Privacy Policy

General and scope of processing

I process personal data of users of this website only to the extent necessary to provide a functional website as well as my content and services. This website does not use cookies or any tracking that enables cross-site recognition.

Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the website, information is automatically transmitted to Vercel's servers and stored in server log files (including IP address, date and time of access, page requested, amount of data transferred, browser type, and operating system). This processing is necessary for the secure and stable provision of the website. The legal basis is my legitimate interest (Art. 6 (1) (f) GDPR). The transfer to the USA is based on the EU Commission's standard contractual clauses.

Usage analytics (Vercel Analytics)

I use Vercel Web Analytics to statistically evaluate website usage. This service works without cookies and without persistent identifiers. Only aggregated, anonymised usage data (e.g. pages visited, approximate region of origin, device type used) is collected; identification of individual visitors or the creation of user profiles is not possible. The legal basis is my legitimate interest in improving my services (Art. 6 (1) (f) GDPR).

Web fonts (Fontshare)

To display fonts consistently, I use web fonts provided by Fontshare (Indian Type Foundry). When you load a page, your browser downloads the required fonts from Fontshare's servers. In doing so, your IP address is transmitted to Fontshare. The legal basis is my legitimate interest in an appealing presentation of my website (Art. 6 (1) (f) GDPR).

Contact

If you contact me by email, I process the data you provide (e.g. name and email address) solely to handle your request. The legal basis is my legitimate interest or the initiation or performance of a contract (Art. 6 (1) (f) or (b) GDPR).

Signing up for the AI-Agent Battle Pass

When you sign up for the AI-Agent Battle Pass, I process what the form collects: first and last name, email address, the course you picked, your answer about your previous work with AI and, if you give it, how you heard about us. The legal basis is the initiation and performance of the contract (Art. 6(1)(b) GDPR). Signups are stored in Notion, a service of Notion Labs, Inc., San Francisco, USA. Notion Labs, Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA rests on the European Commission's adequacy decision. If a signup cannot be stored there for the moment, it is parked in storage at my host Vercel until it can be filed; for that transfer to the USA, what is said above about hosting applies. Details that only serve to organise the course are deleted no later than twelve months after the final session of the course in question. Data belonging to an invoice is kept until the statutory retention periods expire.

Payment processing

Payment is handled by Stripe. When you click the payment button you are taken to Stripe. The payment and billing details you enter there are processed by Stripe on its own responsibility under its own privacy policy; I do not see them. For the European Economic Area the controller is Stripe Technology Company, Limited (Ireland), which is Stripe's main establishment in Europe under the GDPR. From Stripe I receive the payment status, the amount and a reference number, in order to mark your signup as paid. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). Stripe's privacy policy is at stripe.com/privacy.

Recording of the course sessions

The sessions of the AI-Agent Battle Pass are recorded. This processes participants' picture, sound, shared screen content and chat messages. The recordings are used internally only, to review and improve the course; they are not published and not passed on to third parties. The legal basis is my legitimate interest in the quality of my offering (Art. 6(1)(f) GDPR). Recordings are deleted no later than six months after the final session of the course in question. You may object to this processing at any time (Art. 21 GDPR); write to info@md-advisory.com.

Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise these rights, an email to info@md-advisory.com is sufficient.

Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.