Privacy Policy

Maximilian Bossow (MB Capitals), Bonnaskenplatz 6, 03044 Cottbus, Germany. Email: info@mbcapitals.com, phone: +49 176 15632229.

We process data on the basis of your consent (Art. 6(1)(a) GDPR), to perform a contract with you (Art. 6(1)(b)), to comply with legal obligations (Art. 6(1)(c)) or on the basis of our legitimate interest in a secure and functioning website (Art. 6(1)(f)). We name the legal basis for each processing activity below.

This website is hosted by Vercel Inc., USA. Each time you visit, Vercel processes technically necessary data: IP address, date and time, the page requested, the page visited before, and browser and operating system. This serves to deliver and secure the website (Art. 6(1)(f) GDPR). Vercel processes the data on our behalf (Art. 28 GDPR). Transfers to the USA are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We serve all fonts from our own server. No connection is made to Google or any other font provider.

We store whether you allow or decline measurement and advertising in your browser's local storage (entry “mbcapitals.consent.v1”). This entry is strictly necessary so that we can respect your choice (Section 25(2) no. 2 TDDDG). You can change your choice at any time via “Cookie settings” at the bottom of the page.

Only if you consent do we use Plausible Analytics by Plausible Insights OÜ, Estonia. Plausible counts page views and events such as the start of an order without setting cookies and without storing IP addresses. The data is processed in the EU. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Cookie settings”.

Only if you consent do we use the Meta Pixel of Meta Platforms Ireland Limited, Ireland. It lets us measure how well our ads on Facebook and Instagram perform and show ads to more relevant audiences. In particular, your IP address, information about your browser and device, the pages you visit and events such as the start of an order or a purchase are transmitted to Meta. Meta sets cookies for this and may link the data to your Facebook or Instagram account.

We are jointly responsible with Meta for collecting and transmitting this data (Art. 26 GDPR); you can find the agreement at https://www.facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing. Meta may transfer data to Meta Platforms, Inc. in the USA; this is covered by the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Cookie settings”. More information: https://www.facebook.com/privacy/policy

For orders we use Stripe Payments Europe, Limited, Ireland. On Stripe's checkout page you enter your name, email address, country, postal code where required, and payment details. We receive these details without your full card data, together with the package you chose and the time at which you agreed that we may begin before the withdrawal period ends. This serves to perform your contract (Art. 6(1)(b) GDPR).

Stripe also checks payments for fraud (Art. 6(1)(f) GDPR) and may transfer data to the USA; this is covered by the EU-US Data Privacy Framework or standard contractual clauses. We keep invoice and accounting records for up to ten years as required by German tax and commercial law (Art. 6(1)(c) GDPR, Section 147 AO, Section 257 HGB). More information: https://stripe.com/privacy

We send order confirmations, acknowledgements of receipt and other emails via Resend, Inc., USA. Resend processes your email address and the content of the email on our behalf (Art. 28 GDPR). Transfers to the USA are covered by the EU-US Data Privacy Framework or standard contractual clauses.

If you request free content, an analysis or a place on a waitlist via a form, we store your email address as a contact with Resend and send you the emails you requested. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing info@mbcapitals.com.

On the sales page, you can ask an AI assistant questions. The chat only opens when you click the chat button. Only when you send a message do we transmit your messages and the conversation so far to Anthropic, PBC, USA, so that the AI model Claude can generate a reply. Anthropic processes the data on our behalf (Art. 28 GDPR); transfers to the USA are covered by the European Commission's standard contractual clauses. The legal basis is answering your enquiry before a possible purchase (Art. 6(1)(b) GDPR).

We send the transcript of each conversation to ourselves by email via Resend in order to answer your questions and improve the page and the assistant (Art. 6(1)(f) GDPR). If you leave your email address in the chat, we reply to you personally by email (Art. 6(1)(b) GDPR). The chat sets no cookies and stores nothing in your browser. Whether the chat button appears is decided at random for each page view; we pass this assignment and whether you used the chat to Stripe when you place an order. We delete the logs as soon as we no longer need them for these purposes.

Please do not enter sensitive data in the chat.

If you use WhatsApp Support or message us on WhatsApp, we process your phone number, your profile name and the content of your messages in order to answer your questions (Art. 6(1)(b) GDPR). The provider is WhatsApp Ireland Limited, Ireland. The content of your messages is end-to-end encrypted; WhatsApp processes connection and usage data under its own responsibility and may transfer it to the USA.

We refer to our Instagram profile with a simple link only. No data is sent to Instagram unless you click the link.

If you submit a statement via “Withdraw from contract” or “Cancel subscription”, we process your name, your email address, the contract details and the time of receipt. We need this to process your statement and to confirm receipt (Art. 6(1)(c) GDPR in conjunction with Sections 356a and 312k of the German Civil Code). We keep these details as evidence until the statutory limitation period expires.

If you email or call us, we process your details to handle your request (Art. 6(1)(b) GDPR for questions about a contract, otherwise Art. 6(1)(f)).

We delete personal data as soon as it is no longer needed for the respective purpose and no statutory retention obligation applies.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to info@mbcapitals.com is enough. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply. You have the rights described above and can also complain to the Information Commissioner's Office (ICO): https://ico.org.uk

To place an order, we need your name, email address, country, postal code where required, and payment details; without them we cannot conclude a contract. We do not make automated individual decisions within the meaning of Art. 22 GDPR.