Webinar: AMLR, eIDAS2.0, EUDI Wallet: New rules & innovative onboarding solutions for banks, September 1, 2026, 11 AM. Register now!

Webinar: AMLR, eIDAS2.0, EUDI Wallet: New rules & innovative onboarding solutions for banks, September 1, 2026, 11 AM.Register now!

User Support

Privacy Analytics

Information on the processing of personal data by the Mixpanel analytics service when using the Nect Wallet.

Privacy Policy – Mixpanel

I. Controller and Data Protection Officer

The controller within the meaning of Art. 4 No. 7 GDPR is:

Nect GmbH
Großer Burstah 21
20457 Hamburg
Phone: +49 (0) 40 468 974 – 970 (no support!)
privacy@nect.com

The Data Protection Officer of Nect GmbH can be reached at the following email address: privacy@nect.com.

II. Use of Mixpanel for Product Analytics

We use the analytics service Mixpanel from Mixpanel Inc. to improve our app features and to analyze the use of our services. Data processing generally takes place within the European Union. Mixpanel stores all data in data centers in the Netherlands (Google Cloud Platform).

III. Purposes of Data Processing

Processing is carried out to analyze the use of our app, to improve our services, for error analysis, and for the further development of our features.

IV. Legal Basis for Processing

The processing of personal data is based on the applicable statutory legal basis in each case.

  • Insofar as access to information on your device occurs or is required in the context of analytics and tracking functions, processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG. Without your consent, no analytics or tracking processing takes place. You may revoke your consent at any time with effect for the future, for example via the settings within the app.

  • Processing that is necessary for the technical operation of the app may be carried out on the basis of Art. 6(1)(f) GDPR.

V. Categories of Personal Data Processed

We transmit exclusively pseudonymized technical usage data, including:

  • CaseID (pseudonymized identifier)

  • Ident method (NFC, ePass, etc.)

  • Public SPID

  • Product type (Ident, Box, Sign)

  • Device information (without device ID)

  • Platform, OS version, app version

  • App deleted (true/false)

  • Communication channels activated (mail/SMS/push each true/false)

  • Timestamps

  • Document type & issuing country

  • Number of attempts

No clear names, email addresses, phone numbers, or other directly identifying data are processed for analytics purposes. However, as mentioned, the data is processed in pseudonymized form, so that assignment to individual users may be technically possible.

VI. Proxy Technology

The previously verified and, if necessary, cleaned data is transmitted to Mixpanel via servers of Nect GmbH using a technical proxy. In particular, this ensures that no direct IP addresses or unique device identifiers are transmitted to Mixpanel.

VII. Recipients of Data

Access to personal data is granted exclusively to entities authorized to perform tasks. These include in particular:

  • authorized employees of the responsible departments,

  • the Information Security and Data Protection Officer, and

  • external service providers acting as processors pursuant to Art. 28 GDPR (Mixpanel). All external service providers – including Mixpanel – are contractually obligated to comply with data protection requirements.

VIII. Storage Location and Data Transfer to Third Countries

Data processing generally takes place within the European Union. The data is stored on servers in the Netherlands and processed via the Google Cloud Platform infrastructure. Further information is available here: https://mixpanel.com/legal/mixpanel-gdpr/

Insofar as personal data is transferred to countries outside the European Union or the European Economic Area, this is done exclusively in compliance with statutory requirements. This includes in particular:

  • the conclusion of Standard Contractual Clauses of the European Commission,

  • the implementation of additional technical and organizational measures (e.g., encryption), and

  • the performance of corresponding adequacy and risk assessments.

IX. Retention Periods and Deletion

Usage and event data collected via Mixpanel is stored for up to two (2) years and then deleted or anonymized. User profile data is stored for the duration of an active subscription. Session replays are available for 30 days by default. Otherwise, the duration of storage of personal data is generally governed by the principles set out in the data protection notices for Nect Wallet users under “VI. Duration of Storage of Personal Data.”

X. Rights of Data Subjects

You have the statutory rights pursuant to Art. 15 to 22 GDPR. These include in particular the right to revoke consent given, to assert the right to access, deletion, or data portability. The exercise of these rights is carried out in accordance with the procedures described in the data protection notices for Nect Wallet users under “VII. Rights of the Data Subject.”

In addition, there is a right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is:

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)

Ludwig-Erhard-Straße 22
20459 Hamburg
Phone: +49 40 42854-4040
mailbox@datenschutz.hamburg.de
https://datenschutz-hamburg.de

XI. Currency and Amendments

This privacy policy takes effect on July 16, 2026, and is reviewed regularly and adapted as necessary, particularly in the event of changes to technical systems or legal frameworks.

Status: July 2026