Last updated: 6 April 2026
This Privacy Policy explains how mendrake.com (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our website.
1. Controller (Data Controller)
M A R C U S D O R F F – Management Consulting & Employment Agency Address: Falltorstr. 17, 51429 Bergisch Gladbach Bensberg, Germany Visitor address: Siebenmorgen 35, 51427 Bergisch Gladbach Refrath, Germany Represented by: Marcus Dorff (managing owner) Phone: +49 2204 9590974 Fax: +49 2204 9590985 Email: info@mendrake.com
2. Scope
This Privacy Policy applies to the website https://mendrake.com and its pages, including the contact options and embedded content.
3. Data we process
Depending on how you use the site, we may process the following categories of data:
- Technical data (server log data): IP address, date/time of access, requested page/file, referrer URL, browser type/version, operating system, and similar technical information.
- Communication data: information you provide when contacting us or subscribing to our newsletter (e.g., name, email address, message content).
- Usage data: interactions with the website (e.g., pages visited, approximate session duration, click behavior), where technically available.
- Media and content data: if you submit content to us (e.g., via email, comments, or contact forms), we process the content you provide.
- Analytics data: information collected through analytics services to understand website usage patterns.
- Advertising data: information used for targeted advertising and retargeting purposes.
We do not intentionally collect special categories of personal data (e.g., health data). Please do not send such data unless it is strictly necessary.
4. Purposes and legal bases
We process personal data for the following purposes and on the following legal bases under the GDPR:
- Providing the website and ensuring security
- Purpose: website delivery, stability, troubleshooting, and protection against abuse.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
- Responding to inquiries and managing communications
- Purpose: handling messages, requests, and newsletter subscriptions.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract) and/or Art. 6(1)(f) GDPR (legitimate interests).
- Analytics and website improvement
- Purpose: understanding user behavior, optimizing content, and improving website performance.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and/or Art. 6(1)(a) GDPR (consent, where required).
- Advertising and retargeting
- Purpose: displaying relevant advertisements and measuring advertising effectiveness.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and/or Art. 6(1)(a) GDPR (consent, where required).
- Compliance with legal obligations
- Purpose: fulfilling statutory duties (e.g., tax, commercial, retention obligations).
- Legal basis: Art. 6(1)(c) GDPR.
- Consent-based processing (where applicable)
- Purpose: e.g., optional cookies, newsletter subscriptions, or third-party services that require consent.
- Legal basis: Art. 6(1)(a) GDPR.
5. Cookies and similar technologies
Our website uses cookies and similar technologies for various purposes:
- Essential cookies are required for basic site functionality, security, and user experience.
- Analytics cookies help us understand how visitors use our website (see Section 9).
- Advertising/retargeting cookies enable us to display relevant ads and measure campaign performance (see Section 10).
- Optional cookies (e.g., for preferences) are used only where legally required and after you provide consent.
You can manage cookies via your browser settings and, where available, via a cookie banner/consent tool on our website.
6. Hosting, server logs, and content delivery
When you access our website, the hosting provider may process technical data (including server logs) to deliver the site and maintain security.
We use this information to:
- ensure technical stability,
- defend against attacks and misuse,
- improve performance and error handling.
7. Newsletter and email communications
If you subscribe to our newsletter, we process your email address and any additional information you provide (e.g., name, preferences) to:
- send you gaming news, updates, and editorial content,
- manage your subscription preferences,
- analyze newsletter engagement (e.g., open rates, click rates).
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interests, if applicable).
You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in any email or by contacting us directly.
8. Comments and user-generated content
If you submit comments or other content on our website, we process:
- your name (or username),
- email address,
- comment text and metadata (date, IP address, browser information).
Purpose: publishing and moderating comments, preventing spam and abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
Comments may be publicly visible on the website. We reserve the right to moderate, edit, or remove comments that violate our guidelines.
9. Analytics (Google Analytics / Jetpack)
We use analytics services to understand how visitors interact with our website and to improve user experience.
Google Analytics
- Service provider: Google LLC (USA)
- Data processed: IP address, cookie identifiers, page views, session duration, referrer, device/browser information, and user interactions.
- Purpose: analyzing website traffic, user behavior, and content performance.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and/or Art. 6(1)(a) GDPR (consent, where required).
- Data retention: typically 14 months (configurable).
- Data transfer: Google processes data in the USA under appropriate safeguards (Google’s Data Processing Agreement, EU-US Data Privacy Framework).
Jetpack Analytics
- Service provider: Automattic Inc. (USA)
- Data processed: page views, visitor counts, referrer information, and basic device data.
- Purpose: understanding website performance and user engagement.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests).
- Data retention: as per Jetpack’s retention policies.
You can opt out of analytics tracking via your browser’s “Do Not Track” setting or by using browser extensions that block tracking scripts.
10. Advertising and retargeting
We use advertising and retargeting services to display relevant content and measure advertising effectiveness.
Google Ads / Google Retargeting
- Service provider: Google LLC (USA)
- Data processed: cookie identifiers, browsing history, pages visited, and interaction data.
- Purpose: displaying targeted advertisements and measuring ad performance.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and/or Art. 6(1)(a) GDPR (consent, where required).
- Data transfer: Google processes data in the USA under appropriate safeguards.
Facebook Pixel / Meta Advertising
- Service provider: Meta Platforms, Inc. (USA)
- Data processed: cookie identifiers, browsing behavior, pages visited, and interaction data.
- Purpose: displaying targeted ads on Facebook/Instagram and measuring campaign performance.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and/or Art. 6(1)(a) GDPR (consent, where required).
- Data transfer: Meta processes data in the USA under appropriate safeguards.
You can manage advertising preferences and opt out of personalized advertising via:
- Google Ads Settings: https://adssettings.google.com
- Meta Ads Preferences: https://www.facebook.com/ads/preferences
- Your browser’s privacy settings or third-party opt-out tools.
11. Embedded content and third-party links
Our pages may contain links to external websites or embedded content (e.g., social media, video platforms, streaming services, YouTube, Twitch). If you click external links or interact with embedded content, the respective provider may process personal data under their own privacy policies.
We recommend reviewing the privacy policies of third-party providers you use.
12. Social media presence
We maintain social media profiles (e.g., Instagram, YouTube, Twitch, Facebook, Threads). When you visit these platforms or interact with our content, the platform operators are typically independent controllers and process data under their own privacy policies.
13. Recipients of data
We may share personal data with:
- Service providers (processors) supporting website operation (e.g., hosting, analytics, email marketing, advertising platforms), acting under our instructions and data processing agreements.
- Analytics and advertising providers (Google, Meta, Jetpack, etc.) as described in Sections 9 and 10.
- Public authorities where required by law.
- Professional advisors (e.g., legal or tax advisors) where necessary.
We do not sell personal data to third parties for marketing purposes.
14. International data transfers
We use service providers (e.g., Google, Meta, Jetpack) that process data outside the European Economic Area (EEA), primarily in the USA. We ensure appropriate safeguards:
- EU-US Data Privacy Framework (where applicable),
- EU Standard Contractual Clauses (SCCs),
- Data Processing Agreements with adequate privacy protections.
By using our website, you consent to the transfer of data to these countries under these safeguards.
15. Retention periods
We store personal data only for as long as necessary for the purposes described in this Privacy Policy, and in accordance with legal retention obligations.
Typical retention logic:
- Server logs: limited period (typically 30–90 days) for security and troubleshooting.
- Contact inquiries: until the request is resolved, plus any legally required retention (typically 6–10 years for tax/commercial records).
- Newsletter subscribers: until unsubscription or account deletion.
- Comments: as long as the comment is published, or longer if required by law.
- Analytics data: typically 14 months (Google Analytics) or as per provider retention policies.
- Advertising data: typically 90 days to 1 year, depending on the platform.
16. Your rights under the GDPR
Subject to legal requirements, you have the following rights:
- Right of access (Art. 15 GDPR): request what personal data we hold about you.
- Right to rectification (Art. 16 GDPR): correct inaccurate data.
- Right to erasure (Art. 17 GDPR): request deletion of your data (subject to legal exceptions).
- Right to restriction of processing (Art. 18 GDPR): limit how we use your data.
- Right to data portability (Art. 20 GDPR): receive your data in a portable format.
- Right to object (Art. 21 GDPR): object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent (Art. 7(3) GDPR): withdraw consent at any time, where processing is based on consent.
- Right to lodge a complaint (Art. 77 GDPR): contact your local data protection authority.
17. Right to object (important notice)
If we process your personal data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object for reasons arising from your particular situation.
If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for legal claims.
18. Security
We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and alteration. However, no online service can guarantee absolute security. We encourage you to use strong passwords and keep your account information confidential.
19. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legal, technical, or operational changes. The current version is published at: https://mendrake.com/privacy-policy/
Material changes will be communicated via email (for newsletter subscribers) or via a prominent notice on the website.
20. Contact and data subject rights requests
For privacy-related inquiries, data subject rights requests, or complaints, please contact:
Marcus Dorff Email: info@mendrake.com Phone: +49 2204 9590974 Address: Falltorstr. 17, 51429 Bergisch Gladbach, Germany
Response time: We aim to respond to data subject rights requests within 30 days, as required by GDPR Art. 12.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).








