Privacy policy

TODO before go-live: This privacy policy reflects the actual tech stack (Vercel hosting, contact form via Resend, no cookies, no tracking). It must be reviewed by legal counsel. If analytics are introduced, a dedicated section and, where applicable, a consent banner are required.

1. Controller

MOGROUP GmbH
Wallstr. 21, 10179 Berlin, Germany
Phone: 0800 0060 723
Email: info@mogroup-service.de

Represented by the Managing Director: Soheila Tarakomizadeh

2. General information

We process personal data only to the extent necessary to provide a functional website and our content and services. This website does not use cookies for analytics or marketing purposes and does not embed third-party tracking services. Fonts are served locally from our server; no connection to Google Fonts is established.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, the hosting provider processes technically necessary data (server log files), in particular the IP address, date and time of access, the page requested, browser type and operating system. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in a secure and high-performance provision of the website). A data processing agreement is in place with Vercel; the transfer to the USA is safeguarded by the EU Standard Contractual Clauses and Vercel's certification under the EU-US Data Privacy Framework. [TODO: Verify the Vercel region (Frankfurt) and the current DPF status.]

4. Contact form and email contact

If you contact us via the contact form or by email, we process the data you provide (name, company, email address, phone number, subject, message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for processing and no statutory retention obligations apply.

We use the service Resend (Resend, Inc., USA) to deliver form messages. The transfer is based on a data processing agreement and the EU Standard Contractual Clauses. [TODO: Confirm the provider if a different email service is used.]

To protect against spam, we use a server-side procedure without cookies and without third-party services (honeypot field, timing check, rate limiting).

4a. Job applications

If you apply via our application form or by email, we process the data you submit (name, contact details, place of residence, availability, your message and uploaded documents such as your CV and certificates) exclusively for the purpose of conducting the application process. The legal basis is § 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6(1)(b) GDPR. The transmission is encrypted (TLS); delivery to our applications mailbox is handled via the service Resend referred to in section 4.

Application documents are deleted after the process has been completed – at the latest six months after a rejection – unless you have consented to longer storage (e.g. for future vacancies) or statutory obligations require otherwise. Please do not submit special categories of personal data (e.g. health data) unless they are required for the position.

5. Cookies, local storage and consent

This website does not set cookies for analytics or marketing purposes and does not embed third-party tracking services. The only technically necessary storage is the local storage of your privacy settings in your browser (localStorage, key "mogroup-consent": selected categories, time and version of consent). This storage is based on § 25(2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG) and Art. 6(1)(f) GDPR; no data is transmitted to us or to third parties.

Optional services in the categories "Statistics" and "Marketing & external media" are only loaded if you expressly consent on your first visit or at a later time (Art. 6(1)(a) GDPR, § 25(1) TTDSG). Currently, no service is embedded in either of these categories. Should services be added in the future, they will be described here.

You can change or withdraw your consent at any time with effect for the future – via the icon at the bottom left of every page, the "Cookie settings" link in the footer, or here: Open cookie settings.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority. For Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

7. Data protection officer

[TODO: Check whether a data protection officer must be appointed (e.g. from 20 persons regularly engaged in automated processing). If so, add contact details.]

8. Changes

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to our services.

Last updated: October 2026