Privacy Policy

1. Data Controller

The data controller responsible for this website is:

Muhammad Adil Holding UG (haftungsbeschränkt)
trading as MAH Ventures
[Street Address], 98693 Ilmenau, Germany
Email: contact@mahventures.com

2. Overview

We take the protection of your personal data very seriously. This privacy policy explains what data we collect when you visit this website, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

This website is a static informational website. We do not operate any user accounts, we do not run analytics software that tracks individual users across sessions, and we do not use advertising trackers.

3. Data We Collect

3.1 Server / Access Logs

When you access this website, your browser automatically transmits information to our web hosting provider. This includes: IP address (anonymised after 24 hours), browser type and version, operating system, referring URL, date and time of request, and pages accessed. This data is collected for security and technical purposes and is not associated with you personally. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation).

3.2 Contact Form

When you submit a message via our contact form, your submission is processed by Formspree, Inc. (formspree.io), a third-party form service. The data you submit — which may include your name, email address, company name, and message — is transmitted to Formspree's servers and forwarded to our team by email. We use this data solely to respond to your enquiry. Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Formspree's own privacy policy is available at formspree.io/legal/privacy-policy.

3.3 Job Applications

When you submit a job application via our careers pages, the data you provide — which may include your name, email address, phone number, LinkedIn profile, CV link, cover letter, and other information you choose to submit — is processed by Formspree and forwarded to our team by email. We use this data exclusively for recruitment purposes. We do not share your application data with third parties. We retain application data for up to 6 months after a recruitment process concludes. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures in the context of a potential employment relationship).

4. Cookies

This website does not use tracking cookies, analytics cookies, or advertising cookies. We do not operate a cookie consent banner because we do not set any non-essential cookies. Your browser may cache page assets (images, CSS, JavaScript) for performance reasons — this is standard browser behaviour and does not involve any personal data.

5. Third-Party Services

5.1 Google Fonts

This website uses Google Fonts (Inter typeface), served via Google's CDN. When your browser loads a page, it may send a request to Google's servers to load the font. Google may collect your IP address in connection with this request. To avoid this, you can use a browser extension that blocks Google Fonts requests. Legal basis: Art. 6(1)(f) GDPR. Google's privacy policy: policies.google.com/privacy.

5.2 Formspree

As described in sections 3.2 and 3.3 above, we use Formspree to process form submissions. Formspree is a US-based company. Data transfers to the US are covered by Formspree's participation in the EU–US Data Privacy Framework. See Formspree's privacy policy for details.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): You can request confirmation of whether we process your personal data and, if so, what data we hold.

Right to rectification (Art. 16 GDPR): You can request correction of inaccurate personal data.

Right to erasure (Art. 17 GDPR): You can request deletion of your personal data, subject to applicable legal obligations.

Right to restriction of processing (Art. 18 GDPR): You can request restriction of processing in certain circumstances.

Right to data portability (Art. 20 GDPR): You can request your data in a structured, commonly used, machine-readable format.

Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests.

To exercise any of these rights, contact us at contact@mahventures.com. We will respond within 30 days.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for Thüringen, Germany is:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)
Häßlerstraße 8, 99096 Erfurt
www.tlfdi.de

8. Data Security

This website is served over HTTPS (TLS encryption). Form submissions are transmitted over encrypted connections. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

9. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at this URL. Significant changes will be noted with an updated "Last updated" date at the top of this page.

10. Contact

For questions about this privacy policy or your personal data, contact us at:
contact@mahventures.com
or via our contact form.