← Back to Home

Privacy Policy

MB International Contracting Service LLC ("we", "us", or "our") operates the websites mb-ics.com and berater.mb-ics.com. This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use either website.

1. Information We Collect

We collect information that you voluntarily provide to us when you use our contact form:

This information is used solely to respond to your inquiry about our SAP training services.

For the SAP MM consultant-trainer private beta application form hosted at berater.mb-ics.com, we collect the information that you voluntarily submit:

2. Automatic Data Collection

Our website uses the browser's localStorage feature and — subject to your consent — first/third-party cookies set by analytics and advertising services. We store the following essential items locally without analytics or marketing consent:

If you consent to analytics and marketing storage, click-attribution identifiers from advertising platforms (gclid, gbraid, wbraid) and campaign parameters (utm_source, utm_medium, utm_campaign) may be stored in localStorage for up to 90 days to associate later inquiries with the campaign that brought you here. No direct personal identifier is stored alongside these values.

localStorage is not a cookie — it is a browser-based storage mechanism that does not expire automatically and is not transmitted with HTTP requests.

3. Consent Mechanism (Google Consent Mode v2)

When you first visit our website, a consent banner is shown. Until you make a choice, our analytics service is loaded in a "consent-denied" mode (no personalized cookies, no identifiers transmitted). You can choose between:

You can change your consent at any time by clicking the "Cookie settings" link in the page footer or by clearing your browser's localStorage for this site (Settings → Site Data), which will cause the consent banner to reappear on your next visit.

4. Third-Party Services

Our website uses the following third-party services:

5. Legal Basis for Processing (GDPR)

For visitors from the European Union and European Economic Area, we process personal data on the following legal bases:

6. How We Use Your Information

We use the information collected through our contact form exclusively to:

We use private-beta application data only to receive and assess applications, send and confirm receipt, reply to applicants, select participants, and administer selected participants in the SAP MM consultant-trainer private beta. Submitting an application does not subscribe you to newsletters or unrelated marketing.

We do not sell, trade, or share your personal information with third parties for marketing purposes.

7. Data Retention

We retain contact form submissions only for as long as necessary to fulfill the purpose for which they were collected, typically for the duration of our business communication with you.

MB-ICS deletes its mailbox copy of rejected or non-selected private-beta applications no later than 90 days after cohort selection closes. For selected participants, MB-ICS retains its application copy during the beta and deletes it within 6 months after participation ends, except that specific records may be retained longer where legal obligations require.

Resend separately retains transactional message content, delivery metadata, and operational copies under its service terms and Data Processing Addendum. Its DPA ties general deletion to the customer-account lifecycle and also permits customer deletion instructions; therefore Resend's retention may extend beyond the MB-ICS mailbox periods above. You may ask us at mario@mb-ics.com to send an applicable deletion instruction to Resend.

8. Your Rights (GDPR)

If you are located in the EU/EEA, you have the following rights under the General Data Protection Regulation:

Cookie and localStorage consent choices can be changed through the "Cookie settings" link or by clearing localStorage, as described in Section 3. Clearing localStorage does not withdraw a private-beta application.

To exercise any of these rights, including requesting deletion or ending consideration of a private-beta application, contact us at mario@mb-ics.com. A withdrawal or deletion request may end application consideration or participation where the requested data is necessary for those purposes.

Participant reviews — publication consent versions 2026-10-09 (review) and 2026-10-31 (optional course context)

Review notice updated October 31, 2026. The controller is MB International Contracting Service LLC, identified above. Review submission and publication are voluntary, based on your separate consent (Art. 6(1)(a) GDPR). Your rating, chosen display name (or anonymity), original comment, course area, optional course month, language and publication date can become public only after email confirmation and manual approval. Your email, confirmation and withdrawal tokens, consent record and abuse-control keys are not public or used for marketing. Your training period and training areas are never published. Your optional certifications achieved and course books used are published together with your review when you select them in the form — your selection is your consent (version 2026-10-31) to that publication, and they appear as your own indication, not as a verified credential. If you select none, none of them is published. All optional course selections are used to classify and moderate your review, are kept under the same retention and withdrawal rules as your review, and are erased together with it. Email confirmation proves control of an address, not attendance. Please do not include sensitive information or other people's personal data.

Our review API and database are hosted by netcup GmbH in Nuremberg, Germany, separately from the GitHub Pages frontend described above. The service encrypts private email addresses and queued email payloads at rest; review text is accessible to the authorized moderator before publication. Participants need no account. ZITADEL provides the owner's moderator login and MFA, not participant registration; see its data processing agreement.

Cloudflare Turnstile protects the review form against automated abuse. It processes technical signals including IP address, browser information and the site origin. Cloudflare acts as processor for protecting this website and as controller for improving bot detection; see the Turnstile Privacy Addendum. Our basis for abuse prevention, technical delivery, moderation security and restricted audit/recovery records is Art. 6(1)(f) GDPR: reliable operation and protection against abuse. Provider infrastructure may process technical data internationally.

Resend (Plus Five Five, Inc.) sends confirmation and withdrawal links to your email address; it does not receive your review comment from this service. The sending domain is configured for Ireland, but this is not a promise of EU-only processing: Resend's DPA describes primary US processing and Standard Contractual Clauses. Provider message content, delivery metadata and operational copies follow Resend's own retention terms and may outlast our application copies; see its DPA and Section 7 above. Contact us for an applicable deletion instruction.

Confirmation links expire after 24 hours and require an explicit confirmation action. Unconfirmed submissions are deleted after 14 days and rejected submissions after 30 days. Pseudonymous application abuse counters expire within one day. Published reviews remain while their purpose and your consent continue. Restricted audit and recovery records retain identifiers, actions, timestamps and consent/withdrawal evidence, not erased email or review text; they are not published. Hosting and mail providers may retain separate technical records under their policies.

Private backups are encrypted before upload to Backblaze B2's EU region; the decryption identity is held separately by the owner, not on the server. Backups rotate on a maximum 30-day schedule; privacy changes are reapplied before a restoration can serve data. Backblaze's DPA and transfer clauses apply; an EU storage region does not exclude international service or support processing.

The separate private withdrawal link removes a review from public results and statistics and erases its associated private email, comment and display name in the active service. You can also contact mario@mb-ics.com for withdrawal, erasure, access or correction and the other rights in Section 8. Withdrawing consent does not affect earlier lawful processing. Clearing browser storage does not withdraw a review, and erasure in the active service does not instantly delete rotating backups or provider-held records.

The optional LinkedIn handoff copies only your own original comment on your explicit request, or offers manual copying. Opening LinkedIn is separate voluntary external navigation under LinkedIn's terms. We do not post, log in, track that handoff, transfer stars or store your email/comment in browser localStorage. The offer is available for every rating and is not a condition of verification or publication. See methodology and EN/DE/ES explanations.

9. International Users

Our website is accessible worldwide and our training services are offered internationally. If you are accessing our website from the European Union, European Economic Area, or any other region with specific data protection laws, please be aware that your information may be transferred to and processed in the United States, where our company is based.

10. Children's Privacy

Our website and services are intended for business professionals and are not directed at individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact

MB International Contracting Service LLC
Fort Lauderdale, FL, United States
Email: mario@mb-ics.com