Back to website
Legal Document

Privacy Policy

Last updated: January 2026 GDPR / DSGVO compliant Hamburg, Germany

Controller & Contact Details

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Mariposa
Große Rainstraße 87, 22765 Hamburg, Germany
Email: team@mariposa-edu.com
Phone: +49 176 60029554

For all questions regarding the processing of your personal data and the exercise of your rights under data protection law, you may contact us at any time using the details above.

General Information

Scope of this Privacy Policy

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data within our website mariposa-edu.com and the associated online services. It applies to all visitors to the website as well as individuals who register via our waitlist form.

Legal Basis for Processing

We process personal data only when there is a legal basis to do so. In accordance with Art. 6 GDPR, processing may be based on:

  • Art. 6(1)(a) GDPR — Consent of the data subject
  • Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
  • Art. 6(1)(c) GDPR — Compliance with a legal obligation
  • Art. 6(1)(f) GDPR — Legitimate interests pursued by the controller

Data Security

We implement technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Personal Data We Collect

3.1 Visiting the Website (Server Logs)

When you access our website, the web server automatically records certain technical information in so-called server log files. This includes:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file accessed
  • Browser type and version, operating system
  • Referrer URL (the page from which you were directed to us)

This data is processed on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for the purpose of ensuring the stable, secure and functional operation of the website. Log files are automatically deleted after 7 days.

3.2 Waitlist Registration Form

When you sign up for our waitlist, we collect the following personal data:

Data Field Purpose Legal Basis Retention
Full name Personalised communication Art. 6(1)(a) GDPR (consent) Until withdrawal of consent
Email address Waitlist notifications & launch information Art. 6(1)(a) GDPR (consent) Until withdrawal of consent
Role (student / company / school) Personalised product matching Art. 6(1)(a) GDPR (consent) Until withdrawal of consent

By submitting the form and checking the consent checkbox, you voluntarily agree to the processing of your data for the purposes described. You may withdraw your consent at any time by contacting us at team@mariposa-edu.com.

3.3 Email Communication

If you contact us by email, the data you provide (name, email address and message content) will be stored by us for the purpose of processing your request and in the event of follow-up questions. We do not share this data with third parties without your consent. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Purpose of Data Processing

We process personal data for the following purposes:

  • Providing and improving our website and online services
  • Managing waitlist registrations and communicating product updates
  • Responding to inquiries and support requests
  • Ensuring the technical security and stability of the website
  • Complying with legal obligations
  • Developing and improving our AI-based career coaching platform

We will not use your data for automated individual decision-making or profiling within the meaning of Art. 22 GDPR without your explicit consent.

Cookies & Local Storage

What are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help websites remember your preferences and settings across sessions.

Cookies We Use

Our website currently uses only technically necessary cookies and local storage entries required for core functionality, such as storing your language preference. We do not use tracking cookies, advertising cookies or third-party analytics without your consent.

NameTypePurposeDuration
langLocal StorageStores selected interface language (DE / EN / ES)Persistent (until cleared)
Session cookiesSession cookieTechnical operation of the websiteEnd of browser session

Managing Cookies

You can control and delete cookies at any time through your browser settings. Disabling technically necessary cookies may impair the functionality of certain parts of our website. Please refer to your browser's help documentation for instructions on managing cookies.

Third-Party Services & Data Transfers

Google Fonts

This website uses Google Fonts (provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for typographic styling. When the page loads, your browser may connect to Google's servers to retrieve the font files. Google may collect your IP address in this process. We use Google Fonts to ensure a consistent visual experience. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Google Maps

Our website embeds Google Maps via an iframe for displaying our office location. When this feature is active, your IP address and location data may be transmitted to Google LLC. This service is governed by Google's own Privacy Policy. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

No Sale of Data

We do not sell, rent or otherwise commercially transfer your personal data to third parties. Data is shared with service providers only to the extent necessary to provide our services and only under data processing agreements that ensure GDPR-compliant handling.

International Data Transfers

If data is transferred to countries outside the European Economic Area (EEA), we ensure that an adequate level of data protection exists through appropriate safeguards such as EU Standard Contractual Clauses (SCCs) or by relying on an adequacy decision of the European Commission.

Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to the processing of your personal data. To exercise any of these rights, please contact us at team@mariposa-edu.com.

RightLegal BasisDescription
Right of AccessArt. 15 GDPRYou have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
Right to RectificationArt. 16 GDPRYou have the right to request the correction of inaccurate or incomplete personal data without undue delay.
Right to ErasureArt. 17 GDPRYou have the right to request the deletion of your personal data where the data is no longer necessary for the purposes for which it was collected.
Right to RestrictionArt. 18 GDPRYou have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Data PortabilityArt. 20 GDPRYou have the right to receive your data in a structured, commonly used and machine-readable format.
Right to ObjectArt. 21 GDPRYou have the right to object to the processing of your personal data based on our legitimate interests at any time.
Right to Withdraw ConsentArt. 7(3) GDPRWhere processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise your rights, contact us at: team@mariposa-edu.com or by post at Große Rainstraße 87, 22765 Hamburg. We will respond within 30 days.

Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The competent supervisory authority for Mariposa (based in Hamburg) is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de
Website: datenschutz.hamburg.de

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The current version with the date of the last update will always be available on this page.

We recommend that you review this Privacy Policy regularly. Significant changes will be communicated to registered users via email.

Version: 1.0  ·  Last updated: January 2026  ·  Mariposa, Hamburg