Data protection at MTRIX
Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on how we handle the data collected through your use of our website. Your data is processed in accordance with applicable data protection laws.
Data controller as defined by data protection law
MTRIX GmbH
Stadtkoppel 23a
21337 Lüneburg
Phone: +49 4131 / 60 66 8 – 0
Email: info@mtrix.de
You can contact our Data Protection Officer at
PROLIANCE GmbH / www.datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschutzexperte.de
When contacting the Data Protection Officer, please specify the company to which your inquiry relates. Please refrain from including sensitive information, such as a copy of your ID, with your inquiry.
Definitions
Our Privacy Policy is designed to be simple and easy to understand for everyone. This Privacy Policy generally uses the official terms defined in the General Data Protection Regulation (GDPR). The official definitions are set forth in Article 4 of the GDPR.
Purpose of the processing of your personal data; legal bases for processing
4. For the purpose of carrying out marketing activities, the processing of your personal data is based either on the consent you have provided pursuant to Article 6(1)(a) of the GDPR or on the basis of Article 6
You can find information regarding the processing of your personal data for the individual processing purposes in the relevant additional notes within this Privacy Policy.
Data Disclosure and Recipients
- we have explicitly indicated this in the description of the respective data processing,
- you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
- the transfer is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- in the case that there is a legal obligation for the disclosure pursuant to Art. 6(1)(c) GDPR, and
- to the extent that this is necessary pursuant to Art. 6(1)(b) GDPR for the performance of contractual relationships with you.
In addition, we use external service providers to process our services, whom we have carefully selected, commissioned in writing, and with whom we have concluded data processing agreements in accordance with Article 28 of the GDPR where necessary. These providers are bound by our instructions and are regularly monitored by us. These include, among others, service providers for hosting, sending emails, and the maintenance and support of our IT systems, etc. The service providers will not disclose this data to third parties.
In accordance with Article 32 of the GDPR, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Access to and Storage of Information on End Devices
In cases where such a process serves other purposes (e.g., the needs-based design of our website), it is carried out on the basis of Section 25(1) of the TTDSG only with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time for the future
For more information about the processing of your personal data and the relevant legal basis in this context, please refer to the sections below regarding the specific processing activities on our website.
Webhosting
We have entered into a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to disclose it to third parties.
Server-Logfiles
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser and operating system used
- (Full) IP address of the requesting computer
- Amount of data transferred
For technical security reasons, in particular to defend against attempted attacks on our web server, we store this data temporarily. After no later than 28 days, the data is anonymized by truncating the IP address to the domain level, so that it is no longer possible to establish a connection to an individual user.
In addition, the data may be processed in anonymized form for statistical purposes. Under no circumstances will this data be stored together with other personal data belonging to the user, compared with other databases, or disclosed to third parties.
Scope of the Processing of Your Personal Data for Each Specific Purpose
Your personal data will be deleted when it is no longer needed for processing for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information in this Privacy Policy.
If you visit our website without providing us with any information, we process only the personal data that your browser transmits to our server. This includes the following data, which is technically necessary to display our website to you and to ensure its stability and security:
- The page you visited
- Date and time of the request
- Amount of data transferred
- Source or link from which you accessed the page
- Browser you used
- Operating system you used
- Your IP address
Your personal data will be deleted after 6 months, unless it is still required to assert rights or enforce claims arising from actions taken against the proper operation of our website. In this case, the data will be deleted immediately upon completion of the relevant proceedings.
- Date and time of contact
- Name
- Contact information
- Details of the inquiry/concern
- Information/documents submitted
To the extent that we provide a contact form and you contact us via this contact form, by submitting your message you are giving consent with the following content, about which you will be separately informed in the contact form: “I consent to the processing of my email address and the other personal data I have provided for the purpose of responding to my message. I may revoke this consent at any time and without giving reasons, with effect for the future. The lawfulness of the processing carried out up to the time of revocation remains unaffected in the event of revocation.”
Your personal data will be deleted once your inquiry or request has been resolved, unless we are permitted to continue processing the data for another processing purpose in accordance with legal requirements and the information provided in this Privacy Policy.
If you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that the PayPal Privacy Policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Your personal data will be deleted after the expiration of the retention periods under tax and commercial law of 6 and 10 years, respectively, unless we are permitted to continue processing the data for another processing purpose within the framework of legal requirements and in accordance with the information in this Privacy Policy.
4. Advertising via newsletter
Registration for our newsletter is carried out using the so-called double opt-in procedure. This means: After registering, you will first receive an email notifying you of your registration for the newsletter, along with a request to confirm your registration. Your confirmation of registration is required to document the necessary consent to the sending of the newsletter and to identify registrations made using third-party email addresses.
If you withdraw your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information in this Privacy Policy.
5. Cookies
The processing of personal data through the use of other cookies is based on consent pursuant to Article 6(1)(a) of the GDPR. Consent may be revoked at any time with future effect. To the extent that such cookies are used for analysis and optimization purposes, we will inform you separately about this within the scope of this Privacy Policy.
- you are notified when cookies are set,
- allow cookies only on a case-by-case basis,
- disable cookies for specific cases or in general,
- and enable the automatic deletion of cookies when you close your browser.
You can manage your cookie settings for each browser using the following links:
You can also manage cookies from many companies and features used for advertising on an individual basis. To do so, use the relevant user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Depending on your browser provider, you can find information and instructions on how to configure this feature at the following links:
In addition, you can prevent scripts from loading by default. “NoScript” allows JavaScript, Java, and other plug-ins to run only on trusted domains of your choice. For information and instructions on how to configure this feature, please contact your browser provider (e.g., for Mozilla Firefox, visit: https://addons.mozilla.org/de/firefox/addon/noscript/).
You can revoke or change your cookie settings at any time. To do so, please access the cookie settings again.
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”), on our website. The processing of your personal data is based on Article 6(1)(f) of the GDPR to safeguard our legitimate interest in analyzing the use of our website. Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and enable an analysis of your use of our website. The information generated by the cookie regarding your use of our website is generally transmitted to a Google server in the United States and stored there. In this context, we would like to point out that Google Analytics on our website has been extended with the code “anonymizeIp.” This ensures anonymized collection of IP addresses (so-called IP masking), meaning that your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand to prevent personal identification. Only in exceptional cases is the full IP address transmitted to a Google server in the U.S. and truncated there. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide other services related to website usage and internet usage.
You can also prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link. The current link is https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can prevent Google Analytics from collecting your data in the future by setting an opt-out cookie. You can set this cookie by clicking this link. Please note that the opt-out cookie only works in this browser and for this website. If you delete the cookies in your browser, you will need to click the link again. For more information on the terms of use between us and Google regarding data protection, please visit https://www.google.com/analytics/terms/de.html. For further information on Google’s data protection practices, please visit https://policies.google.com/?hl=de. Google is subject to the Privacy Shield Agreement and thereby ensures compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
7. Hubspot
We use the services of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, to analyze visitors to our website and to manage the data collected through this website with your consent. HubSpot uses cookies. The collected data is stored by HubSpot on its servers in the United States. HubSpot manages the stored data on our behalf and in accordance with our instructions, keeping it separate from other data sets. For more information, please visit https://legal.hubspot.com/privacy-policy.
8. Google Web Fonts
This site uses so-called web fonts to ensure consistent font display. These fonts are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Web Fonts allows us to use external fonts, known as Google Fonts. When you visit our website, the required Google Font is loaded by your web browser into your browser cache to display text and fonts correctly. This is necessary so that your browser can display our text with improved visual quality. If your browser does not support this feature, a standard font from your computer will be used for display. These web fonts are integrated via a server request, typically to a Google server in the United States. This transmits information to the server regarding which page of our website you have visited. Google also stores the IP address of the browser on the visitor’s device. We use Google Web Fonts for optimization purposes, in particular to improve your experience on our website and to make its design more user-friendly. This also constitutes our legitimate interest pursuant to Art. 6(1)(f) GDPR. Google has opted into the Privacy Shield agreement between the European Union and the United States and has obtained certification. As a result, Google is committed to complying with the standards and regulations of European data protection law.
For more information, please refer to the link below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
For more information on data protection, please refer to Google’s Privacy Policy: http://www.google.de/intl/de/policies/privacy
For more information about Google Web Fonts, please visit http://www.google.com/webfonts/ , https://developers.google.com/fonts/faq?hl=de-DE&csw=1 und https://www.google.com/fonts#AboutPlace:about.
9. Google Ads (formerly Google Adwords)
These ads are delivered by Google via so-called “ad servers.” To do this, we use ad server cookies, which allow us to measure certain performance metrics, such as ad impressions or user clicks. If you arrive at our website via a Google ad, Google Ads will store a cookie on your device.
These cookies typically expire after 30 days and are not intended to identify you personally. The following metrics are typically stored for this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (an indicator that the user no longer wishes to be targeted). These cookies enable Google to recognize your web browser. If a user visits specific pages on an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in connection with the aforementioned advertising measures. We are provided with statistical reports by Google only. Based on these reports, we can determine which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: By integrating Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address.
You can prevent participation in this tracking process in various ways:
b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin;
c) by disabling interest-based ads from providers participating in the “About Ads” self-regulatory campaign via the link http://www.aboutads.info/choices, although this setting will be deleted if you clear your cookies;
d) by permanently disabling this feature in your Firefox, Internet Explorer, or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin,
e) by adjusting your cookie settings accordingly.
For more information about Google’s privacy practices, please visit: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at unter http://www.networkadvertising.org.
Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
10. Google Tag Manager
This website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This service allows website tags to be managed via a user interface. Google Tag Manager merely implements tags. This means that no cookies are used, and only the user’s IP address is transmitted to Google to establish a connection. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags, provided they are implemented using Google Tag Manager. We use Google Tag Manager based on your consent pursuant to Art. 6(1)(a) GDPR. Since the IP address is transferred to Google in the United States, additional safeguards are required to ensure the level of data protection provided by the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Article 46(2)(c) of the GDPR. These clauses oblige the recipient of the data in the United States to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we strive to obtain additional arrangements and commitments from the recipient in the U.S.
11. Google Maps
For more information on the handling of user data, please refer to Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
12. YouTube
This website contains at least one plugin from YouTube, a company owned by Google Inc. and headquartered in San Bruno, California, USA. As soon as you visit a page on this website that contains a YouTube video and start playing it, a connection is established with YouTube’s servers. This informs YouTube’s servers which specific page on this website has been visited. If you are logged in, your browsing activity will be associated with your personal profile. You can prevent this by logging out of YouTube beforehand. For more information on the collection and use of your data by YouTube, please refer to their privacy policy at www.youtube.com. For further information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.
This website uses YouTube's embedding feature to display and play videos from YouTube. We use the enhanced privacy mode, which, according to the provider, does not store user information until the video is played. As soon as playback of the embedded video begins, YouTube sets cookies to collect information about user behavior. According to YouTube, this information is used, among other things, to generate video statistics, improve the user experience, and prevent abusive behavior. Regardless of whether embedded videos are played, a connection to the Google network “DoubleClick” is established every time this website is accessed, which may trigger further data processing operations beyond our control.
13. Google Marketing Platform (formerly DoubleClick)
For more information about the Google Marketing Platform, visit https://marketingplatform.google.com/about/. For general information about Google's privacy practices, visit: https://www.google.de/intl/de/policies/privacy.
14. Klick-Tipp
(1) In our online communications with you, we utilize the services of KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom. The representative of KLICK-TIPP LIMITED within the meaning of Article 27 of the GDPR is Waterton Knowledge Center WKC UG, Friedrichstr. 53a, 15537 Erkner, represented by Ulf Castelle, DSGVO-Vertreter@klicktipp.com. We obtain these services through a master agreement with Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim. Digistore24 is a reseller that procures products or services, such as Klick-Tipp, and sells them to buyers without significant further processing. We have additionally entered into a data processing agreement with Klick-Tipp itself pursuant to Article 28 of the GDPR. This ensures that we have full control over the personal data processed there and that Klick-Tipp implements our instructions accordingly.
Manual tags: In addition to SmartTags, manual tags can be created. For example, you can assign contacts the tag “Customer” or—even more specifically—the tag “Purchased Product B.”
(5) You can find Klick-Tipp’s Privacy Policy here.
(6) You can find Klick-Tipp’s Anti-Spam Policy here.
In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the minimum necessary.
Your personal data will be deleted once the proceedings have been concluded, but no sooner than after the expiration of the 6- and 10-year retention periods required under tax and commercial law, unless we are permitted to continue processing the data for another purpose in accordance with legal requirements and the information provided in this Privacy Policy.
External Links
- Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
YouTube: To contact YouTube’s Data Protection Officer, please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
3.1 Data Processing for Market Research and Advertising
3.2 Data Processing When You Contact Us
We collect personal data when you contact us, for example, via the contact form or through a messaging service such as Meta/Facebook Messenger. The specific data collected depends on the information you provide and the contact details you share with us. We store this information for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose the data to third parties under any circumstances without your consent. The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR, as well as, if applicable, Art. 6(1)(b) GDPR, if your inquiry is aimed at entering into a contract. Your data will be deleted after your inquiry has been fully processed, provided that no legal retention obligations prevent this. We consider the matter to be fully processed when the circumstances indicate that the relevant issue has been conclusively resolved.
4. Data Transfer and Recipients
- Privacy Policy: https://twitter.com/de/privacy
- Opt-out: https://twitter.com/personalization
- According to its privacy policy, Twitter uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the U.S. or other third countries outside the EU: https://twitter.com/de/privacy
- Opt-out: https://adssettings.google.com/authenticated
- According to its privacy policy, Google uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the U.S. or other third countries outside the EU: https://policies.google.com/privacy?hl=de&gl=de
- Privacy Policy: https://www.linkedin.com/legal/privacy-policy
- Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- According to its privacy policy, LinkedIn uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the US or other third countries outside the EU: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
Retention Period for Personal Data
The retention period for personal data is determined by the applicable statutory retention periods (e.g., under commercial and tax law). Once the respective period has expired, the corresponding data is routinely deleted. If data is required for the performance of a contract or for contract negotiations, or if we have a legitimate interest in further storage, the data will be deleted when it is no longer necessary for these purposes or when you have exercised your right of withdrawal or objection.
Your Rights
The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
The right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a rule, you may contact the supervisory authority of the federal state where our registered office is located, as indicated above, or, if applicable, the supervisory authority of your usual place of residence or workplace.
If you wish to exercise your right of withdrawal or objection, simply send an email to info@mtrix.de
Legal Obligations
Automated decision-making or profiling pursuant to Article 22 of the GDPR does not take place.
Information Regarding the Basis for Providing Your Personal Data
If you wish to enter into a contract with us or submit an inquiry to us, providing your personal data is necessary for the conclusion of the contract or the processing of your inquiry. You are not obligated to provide your personal data. However, failure to provide your personal data would mean that we cannot enter into a contract with you or process your inquiry.
Reservation of the Right to Make Changes
Date of this Privacy Policy: June 10, 2022