Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Magnon.Global GmbH · Monika-Karsch-Ring 19, D-86935 Rott
Represented by the managing director, Dr. Oliver Seemann.
Phone: +49 179 4630768 · Email: info@magnon.global
Data protection inquiries: datenschutz@magnon.global
A data protection officer has not been appointed by law, as the requirements for doing so have not been met.
2. General Information on Data Processing, Legal Bases, and Retention Periods
We process personal data only to the extent necessary to provide a fully functional website, as well as our content and services, or if you have given your consent. The legal bases are, in particular, Article 6(1)(a) of the GDPR (consent), (b) (performance of a contract), (c) (legal obligation), and (f) (legitimate interest).
Personal data is deleted as soon as the purpose of the processing no longer applies and there are no statutory retention requirements (in particular, those under commercial and tax law) that prevent its deletion.
3. Website Hosting and Server Log Files (Hosting)
Our website is hosted by netcup GmbH in Germany. When you visit the website, the server automatically collects information (server log files): IP address, date and time of access, page accessed, amount of data transferred, referrer URL, browser type, and operating system. This data is technically necessary to deliver the website and ensure its stability and security.
The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in stable, secure operation). A data processing agreement with netcup has been concluded in accordance with Article 28 of the GDPR.
4. Consent Management (Cookiebot / Usercentrics Cookie Banners)
To manage your consent for non-essential cookies and services, we use Cookiebot, a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot displays a banner when you first visit the site and saves your selection so that services requiring consent are loaded only after you have actively given your consent.
To do this, a cookie containing a consent key and your truncated IP address is processed. The legal basis for the use of Cookiebot is Article 6(1)(c) of the GDPR (evidence of consent) as well as our legitimate interest under Article 6(1)(f) in managing consent in compliance with the law. You can revoke or adjust your consent at any time via the “Cookie Settings” link on the website.
5. Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager manages the integration of additional services (tags) but does not itself collect any personal data for analytical purposes. It is configured with Consent Mode v2, so that downstream services are triggered exclusively in accordance with the consent you have provided via Cookiebot.
6. Google Analytics 4
With your consent, we use Google Analytics 4 (GA4), a service provided by Google Ireland Limited, to analyze website traffic. GA4 uses cookies and similar technologies to analyze your use of the website (including pages visited, time spent on the site, approximate location based on the truncated IP address, and device type). The IP address is truncated and is not combined with other data from Google to identify you.
The legal basis is Article 6(1)(a) of the GDPR (consent). A transfer of data to Google LLC in the United States cannot be ruled out; this is based on the EU Standard Contractual Clauses and Google’s certification under the EU-U.S. Data Privacy Framework. A data processing agreement is in place with Google. You may revoke your consent at any time with future effect.
7. Google Ads and Conversion Tracking
Once you have given your consent, we use Google Ads with conversion tracking, a service provided by Google Ireland Limited. A cookie is set as soon as you access the website via one of our ads. This allows us to analyze which ads lead to orders or contact requests. We do not receive any information that can be used to personally identify users.
The legal basis is Article 6(1)(a) of the GDPR (consent). In this case as well, data may be transferred to the U.S., protected by standard contractual clauses and the EU-U.S. Data Privacy Framework.
8. Meta-Pixel (Facebook/Instagram) und Custom Audiences
With your consent, we use the Meta Pixel, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The pixel tracks your interactions on our website (including page views, clicks, and order processes) to measure the effectiveness of our advertisements and to display interest-based ads to you on Meta’s platforms (retargeting / Custom Audiences).
In doing so, a link to your Meta account may be established, provided you are logged in there. The legal basis is Article 6(1)(a) of the GDPR (consent). Data may be transferred to Meta Platforms, Inc. in the U.S., secured by Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. For part of the processing, we and Meta are joint controllers under Article 26 of the GDPR; in this respect, Meta’s Joint Controller Agreement applies.
9. LinkedIn Insight Tag
With your consent, we use the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It enables us to analyze campaigns and display interest-based advertising on LinkedIn (retargeting), as well as to conduct statistical analyses of the demographics of our website visitors.
The legal basis is Article 6(1)(a) of the GDPR (consent). Data may be transferred to LinkedIn Corporation in the United States, protected by Standard Contractual Clauses and the EU-U.S. Data Privacy Framework.
10. Contact and Consultation Form (WPForms)
When you use our contact or consultation form, we process the data you enter (specifically your name, email address, optional phone number, and your message) in order to handle your inquiry. The form is implemented using the WPForms plugin. The data is transmitted to us via email [and stored in our website database—please verify].
The legal basis is Article 6(1)(b) of the GDPR, insofar as your inquiry relates to a contract; otherwise, it is Article 6(1)(f) of the GDPR (legitimate interest in responding to inquiries). The data will be deleted as soon as the inquiry has been fully processed and there are no retention obligations that prevent this.
11. Order Processing and Payment Service Provider (Mollie)
To process your order, we process the necessary data (order, shipping, and billing information) in accordance with Article 6(1)(b) of the GDPR. For payments via SEPA direct debit and credit card, we use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. The data required for payment is transmitted directly to Mollie and processed there under their own responsibility; we do not store any complete payment data ourselves.
The legal basis is Article 6(1)(b) of the GDPR. Mollie’s privacy policy applies in addition.
12. Security (Wordfence)
To protect our website from attacks, we use the Wordfence security plugin (Defiant, Inc., USA). In particular, Wordfence processes IP addresses to detect and block malicious access attempts. The legal basis for this is Article 6(1)(f) of the GDPR (legitimate interest in the security and integrity of our website).
13. Local Fonts
We embed fonts (including Playfair Display, Lato, and Montserrat) locally from our server. No data is transmitted to third parties (such as Google Fonts) during display.
14. Embedded YouTube videos (if used)
If videos from YouTube (Google Ireland Limited) are embedded on our website, they will not be loaded until you have given your consent. When the videos are played, YouTube may set cookies and transmit data—including to Google in the U.S. The legal basis is Article 6(1)(a) of the GDPR (consent).
15. Your Rights as a Data Subject
Under the GDPR, you have the following rights:
– Access to your processed data (Art. 15 GDPR),
– Rectification of inaccurate data (Art. 16 GDPR),
– Erasure (Art. 17 GDPR),
– Restriction of processing (Art. 18 GDPR),
– Data portability (Art. 20 GDPR),
– Objection to processing based on legitimate interests (Art. 21 GDPR),
– Withdrawal of consent with future effect (Art. 7(3) GDPR).
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.
16. Current Status of This Privacy Policy
This Privacy Policy will be updated as soon as changes in data processing practices or the legal landscape require it. The version currently published on this website is the one that applies.