Privacy Policy

This is a courtesy translation. In case of doubt, the German version applies.

This privacy policy informs you about which personal data is processed when you visit jonasschiffmann.com (including subpages such as /ai-freebie), for what purposes this happens and what rights you have. Personal data is any data that can be used to identify you personally.

1. Controller

The controller responsible for data processing on this website is:

Magnificus International Enterprises LLC
500 4th St NW Suite 102/1782
Albuquerque, NM 87102, USA
Represented by: Jonas Schiffmann
Email: support@magic-magnificus.com
Phone: 0049 156 78351040

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

2. Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, Vercel processes technically necessary data in so-called server log files, in particular your IP address, the date and time of access, the page accessed, browser type and version, operating system and referrer URL. This data is required to deliver the website and to operate it securely and reliably, and it is not combined with other data sources.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in providing the website securely and with good performance). Vercel may also process data on servers in the USA; the transfer is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Delivery takes place via a worldwide content delivery network with locations in the EU as well.

3. Cookies and consent (cookie banner)

On your first visit, the website shows a cookie banner. Analytics and marketing services (PostHog, Google Analytics, Meta Pixel) are loaded only after your consent. Before that, no connection to these services is established. Your decision is stored in the technically necessary cookie cookie_consent (duration: 1 year).

The legal basis for cookies requiring consent and for access to your device is Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG; technically necessary storage takes place under § 25 (2) TDDDG. You can withdraw your consent at any time with effect for the future by deleting the cookie_consent cookie in your browser. On your next visit the banner will appear again and you can decide anew. Alternatively, an informal message to support@magic-magnificus.com is sufficient.

4. Web analytics with PostHog (EU Cloud)

After your consent, we use PostHog, an analytics service of PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use exclusively the PostHog EU Cloud (server location EU, eu.i.posthog.com). Your data is processed in the European Union.

PostHog collects usage data such as pages viewed, clicks and interactions (autocapture), heatmaps and session replays (anonymized recordings of your path through the site, in which form entries are masked). We use this data to understand how the website is used and to improve it. Person profiles are only created for identified users.

Legal basis: Art. 6 (1) lit. a GDPR (consent). Without consent, no data is collected; you can withdraw your consent at any time as described in section 3.

5. Google Analytics 4 (if enabled)

After your consent, this website may use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Consent Mode V2: without consent, all analytics and advertising storage access remains disabled. IP addresses are processed in shortened form (IP anonymization).

Google may transfer data to the USA; the basis for this is the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) lit. a GDPR (consent), which you can withdraw at any time as described in section 3.

6. Meta Pixel (Facebook/Instagram advertising)

After your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on this website, in particular on the page /ai-freebie. The pixel measures the effectiveness of our ads (e.g. page views and sign-ups) and helps us show more relevant advertising on Facebook and Instagram.

In doing so, data (e.g. IP address, browser information, pages visited, events such as “Lead”) may be transferred to Meta and linked there to your Meta account, if you have one. A transfer to the USA is possible; the basis for this is the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. For the collection and transfer of data, we are jointly responsible with Meta (Art. 26 GDPR); Meta alone is responsible for the further processing.

The Meta Pixel loads only after your consent via the cookie banner. Legal basis: Art. 6 (1) lit. a GDPR, which you can withdraw at any time as described in section 3.

7. Newsletter, workshop sign-ups and waiting lists (GetResponse)

If you sign up on this website for a workshop, a recording, the training waiting list or a free resource (e.g. Magic Breathwork), we process the data you provide (email address, optionally name and phone number) in order to send you the requested content and related emails.

For sending, we use GetResponse, a service of GetResponse S.A., ul. Arkonska 6/A3, 80-387 Gdansk, Poland (EU). Your data is stored on GetResponse’s servers. GetResponse also evaluates whether and which emails were opened and which links were clicked, so that we can improve our content.

Legal basis: Art. 6 (1) lit. a GDPR (consent given by signing up). Storage period: We store your data until you unsubscribe or the purpose no longer applies; after that, it is deleted from the mailing list. You can unsubscribe at any time via the unsubscribe link in every email or by sending a message to support@magic-magnificus.com.

8. Customer management (Pipedrive CRM)

To manage sign-ups and contacts, we use the CRM system Pipedrive (Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, EU). If you sign up via a form on this website, your details (email, name, phone number, sign-up status) may be stored there in order to handle your request or participation. Legal basis: Art. 6 (1) lit. b GDPR (contract/pre-contractual steps) or Art. 6 (1) lit. f GDPR (efficient contact management).

9. Embedded videos (Vimeo)

On individual pages (e.g. the workshop recording), we embed videos from the provider Vimeo (Vimeo.com Inc., 330 West 34th Street, New York, NY 10001, USA). When you play a video, your browser connects to Vimeo’s servers; in doing so, Vimeo learns your IP address. A transfer to the USA is possible (EU Standard Contractual Clauses). Legal basis: Art. 6 (1) lit. f GDPR (appealing presentation of our content) or your consent when accessing the recording.

10. Use of AI tools

No AI chatbot that holds a conversation with you is in use on this website. In one single place, an AI works for you, and only if you start it yourself: in the “Deine Geschichte” (Your Story) form (see 10.1). Should a system you talk to ever be added, the notice about it will be visible directly in the respective window (Art. 50 (1) of the EU AI Act).

In ongoing contact, we use AI tools to sort requests, summarize content, transcribe voice messages and prepare draft replies. In doing so, personal data that you send us yourself (e.g. name, email address, content of your message) may be processed. Specifically, we use:

  • Anthropic Claude (Anthropic PBC, San Francisco, California, USA): for sorting, summarizing and preparing replies to incoming messages.
  • OpenAI (OpenAI Ireland Ltd., Dublin, Ireland or OpenAI, L.L.C., San Francisco, USA): for transcribing audio and for image and text processing.
  • Groq (Groq, Inc., Mountain View, California, USA): for transcribing voice messages.

The legal basis is Art. 6 (1) lit. b GDPR (carrying out pre-contractual steps and performing the contract) or Art. 6 (1) lit. f GDPR (legitimate interest in handling requests efficiently). A data processing agreement is in place with all providers named. The providers also process data in the USA; the transfer is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. According to the providers’ own statements, content transmitted via their programming interfaces is not used to train their models.

No automated individual decision-making: AI tools only prepare things for us. Every message that reaches you and every decision that affects you is reviewed by a human beforehand. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

AI-generated content: Images on our pages that were created entirely or substantially with AI and that look like a real photograph are labeled visibly on the image (Art. 50 (4) of the EU AI Act). Common image editing such as color correction or retouching does not count as AI generation.

10.1 “Deine Geschichte” (Your Story) form

At /deine-geschichte you can enter your testimonial. After you have submitted it, we offer you the option there to turn your answers into a text that you can use as a review on Google.

This only happens if you actively click the button. If you do not click, your answers do not leave our server. Only the answers from the form are transmitted, not your name and not your email address. The recipient is Anthropic PBC (San Francisco, California, USA). The returned text is not stored permanently but only delivered to your browser. You decide yourself whether to publish it, and you can change it as you like beforehand.

The legal basis for this step is your consent under Art. 6 (1) lit. a GDPR, which you give by clicking the button. You can withdraw it at any time for the future by not using the function. The same bases as above apply to the transfer to the USA; according to the provider, the transmitted content is not used to train its models.

We store the answers you submit in the form for evaluation and, if you have expressly approved this in the form, for publication as a reference. They are stored on our web space and in our Google Workspace account (Google Ireland Limited, Dublin). We delete them as soon as the evaluation is complete or you ask us to. A message to the address above is sufficient.

11. Cookie overview

  • cookie_consent: stores your cookie decision (accept/reject). Technically necessary, duration 1 year.
  • PostHog (e.g. ph_*_posthog): web analytics and session replay. Only after consent.
  • Google Analytics (e.g. _ga, _ga_*): web analytics, if enabled. Only after consent.
  • Meta Pixel (e.g. _fbp): marketing/conversion measurement. Only after consent.

12. Your rights

Under the GDPR, you have the following rights:

  • Access (Art. 15 GDPR) to the data we store about you, its origin, recipients and the purpose of processing,
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR): receiving your data in a common, machine-readable format,
  • Objection to processing based on Art. 6 (1) lit. e or f GDPR (Art. 21 GDPR),
  • Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected,
  • Complaint to a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence or of the place of the alleged violation.

For all requests, an informal email to support@magic-magnificus.com is sufficient.

13. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content (e.g. your sign-ups), this site uses SSL or TLS encryption throughout. You can recognize an encrypted connection by the “https://” in your browser’s address bar.

14. Objection to advertising emails

We hereby object to the use of contact details published under the legal notice obligation for sending advertising and information materials that were not expressly requested. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising, for example via spam emails.

Last updated: 18.08.2026