Privacy Policy for www.magdatabac.com

We hereby provide you with the information we collect from you when you use our website. In collecting this information, we are acting as your Personal Data Controller and are required by law to provide you with information about us, the purpose and how we use your data and the rights you have over your personal data.

Maria-Magdalena Tabac-Milthaler, trading as Mind Training, as a Personal Data Controller (hereinafter referred to as “the Company” or “the Controller”), complies strictly with the applicable legal provisions on the protection of individuals with regard to the processing of personal data and the free movement of such data. We undertake to process your personal data in accordance with Regulation (EU) 679/2016 (GDPR), as well as any other legislation applicable on the territory of Germany.

To better understand our data protection policy, please read this material. We reserve the right to update and amend this Personal Data Protection Policy (“Policy”) from time to time without seeking your prior consent and without being subject to any individual or special notification procedure of the changes made. In the event of any such changes, we will post the updated version of the Privacy Policy on the Site, and it is your responsibility to check the contents of this Policy whenever you visit the Site to ensure that you are aware of the latest version.

We are also available for information at hello@magdatabac.com.

Maria-Magdalena Tabac-Milthaler, trading as Mind Training, registered with the tax number 145/212/51345 and VAT ID DE352345339 with the Munich Tax Office in Germany is the Personal Data Controller.

The personal data we process are: first name, last name, email address, IP address, browser type and version, location and time zone settings, browser plug-ins and their versions, operating system, operating platform and other technologies on the devices you use to access this website, information required for billing purposes if applicable, information about how you use our website, products and services, your preferences to receive marketing materials from us and our third parties and your preferred methods of communication.

We use Google Analytics to help us understand how our customers use the Site – you can read more about how Google uses your personal information here: https://policies.google.com/privacy. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Please also see the Cookie Policy section displayed on the home page of our website.

When you send a request or message through our website, we ask for your first and last name and e-mail address. We use this information to respond to your request. We may email you multiple times after you have made a request to ensure that we have answered your question and to improve our users’ experience.

When you submit a request to subscribe to our newsletter, we ask for your first and last name and e-mail address. We use this information to send you the latest news, projects and other interesting information. By subscribing to our newsletter, data is stored and processed until you withdraw your consent. You can withdraw your consent at any time by sending us a request via e-mail or by clicking on the unsubscribe link at the end of each newsletter we send you. The personal data collected will not be disclosed to other persons.

We do not collect or process sensitive data, defined as such by the GDPR. We do not collect or process data of minors.

We collect and process personal data in order to:

The Controller is entitled to process personal data for the purposes set out above:

Where the processing is not necessary for the conclusion and performance of our legal relationships, we will not process personal data for any of the above purposes unless we have your consent to do so.

We process and store personal data for as long as necessary to fulfil the purposes for which the data was collected and in any case for as long as required by applicable legal regulations.

For messages, we will keep your personal data for a period of six months after we have replied to you.

For newsletter your personal data is kept for the lifetime of the newsletter or until you decide to withdraw your consent.

For browsing history your personal data is kept only for the lifetime of the cookie. The lifetime of each cookie can be found at Cookies Policy https://magdatabac.com/cookie-policy/ .

We regularly update our database so that we do not store data that is no longer necessary for the purposes for which it was collected.

The Company ensures appropriate technical and legal measures to ensure effective protection of personal data belonging to individuals who provide us with such data.

We are committed to keeping your personal data secure and we take reasonable measures to do so, including against unauthorized access, unauthorized use, destruction, loss or alteration of data.

We systematically train our employees on the importance of protecting personal data, have internal procedures in place in this regard and, in addition, we make every effort to ensure that our partners also manage appropriate measures for the processing of personal data that may come to them in the context of our contractual relationships.

Also, payments that are made through our website, strictly for the payment of the services that we make available to you, are carried out under secure conditions, in accordance with the security policies implemented by the providers of this service.

We may transmit the personal data you provide to us to affiliated companies and/or to other partners and collaborators with whom we have established contractual relationships in order to carry out our activities and fulfil our legal obligations, such as: Specialists who post materials on the website, providers of IT services, accounting services, legal services, marketing services, courier services, internet and mobile services, payment processors who are authorized by us to intermediate payments, specialists in the field of activity in which we operate, whom we contract to provide you with the best possible quality of our services and other such providers.

The transmission of data to third parties is subject to their acceptance of the confidentiality clauses that we establish.

We may also transmit some of the personal data we collect to the competent public authorities or institutions when required to do so by law or to the courts when we are defending ourselves in court or when we are required to do so by the court.

Please also see the Cookies Policy section displayed on the home page of our website.

Your personal data is processed within the Company located in Germany and we do not transfer data outside the EU. In the context of the operations described above, your personal data may be transferred out of the country to states of the European Union (“EU”) or the European Economic Area (“EEA”). Thus, we inform you that any transfer made by the Operator to an EU or EEA member state complies with the legal provisions of the General Data Protection Regulation No. 2016/679 adopted by the European Parliament (“GDPR”).

We have no intention to transfer personal data to a third or non-EU country or international organization. Should this occur, you will be notified to this effect in order to give your consent or to indicate the appropriate safeguards that ensure the same standard of protection for the processing of personal data.

We are committed to ensuring the security of personal data by adopting appropriate technical and organizational measures in accordance with industry standards. The website is GDPR compliant and uses encryption and data security technology.

In relation to your data, you have the following rights:

The right to information/right of access – you can request information and details of personal data processing activities. We are at your disposal at hello@magdatabac.com. We are committed to ensuring your right to receive clear, transparent, easily understandable and accessible information about how we process your data, including details of the rights you have in this regard, which are also set out in this document.

Right to rectification – if you find that your personal data that we process is incorrect, incomplete, inaccurate, you can rectify or complete it by a simple request for rectification sent to hello@magdatabac.com.

The right to erasure of data (“right to be forgotten”) – you can obtain the erasure of your data if the processing was not lawful or in other cases provided by law. Data erasure can take place in any of the following situations:

(a) we no longer need the personal data to fulfil any of the purposes for which we previously processed them;

b) you withdraw your consent on the basis of which we have previously processed you and there is no other legal basis on which we can rely for further processing;

c) you object to our processing where we process data for direct marketing purposes (including, profiling for direct marketing purposes),

d) you object to data processing based on our legitimate interest and we are unable to demonstrate that we have legitimate grounds justifying the processing which override your interests, rights and freedoms;

e) personal data is processed contrary to the law;

f) personal data must be deleted in order to comply with our legal obligations.

We may refuse your request for erasure if:

(a) we need to comply with legal obligations to retain the data;

b) if the data is necessary for us to establish, exercise or defend our legal rights.

The right to data portability – you may receive, under certain conditions, the personal data you have provided to us in a machine-readable format or you may request that the data be transferred to another controller.

Right to lodge a complaint and/or to take legal action – you can lodge a complaint about the way your personal data is processed with the Bavaria DPA (Bayerisches Landesamt für Datenschutzaufsicht). Contact details and information about the Bavaria DPA can be found at https://www.blm.de/.

Right to withdraw consent – in cases where processing is based on your consent, you can withdraw your consent at any time. The withdrawal of consent will only have effect for the future, with processing carried out prior to the withdrawal remaining valid.

The right not to be subject to automated decisions or additional profiling related to automated decisions: you can ask for and obtain human intervention in relation to such processing or express your own views on such processing.

Right to restrict processing – when we process your data in order to fulfil our public interest tasks or our legitimate interests (or those of a third party) and there is something about your particular situation that makes you want to object to the processing. You also have the right to ask us to restrict processing when we process your data for direct marketing purposes.

Right to object to data processing – when we process your data in order to fulfil a public interest or pursue our legitimate interests or those of a third party.

The rights in this section can be exercised, either individually or cumulatively, by simply sending a request by email to hello@magdatabac.com and we will respond to you within a maximum of 30 days, in accordance with the Regulation.

We do not wish to collect or process data from minors under the age of 18. Please do not provide us with any information if you are under the age of 18.

We regularly review and, where appropriate, periodically update this privacy policy when changes occur as a result of the provision of services. If we want to use your personal data in a way that we have not previously identified, we will contact you to inform you about this and, if necessary, to seek your consent.

We will update the version number and date of this document each time it is amended.

Privacy policy updated as of 01.05.2025.