Privacy Policy
Last updated: April 5, 2026
Protecting your personal data is important to us. We process your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
1. Controller
The controller responsible for data processing on this website is:
M.B.C. Munich Business Consulting GmbH
Painbreitenstraße 2
82031 Grünwald
Germany
Email: info@mbc-contact.com
Managing Director: Aleksa Jevtovic
2. Processing of Personal Data When Visiting Our Website
When you access this website, technically necessary information is processed by our hosting provider in order to ensure the secure and stable delivery of the website. This may include in particular:
- IP address
- Date and time of access
- Pages or files accessed
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing device
This data is processed to ensure the technical functionality, stability, and security of the website.
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure and reliable provision of our online offering and protection against misuse and technical disruptions.
3. Hosting by Webflow
Our website is hosted by Webflow, Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Personal data processed when visiting this website may be processed on Webflow's servers.
We have concluded a Data Processing Agreement with Webflow. Where personal data is transferred to third countries, in particular to the United States, such transfer is carried out on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR.
4. Waiting List for “The Equity Hub”
Our website offers the possibility to join the waiting list for “The Equity Hub”.
As part of the registration process, we process the data you provide or confirm in the form, in particular:
- First name
- Email address
- Your confirmation that you are an active business owner
- Your confirmation that your company is not headquartered in Germany
We process your first name and email address for the purpose of administering the waiting list and sending you information and emails regarding the launch of “The Equity Hub”.
We process your confirmation that you are an active business owner and that your company is not headquartered in Germany in order to determine whether you belong to the intended target group and meet the eligibility requirements for the waiting list.
In addition, we may process technical campaign information transmitted via URL parameters (e.g. UTM root, medium, or content) in connection with your registration in order to understand through which channel you found our waiting list and to improve our communication.
Legal bases:
- Art. 6(1)(a) GDPR for joining the waiting list and receiving emails based on your consent
- Art. 6(1)(f) GDPR for verifying and documenting whether the eligibility requirements for the waiting list are met
Our legitimate interest: targeted communication with the intended audience for “The Equity Hub”, prevention of registrations outside the intended user group and measuring the effectiveness of our communication and marketing channels.
5. Email Delivery via MailerLite and Double Opt-In
We use MailerLite to manage the waiting list and send emails.
After submitting the form, you will receive an email asking you to confirm your registration via a confirmation link (double opt-in process). Your email address will only be added to our waiting list once this confirmation has been completed. This procedure is used to document your consent and to prevent abusive or fraudulent registrations.
As part of the double opt-in process and MailerLite's services, the following data may also be processed:
- Time of registration
- Time of confirmation
- IP address at the time of registration and confirmation
- Technical information relating to the sending and receipt of emails
Legal bases:
- Art. 6(1)(a) GDPR for sending emails after your consent has been given
- Art. 6(1)(f) GDPR for documenting and proving valid consent
Our legitimate interest: proof of valid consent, prevention of misuse, and legally compliant organization of email communication.
We have concluded a Data Processing Agreement with MailerLite. Where personal data is transferred to third countries, in particular to the United States, such transfer is carried out on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR.
6. No Cookies and No Tracking Tools
We do not use any consent-based cookies, analytics tools, marketing pixels, or comparable tracking technologies on this website.
Any technically necessary functions used by the hosting environment serve exclusively to ensure the secure and functional operation of the website.
7. Purposes of Processing
We process personal data for the following purposes:
- Providing, securing, and technically operating the website
- Managing and administering waiting list registrations
- Verifying whether applicants belong to the intended target group
- Sending information about the launch of “The Equity Hub”
- Promoting “The Equity Hub” to persons who have expressly signed up for such communications
- Documenting consent and preventing misuse or fraudulent registrations
8. Recipients of Data
Your personal data will only be shared with recipients who require it for the purposes described above. These recipients include in particular:
- Webflow as hosting provider
- MailerLite as provider for waiting list management and email delivery
Your data will only be disclosed to other third parties where required by law or where we are legally obliged to do so in an individual case.
9. Transfers to Third Countries
In connection with the use of Webflow and MailerLite, personal data may be transferred to countries outside the European Union or the European Economic Area, in particular to the United States.
Such transfers take place only in compliance with the requirements of Art. 44 et seq. GDPR and on the basis of appropriate safeguards.
10. Retention Period
We store personal data only for as long as necessary for the relevant purposes.
In particular:
- Server log files are generally deleted after 30 days unless longer retention is required to investigate security incidents.
- Data collected through the waiting list is stored until you withdraw your consent or the purpose of processing no longer applies.
- Data used to verify eligibility requirements is stored only as long as necessary to administer the waiting list.
- Proof of consent may be retained for longer where necessary to comply with legal obligations or to defend legal claims.
- Mandatory statutory retention obligations remain unaffected.
11. Your Rights
Subject to the applicable legal requirements, you have the following rights:
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure of your personal data
- Right to restriction of processing
- Right to data portability
- Right to withdraw any consent given, with effect for the future
- Right to object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation
- Right to object to direct marketing at any time
SPECIAL NOTICE OF YOUR RIGHT TO OBJECT
You have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on Art. 6(1)(f) GDPR (legitimate interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time without giving reasons. If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.
To exercise your rights, simply contact us at:
info@mbc-contact.com
12. Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
The competent supervisory authority for our company is:
Bavarian State Office for Data Protection Supervision
13. Obligation to Provide Data
The provision of your data is voluntary. However, without providing the mandatory data and confirmations, it is not possible to join the waiting list.
14. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.