1. Who is responsible for your data

Two Minds is based in Switzerland, so this policy is governed primarily by the Swiss Federal Act on Data Protection (nFADP). If you're located in the European Union, we also honor the rights the GDPR grants you — the two frameworks overlap closely, and section 11 covers both. The data controller is:

TWO MINDS
1009 Pully
Contact: contact@twominds.tech

For any question about this policy, or to exercise your rights (section 11), write to us at that address.

2. At a glance

Full detail follows below — here's the essentials:

3. Contact form

If you use our contact form, we ask for your name, email address, and your message, so we can read and reply to your inquiry. We don't use this information for anything else, and we don't add you to any mailing list unless you separately choose to sign up for our newsletter.

4. Newsletter sign-up

Wherever you see a newsletter sign-up form on our sites — on the main site, or on a teaser/campaign page built around a specific release or event — providing your email address adds you to our mailing list.

That list is hosted and sent through Brevo (formerly Sendinblue), a French email-marketing platform, under a GDPR-compliant data processing agreement. Brevo is headquartered in Paris and primarily hosts EU customer data within the European Union; where any processing does involve a transfer outside the EU (see section 9), it relies on the EU-US Data Privacy Framework or on Standard Contractual Clauses.

Brevo may technically track whether you open and click the emails we send (standard behavior for an email-marketing tool). We treat this tracking like a cookie and only enable it if you've consented to it when signing up.

A cookie may remember that you've already signed up, so a sign-up form you see again doesn't ask you to retype your email. You can unsubscribe at any time via the link in every email we send, or by contacting us.

5. Teaser & campaign pages

From time to time we publish standalone teaser or campaign pages built around a specific release or event. Beyond the newsletter sign-up above, these pages may use a few extra cookies to:

• remember your preferred language;
• remember your progress through an interactive experience on that page (for example, a hidden easter egg);
• recognize that you've already signed up for the newsletter from that specific page.

None of these cookies are used to track you across other sites, and they're never combined with data from unrelated third parties.

6. Personalized demo links, business cards & QR codes

Two Minds shares personalized links — often via a QR code on a physical business card or in a press kit — giving access to an interactive presentation of our work. This feature, including how visits are measured, is custom-built and self-hosted on our own server — we don't hand this off to a third-party analytics platform like Google Analytics.

When you open one of these links:

• Technical cookies: a temporary session identifier, your preference to skip the animated intro on return, and which profile to display. These expire when you close your browser, or after a short delay.
• Visit logging: we record your IP address, general device/browser characteristics, and — via a third-party IP-geolocation service, ipinfo.io — an estimate of your city/region/country and internet provider. If the link was personalized (addressed to a named individual, e.g. a press contact), we may receive a notification including this information, so we know a link we sent was actually opened.
• Usage measurement: time spent on each section and on each track played is recorded, tied to a session identifier — not directly to your identity, unless the link was personally addressed to you.
• Push notifications (optional): if you allow it via your browser's own permission prompt, we can send you notifications directly to your device — for example when new music is released. Accepting stores a technical push subscription (an endpoint and encryption keys generated by your browser, not personal information by itself) linked either to the personalized link you opened or, for a generic visit, to a shared anonymous group with no individual identity. We also keep a record of when a notification was last sent to you, only so we don't send them too often. You can withdraw this permission at any time from your browser's site settings; an unsubscribed or invalid subscription is removed automatically the next time we try to use it.

This logging is used to gauge interest generated by an outreach effort or a release, and to let us know a personally-sent link was opened. It's never used for advertising and never resold.

The digital business card page and the online press kit download work on the same technical basis, with no form for you to fill in.

7. Cookies

Here is the full list of cookies our sites can set. "Technical" cookies are necessary for the site to work and don't require your consent; anything else is labeled as such.

You can delete or block cookies at any time from your browser settings. Blocking technical cookies may stop some features (like skipping straight to the experience without seeing the intro again) from working correctly.

8. Who your data is shared with

We never sell your data. It may be processed by the following providers, strictly on Two Minds's behalf:

9. Transfers outside the EU

Most of our providers (Brevo, our host) process data within the European Union. Some technical tools (Google fonts, libraries served by US-based CDNs) can involve your IP address reaching the United States simply by loading a page; these providers rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.

10. Retention

11. Your rights

Under the Swiss Federal Act on Data Protection (nFADP) — and, if you're located in the European Union, the GDPR — you have the following rights over your personal data:

• Right of access: know what data we hold about you.
• Right of rectification: correct inaccurate data.
• Right to erasure: request deletion of your data.
• Right to object: object to a processing activity, in particular the newsletter (via the unsubscribe link in every email, or by contacting us).
• Right to portability: receive your data in a reusable format.
• Right to restriction: request that a processing activity be temporarily suspended.

To exercise any of these rights, write to contact@twominds.tech. We respond within one month at most. You also have the right to lodge a complaint with the FDPIC (the Swiss Federal Data Protection and Information Commissioner), or with your own country's data protection authority if you're located in the EU, if you believe your rights aren't being respected.

12. Security

We take reasonable measures to protect your data (encrypted HTTPS connections, restricted access to admin tools, password-protected management interfaces). No system is infallible, and we can't guarantee absolute security, but we commit to informing you promptly in the event of an incident affecting your data, in line with our legal obligations.

13. Changes to this policy

This policy may evolve, in particular if we change tools or providers, or add new features like a store or an analytics tool. The last-updated date is shown at the top of this page. In the event of a significant change, we'll let you know visibly on our sites.

14. Contact us

For any question about this policy or your personal data: contact@twominds.tech