Information on data processing

§ 1 - Subject matter and scope of this information

This document informs you about the processing of so-called personal data within this offer (website matesy.de) and in connection with the linked communication solutions. Personal data is such information that relates to identifiable natural persons (data subjects).

Which persons are considered identifiable is defined in more detail in the General Data Protection Regulation (DS-GVO) (Art. 4 No. 1 DS-GVO).

§ 2 - Name and contact details of the responsible party

The data controller is, according to Art. 4 No. 7 DS-GVO, the natural or legal person who determines the purposes and means of the processing of personal data.

For this offer, the controller is:

matesy GmbH
Löbstedter Str. 101-103
  07749 Jena
  Germany

Phone:
+49 3641 79799 00

Telefax:
  +49 3641 79799 01

E-mail:
info@matesy.de

Information about matesy GmbH

Register entry:
  Jena Local Court
  HRB 502464

Managing director authorized to represent the company:
  Mr. Benjamin Wenzel

§ 3 - General information on data protection and communication by e-mail

The security of your data is an important concern for us. We treat your personal data confidentially and in accordance with the legal data protection regulations.

We use appropriate and reasonable technical and organizational security measures to protect against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

We regularly review the suitability and adequacy of the security measures and will also adapt them in light of general technological developments.

We point out that data transmission on the Internet can have security gaps. One hundred percent protection of data against unauthorized access is not possible: when communicating by e-mail, complete data security cannot be guaranteed by us. Data that you send to us via normal, unencrypted e-mail could be viewed by unauthorized persons during transmission. We therefore recommend that you choose the postal route for information requiring protection or rely on encryption procedures for your e-mail content.

§4 - Hosting, email and communications solutions

We have contracted with specialized service providers to securely operate our IT and communications solutions. These contracts include:

  • Infrastructure services
  • Computing capacity
  • Storage space
  • Database services
  • Email communications
  • security services
  • Technical maintenance services
  • editorial services
  • Web development services

In the course of the contracted activities, these service providers inevitably gain access to personal data in our processing or are directly involved in their processing.

In particular, these are the following contractors:

  • Alfahosting GmbH
    Edmund-von-Lippmann-Straße: 13-15, 06112 Halle (Saale), Deutschland
  • designerei – Agentur für Strategisches Design
    Maren Thier & Anja Eglmeyer GbR
    Eisenberger Straße 79, 07629 Hermsdorf (Thüringen), Deutschland

When you use this website or our other communication channels, one or more of these contractors are recipients of your personal data within the meaning of Art. 4 DS-GVO in the context of the above-mentioned work. Contracts for commissioned processing exist in accordance with Art. 28 DS-GVO.

§ 5 - Specific data processing within this offer

Data retention for error analysis and IT security: server logs

Within the scope of hosting this offer, we or the service provider commissioned by us create access and error logs in so-called log files for the purpose of error analysis. These may contain:

  • IP address in anonymized form
  • requested document
  • referring document
  • browser type/version used
  • operating system used
  • device type used
  • Timestamp of access

These access and error logs are usually anonymized after 24 hours and then usually deleted within 7 days.

Parallel to this, our server creates anonymized access statistics based on the aforementioned access logs and uses the not-yet-anonymized log data for this purpose as described above.

The storage and evaluation is based on our legitimate interest (Art. 6 para. 1 lit. f DS-GVO) to ensure the most trouble-free and error-free provision of our offer, and for this also to be able to roughly estimate the data access volume per user and in total.

Contact form

You can easily contact us within this online offer via an inquiry form. In addition to the message text, your name and email address (to answer your inquiry) will be requested here.

If you wish, you can also add further - possibly personal - data to your message or enter it in the optional fields (e.g. your telephone number if you are forcing a callback) in order to specify and speed up the processing of your inquiry.

By submitting the form, a legal basis arises for processing your data in the sense of Art. 6 para. 1 lit. b DS-GVO when processing your request:

According to Art. 6 para. 1 lit. a DS-GVO, the legal basis is initially your consent - by sending the contact form (implied action), we must necessarily assume your consent to the processing of the data sent by you, as the processing takes place inherently in the system. You can revoke your consent given in this way at any time by e-mail or letter to the above addresses, which will have an effect for the future, but will not affect the lawfulness of the processing already carried out.

To prove your consent, we may store the timestamp and IP address of the connection used for sending (legal basis Art. 6 para. 1 lit. c DS-GVO).

If applicable, data processing, e.g. in the case of requests to commission our services or for product-specific support, is also based on Art. 6 para. 1 lit. b DS-GVO (contract performance or pre-contractual measures).

The data processed via the contact or inquiry form is used exclusively for the purpose of processing your specific inquiry. We do not intend to transfer your data to other recipients or to countries outside the European Economic Area in the context of processing for the above-mentioned purpose, in addition to the disclosure to our technical service providers described in this privacy policy.

Your data will not be disclosed to third parties.

Your data will be deleted after 7 days at the latest once the purpose of processing no longer applies, unless legal retention obligations prevent deletion.

Video material from YouTube

We include, if you have consented, content from the video platform "YouTube" on our website. The operating company of YouTube is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066 (USA). YouTube LLC is a subsidiary of Alphabet Inc, Amphitheatre Parkway 1600 94043 Mountain View, CA (USA).

If you are logged in to YouTube with your user profile while using our website, YouTube will recognize which specific subpage of our website you are visiting at what time when you call up our pages that contain YouTube videos. This information may be collected by YouTube and Google and assigned to your YouTube account. YouTube will receive the information about your visit to our website, provided you are logged in there, regardless of whether you actually watch a YouTube video or not.

The purpose of the processing is our marketing interests - the technically optimized, device-independent presentation of media content on our website

The processing takes place on the legal basis of Art. 6 (1) lit. a DS-GVO - the legal basis is your consent to the data processing.

Your consent is voluntary and of course has no effect on the outcome of, for example, our application procedures or other decision-making processes regarding your person. You can revoke your consent once given at any time with effect for the future by adjusting (for example, via the link Consent settings at the bottom of our website) your previously configured settings on permitted data processing on our website.

Map material from Google Maps

We integrate, if you have consented, on our website content of the map material of "Google Maps". The operating company of Google Maps is Google Ireland Limited, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7 (Ireland) or Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043 (USA). Google is a subsidiary of Alphabet Inc, Amphitheatre Parkway 1600 94043 Mountain View, CA (USA).

If you are logged into a Google service with your user profile in parallel while using our website, Google will recognize which specific subpage of our website you are visiting at what time when you call up our pages that contain Google services. This information may be collected by Google and assigned to your Google account. Google will receive the information about the visit to our website, if you are logged in there, regardless of whether you actually view the map material or not.

The purpose of the processing is our marketing interests - the technically optimized, device-independent display of map material to visualize our company location on our website.

The processing takes place on the legal basis of Art. 6 (1) lit. a DS-GVO - the legal basis is your consent to the data processing.

Your consent is voluntary and of course has no effect on the outcome of, for example, our application procedures or other decision-making processes regarding your person. You can revoke your consent once given at any time with effect for the future by adjusting (for example, via the link Consent settings at the bottom of our website) your previously configured settings on permitted data processing on our website.

Tracking of user behavior via Google Analytics

We use, if you have consented, to analyze your user behavior on our website "Google Analytics". The operating company of Google Analytics is Google Ireland Limited, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7 (Ireland) or Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043 (USA). Google is a subsidiary of Alphabet Inc, Amphitheatre Parkway 1600 94043 Mountain View, CA (USA).

During your visit to our Internet pages, the following data, among other things, is thereby recorded about your device/visit:

  • Referrer of your visit (via which internet page or via which advertising medium you followed a link to our internet page)
  • subpages accessed
  • behavior on the pages such as dwell time, clicks, scrolling behavior
  • Useful location (country and city)
  • IP address (shortened (anonymized form, so that no clear assignment is possible)
  • technical information such as browser type, screen resolution, operating system used, internet service provider

Personal data such as name, address or contact details are not normally transmitted to Google Analytics, but the provider has theoretical access to all your input on our website and e.g. integrated forms.

Google Analytics stores and reads data on/from your terminal device. These write and read operations use e.g. cookies with a "lifetime" of up to two years from your last visit, possibly also other techniques released by your browser for these purposes (local storage, etc.). The aforementioned cookies contain e.g. a randomly generated user ID, with which your terminal device can be recognized during future visits to our website.

The recorded data is stored together with the randomly generated user ID, which enables a pseudonymous evaluation of the formed user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.

The purpose of the processing is our marketing interests - the measurement of reach and target group-specific optimization of our website content.

The processing takes place on the legal basis of Art. 6 (1) lit. a DS-GVO - the legal basis is your consent to the data processing.

Your consent is voluntary and of course has no effect on the outcome of, for example, our application procedures or other decision-making processes regarding your person. You can revoke your consent once given at any time with effect for the future by adjusting (for example, via the link Consent settings at the bottom of our website) your previously configured settings for permitted data processing on our website.

Data transfer to third parties outside the EEA

YouTube and Google, or its parent company Alphabet Inc. are US providers, which means that your data is also processed outside the European Economic Area, on servers in the US.

The data transfer to the USA takes place in the sense of Art. 45 DS-GVO on the basis of an adequacy decision of the EU Commission (Adequacy decision for the EU-US Data Privacy Framework, publication of 10.07.2023).

Further information on data processing by YouTube / Google can be found on the company's websites:

§ 6 - Application procedure

We provide information on the processing of applicant data in our company for a better overview [link][in a separate document]

§ 7 - Other processing purposes

Legal retention obligations

Processing activities are carried out on the basis of Article 6(1)(c) DS BER in conjunction with other legal provisions, thereby fulfilling our legal obligations.

In particular, tax law retention obligations to the extent prescribed in each case as well as the retention obligations for business communications within the meaning of the German Commercial Code (HGB)

should be mentioned here.

Direct advertising

If you have given us your consent to do so, we will also process your personal data for direct marketing purposes (e.g. when sending newsletters, event invitations, information brochures or other information on current projects or events). The legal basis for the use of your data for these purposes is your consent (Art. 6 para. 1 lit. a DS-GVO). You can revoke this consent at any time, which will have an effect on the future, but will not affect the lawfulness of the processing already carried out.

For revocation, an informal message in text form (e.g., by e-mail) is sufficient.

Other promotional purposes

Other use of your personal data for advertising purposes may take place to the extent permitted by law on the basis of our legitimate interest in maintaining the customer relationship as well as customer acquisition (Art. 6 para. 1 lit. f DS-GVO).

§ 8 - Disclosure of personal data

We disclose your personal data to third parties in principle only if this is necessary for the performance of the contract or if we are required by law to do so.

As part of our service provision, we also commission so-called order processors who carry out activities on our behalf, bound by instructions, which enable or require access to your personal data.

One example of this is the data center service provider we commission, who, as an IT specialist, takes over the operation of our server environment in the interest of the greatest possible data security.

In addition to the specific data processing procedures described above, we do not currently intend to transfer your data in connection with the use of our website and the linked communication solutions to countries outside the European Economic Area.

§ 9 - Storage periods in general

We process personal data only as long as necessary to achieve the respective processing purpose. Excluded from this are legally required retention periods, which can be, for example, according to § 147 AO six and ten years.

A longer storage of your data may be necessary in individual cases for the purpose of asserting, exercising and defending legal claims in connection with services provided, this is possible, for example, with regard to the statutory limitation periods (§§ 195 et seq. BGB, § 64 UrhG).

After the expiry of the aforementioned periods, your data will be deleted, unless you have expressly consented to storage beyond the end of the purpose.

§ 10 - Legal or contractual provisions

We would like to point out that the provision of personal data in the executed scope is not always required by law or contract. If a collection of personal data is required by law or contract, we will inform you individually and on a case-by-case basis at the time of collection, as well as if the failure to provide would result in consequences.

The failure to provide legally or contractually required data usually leads to the fact that a contract can not be concluded or your request can not be processed, about further consequences, we will inform you individually at the time of collection.

If there are any uncertainties about the legal or contractual provisions for the provision of your personal data to us, please contact the specified address of the person responsible for clarification.

§ 11 - Your rights

In case of data processing with your consent (Art. 6 para. 1 lit. a DS-GVO) you can revoke your already given consent at any time. An informal message in text form (e.g. by e-mail) is sufficient. The data processing carried out before your revocation remains unaffected in its legality.

Objection to direct marketing and data collection in special cases

You may object to the aforementioned data processing on the basis of Art. 6 (1) lit. f DS-GVO for reasons arising from your particular situation. This right to object would also apply to processing activities based on the legal basis of Art. 6 (1) lit. e DS-GVO as well as profiling based on the aforementioned legal bases. In the event of your objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing activity, which in the balance of interests take precedence over your interests, rights and freedoms or serve the assertion, exercise or defense of legal claims (objection pursuant to Art. 21 para. 1 DS-GVO).

You can object to data processing for direct marketing at any time, including any profiling in connection with direct marketing. If you object in accordance with Art. 21 para. 2 DS-GVO, we will subsequently no longer use your data for the purpose of direct marketing.

Complaint to a competent supervisory authority

You have a right of appeal to a competent supervisory authority. This right is without prejudice to any other administrative or judicial remedy.

For the current contact details of the competent supervisory authority, see, for example, the list of addresses of the Federal Commissioner for Data Protection and Freedom of Information at

or you can contact us directly, we will of course help you with your research.

Data portability

The DS-GVO grants you the right to have personal data, which is processed automatically on the basis of your consent or in fulfillment of a contract, handed over to you in a common, machine-readable format. You may request to have this machine-readable data transferred to a third party.

Information, blocking, deletion

According to Art. 15 para. 1 DS-GVO, you have the right at any time to free information about the processing of your personal data as well as further information (origin, purpose of processing, recipient) in the event of actual processing. You may also be entitled to rights relating to rectification, blocking and erasure of the processed data.

Restriction of processing

Restriction of the processing of your data means that, apart from your storage without your consent, it will only

  • with your consent or
  • for the assertion, exercise or defense of legal claims or
  • to protect the rights of another natural or legal person or
  • for reasons of important public interest of the European Union or a Member State

may be processed.

You have the right to request the restriction of processing

  • if we need time to review and/or rectify the data as you request or
  • a balancing of interests takes place following your objection in accordance with Art. 21 (1) DS-GVO or
  • if the processing was/is unlawful and you want the restriction of processing instead of erasure or
  • if we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims and instead of erasure you want the restriction of processing