Privacy Policy

1. Data Controller

The controller for data processing on this website is:

2. General Information on Data Processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

The use of our website is generally possible without providing personal data. Insofar as personal data is collected on our pages (such as name, address, or email addresses), this is always done on a voluntary basis as far as possible.

4. Cookies

3.1 Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They enable us to store certain information while you visit our website.

We use the following types of cookies:

• Essential cookies: Necessary for the operation of the website (e.g. cookie consent storage)
• Analytics cookies: Help us understand how visitors interact with our website (Google Analytics)
• Marketing cookies: Used to show visitors relevant advertising (Meta Pixel)

You can adjust your cookie settings at any time via our cookie banner or manage or delete cookies in your browser settings.

3.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Use is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Google Analytics uses cookies to analyze the use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Note on data transfer: Google Analytics transfers personal data to the USA. We have activated IP anonymization so that your IP address is truncated within the EU beforehand. The data transfer is based on your consent (Art. 6 para. 1 lit. a GDPR) and the adequacy decisions of the EU Commission.

More information: Google Privacy Policy

3.3 Meta Pixel (Facebook Pixel)

We use the Meta Pixel (formerly Facebook Pixel) by Meta Platforms Ireland Limited on our website. This enables us to track user behavior after they have been redirected to our website by clicking on a Facebook advertisement.

Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. The collected data is transferred to Meta servers in the USA and stored there.

Note on data transfer: Meta Pixel transfers personal data to the USA. The data transfer is based on your consent (Art. 6 para. 1 lit. a GDPR). Meta has implemented Standard Contractual Clauses (SCCs) for EU-US data transfers.

More information: Meta Privacy Policy

4. Lead Magnets and Newsletter Registration

4.1 Double Opt-In Process

When you sign up for our free lead magnets (e.g. checklists, guides), we use the so-called double opt-in process:

1. You enter your email address and your name
2. You receive a confirmation email with an activation link
3. Only after clicking this link is your registration activated and you receive the requested lead magnet

Legal basis: Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Storage period: Your data is stored until you revoke your consent or unsubscribe from the newsletter.

4.2 Processed Data

We process the following data during lead magnet registration:

• Email address (required)
• First name (required)
• Registration time
• Confirmation time
• IP address at registration (to prove lawful registration)

4.3 Email Delivery (Resend)

We use the service Resend (Resend Inc.) for sending our confirmation emails and lead magnets. Data transmission is encrypted.

Legal basis: Processing is carried out to fulfill the contract (provision of the requested lead magnet) pursuant to Art. 6 para. 1 lit. b GDPR.

More information: Resend Privacy Policy

4.4 CRM System (Zoho)

Your contact data is stored in our CRM system (Bigin by Zoho / Zoho CRM) to manage the customer relationship and inform you about relevant offers.

Legal basis: Legitimate interest in maintaining the customer relationship (Art. 6 para. 1 lit. f GDPR) and your consent (Art. 6 para. 1 lit. a GDPR).

More information: Zoho Privacy Policy

5. Contact

When you contact us by email or via our contact form, your details will be stored for processing the inquiry and in case of follow-up questions.

Legal basis: Contract fulfillment or pre-contractual measures (Art. 6 para. 1 lit. b GDPR)

6. Appointment Booking (Calendly)

For booking consultation appointments, we use the service Calendly (Calendly LLC, USA). The following data is processed when booking an appointment:

• Name
• Email address
• Selected appointment
• Any other information you provide

Legal basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR)

More information: Calendly Privacy Policy

3. Hosting

7.1 Vercel (Hosting)

Our website is hosted by Vercel Inc. Vercel operates data centers in several European countries (Germany, France, Ireland, Sweden) and worldwide. When you visit our website, server log files are automatically saved:

• IP address
• Browser type and version
• Operating system used
• Referrer URL
• Date and time of request

Data storage location: Vercel is certified under the EU-US Data Privacy Framework (DPF) and operates data centers in the EU (Frankfurt, Paris, Dublin, Stockholm).

Legal basis: Legitimate interest in the secure and efficient provision of our website (Art. 6 para. 1 lit. f GDPR)

7.2 Supabase (Database)

We use Supabase (Supabase Inc., USA) for storing user data and lead registrations.

Legal basis: Contract fulfillment (Art. 6 para. 1 lit. b GDPR)

More information: Supabase Privacy Policy

7.3 Mux (Video Streaming)

Our videos are provided via Mux (Mux Inc., USA). When playing videos, technical data (IP address, browser information) is transmitted to Mux.

More information: Mux Privacy Policy

7. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 Abs. 3 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: kontakt@monvesta.de

9. Withdrawal of Your Consent

You can withdraw your consent to data processing at any time:

• Newsletter/Lead Magnets: Unsubscribe link in each email or email to kontakt@monvesta.de
• Cookies: Via the cookie banner on our website or in your browser settings
• General: Contact us at kontakt@monvesta.de

The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

8. Data Security

We use the widely used SSL (Secure Socket Layer) method in conjunction with the highest encryption level supported by your browser during your visit to our website.

We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

9. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply for your next visit.