Privacy policy

Privacy Policy Webseite

As of June 2023


We, MATS GmbH (hereinafter: “the company“, “we” or “us“), take the protection of your personal data seriously and would like to inform you at this point about data protection in connection with the use of our internet website and its sub-pages under the URL address (hereinafter: “website“).

Within the scope of our responsibility under data protection law, additional obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter “GDPR”) in order to ensure the protection of personal data of the person affected by a processing (we also refer to you as the data subject hereinafter as “user“, “you” or “data subject“).

Insofar as we decide either alone or jointly with others on the purposes and means of data processing, this includes above all the obligation to inform you transparently about the nature, scope, purpose, duration and basis of the processing (cf. Articles 13 and 14 of the Data Protection Act). With this declaration (hereinafter: “privacy policy“), we inform you about the manner in which your personal data is processed by us.

I. Name and contact details of the controller

The controller of your personal data is us:


Adress: Max-Ernst-Straße 4, 50354 Hürth

Phone number: 0176 81119190


For further information on our company, please refer to the imprint details on our website at 

II. Security of processing

  1. We use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorised access by third parties (e.g. TSL encryption for our website), taking into account the state of the art, the costs of implementation and the nature, scope, context and purpose of the processing, as well as the existing risks of a data protection incident (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
  2. We will be happy to provide you with more detailed information on request. To contact us, please use the contact details listed in section II of this privacy policy.

III. Transfer of personal data to third countries

The use of certain services may require us to transfer your personal data to a country outside the EEA (“third countries”). Such transfers to third countries are classified as risky and require, in particular, an independent basis for transfer in accordance with Art. 44 p. 1 GPDR. You will be informed separately in this privacy policy whether and to what extent transfers to a third country are carried out for a specific service used by us.

IV. No automated decision making (including profiling)

We do not intend to use any personal data collected from you for any automated decision-making process (including profiling).

V. Legal obligation to transmit certain data

We may be subject to a specific legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public bodies (Art. 6 para. 1 p. 1 lit. c GDPR).

VI. Your rights as a data subject

You can assert your rights as a data subject with regard to your processed personal data at any time by contacting us using the contact details provided at the beginning of section I of this privacy policy. You have the following rights as a data subject:

  1. Right of access: Under Article 15 of the GDPR, you can request information about the data we process about you. In particular, you can request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period of the data or, if this is not possible, the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if this has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. You may also request meaningful information about the details of such processing.
  2. Right to rectification: Under Article 16 GDPR, you can without undue delay request the rectification of inaccurate or the completion of your data stored by us.
  3. Right to erasure: Under Article 17 of the GDPR, you can request the deletion of your data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
  4. Right to restriction of processing: Under Article 18 GDPR, you can request the restriction of the processing of your data if you dispute the accuracy of the data or if the processing is unlawful.
  5. Right to data portability: Under Article 20 of the GDPR, you may request to receive the data you have provided to us in a structured, commonly used and machine-readable format or request the unrestricted transfer of this data to another controller.
  6. Right to object: Under Article 21 GDPR, you are entitled to object to processing if the processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. e or f GDPR. This is particularly the case if the processing is not necessary for the performance of a contract with you. Unless it is an objection to direct advertising, when exercising such an objection, we ask you to explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
  7. The right to withdraw consent: Under Article 7 para. 3 of the GDPR, you have the right to withdraw your consent – i.e. your voluntary, informed and unambiguous indication by means of a declaration or other unambiguous confirmatory act that you agree to the processing of the personal data concerned for one or more specific purposes – at any time if you have given such consent. This has the consequence that we may no longer continue the data processing based on this consent in the future. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
  8. Right to lodge a complaint: Under Article 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority about the processing of your personal data in our company.

VII. Processing in detail

The specific data processing carried out by us, which can be carried out within the context of the use of our websites, is described and explained below.

1. Use of our website

1.1. Explanation

When you open our site via your web browser and use our website, personal data may already be collected from you.

1.2. Personal data processed

When you use our website for information purposes, we collect, store and process the following categories of personal data:

“log data”: When you visit our websites, a so-called log data record (so-called server log files) is temporarily stored on our web server. The log data record consists of:

  • the page from which the website was requested (so-called referrer URL);
  • the name and URL of the requested page;
  • the date and time of the request;
  • the description of the type, language and version of the web browser used;
  • the IP address of the requesting computer, which is shortened in such a way that it is no longer possible to establish a personal reference;
  • the amount of data transferred;
  • the operating system;
  • the message as to whether the call was successful (access status/ttp status code);
  • the GMT time zone difference.

Failure to provide the aforementioned data could result in you either not being able to access our website via your web browser or the website being displayed incorrectly.

1.3. Purpose and basis of data processing

The processing of the log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR).

1.4. Duration of processing

Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes; the legal bases stated in the context of the processing purposes apply accordingly.

1.5. Recipients; basis

The following categories of recipients, which are usually processors, may have access to your personal data:

1.5.1 Service providers for the operation of our website and the processing of data stored or transmitted by the systems (for example, for data centre services, payment processing, IT security). The basis for the transfer is then Art. 6 para. 1 p. 1 lit. b or lit. f GDPR, insofar as it does not involve order processors;

1.5.2 Government agencies/authorities, insofar as this is necessary to fulfil a legal obligation. The basis for the disclosure is then Art. 6 para. 1 p.1 1 lit. c GDPR;

1.5.3 Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The basis for the disclosure is then Art. 6 para. 1 p.1 1 lit. b or lit. f GDPR

In addition, we will only disclose your personal data to third parties if you have given your express consent in accordance with Art. 6 Para. 1 p. 1 lit. a GDPR.

2. Newsletter subscription

2.1. Explanation

We offer the possibility of subscribing to a free newsletter via which we send you information about our developed app. When you register for the newsletter, the personal data described below is transmitted to us. Your consent is obtained for the processing of the data during the registration process and reference is made to this privacy policy. Your personal data will not be passed on to third parties in connection with the processing of data for the dispatch of newsletters.

After your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to verify your registration and, if necessary, to be able to clarify any possible misuse of your personal data.

2.2. Personal data processed

you register for our newsletter on our website, we will save the e-mail address you provide.

In addition, we collect, store and process the following “newsletter data”:

  • the date and time of the call to our website;
  • the description of the type of web browser used,
  • the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established;
  • the date and time of registration and confirmation.

2.3. Purpose and basis of data processing

Your e-mail address is processed for the purpose of sending you the newsletter. When registering for our newsletter, you consent to the processing of your personal data. The basis is therefore your consent according to Art. 6 para. 1 p. 1 lit. a GDPR. 

You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter without this affecting the lawfulness of the processing until the withdrawal. You can withdraw your consent by clicking on the link provided in every newsletter e-mail or by using the contact details provided in section I of this privacy policy.

We require the remaining newsletter data for the purpose of verification, i.e. whether the e-mail address provided is also yours, as well as to combat misuse. The basis is an overriding legitimate interest on our part in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

There is neither a contractual nor a legal obligation to provide the aforementioned personal data. However, if you do not provide us with this data, you will not be able to subscribe to our newsletter.

2.4. Duration of processing

In principle, we only store your email address until you have unsubscribed from the newsletter. We store the remaining newsletter data until we receive a confirmation email from the email address you provided, but no later than after 7 days.

3. Data processing when contacting us

3.1. Explanation

If you contact us by e-mail, we collect your personal data for the purpose of contacting you.

3.2. Personal data processed

When you contact us, your e-mail address and all other personal data that you have provided in the course of contacting us will be stored by us so that we can contact you to answer your question.

3.3. Purpose and basis of data processing

We need your name to be able to assign the contact request. We need your e-mail address in order to contact you about your request and to be able to send you a reply. The basis is Art. 6 para. 1 p. 1 lit. f GDPR.

3.4. Duration of processing

We delete your personal data as soon as storage is no longer necessary. This is the case when your enquiry has been conclusively processed, e.g. when all enquiry points have been answered or you declare your enquiry to be completed. If there are legal retention periods, this data will remain stored to the extent required by law, but we will restrict the processing.

4. Web analysis via Google Analytics

4.1. Explanation and purpose

In order to measure the reach of our website and to design it to meet your needs, we create pseudonymous user profiles with the help of the “Google Analytics” service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on our website and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.

You can find more information about the scope of services provided by Google Analytics at .  Google provides information on data processing when using Google Analytics at the following link:

4.2. Personal data processed

We primarily record the interactions between you as a user and our website using cookies, device/browser data, IP addresses and website or app activities. Google Analytics also collects your IP addresses in order to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called “IP location determination”).

For your protection, we use the anonymisation function (“IP masking”), i.e. Google truncates the IP addresses within the EU/EEA by the last octet of the IP address. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and only truncated there (further information on the purpose and scope of data collection can be found, for example, at

Google Analytics uses targeting cookies that are stored on your terminal device and can be read by us. In this way, we are able to recognise and count returning visitors as such and to find out how often our web pages have been called up by different users. Google sets the following cookies when you visit our website and consent to the use of the Google Analytics cookie:

Cookie namePurposeExpire
_gaThis cookie helps us count how many people visit our website when you have already visited it
_gidThis cookie helps us to count how many people visit our website when you have already visited it.
_gatThis cookie helps us to manage the frequency with which requests were made to view a page.

Furthermore, there is neither a contractual nor a legal obligation to provide the aforementioned personal data. You will not suffer any disadvantages in the use of our website or services if you do not provide this data.

4.3. Basis and withdrawal possibilities

The basis for the collection and further processing of your personal data is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

The legal basis for the placement and reading of the cookies used by Google Analytics is your consent in accordance with Section 25 para. 1 p.1 of the German Telecommunications Telemedia Data Protection Act (TTDSG).

You can withdraw your consent at any time without this affecting the lawfulness of the processing until the withdrawal.  You can use the following methods to do so:

  • You can declare the withdrawal directly via our Consent Manager on the website.
  • You can declare your withdrawal using our contact data (section I. of this privacy policy).
  • You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this app.
  • You can also prevent the collection of data generated by the cookie and related to your use of our app (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (

4.4. Duration of processing

Your personal data will not be processed for longer than 14 months.

4.5. Recipient and transfer to a third country; basis

The information generated by the cookies about your use of our website is generally transmitted to a Google server in the USA and stored there. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s privacy policy at

We have also concluded an order processing agreement with Google in accordance with Art. 28 GDPR. Accordingly, Google will use all information strictly for the purpose of evaluating the use of our websites for us and compiling reports on website activity.

In the event that your personal data is transferred to Google, we have concluded corresponding standard data protection clauses in accordance with Art. 44 p. 1, 46 para. 2 lit. c GDPR. This is also our basis for a transfer.

VIII. Changes of the privacy policy

In the context of the further development of data protection law as well as technological or organisational changes, our data protection information is regularly checked for the need to adapt or supplement it. This may also result in changes to the privacy policy, about which we will inform you as the data subject accordingly.