1. General Information

The protection of your personal data and your corporate sovereignty is of the highest priority for LEGND IP Architects. This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the associated websites, functions, and content.

2. Controller

LEGND IP Architects Tobias Dambach Mühlwehrstr. 29 74214 Schöntal-Sindeldorf Germany Email: vault@legnd-architects.com

3. Types of Data Processed

When you contact us via email or initiate a validation process, we process the following data:

• Identity Data: Full Name, Organization/Family Office.
• Contact Data: Corporate Email Address.
• Verification Data: LinkedIn Profile URL / Digital Footprint.
• Inquiry Data: Strategic Intent, Transaction Volume, Project Details.
• Technical Data: IP address, device information (collected via tracking, if consented).

4. Purpose of Processing (Pre-Selection Audit)

Data processing serves the following purposes:

• Validation: To verify the identity and strategic intent of the inquirer (Pre-Selection Audit).
• Communication: To respond to inquiries and provide access to the "Vault" or refinement services.
• Security: To protect our proprietary IP and ensure that sensitive information is only shared with verified partners.

5. Legal Basis (GDPR)

Art. 6 (1) (b) GDPR: Processing is necessary for the performance of a contract or to take steps prior to entering into a contract (e.g., inquiry for services).

Art. 6 (1) (f) GDPR: Processing is based on our legitimate interest in protecting our intellectual property and ensuring the exclusivity of our assets through manual verification.

6. Retention and Deletion

Data is stored only as long as necessary to fulfill the purpose of processing. Inquiries that do not pass our internal validation process are deleted within 30 days after the final decision, unless statutory retention obligations apply.

7. Disclosure to Third Parties

Your data will not be sold or shared with third parties for marketing purposes. Disclosure only occurs if:

You have given explicit consent.

It is necessary for the execution of a transaction (e.g., to legal counsel).

There is a legal obligation to do so.

8. Your Rights

Under the GDPR, you have the following rights:

Access: Request information about your stored data.

Rectification: Correct inaccurate data.

Erasure: Request the deletion of your data ("Right to be forgotten").

Restriction: Limit the processing of your data.

Data Portability: Receive your data in a structured format.

Objection: Object to processing based on legitimate interests.

9. Data Security

We implement state-of-the-art technical and organizational measures (e.g., SSL encryption) to ensure a level of security appropriate to the high-stakes nature of the information processed.