IMPACT.

Legal

Privacy Notice

Last updated: 26 May 2026

1. Who we are

IMPACT is operated by Maximus Wielopolski & Daniel Ruso, based in Austria. We are the data controllers for the personal data described here. Contact us at hello@impact-mtb.com.

2. What we collect and why

  • Contact details (name, email) — to send your free guide, deliver coaching, and communicate with you. Legal basis: contract and legitimate interest.
  • Account credentials (email + magic link session) — to give you access to your account. Legal basis: contract.
  • Order & subscription data (product purchased, status, dates) — to fulfil your order and manage your subscription. Legal basis: contract.
  • Onboarding & training info you share with your coach — to personalise your program. Legal basis: contract.
  • Support messages — to help you when you reach out. Legal basis: legitimate interest.
  • Basic technical data (IP address, device info) via our hosting infrastructure — for security, fraud prevention, and reliability. Legal basis: legitimate interest.

Payment card details are collected and processed by Stripe, not by us — we never see or store card numbers.

3. Who we share it with

  • Stripe — our payment processor, handling card payments, subscription billing, VAT calculation and invoicing.
  • Resend — to send transactional emails (welcome, receipts, program delivery).
  • Supabase and Cloudflare — our hosting and database infrastructure providers.
  • Cal.com — for scheduling your onboarding call.
  • Professional advisers (accountants, lawyers) and authorities where legally required.

4. International transfers

Some of our providers process data outside the EU/EEA. Where they do, transfers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. How long we keep it

We keep account and coaching data for as long as you're a customer, plus a reasonable period afterwards to comply with legal obligations (typically up to 7 years for invoicing records). Lead-magnet signups are kept until you unsubscribe or ask for deletion.

6. Your rights (GDPR)

You have the right to:

  • access your data and get a copy of it;
  • correct inaccurate data;
  • ask us to delete it ("right to be forgotten");
  • restrict or object to processing;
  • data portability;
  • withdraw consent where processing is based on it;
  • complain to your local supervisory authority (in Austria, the Datenschutzbehörde).

To exercise any of these, email hello@impact-mtb.com. We'll respond within one month.

7. Security

We use appropriate technical and organisational measures — encryption in transit, hardened cloud infrastructure, access controls — to protect your data.

8. Cookies

We use only essential cookies required to run the site and keep you signed in. We do not use marketing or advertising cookies.