Privacy policy

I. Controller

Mariana Research GmbH i.G., Tölzer Str. 1, 82031 Grünwald, Germany. Managing Director: Felix Buschkotte. Commercial register: Munich Local Court, HRB applied for. Contact: privacy@mariana-research.com.

II. Data protection officer

Not required under § 38 BDSG. Please direct enquiries to privacy@mariana-research.com.

III. Legal bases

Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual steps), (c) (legal obligation), (f) (legitimate interests).

IV. Server log data

When you visit the website, our hosting provider processes technical access data: IP address, date and time, requested URL, referrer, browser type and version, operating system, data volume transferred and HTTP status code. The legal basis is Art. 6(1)(f) GDPR (technical operation, security, stability). Delivery runs on a global edge network; requests from Europe are handled in European data centres. Deletion takes place promptly, at the latest after 30 days.

V. Form submissions (buyer matching, sale readiness, guide)

In the forms on this website we process the information you enter: company website, email address and optional details on revenue, earnings, headcount, growth and timeline. The purpose is to handle your request and to send the results you asked for. The legal basis is Art. 6(1)(b) GDPR. The information is transmitted by email to our team only; your company is never publicly presented or listed.

Once a lead is qualified, we transfer the necessary contact and company data to our CRM system (Attio Limited, UK; EU representative under Art. 27 GDPR: EU-REP.Global GmbH, Hopfenstr. 1d, 24114 Kiel, Germany) in order to organise further support. The legal basis is Art. 6(1)(f) GDPR.

VI. Email delivery

Confirmation and notification emails are sent through the transactional email service integrated into our development and operations platform. We process recipient address, subject, content and delivery status (e.g. bounces). The legal basis is Art. 6(1)(b) and (f) GDPR.

VII. No analytics or marketing tools

This website uses no web analytics, no conversion tracking, no ad networks, no social media plugins and no profiling. No analytics or advertising cookies are set.

VIII. Cookies and local storage

We set no cookies for analytics or advertising. In local storage we only keep your chosen language (fb_lang) so the site appears in the right language; technically necessary under § 25(2) no. 2 TDDDG.

IX. Recipients and processors (Art. 28 GDPR)

• Lovable Labs Incorporated, San Francisco, USA — development, hosting and backend platform including transactional email; delivery via European edge locations.
• A database and authentication service operated by that platform, where required for operation; storage within the EU.
• Attio Limited, UK — CRM for qualified leads; EU representative under Art. 27 GDPR: EU-REP.Global GmbH, Hopfenstr. 1d, 24114 Kiel, Germany.
• Recipients of our internal notifications are exclusively employees of Mariana Research GmbH i.G.

We do not use marketing or advertising services.

X. Transfers to third countries

Where providers outside the EEA are involved, in particular in the USA, transfers are safeguarded by EU standard contractual clauses (Art. 46(2)(c) GDPR) and, where the provider is certified, additionally by the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

XI. Contact by email

If you write to us directly, we process your details only to answer your message; the legal basis is Art. 6(1)(b) or (f) GDPR. Data is deleted once storage is no longer necessary; statutory retention obligations remain unaffected.

XII. Retention periods

Log data: maximum 30 days. Form and email requests: for the duration of processing, thereafter for 6 or 10 years where required by commercial or tax law (§ 257 HGB, § 147 AO).

XIII. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)). An informal email to privacy@mariana-research.com is sufficient.

XIV. Right to lodge a complaint (Art. 77 GDPR)

Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de

XV. Data security

TLS transport encryption, encryption of stored data at our providers and restrictive access controls for internal staff.

XVI. Updates

We update this policy when our processing changes. The version published here applies at any given time.