Privacy Policy

1. Data Controller

The party responsible for data processing is Veronika Höller, Germaniastrasse 2, 50181 Bedburg, Germany. Contact for data protection inquiries: veronika@marketing-nomagic.com.

2. Accessing the Website

When you access the website, technically necessary data such as IP address, timestamp, page accessed, and browser type are processed to ensure delivery and security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable, secure operation).

3. Account and Learning Progress

For registration, we process your email address and login credentials. During ongoing use, we store learning progress, simulation results, quests, and community posts to provide the platform. The legal basis is Art. 6(1)(b) GDPR (contract performance).

4. Payment Processing

We process payments via Stripe. Payment and billing data are transmitted directly to Stripe; we do not receive complete card data. We store subscription status, plan, term, and payment status. Legal bases: Art. 6(1)(b) GDPR as well as commercial and tax law retention obligations (Art. 6(1)(c) GDPR).

5. AI-Supported Feedback

Your simulation inputs (e.g. budget allocation and ad copy), scenario context and language are sent through Lovable AI to Google's Gemini model to generate feedback. Lovable and Google therefore receive the inputs required for this processing. Do not enter personal data or confidential company information. The legal basis is Art. 6(1)(b) GDPR. AI feedback can be incorrect; it does not make decisions with legal effects about you.

6. Emails

We send service emails such as registration confirmation, purchase confirmation, welcome message, and payment notices from the sender notify.marketing-nomagic.net. The legal basis is Art. 6(1)(b) GDPR.

7. Cookies and Local Storage

We use necessary cookies and local storage for login, session management, security, payment, language preferences and acknowledgement of the cookie notice (§ 25(2) TDDDG). No optional statistics tool is integrated. Google Search Console is not a visitor tracking script on this website. You can reopen the notice at any time:

Open cookie notice

10. Hosting and Technical Providers

The platform is hosted using Lovable Cloud. Lovable Cloud processes technical access data and stores account data, learning progress, simulation results, community content and course worksheets required to operate the platform. Legal bases: Art. 6(1)(b) GDPR for the contracted service and Art. 6(1)(f) GDPR for secure operation. Provider information: Lovable.

11. Google Search Console

We use Google Search Console to review indexing and our website's performance in Google Search. Google provides reports on search queries, impressions, clicks and indexing. There is no Search Console tracking script or statistics cookie installed on this website. These reports do not give us individual visitor accounts or their learning progress. The legal basis for our analysis is Art. 6(1)(f) GDPR (interest in making our content discoverable). Google's processing of searches is described in Google privacy policy.

12. International Processing

Using Lovable, Google and Stripe may involve processing outside the EU/EEA. Transfers requiring safeguards must meet Art. 44 et seq. GDPR, for example through an applicable adequacy decision or standard contractual clauses. The applicable agreements, subprocessors and processing locations need to be assessed for the actual service configuration; we do not promise EU-only storage or exclusion from model training without contractual evidence. Contact us for information about applicable safeguards.

8. Retention Period

You can delete your account under Your Training or your community profile after signing in again. Learning data, worksheets, certificates and community contributions are deleted. A running paid subscription must end first; for an earlier erasure request, contact us. Legally required payment records remain restricted for the applicable retention periods, which depend on the type of record. Course payment references remain for handling financial claims, not to restore access. Deletion from provider backups follows the provider's retention cycle; we do not promise instantaneous removal from every backup.

9. Your Rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.