Privacy Policy

This Privacy Policy explains how MARA Solutions GmbH ("MARA", "we", "us" or "our") processes personal data when you visit www.mara-solutions.com, contact us, interact with our marketing, or engage with us as a prospect, customer contact or applicant.

Where MARA processes personal data solely on behalf of a business customer through the MARA platform, that customer generally acts as the controller and MARA acts as a processor. That processing is governed by the applicable customer agreement and data processing agreement rather than this Privacy Policy.

1. Controller and contact

The controller for the processing described in this Privacy Policy is:

MARA Solutions GmbH
Tullastraße 15
68161 Mannheim
Germany
Email: hello@mara.solutions
Telephone: +49 174 343 10 37

You may contact us at hello@mara.solutions with any privacy-related question or request.

2. What personal data we process and why

Website use

When you use our Website, we and our hosting provider may process technical data such as your IP address, browser and device information, requested pages, referrer, timestamps and server log information. We use this data to provide, secure and improve the Website.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure and functional Website).

Contact, demo and event forms

If you contact us, request a demo, register for an event or submit another form, we process the information you provide, such as your name, work email address, company, job title and message. We use this information to respond to your request, manage our relationship with you and, where appropriate, take steps before entering into a contract.

Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR.

Marketing communications

If you subscribe to marketing communications, register for content or events, or are an existing customer contact, we may process your contact details and engagement with our communications to send relevant product information, event invitations and other marketing. We use Customer.io for marketing automation and email delivery.

Where consent is required, the legal basis is Art. 6(1)(a) GDPR. For permitted communications to existing customers, we may rely on Art. 6(1)(f) GDPR together with applicable German competition law. You can unsubscribe at any time using the link in our emails or by contacting us.

Sales, CRM and business prospecting

We use Pipedrive to manage business relationships, sales opportunities and communication history. We may also obtain professional contact information from publicly available sources and business-data providers, including Apollo.io, to identify and contact potential business customers in the hotel and hospitality sector.

The data may include your name, business email address, company, job title, professional profile information and relevant communication history. Our legal basis is generally Art. 6(1)(f) GDPR (our legitimate interest in B2B sales and relationship management), subject to applicable direct-marketing rules. You may object to direct marketing at any time.

Job applications

If you apply for a role at MARA, we process the information you provide for recruitment and hiring purposes. The legal basis is §26(1) BDSG in conjunction with Art. 88 GDPR. If you are not hired, we normally delete application data after six months unless a longer period is required or you consent to longer retention.

3. Cookies, analytics and advertising

We use a consent management platform provided by Finsweet (Consent Pro) to manage choices for non-essential cookies and similar technologies. Non-essential analytics and advertising technologies are activated only where the required consent has been obtained. You can change or withdraw your choices through the cookie preferences link on the Website.

Depending on your consent choices, we use the following services:

• Google Analytics 4 (Google) to understand Website usage and performance.

• LinkedIn Insight Tag to measure advertising performance, conversions and audiences on LinkedIn.

• Meta Pixel to measure advertising performance, conversions and audiences on Facebook and Instagram.

• Loom and YouTube to display embedded video content. These providers may receive technical and usage information when you interact with embedded content.

For these non-essential technologies, the legal basis is generally Art. 6(1)(a) GDPR and §25(1) TDDDG. Google Tag Manager may be used to manage the loading of tags in accordance with your consent choices.

4. Service providers and recipients

We use service providers to operate our Website and business. Depending on the processing concerned, these may include providers of website hosting, forms, analytics, advertising, CRM, email and marketing automation, business data, productivity, AI-assisted tools and workflow automation.

Key providers used in the activities described above include Webflow, Tally, Google, LinkedIn, Meta, Customer.io, Pipedrive and Apollo.io. We also use business productivity, AI and automation services, including tools such as Claude and Make, where appropriate for internal business operations. Where a provider processes personal data on our behalf, we enter into appropriate contractual arrangements as required by data-protection law.

5. International data transfers

Some service providers process personal data outside the European Economic Area, including in the United States. Where required, we use appropriate safeguards for these transfers, such as an applicable adequacy decision, participation in the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

You may contact us if you would like more information about safeguards used for international transfers relevant to your personal data.

6. How long we keep personal data

We keep personal data only for as long as necessary for the purpose for which it was collected and to meet legal, contractual or compliance obligations. Retention periods therefore depend on the type of data and the relationship concerned.

• Website and technical logs are retained only for a limited period unless needed for security or legal purposes.

• Marketing data is retained until you unsubscribe or otherwise object, subject to keeping a limited suppression record so we can respect your choice.

• Prospect and CRM information is periodically reviewed and deleted or anonymized when it is no longer reasonably required for business relationship or compliance purposes.

• Customer-related records may be retained for the duration of the relationship and applicable statutory retention periods.

• Job-application data is normally retained for up to six months after the recruitment decision unless a longer period applies.

7. Your rights

Under the GDPR, depending on the circumstances, you may have the right to:

• access your personal data (Art. 15 GDPR);

• correct inaccurate data (Art. 16 GDPR);

• request deletion (Art. 17 GDPR);

• restrict processing (Art. 18 GDPR);

• receive certain data in a portable format (Art. 20 GDPR);

• object to processing based on legitimate interests, and at any time to direct marketing (Art. 21 GDPR); and

• withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR).

To exercise your rights, contact hello@mara.solutions. You also have the right to lodge a complaint with a competent data-protection supervisory authority. MARA is based in Baden-Württemberg; the relevant authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW).

8. Data security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. These measures include access controls, encryption in transit where appropriate, authentication and security practices designed for the systems we use.

9. Changes to this Privacy Policy

We may update this Privacy Policy when our processing activities, services or legal requirements change. The current version and its last-updated date will be published on this page.

Questions

For questions about this Privacy Policy or the way MARA handles personal data, contact:

MARA Solutions GmbH
Email: hello@mara.solutions
Tullastraße 15, 68161 Mannheim, Germany

‍