Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
2. General information
We treat personal data confidentially and in accordance with applicable data protection laws. This privacy policy explains which data is processed on this website, for which purposes, on which legal basis and which rights data subjects have.
3. Website provision and server log files
When you visit the website, technically necessary access data may be processed, for example IP address, date and time of access, browser type, operating system, referrer URL and requested files. This data is required to provide the website securely and reliably.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of the website.
4. Cookies, consent banner and local storage
We use a simple cookie and consent banner. Optional analytics, marketing and embedded media services are only activated after your consent. Your choice may be stored locally in your browser so it can be remembered on future visits.
Technically necessary storage and security functions may be required without consent. The legal basis for optional analytics and marketing services is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example by resetting your cookie choice or deleting website data in your browser.
5. Kickstarter Pre-Save and €1 reservation
When you use the MTC Kickstarter Pre-Save, we process the data you enter as well as payment and reservation information, in particular:
- First name
- Email address
- Language setting
- Consent to email updates
- PayPal order ID and PayPal capture ID
- Payment amount, currency, payment status and reservation timestamp
We use this data to record your paid Pre-Save reservation, confirm payment, add you to the Kickstarter Pre-Save list, send email updates and measure demand for the First Edition.
The legal bases are Art. 6(1)(b) GDPR for carrying out the reservation, Art. 6(1)(a) GDPR for email marketing and optional tracking services and Art. 6(1)(f) GDPR for technical security and documentation.
6. Payment processing via PayPal / 360 Drums
The €1 reservation is processed via PayPal. The PayPal business account used for payment is operated through 360 Drums, the business account of the MTC founder. If you use PayPal, payment data is transmitted to PayPal and processed by PayPal as an independent controller. Depending on the chosen payment method, this may include name, email address, payment amount, payment status, transaction identifiers, IP address and other payment information.
Further information is available in PayPal’s privacy statement: PayPal Privacy Statement.
7. Use of Klaviyo
We use Klaviyo, a service provided by Klaviyo Inc., to manage Pre-Save registrations and automated email flows. After successful payment, the Pre-Save data is transferred server-side to Klaviyo and stored in the Kickstarter Pre-Save list. An event such as “MTC Pre Save Paid” may also be stored on the profile so that relevant email flows can be triggered.
Processed data may include email address, first name, language, payment status, registration source, PayPal order ID, PayPal capture ID, amount, currency and timestamp. You can unsubscribe at any time via the unsubscribe link in each email or by contacting mail@mtcards.com.
Klaviyo processes data on our behalf. For transfers of personal data to the United States, Klaviyo states that it relies, among other things, on the EU-U.S. Data Privacy Framework and, where required, on standard contractual clauses. Further information is available here: Klaviyo Privacy Policy.
8. Google Analytics 4 and Google Tag
After your consent, we use Google Analytics 4 through the Google Tag. Google Analytics helps us understand how the website is used, which content performs well and how the Pre-Save funnel can be improved. Usage data, device information, approximate location information, referrers, page views and events may be processed. For a confirmed Pre-Save, a purchase event with amount, currency and transaction ID may be sent.
Google Consent Mode is configured so that analytics and advertising storage are denied by default and only activated after consent. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Further information: Google Analytics – Safeguarding your data.
9. Meta Pixel
After your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited. The Meta Pixel helps us measure page views and paid Pre-Save reservations, evaluate advertising campaigns and optimize ads for relevant audiences. Information about your visit, device, browser data, IP address, page views and events such as “PageView” or “Purchase” may be processed.
The Meta Pixel is only loaded after consent. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Further information is available in Meta’s privacy policy: Meta Privacy Policy.
10. YouTube and embedded media
The website may use YouTube videos or other embedded media in the future. Embedded content may transmit data to the respective provider, especially when you play the video or when the embed is loaded. Where possible, such content is loaded only after consent or through privacy-enhanced embedding options.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
11. Data sharing and international transfers
Personal data is shared only if this is necessary for the stated purposes, if you have consented, if there is a legal obligation or if we use service providers as processors. For service providers outside the European Economic Area, data transfers may be based on adequacy decisions, the EU-U.S. Data Privacy Framework, standard contractual clauses or other appropriate safeguards.
12. Storage period
We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations. Email marketing data is deleted or blocked if you withdraw your consent, unless statutory retention obligations or legitimate documentation obligations apply. Payment and booking information may be retained longer due to commercial and tax law obligations.
13. Your rights
Within the statutory requirements, you have the right to access, rectification, deletion, restriction of processing, data portability and objection to certain processing. You can withdraw consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority.
14. Requirement to provide data
Providing your data is voluntary. Without the information required for the reservation, we cannot process your €1 Pre-Save reservation or add you to the Kickstarter Pre-Save list.
15. Updates to this privacy policy
We reserve the right to update this privacy policy if technical, legal or organizational changes occur.
Back to homepage →