Privacy Policy

The controller for data processing on this website within the meaning of Art. 4(7) GDPR is:

TGN Media LLC
30 N Gould St Ste R
Sheridan, WY 82801
USA
Email: hello@marc.bio

We collect only the data required to operate this site and to carry out the actions you trigger yourself. There is no advertising tracking, no profiling, no sale of data, and no automated decision-making including profiling within the meaning of Art. 22 GDPR.

Providing personal data is neither required by law nor by contract. Without the fields marked as mandatory in a form, however, we cannot process your request.

This website and its database are hosted by Railway Corp., 2093 Philadelphia Pike #1097, Claymont, DE 19703, USA. Each page request causes the host to process technically necessary connection data in server log files: IP address, date and time, requested URL, HTTP status code, data volume transferred, referrer and user agent.

These logs are required for delivery, stability and defence against attacks, and are retained there only briefly. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in secure and uninterrupted operation. We do not evaluate these logs on a personal basis and do not merge them with other data.

This website sets no marketing, advertising or analytics cookies. The only cookie is the admin login session. It is set only when the operator signs in and is strictly necessary within the meaning of § 25 (2) no. 2 TDDDG.

That is why there is no cookie banner and no consent prompt here — there is simply nothing we would need your consent for.

Page views and link clicks are counted so that we know which content is being read. No cookie is set and no IP address is stored. Instead, a SHA-256 hash is derived from IP address, user agent, the current date and a secret server key, and used purely as a counting token.

This hash changes daily and cannot be reversed. Recognition across several days, or any inference about an individual, is therefore impossible. Besides the hash we store only the page requested, the link clicked, the country from the network header without finer location detail, the coarse device type (mobile or desktop), the language, the host of the referring page, and the timestamp.

Outbound links are routed through a /go/… redirect in order to count the click; you are then forwarded straight to the destination. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in privacy-preserving statistics about the use of our own site.

Signup uses the double opt-in procedure: after submitting you receive an email containing a confirmation link. Only when you click it are you subscribed. Without confirmation the entry never becomes active.

We store email address, first name, language, the page the signup came from, the time of signup and confirmation, and a hash of the IP address. The hash serves solely as proof of consent; the IP address itself is not stored.

The confirmation email is delivered via Resend (Plus Five Five, Inc., San Francisco, USA); the newsletter itself via Kit (Kit.com, Inc., Boise, USA). The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — via the unsubscribe link at the end of every email or by informal email to us. After withdrawal we delete your data unless a statutory retention obligation applies.

When you submit the pitch form or a job application, we store your answers and your contact details — name, email address, optionally phone number and a link you provide — in our database in order to process your request. The pitch form derives a score from your answers that merely helps us prioritise review. This does not constitute an automated decision within the meaning of Art. 22 GDPR: every submission is read by a human.

In addition, a notification email is sent to us (via Resend) and the record is forwarded to our CRM if a webhook address is configured. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract), and for job applications additionally § 26 (1) BDSG.

We pass data on only to the following service providers, acting for us as processors under Art. 28 GDPR:

• Railway Corp. (USA) — hosting of the website and database
• Plus Five Five, Inc. (Resend) (USA) — delivery of transactional email
• Kit.com, Inc. (USA) — newsletter management and delivery
• CRM / automation service — processing of incoming applications

No further disclosure takes place, in particular no sale of data. Disclosure to authorities occurs only where we are legally obliged to do so.

The controller and the service providers listed above are established in the United States. Your data is therefore transferred to and processed in a third country.

The transfer is based on the European Commission standard contractual clauses under Art. 46(2)(c) GDPR or, where the provider is certified, on the adequacy decision for the EU-US Data Privacy Framework under Art. 45 GDPR. Please note that US authorities may under certain conditions access data, and that the legal remedies against such access may not be equivalent to those available within the European Union.

• Server log files: retained briefly by the host, then deleted automatically.
• Analytics data: retained indefinitely, as it no longer relates to an identifiable person.
• Newsletter: until you withdraw your consent; unconfirmed signups are never actively used.
• Pitch submissions: until the request has been finally dealt with, at most until statutory retention periods expire.
• Job applications: no later than six months after the selection process ends, unless you are hired or have agreed to longer storage.

You have the following rights against us regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal email to the address given in the imprint is sufficient. We respond without undue delay, at the latest within one month.