Privacy policy

Who is responsible for your data?

Max Dixon, mixo, Rüthstraße 3, 65189 Wiesbaden, Germany. For privacy questions or requests, email max@mixo-agency.com or call +49 176 41588372.

What data I collect and how

When you visit this website, my hosting provider automatically processes the technical information your browser sends (server log files). If you agree to load the booking calendar and book a call, the details you enter are processed by Cal.com (see below). When you contact me by email, phone or LinkedIn, I process what you send me, for example your name, contact details and your message. This website has no newsletter and no analytics or advertising tools.

How I use your data

• To deliver this website and keep it stable and secure (Art. 6 (1) (f) GDPR)
• To schedule and hold the calls you book (Art. 6 (1) (b) GDPR)
• To answer your questions and requests (Art. 6 (1) (b) or (f) GDPR)
• To prepare and run our work together if you become a client (Art. 6 (1) (b) GDPR)

I don't sell your data and I don't use it for advertising.

Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes the technical information your browser sends (server log files). This includes your IP address, the date and time of access, the page visited, the referring URL, browser type and version and operating system.

This is technically necessary to deliver the website and keep it stable and secure. The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest is the secure and error-free operation of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel, including the EU Standard Contractual Clauses for transfers to the USA. Log files are deleted automatically after a short period.

Cookies, analytics and advertising

This website does not use analytics, session recordings, tracking pixels or advertising tools. The fonts are hosted on the same server as the website, so no connection to Google or other font providers is made.

The only external service is the booking calendar from Cal.com. It only loads after you agree in the cookie banner or click “Load calendar” (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Your choice is saved in your browser so the banner doesn't show up on every visit. Saving that choice is technically necessary (§ 25 (2) No. 2 TDDDG). You can change your choice at any time through “Cookie settings” at the bottom of every page.

Booking calls with Cal.com

To let you book a call directly on this page, I use the booking calendar of Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. The calendar only loads with your consent. Once it loads, your browser connects to Cal.com's servers, which means your IP address and technical browser information are transmitted to Cal.com. Cal.com may store information in your browser to make the booking work.

When you book, Cal.com processes the details you enter (such as your name, email address, the time you choose and any notes) on my behalf to schedule the call. The legal basis for loading the calendar is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG), which you can withdraw at any time through “Cookie settings”. The legal basis for the booking itself is Art. 6 (1) (b) GDPR. Data is processed in the USA. Cal.com is certified under the EU-US Data Privacy Framework. If you don't want the calendar to load, you can book by email instead. More in Cal.com's privacy policy: cal.com/privacy.

Email and calendar

I use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for email and my calendar. If you email me or book a call, your message or booking is processed by Google. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google.

Links to LinkedIn

This website links to my LinkedIn profile. These are plain links, not embedded content or plug-ins. Data only goes to LinkedIn when you click a link. From then on, the privacy policy of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, applies.

Who I share data with

Only with the service providers named above, as far as they need it to deliver their service. I may also disclose data if the law requires it or if it's needed to establish, exercise or defend legal claims.

How long I keep your data

I delete your data as soon as it's no longer needed for the purpose it was collected for, unless statutory retention periods (for example under tax law) require me to keep it longer.

Your rights

You can ask for access to your data (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restricted processing (Art. 18) and data portability (Art. 20). Where I process data based on legitimate interest, you can object at any time (Art. 21). A short email to max@mixo-agency.com is enough. I respond within the legal time limits.

You can also complain to a data protection authority (Art. 77 GDPR). The one responsible for me is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

Data security

This website uses SSL/TLS encryption, which you can recognise by “https://” in your address bar. I use technical and organisational measures appropriate to the risk. No method of transmission or storage is completely secure.

Last updated

October 2026. I update this policy whenever the website or the services I use change.