Privacy Policy

1. Data Controller

2. What Data We Collect

When you sign up for our waitlist, we collect only:

Your email address
The date and time of your signup

When you visit this website, our hosting provider (Amazon CloudFront) may process technical connection data such as your IP address, browser type, and the date and time of access. This data is processed to deliver the website and is not stored by us beyond the duration of the request.

3. Purpose and Legal Basis

Waitlist signup: We use your email address solely to notify you when Madison launches. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Website delivery: Technical connection data is processed on the basis of our legitimate interest in providing and securing this website, pursuant to Art. 6(1)(f) GDPR.

4. Recipients of Your Data

Your data is processed by Amazon Web Services, Inc. (AWS) as our hosting and infrastructure provider. No data is sold, shared with, or disclosed to any other third parties.

5. Transfer to Third Countries

Your data is stored with AWS in the US-East-1 region (Virginia, USA). The transfer of personal data to the United States is based on the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). AWS is a certified participant in the Data Privacy Framework.

6. Retention Period

Your email address is stored until you request its deletion or the purpose of the waitlist no longer applies (e.g., after product launch and notification). Upon request, your data will be deleted within 30 days.

7. Your Rights

Under the GDPR, you have the following rights:

Access — obtain confirmation and a copy of your stored data (Art. 15)
Rectification — correct inaccurate data (Art. 16)
Erasure — request deletion of your data (Art. 17)
Restriction — request restricted processing (Art. 18)
Data portability — receive your data in a structured, machine-readable format (Art. 20)
Objection — object to processing based on legitimate interest (Art. 21)
Withdraw consent — withdraw your consent at any time without affecting the lawfulness of prior processing (Art. 7(3))

To exercise any of these rights, contact us at:

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
www.datenschutz-berlin.de

9. Provision of Data

Providing your email address is voluntary. There is no legal or contractual obligation to do so. However, without providing your email address, you cannot sign up for the waitlist.

10. External Resources

This website does not load any fonts, scripts, or other resources from third-party servers. All assets are served locally from our own infrastructure.

11. Cookies

This website does not use cookies.

Last updated: April 2026