Privacy Policy for moviemind.eu
Last updated: 6 August 2026 | Applies to: https://moviemind.eu
1. Data Controller
Richi AI Owner: Yves-Marcel Richel Homburger Landstr. 851 60437 Frankfurt am Main Germany Email: info@richi.solutions
2. Privacy Contact
info@richi.solutions
3. Use of Artificial Intelligence and Automation
Movie Mind uses the Google Gemini AI system (via the Google Generative Language API) for: • Creating personalized movie and series recommendations, • Group recommendations, • An AI-written taste analysis (a short text summarising your rating profile), • Generating semantic embeddings for similarity computation, • AI-assisted blog content. Individual rating predictions do not involve a language model: they are computed deterministically from your own ratings and the stored embeddings (nearest-neighbour method). Illustrations and marketing imagery on the website (e.g. persona artwork, homepage photography) are AI-generated and visibly labelled; no personal data is processed for them and no real persons are depicted. There is no fully automated decision-making with legal effects (Art. 22 GDPR). No personal data is used to train Google's AI models (Generative Language API, paid tier).
4. Categories of Processed Data
• Account data (name, email, login information) • Rating data (favorites, ratings, comments) • Technical data (IP address, browser, device type, session information) • Analytics data on platform usage (e.g., viewed content)
5. Legal Basis for Processing
• Art. 6(1)(b) GDPR – Contract fulfillment (account features, subscription management, and AI-based personalisation as the core function of the service: recommendations, rating predictions, group recommendations) • Art. 6(1)(f) GDPR – Legitimate interest (AI taste analysis, platform security, error analysis); you can object to the taste analysis at any time (Art. 21 GDPR, info@richi.solutions) • Art. 6(1)(a) GDPR – Consent (marketing emails, statistics cookies)
6. Hosting and Technical Infrastructure
Movie Mind is operated via Vercel Inc. (frontend hosting, primary region Frankfurt — fra1, with global edge delivery through Cloudflare as a subprocessor) and Supabase (EU region, backend for database and authentication). AI processing is carried out via the Google Generative Language API (Gemini). All processors have a data processing agreement under Art. 28 GDPR; for any transfers to third countries we rely on Standard Contractual Clauses under Art. 46 GDPR and/or the EU-US Data Privacy Framework.
7. Third-Party Providers
• TMDb (provision of movie and series information, USA; poster images are loaded directly from the TMDb image server image.tmdb.org — TMDb receives your IP address in the process) • Google Gemini / Generative Language API (AI-based recommendation system, Google Ireland Ltd.) • Supabase (database management and authentication, EU region) • Vercel Inc. (frontend hosting, USA — primary region Frankfurt; uses Cloudflare as edge provider) • Vercel Analytics (privacy-friendly usage statistics — only after statistics consent via the cookie banner) • Stripe Payments Europe Ltd. (payment processing, Ireland) • Resend (transactional emails) • GitHub Inc. (code hosting and CI/CD, USA — covered by the GitHub Customer DPA) • ManyChat Inc. (chat-based distribution of promo codes via social channels, USA — only affects users who redeem a promo via those channels) • Meta Platforms Ireland Ltd. / TikTok Technology Ltd. (independent controllers of the social media channels where MovieMind publishes content; MovieMind does not transfer any user data to them) All providers are GDPR-compliant and limited to the minimum necessary data exchange.
8. Cookies & Tracking
Movie Mind uses only strictly necessary cookies (login session, language preference, theme) and — subject to your consent — Vercel Analytics for usage statistics. Consent is managed via an in-house cookie banner. Your decision is stored in your browser and — when signed in — in your profile (Art. 7(1) GDPR proof of consent). You can revoke your consent at any time via the "Your Privacy Choices" button in the footer or your browser settings. We currently do not use advertising cookies, third-party advertising, or any tracking for advertising purposes. If this changes in the future, the cookie banner will be extended accordingly and we will ask for your renewed consent. In the guest funnels (e.g. /quickmatch, /movietype), your swipe answers and your result are stored exclusively on your device (localStorage, § 25(2) German TDDDG) until you create an account or clear your browser data.
9. Data Security
All data transmissions are TLS-encrypted. Data is stored only as long as necessary for the respective purpose. Regular backups and access restrictions ensure additional protection.
10. International Data Transfer
Data transfers outside the EU/EEA only occur when appropriate safeguards exist (Standard Contractual Clauses according to Art. 46 GDPR).
11. Your Rights
You have the right to: • Information (Art. 15 GDPR) • Correction (Art. 16 GDPR) • Deletion (Art. 17 GDPR) • Restriction (Art. 18 GDPR) • Data portability (Art. 20 GDPR) • Objection (Art. 21 GDPR) Complaint authority: Hessian Commissioner for Data Protection and Freedom of Information (HBDI) Postfach 3163, 65021 Wiesbaden https://datenschutz.hessen.de
12. Updates
Changes will be published on this page: https://moviemind.eu/privacy