Privacy Policy — MarcRunner

1. Controller

Marko Curkovic, trading as MARCRUNNER, Taunusstraße 35, 71032 Böblingen, Germany. Email: mc@marcrunner.com. We are responsible for processing personal data on marcrunner.com under the EU General Data Protection Regulation (GDPR).

2. What data we process

Data	When	Purpose	Legal basis
Technical data (IP address, browser, time of access)	Every visit	Running and securing the website	Art. 6(1)(f) GDPR legitimate interest
Assessment answers and results	When you take an assessment	Calculating and showing your result	Art. 6(1)(b) GDPR contract / pre-contractual steps
Name and email address	At checkout	Delivering the purchased product, sending invoice and order confirmation	Art. 6(1)(b) GDPR contract
Payment data	At checkout, processed by Stripe	Processing the payment	Art. 6(1)(b) GDPR contract
Order, invoice and consent data (incl. date of your withdrawal waiver)	After purchase	Accounting, tax obligations, proof of consent	Art. 6(1)(c) GDPR legal obligation
Contact and consultation requests (name, email, company, message)	When you contact us or book a consultation	Answering your request	Art. 6(1)(b) and (f) GDPR
Optional cookies (analytics, marketing)	Only after your consent	Understanding website use	Art. 6(1)(a) GDPR consent

You are not required to provide personal data, but without it we cannot deliver a purchased product or answer a request.

3. Service providers

We use the following providers, who process data on our behalf under data processing agreements or as independent controllers:

Hostinger (Hostinger International Ltd.): website hosting and website builder.
Supabase (Supabase Inc., USA): database and server functions storing assessment results, purchase status and consent records.
Stripe (Stripe Payments Europe Ltd., Ireland): payment processing, invoices and receipts. Stripe processes payment data partly as an independent controller; see stripe.com/privacy.
Our form provider: processing of contact and booking forms.

4. Email marketing to existing customers

If you purchase a paid product from us, we use the email address you provided during checkout to occasionally send you information about our own similar products and services (for example further assessments, reports or trainings). Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in direct marketing) in conjunction with Sec. 7(3) of the German Act Against Unfair Competition (UWG). You can object to this use at any time, free of charge (apart from standard transmission costs), by clicking the unsubscribe link in any of our emails or by writing to mc@marcrunner.com. We will then stop using your email address for this purpose.

5. Transfers outside the EU

Some providers (e.g. Supabase, Stripe group companies) may process data in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on EU Standard Contractual Clauses.

6. Cookies

We use cookies that are strictly necessary to run the website. Optional cookies for analytics or marketing are only set if you accept them in the cookie banner. You can change or withdraw your choice at any time via “Cookie Settings” in the footer.

7. How long we keep data

Assessment results without purchase: deleted after 12 months at the latest.
Purchased products, order, invoice and consent data: kept for as long as tax and commercial law requires (usually up to 10 years for accounting records).
Contact requests: deleted once the request is fully handled, unless a contract follows.
Server logs: kept briefly for security purposes, then deleted.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise your rights, email mc@marcrunner.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence or workplace.

9. No automated decisions

Your assessment result is calculated automatically from your answers, but it has no legal effect and does not significantly affect you in a similar way.

10. Children

Our services are intended for adults. We do not knowingly collect data from persons under 16.

11. Changes

We may update this Privacy Policy when our services or legal requirements change. The current version is always available on this page.