Privacy Policy
Last updated: 2 November 2026
Who is responsible
realations GmbH, Kaufingerstraße 20, 80331 München, Germany (managing director: Andreas Luksch). Email: team@miningprofiles.com
Visiting this site
When you open a page, our host receives your IP address, the page requested, date and time, browser type and the referring page. This is needed to deliver the page and keep it secure (Art. 6(1)(f) GDPR). Logs are deleted after 7 days at the latest.
We set no tracking or advertising cookies. The site only remembers your light/dark choice in your own browser, and that is never sent to us. If you confirm a question to an executive, we set one cookie that remembers your confirmed email address, so later questions need no new confirmation (see Questions to executives).
Analytics. We count page views with PostHog (EU Cloud, data stays in the EU), sent from our server, not your browser. Your IP address is not stored.
Video. Some pages show a YouTube video. It loads only after you click it; only then does YouTube (Google) receive your IP address and set its own cookies. We use YouTube’s privacy-enhanced mode (youtube-nocookie.com).
Service providers. The site runs on Cloudflare, our email on Google Workspace, analytics on PostHog. They process data only on our behalf, under data-processing agreements.
People we write about (Art. 14 GDPR)
We publish name, role, company, career history, board seats, education and public statements of executives of listed mining companies. The data comes only from public sources: company filings on SEDAR+, company websites, news releases, registries and published interviews. Each statement names its source.
The legal basis is our legitimate interest and the public’s in knowing who runs public companies (Art. 6(1)(f) GDPR). We keep to business-role facts. Earlier versions of a page are kept as an internal history, for accuracy.
Writing to us
If you email team@miningprofiles.com, we use your details and message to answer you and handle your request (Art. 6(1)(f), or 6(1)(b) for a paid service). We delete correspondence when it is no longer needed, at the latest three years after your request is closed, unless the law requires us to keep it longer.
Email about new profiles
If you sign up to hear about new profiles, we store your email address, the date and time you signed up and confirmed, the page you signed up on, and which version of the sign-up text you saw. You get one email with a confirmation link first; only after you click it do we write to you, and only about new profiles (Art. 6(1)(a) GDPR, your consent). Every email has a link to unsubscribe, and you can withdraw your consent at any time by writing to us.
The list is kept in our own database at Cloudflare and sent through Cloudflare's email service. To stop abuse of the form we count sign-up attempts per visitor for one day, using a value derived from your IP address that cannot be turned back into it; your IP address itself is not stored. After you unsubscribe we keep your address and the dates only as long as we need them to show that you had agreed, and then delete them. We also keep a history of confirmation emails (accepted by the email service or failed), consent and unsubscribe steps. The owner can manage the list and export confirmed addresses; those actions are logged. After erasure, the address and its email history are removed. A keyed fingerprint remains to prevent an accidental re-add through an import or the dashboard. You can still sign up again yourself and confirm afresh.
Questions to executives
On a profile you can ask the executive a question. We store your question, the passage you quoted, your email address, the profile and the dates, and our notes on handling it. We use them to pass your question on, to tell you about its progress and to send you the answer (Art. 6(1)(b) GDPR). The first question in a browser is confirmed by an email link. Later questions use the confirmed address remembered in that browser. Newsletter signup is optional and requires a separate click.
After you confirm, we set the cookie mp_asker (signed, one year) so that this browser can ask further questions without a new confirmation. It holds only your email address and its expiry time. Questions are kept in our own database at Cloudflare and emails are sent through Cloudflare Email Service. We pass the question and quoted passage to the executive, but keep your email address with us. To alert the site owner, we send the question, quoted passage, executive and company name, and only your email domain (not your full email address) through Telegram. Do not include sensitive personal information in your question. We delete unconfirmed questions after seven days, and closed questions and their activity once they are two years old.
Ordering
You pay for Fast-Track, the German Investor Profile or Investor Authority on Stripe’s checkout page (Stripe Payments Europe, Ltd., Ireland). Stripe receives what you enter there: your name, email address, billing address, payment details and, if you give one, your tax ID, plus your company and ticker, your role and, if you tell us, who recommended Mining Profiles to you. If you came through a partner’s link, Stripe also receives the partner’s id from that link. We receive these details from Stripe, but never your full card details.
We use them to carry out your subscription or order and to issue invoices (Art. 6(1)(b) GDPR; keeping invoices: Art. 6(1)(c) GDPR), and to pay the partner who recommended us (Art. 6(1)(f) GDPR, our interest in paying partners correctly). Stripe sends your receipts and renewal emails. We keep order and invoice records as long as the law requires (in Germany usually six to ten years).
Stripe processes payment data partly under its own responsibility, for example to prevent fraud and to meet its legal duties (stripe.com/privacy). Stripe may process data in the USA, based on the EU standard contractual clauses.
Your rights
You can ask for access, correction, erasure or restriction of your data, and you canobject to its use (Art. 15–18, 21 GDPR). Write toteam@miningprofiles.com; we answer within one month. You can also complain to the Bavarian data-protection authority (BayLDA, Promenade 18, 91522 Ansbach, www.lda.bayern.de).