DOCUMENT REF: RF-LEGAL-PRIVACY-001
Privacy Policy
Last Updated: February 2026
Controller
Rhizome Foundry
Media Park Koln mbH
Im Mediapark 5, 50670 Koln, Germany
HRB 124322 / HRB 124322/1 0003 1 (512)
Email: aj@masaic.ai
Rhizome Foundry operates this website as a European systems engineering lab.
Scope
This Privacy Policy describes how personal data is processed in connection with this website.
- This site is informational.
- We do not use analytics tools.
- We do not use tracking technologies.
- We do not use marketing pixels.
- We do not profile visitors.
Data We Do Not Collect
We do not:
No automated decision-making occurs on this website.
Server Log Data
When you access this website, the hosting provider may automatically process limited technical information in server logs, including:
IP address
Date and time of access
Requested resource
Browser type
Operating system
This processing is technically necessary to deliver the website, maintain system security, and detect operational faults.
LEGAL BASIS
Article 6(1)(f) GDPR — legitimate interest in secure and stable operation.
Server logs are retained only as long as required for security and operational integrity.
Cookies
This website uses only essential technical cookies required for basic functionality.
- No analytics cookies.
- No tracking cookies.
- No marketing cookies.
LEGAL BASIS
Article 6(1)(f) GDPR — legitimate interest in functional website operation.
Contact Requests
If you submit a system review request or contact us via email, we process the information you provide for the purpose of responding. This may include:
Name
Organization
Email address
System description
LEGAL BASIS
Article 6(1)(b) GDPR — pre-contractual communication, or Article 6(1)(f) GDPR — legitimate interest in responding to inquiries.
We do not use submitted data for marketing purposes.
Data Retention
We retain personal data only as long as necessary for:
Responding to inquiries
Evaluating engagement suitability
Fulfilling legal obligations
Data is not retained beyond operational necessity.
Data Sharing
We do not sell personal data. Data may be processed by infrastructure providers (e.g., hosting providers) strictly for operational purposes. All providers are contractually bound to appropriate data protection standards.
No data is transferred for advertising or profiling purposes.
International Transfers
Where infrastructure providers operate outside the European Economic Area (EEA), appropriate safeguards are implemented in accordance with GDPR requirements (e.g., Standard Contractual Clauses).
Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
You may exercise these rights by contacting aj@masaic.ai
You also have the right to lodge a complaint with a supervisory authority in your country of residence.
Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
Changes
This Privacy Policy may be updated if operational practices change. The latest version will always be published on this page.