Privacy Policy.

This English version is provided for convenience. Only the German version is legally binding.

Here you can find out which personal data we process when you visit our website, contact us or work with us, and what rights you have.

1. Controller

For all questions regarding data protection, you can reach us at the email address above. We are not obliged to appoint a data protection officer.

2. Website hosting

This website is operated on Base44 (Base44 Ltd., part of the Wix.com group). When a page is accessed, the host processes technically necessary data that your browser transmits automatically: IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system (server log files). We need this data to deliver the website securely and without errors and to detect misuse.

The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Base44. The connection to this website is encrypted via TLS.

3. Cookies, fonts and analytics

We use no tracking or marketing cookies on this website and no analytics tools such as Google Analytics or the Meta Pixel. Only technically necessary storage in the browser is used, without which the website would not function (§ 25(2) German Telecommunications Digital Services Data Protection Act, TDDDG).

On your first visit, a banner asks whether we may load external media (YouTube videos). We store your choice as the entry "mm-consent" in your browser's local storage (localStorage) so that we do not ask again on every page. This entry is technically necessary (§ 25(2) no. 2 TDDDG), is not transmitted to us and is requested again after 12 months. You can change or withdraw your consent at any time with effect for the future via "Cookie settings" at the bottom of every page.

All fonts are hosted on our own server. No connection to Google Fonts or other font providers is established when a page is accessed.

4. Contact form, registrations and CRM

If you write to us via a form on this website (contact, workshop registration, 5-Day LinkedIn Sales Guide, Vision Days), we process the information you provide there: as a rule, name, email address and, depending on the form, phone number, company, LinkedIn profile and your message.

Your information is transferred directly to our own CRM in the app Marketing Mavens OS, which is also hosted on Base44. There we create a contact with a note of which form you came through and create an internal task. We also receive a notification by email. Only Stephanie Weyer and our team have access to this data, no clients.

We use your data to answer your enquiry, process your registration and contact you in connection with your enquiry. The legal bases are pre-contractual measures and the performance of a contract (Art. 6(1)(b) GDPR), our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR) and your consent (Art. 6(1)(a) GDPR), which you give via the checkbox in the form. You can withdraw it at any time with effect for the future.

To protect against spam, the forms contain an invisible check field. No additional data about you is collected for this purpose.

5. Email sequences and newsletter

If you sign up for the 5-Day LinkedIn Sales Guide or our newsletter, we send you the requested emails via the mailing service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin). For this purpose, we process your first name, your email address, the time of registration and your consent. Brevo evaluates whether emails were delivered and opened and whether links were clicked, so that we can improve our content.

The legal basis is your consent (Art. 6(1)(a) GDPR), which we have you confirm in a double opt-in procedure. You can unsubscribe at any time via the unsubscribe link in every email or by sending us a message. A data processing agreement is in place with Brevo.

You can also order the newsletter in the contact form via a voluntary, separate checkbox. Without this checkbox, we use your information exclusively to handle your enquiry. If you register for our workshop or the Vision Days, we also transmit your name and email address to Brevo in order to send you organisational information about the event (Art. 6(1)(b) GDPR).

6. Appointment booking, WhatsApp and external links

Appointment booking: For appointments, we link to the booking pages of Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). You only leave our website when you click a link. We process the data you provide when booking to prepare and conduct the appointment (Art. 6(1)(b) GDPR). Google's privacy policy also applies.

WhatsApp: The WhatsApp button is a simple link. You are only redirected to WhatsApp (WhatsApp Ireland Limited) when you click it. If you write to us there, we process your message and phone number to answer your enquiry (Art. 6(1)(b) and (f) GDPR).

Social media: Links to LinkedIn and Instagram are simple links without embedded plug-ins. When you click them, the privacy policy of the respective platform applies.

7. Videos

We load embedded YouTube videos in privacy-enhanced mode (youtube-nocookie.com) and only after you have allowed external media in the cookie banner or clicked "Play video". Until then we only show a preview image from our own server. Only then is a connection to YouTube (Google Ireland Limited) established, and YouTube receives, among other things, your IP address. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We deliver our own videos directly from our server.

8. Job applications

If you apply via our application form or by email, we process your information and documents exclusively for the application process. Applications are not transferred to our sales pipeline. The legal basis is the initiation of an employment relationship (Art. 6(1)(b) and Art. 88 GDPR in conjunction with § 26 German Federal Data Protection Act, BDSG). If no collaboration results, we delete your data no later than six months after the conclusion of the process, unless you have consented to longer storage.

9. Clients and Marketing Mavens OS

If you work with us, for example in the Go-to-Market Sprint, in LinkedIn Done for You, in the AI sales system (Done with You) or in the Corporate Influencer Programme, we process the data required for the collaboration:

• Name and business contact details of all persons involved
• Communication, appointments, minutes from the jour fixe and approvals
• Content, profiles, documents and project information that you provide to us
• Key figures, market feedback and lead lists from ongoing campaigns
• Contract and billing data

The collaboration runs via our app Marketing Mavens OS. Each person only sees the data of their own company there; access rights are role-based. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in efficient client support (Art. 6(1)(f) GDPR).

Insofar as we process personal data of third parties on behalf of our clients, such as contacts from lead lists or conversation histories on LinkedIn, we act as a processor. For this purpose, we conclude a separate data processing agreement (DPA) with each client.

Use of AI: In the app and in our work, we use AI-based functions, including from Anthropic (Claude), for example for analyses, summaries and draft texts. No automated individual decision-making within the meaning of Art. 22 GDPR takes place. You approve all content that is published or sent in your name beforehand.

10. Business contacts on LinkedIn

We approach potential business contacts via LinkedIn, for ourselves or on behalf of our clients. In doing so, we process publicly accessible professional data, such as name, position, company and industry, as well as the message history. We contact leads exclusively via LinkedIn and not unsolicited by email or telephone.

For our own outreach, the legal basis is our legitimate interest in initiating business relationships (Art. 6(1)(f) GDPR). You can object to this at any time, for example with a short reply on LinkedIn or by email. We will then add you to our block list and will not approach you again.

11. Workshops, live sessions and recordings

For online workshops and live sessions, we process your registration data and the data generated by the video conferencing tool used when you participate. If a session is recorded, we expressly point this out beforehand. We make the recording available to the participants and use it for quality assurance. We only publish excerpts in which you are recognisable with your express consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

12. Payments and accounting

We create and manage invoices with Lexware Office (Haufe Service Center GmbH, Freiburg). You can pay for the optional app subscription for Marketing Mavens OS via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). In doing so, we process the data required for invoicing and payment. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our statutory retention obligation (Art. 6(1)(c) GDPR).

13. Service providers and transfers to third countries

We work with carefully selected service providers who process data on our behalf and with whom data processing agreements are in place:

Service provider	Purpose
Base44 (part of the Wix.com group)	Hosting of the website and the app Marketing Mavens OS, database, forms
Google Workspace (Google Ireland Limited)	Email, calendar, appointment booking, documents
Anthropic (Claude)	AI-based analyses and draft texts
Brevo (Sendinblue GmbH)	Sending of email sequences and newsletter
LinkedIn Sales Navigator (LinkedIn Ireland Unlimited Company)	Research of business contacts in the context of the collaboration
Dripify and HeyReach	Organisation of connection requests and messages on LinkedIn in the context of the collaboration
Clay and Prospeo	Enrichment of lead lists with publicly available business data in the context of the collaboration
Lexware Office, PayPal	Invoicing and payment processing

Some of these providers are based outside the EU or process data there, for example in the USA or Israel. A transfer only takes place if an adequate level of data protection is ensured: on the basis of an adequacy decision of the EU Commission (for example for Israel or for companies certified under the EU-US Data Privacy Framework) or on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).

14. Storage period

We only store personal data for as long as is necessary for the respective purpose. We delete enquiries not followed by a collaboration no later than two years after the last contact. We store data from a collaboration for its duration and delete it afterwards, unless statutory retention periods apply; for invoices and accounting records, these are generally eight to ten years. After you unsubscribe from emails or object, we only store your email address in a block list so that we do not write to you again.

15. Your rights

You have the right at any time to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability in a common, machine-readable format (Art. 20 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): If we process your data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons.

To do so, simply write to us at hellu@marketing-mavens.de.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision, BayLDA), Promenade 18, 91522 Ansbach, www.lda.bayern.de.

Last updated: October 2026