Privacy information

Privacy Policy

Last updated: 30 August 2026

1. Controller and contact

Mind of Growth GmbH
Liebigstraße 25
90766 Fürth
Germany

Managing Director: Maximilian Braun
Email: max@growthconcepts.de

2. Scope of this policy

This policy explains how Mind of Growth GmbH processes personal data when you visit growthconcepts.de and when the internal “Growth Concepts Ads API” is used to manage advertising assets for Growth Concepts and its business clients through the Meta Marketing API.

The Ads API is an internal business tool. It does not offer public user registration or a public Facebook Login. Access is limited to authorised personnel and technical system users. Where we operate advertising campaigns on a client’s documented instructions, that client generally remains responsible for its own campaign, landing-page and lead privacy information.

3. Data processed through the Ads API

Depending on the authorised functions used for a client account, we may process:

• business, ad-account, Page and Instagram account identifiers;
• campaign, ad-set and ad names, settings, budgets, statuses and creative assets;
• delivery, performance, attribution and conversion reporting data;
• business contact and lead information where lead access has been expressly authorised;
• technical access, security and error information needed to operate the integration.

We do not use the Ads API data to build unrelated consumer profiles or sell personal data.

4. Purposes and legal bases

We process this information to:

• create, manage, monitor and report on authorised advertising campaigns;
• retrieve and handle authorised leads and conversion information;
• protect accounts, investigate errors and prevent unauthorised access;
• meet contractual and legal record-keeping obligations.

The legal bases are Article 6(1)(b) GDPR where processing is necessary to perform a contract, Article 6(1)(f) GDPR for our legitimate interests in secure and efficient advertising operations, and Article 6(1)(c) GDPR where processing is required by law. Where consent is legally required for measurement or advertising technologies, it must be obtained at the relevant website or collection point before those technologies are used.

5. Meta and other recipients

The integration communicates with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, through Meta’s Marketing API. Meta processes information under its own applicable terms and privacy information. Depending on the specific advertising function, Meta and the relevant advertiser may act as independent controllers, joint controllers or in a controller-processor relationship.

We may also use carefully selected hosting, security and technical infrastructure providers as processors. They receive only the information necessary to provide their services and are contractually bound where required.

Further information: Meta Privacy Policy, Meta Business Tools Terms.

6. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers are based on an adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards.

7. Retention

We keep personal data only for as long as necessary for the authorised campaign work, account security and contractual documentation. Client campaign and lead data is retained in accordance with the client’s instructions and applicable deletion obligations. Statutory retention duties may require some business records to be kept longer. Data is deleted or anonymised when the relevant purpose and applicable retention period end.

8. Data deletion and withdrawal of access

You may request deletion of personal data associated with the Growth Concepts Ads API by emailing max@growthconcepts.de. Please identify the relevant business, ad account or campaign so we can locate the data. We may ask for reasonable verification before acting on a request. Access to client assets can also be withdrawn by the relevant business through Meta Business Settings.

9. Your rights

Subject to the legal requirements, you may request access, rectification, erasure, restriction or portability of your personal data, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

10. Website operation

When this website is requested, technically necessary connection information such as IP address, timestamp, requested page, browser information and security events may be processed to deliver and protect the site. Hosting and security providers may set strictly necessary cookies or process short-lived logs to prevent abuse and maintain availability. This processing is based on Article 6(1)(f) GDPR.

11. Advertising measurement

Advertising measurement currently starts automatically when you visit our funnel pages, without an advertising cookie banner. We use Meta Pixel and Meta Conversions API to measure page visits, call-preparation submissions and bookings completed in the calendar embedded on our site. We use these events to understand advertising performance, attribute enquiries and build advertising audiences. Meta Platforms Ireland Limited receives the event, time, relevant page, IP address, browser information and Meta cookie identifiers. If you submit an email address with call preparation, we may send a SHA-256 hashed version to help match the event to a Meta account. Hashing does not make this information anonymous. Free-text answers, revenue figures and other business details from call preparation are not included in our advertising events.

Automatic measurement is enabled by the website operator. We do not record the absence of a banner or a visit as an affirmative consent choice. For questions or requests about this processing, contact max@growthconcepts.de.

Meta may combine event information with account and other activity data for its own advertising purposes. For the collection and transmission of event data, the applicable Meta Controller Addendum sets out the parties’ responsibilities. See the Meta Privacy Policy linked above for Meta’s processing, retention and rights information. International-transfer safeguards are described in section 6.

Meta attribution cookies (_fbp and _fbc) may be stored for up to 90 days. Campaign parameters used for the booking journey are retained in your browser’s session storage until the session ends. Technical event receipts contain event identifiers and delivery status, not raw emails, IP addresses or form answers, and are removed after 30 days during subsequent event processing.

12. Call preparation and appointment booking

We process the call-preparation information you submit to evaluate and prepare for your enquiry under Article 6(1)(b) GDPR. A draft is stored on your device while you complete the form and is removed after a successful submission. Submitted answers are stored securely for handling your enquiry and are separate from advertising event data. You can contact us to request deletion, subject to applicable retention requirements.

Appointment scheduling is provided by Calendly LLC. The embedded calendar loads only when you select “Load booking calendar”; alternatively, you can follow the direct Calendly link. Loading the calendar transmits connection data to Calendly, and details you enter there are processed to arrange the appointment. Calendly provides its own cookie choices and privacy information. Our measurement of an embedded booking uses Calendly’s booking-confirmation notification, rather than a button click or calendar view.

13. Changes to this policy

We may update this policy when the website, the Ads API or legal requirements change. The current version is always available on this page.