Privacy policy
Last updated: February 2026
1. Controller Information
The data controller responsible for processing personal data on this website is:
VIQTORIOUS AG
Brunnenbritschen 8
9493 Mauren
Principality of Liechtenstein
Email: team@magnat.fund
VIQTORIOUS AG operates under the brand “MAGNAT”.
2. Scope of this Policy
This Privacy Policy explains how we collect, use, process and protect personal data when you visit our website https://www.magnat.fund.
This policy applies globally and is designed to comply with:
- EU General Data Protection Regulation (GDPR)
- EEA data protection law
- Applicable international privacy standards
3. What Data We Collect
A. Automatically Collected Data (Website Access)
When you visit our website, the hosting provider automatically collects:
- IP address
- Date and time of request
- Browser type and version
- Operating system
- Referrer URL
- Pages accessed
This data is processed for:
- Security and stability
- Technical administration
- Prevention of misuse
Legal basis (GDPR):
Art. 6(1)(f) – Legitimate interest in secure website operation.
B. Analytics Data (Google Analytics 4)
We use Google Analytics 4 via Google Tag Manager.
Analytics is:
- Activated only after user consent (via Cookiebot)
- Subject to IP anonymization
- Operated with Google Consent Mode
Data processed may include:
- Device information
- Usage behavior
- Approximate geographic location
- Interaction data
Legal basis (GDPR):
Art. 6(1)(a) – Consent
You may withdraw consent at any time via the cookie settings.
C. Contact via Email
We do not operate contact forms.
If you contact us via email:
- Your email address
- Your message content
- Metadata (timestamp, email headers)
will be processed to respond to your inquiry.
Legal basis (GDPR):
Art. 6(1)(b) – Pre-contractual measures
or
Art. 6(1)(f) – Legitimate interest in business communication
4. CRM Processing (Attio)
We use Attio as our internal CRM system.
Attio is not connected to our website directly. However:
- Emails received in our inboxes may be synchronized with Attio
- Contact details contained in email communication may therefore be stored in our CRM
This processing serves:
- Relationship management
- Business communication
- Investment-related communication
Legal basis (GDPR):
Art. 6(1)(f) – Legitimate interest in managing professional relationships
5. Service Providers (Processors)
We use the following service providers:
Website Hosting
Webflow, Inc.
United States
Security & Performance
Cloudflare, Inc.
United States
Analytics
Google LLC
United States
Consent Management
Usercentrics A/S (Cookiebot)
Denmark (European Union)
Please see our Cookie Policy for more details on those providers.
Customer Relationship Management (CRM)
Attio Ltd.
United Kingdom
Personal data processed: Contact details and communication data arising from email correspondence.
Place of processing: United Kingdom (with appropriate safeguards in place).
Intra-Group Service Providers
We cooperate under service agreements with:
K&K Holding GmbH & Co. KG
Zeillerstr. 26
82031 Grünwald, Germany
Caelum Operations GmbH
Karlsplatz 7
80335 Munich, Germany
These entities provide operational and administrative services under contractual arrangements including appropriate data protection safeguards.
6. International Data Transfers
Some service providers are located outside the European Economic Area (EEA), particularly in the United States.
Where personal data is transferred outside the EEA, we ensure appropriate safeguards, including:
- Standard Contractual Clauses (SCCs)
- Additional technical and organizational measures where required
7. Cookies & Tracking Technologies
We use cookies and similar technologies as described in our separate Cookie Policy.
Analytics cookies are only set after explicit consent.
We do not use:
- Advertising pixels
- Retargeting tools
- Behavioral profiling tools
- Social media tracking pixels
8. No Sale of Personal Information
We do not sell, rent, or trade personal data.
This includes compliance with applicable US state privacy laws such as the California Consumer Privacy Act (CCPA).
We do not engage in cross-context behavioral advertising.
9. Data Retention
We retain personal data only as long as necessary for:
- Fulfilling the purpose for which it was collected
- Legal compliance
- Business recordkeeping
Email communications may be retained in accordance with business and regulatory requirements.
10. Your Rights (GDPR & International Standards)
Depending on applicable law, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
You may contact us at: team@magnat.fund
You also have the right to lodge a complaint with a supervisory authority.
For Liechtenstein:
Data Protection Authority
www.datenschutzstelle.li
11. Children
This website is not directed at individuals under the age of 16.
We do not knowingly collect personal data from minors.
12. Security Measures
We implement appropriate technical and organizational measures to protect personal data against:
- Unauthorized access
- Loss
- Misuse
- Alteration
13. Changes to this Policy
We may update this Privacy Policy to reflect legal or operational changes.
The “Last updated” date indicates the most recent revision.