Privacy Policy

Last updated: 6 October 2026

This privacy policy explains what personal data Modal Resonance processes when you visit modalresonance.com or contact us, why we process it, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Modal Resonance GmbH
Kolonnenstr. 8, 10827 Berlin, Germany
Managing directors: Omar Ali Fdal, Dr. Matteo Giomi
Email: contact@modalresonance.com

We are not required to appoint a data protection officer. For any question about your data, write to the email address above.

2. Summary

  • This website sets no cookies and uses no local storage.
  • We do not use advertising, social media plugins, or cross-site tracking.
  • Fonts are served from our own website. Your browser does not contact Google or any other font provider.
  • We use Plausible Analytics, a cookieless analytics tool hosted in the EU, to count visits in aggregate.
  • If you contact us, we use your details only to handle your inquiry.

3. Hosting

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA.

Whenever you open a page, your browser automatically sends technical data to GitHub's servers: your IP address, the date and time of the request, the page requested, the referring page, and information about your browser and operating system. GitHub processes this data to deliver the website and to keep the service secure and stable. We have no access to these logs. GitHub determines how long it retains them; see GitHub's privacy statement.

Legal basis: our legitimate interest in providing a reliable and secure website (Art. 6(1)(f) GDPR).

Transfer to the USA: GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework. Transfers rely on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR).

More information: GitHub General Privacy Statement.

4. Website analytics

We use Plausible Analytics, provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, to understand how our website is used (e.g. page views, referring websites, country, device type). Plausible sets no cookies and stores nothing on your device. Your IP address and browser information are combined with a salt that changes daily to create an anonymous identifier; the IP address itself is not stored, and the salt is deleted after 24 hours. All data is processed on servers in the EU and only as aggregated statistics. Plausible acts as our processor.

Legal basis: our legitimate interest in understanding and improving the use of our website (Art. 6(1)(f) GDPR). The extent of the processing is minimal: your IP address is not stored, the daily identifier cannot be linked to you, to your activity on other websites, or to your visits on other days, no profiles are built, the data is not used for advertising, and it is not sold or shared with third parties. We only ever see aggregated statistics. You can object at any time (see "Your rights"), for example by using a browser extension that blocks the script.

Processor agreement: we have concluded a data processing agreement with Plausible under Art. 28 GDPR: Plausible Data Processing Agreement.

More information: Plausible Data Policy.

5. Contact form and email

Our contact form is operated by Formspree, Inc., USA. Formspree acts as our processor. When you use our contact form, we process the name, email address and message you enter. Formspree receives your submission, stores it on servers in the USA, and forwards it to us by email. Transfers to the USA are protected by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Formspree also receives your IP address and technical information about your browser when you submit the form.

Formspree will see that data only if you use the contact form. When you email us directly, we process your email address and the content of your message. Our email is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, which processes emails sent to us on our behalf. OVH acts as our processor.

Purpose: to reply to your inquiry and, where relevant, to prepare a possible engagement.

Legal basis: Art. 6(1)(b) GDPR if your inquiry relates to a possible contract with us; otherwise our legitimate interest in replying to messages addressed to us (Art. 6(1)(f) GDPR).

Retention: we delete your inquiry once it has been fully dealt with. We delete submissions stored at Formspree no later than six months after receipt. If your inquiry leads to a business relationship, statutory retention periods under German commercial and tax law apply (up to ten years, § 257 HGB, § 147 AO).

6. Links to other websites

This website links to external websites such as LinkedIn, GitHub, Google Patents, IEEE, NIST and the Proceedings on Privacy Enhancing Technologies. These are plain links: no data is sent to these websites unless you click one. Once you do, the privacy policy of that website applies.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15 GDPR),
  • have inaccurate data corrected (Art. 16 GDPR),
  • have your data deleted (Art. 17 GDPR),
  • have the processing of your data restricted (Art. 18 GDPR),
  • receive your data in a structured, machine-readable format (Art. 20 GDPR).

To exercise any of these rights, email contact@modalresonance.com.

Right to object (Art. 21 GDPR). Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Tel.: +49 30 13889-0
Fax: +49 30 2155050
E-Mail: mailbox@datenschutz-berlin.de

8. Other information

You are not required to provide personal data to use this website. Using the contact form is voluntary, but we cannot reply without an email address. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.