preferences or your device and is mostly used to make the Site or Platform, related products and services work as you expect it to. A cookie enables us to remember your actions and preferences (such as login, language and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back or browse from one page to another. The information does not usually directly identify you, but it can give you a more personalized web experience.
16.3 Why we use cookies
We use cookies to distinguish you from other users of our Site, to let you to protect your data, our products and our services, to navigate between Site or Platform pages efficiently and to store your preferences. Cookies provide you with a good experience when you browse on our Site or Platform and they help us tailor our Site or Platform, related products and services to your personal needs (e.g., by automatic choice of languages, changing website appearance according to devices used). They also allow us to gain customer feedback and to communicate to you elsewhere on the internet. For this purpose, our cookies may contain your IP-address, the time of your access, the duration of your stay on/use of our Site or Platform, related products and services or mobile or web applications, and similar information. If you revisit our Site or Platform, related products and services or mobile or web applications, again, we may recognize you, even if we do not know your identity.
16.4 Cookies set by BuildingMinds or third parties
In many cases, these cookies lead to the use of your device’s processing or storage capabilities. Some of these cookies are set by BuildingMinds itself, others by third parties; some only last as long as your browser session, while others can stay active on your device for a longer period of time. Details are set out in section 16.6 below.
16.5 The types of cookies we use
We may use the following types of cookies
Functionality cookies (essential) are necessary for functionality purposes or the products or services that you request or for the transmission of communications on our Site, our products or our services. They cannot be switched off in our systems. Functionality cookies are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of our Site, products or services will then not work consequently. Legal basis for the use of functional cookies is our legitimate interest according to Art. 6 para. 1 lit. f GDPR.
Analytical cookies are used to carry out performance and audience metrics regarding our Site or Platform, related products and services or mobile or web applications. These cookies allow us to measure and improve the performance as well as the stability and security of our Site or Platform, related products and services or mobile or web applications. They help us to know which pages are the most and least popular and see how visitors move around the Site or Platform, related products and services or mobile or web applications. For analytical cookies we request your consent according to Art. 6 para. 1 lit. a GDPR before placing them on your computer or mobile device.
Other cookies are used for tracking across a network of other websites, advertising, etc. They can also be used to attribute your website sessions to a specific company. If you provide additional information such as your email address in a form on the website, other cookies can be used to attribute your historic website sessions to your email address. For other cookies, including other marketing-related cookies, we request your consent according to Art. 6 para. 1 lit. a GDPR before placing them on your computer or mobile device.
16.6 Legal Basis
If we use cookies or similar technologies to access an end device used by you by storing or reading information there, your consent is generally required for this in accordance with Section 25 (1) TDDDG. It is irrelevant whether this is personal data or anonymous data.
Exceptions to this consent requirement under the TDDDG apply if the sole purpose is to transmit a message via a public telecommunications network or if access to the terminal device is absolutely necessary in order to provide the service requested by the user (Section 25 (2) TDDDG).
If the data is personal data, the legal basis for processing this data may vary. Insofar as the processing requires consent and you have given this consent, the legal basis is Art. 6 para. 1 lit. a GDPR.
Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
Insofar as the consents under the GDPR and the TDDDG can be bundled, we will obtain them uniformly.
16.7 What specific cookies do we use for our Site
Type of Cookie | Cookie Name | Purpose | Expiry / Duration (in Days) | Party | Lifespan |
|---|---|---|---|---|---|
Strictly Necessary Cookies | OptanonConsent | Consent management: stores your cookie consent state and the selected cookie categories. | 365 | First Party | PERSISTENT |
Strictly Necessary Cookies | OptanonAlertBoxClosed | Consent management: records that the cookie banner has been shown/closed to prevent it from reappearing. | 365 | First Party | PERSISTENT |
Strictly Necessary Cookies | __stripe_mid | Payment fraud prevention: set by Stripe to identify the device and help detect and prevent fraud during the self-service checkout. | 365 | First Party | PERSISTENT |
Strictly Necessary Cookies | __stripe_sid | Payment fraud prevention: set by Stripe to maintain the payment session and help detect and prevent fraud. | Session (30 min) | First Party | SESSION |
Functional Cookies | i18n_redirected | Language preference: stores the detected or selected language to avoid repeated language redirects. | 365 | First Party | PERSISTENT |
Performance Cookies | _ga | Analytics (Google): distinguishes users to calculate visitor, session and campaign data. | 400 | First Party | PERSISTENT |
Performance Cookies | _ga_RZTB76BENF | Analytics (Google Analytics 4): persists session state for the GA4 property. | 400 | First Party | PERSISTENT |
Performance Cookies | _clck | Analytics (Microsoft Clarity): stores a Clarity user ID and consent for the website. | 365 | First Party | PERSISTENT |
Performance Cookies | _clsk | Analytics (Microsoft Clarity): connects multiple page views by a user into a single session recording. | 1 | First Party | PERSISTENT |
Performance Cookies | _hjSessionUser_2787982 | Analytics (Hotjar): persists the Hotjar user ID so behaviour can be attributed to the same user across visits. | 365 | First Party | PERSISTENT |
Performance Cookies | _hjSession_2787982 | Analytics (Hotjar): holds the current Hotjar session data. | Session (30 min) | First Party | SESSION |
Performance Cookies | hubspotutk | Marketing analytics (HubSpot): tracks a visitor's identity across forms and sessions. | 180 | First Party | PERSISTENT |
Performance Cookies | __hstc | Marketing analytics (HubSpot): stores visitor, session and timestamp data. | 180 | First Party | PERSISTENT |
Performance Cookies | __hssc | Marketing analytics (HubSpot): tracks sessions to determine whether the session count should be incremented. | Session | First Party | SESSION |
Performance Cookies | __hssrc | Marketing analytics (HubSpot): records whether the visitor restarted the browser within the session. | Session | First Party | SESSION |
Targeting Cookies | _gcl_au | Conversion (Google Ads): stores and tracks conversion attribution across websites. | 90 | First Party | PERSISTENT |
Targeting Cookies | _fbp | Advertising (Meta): used to deliver and measure advertising and to attribute conversions. | 90 | First Party | PERSISTENT |
Targeting Cookies | _twpid | Advertising (X / Twitter): used for conversion tracking and advertising. | 390 | First Party | PERSISTENT |
Social Media Cookies | li_fat_id | Advertising attribution (LinkedIn): used by the LinkedIn Insight Tag for conversion tracking and audience matching. | 30 | First Party | PERSISTENT |
Performance Cookies | mp_…_mixpanel (localStorage) | Analytics (Mixpanel): product and usage analytics to improve the website. | Persistent (localStorage) | First Party | PERSISTENT |
16.8 What specific cookies do we use for our Platform
Type of Cookie | Cookie Name | Purpose | Duration/Expiry | Strictly necessary? |
|---|---|---|---|---|
Analytical cookie | Azure Application Insights (Session) | Ensure availability of services, application performance, | 30 mins | no |
Analytical cookie | Azure Application Insights (User) | Improve Platform performance, design and features | 1 year | no |
Analytical cookie | Mixpanel | Improve Platform performance, design and features | 1 year | |
Functional Cookie | Intercom Io | Improves customer support efficiency, enhances user engagement | 9 months |
16.9 How to manage your cookie settings on your browser
Analytical- and other marketing-related-cookies are only placed when you have given your consent in the consent-banner.
If you would like to change your settings and withdraw your consent on our Site, please click on the widget that looks like a cookie to get to the cookie settings.
If you would like to change your settings and withdraw your consent on our Platform, please click on the widget that looks like a cookie to get to the cookie settings.
17. Changes to this Privacy and Cookie Policy
We reserve the right, at our sole discretion, to change, modify, add, or remove portions from this Privacy and Cookie Policy at any time. We shall notify any such changes in accordance with applicable data protection legislation. We encourage you to regularly review this Privacy and Cookie Policy to make sure you are familiar with how we use your personal data.