Privacy notice
This notice explains how personal data is processed when you visit datamatters.io or contact us using the channels described here. Linked websites and other services may have their own notices.
Controller and contact
dataMatters GmbHPilgrimstr. 6
50674 Cologne
Germany
mail@datamatters.io
Please use this address for privacy questions and requests concerning your rights.
Visiting the website and hosting
When you access the website, technical connection and access data are processed, including your IP address, date and time, the requested address and, where provided, browser information. This allows us to deliver the website, operate it securely and investigate errors. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of this website.
We use Amazon Web Services (AWS), in particular AWS Amplify Hosting, to host the website. AWS provides the infrastructure and processes technical access data. According to AWS documentation, Amplify access logs for an application are retained until that application is deleted. Downloaded or otherwise stored copies may be subject to different retention rules.
Fonts, cookies and analytics
The fonts on this website are served by our own website. Loading them does not connect to Google Fonts. The website, as technically implemented, does not use analytics or advertising services or set cookies for those purposes. External services such as Microsoft Bookings are opened only when you follow the relevant link; the provider’s own information also applies there.
Contact by email
If you contact us by email, we process your email address, the contents of your message and other information you provide to handle and answer your request. The contact form on the About page prepares a message in your email application; sending it uses your email provider.
For requests concerning the conclusion or performance of a contract, the legal basis is Article 6(1)(b) GDPR. For other requests, it is Article 6(1)(f) GDPR, based on our legitimate interest in handling and answering enquiries. Retention depends on how long the information is needed to handle your request, any subsequent business relationship and any applicable statutory retention requirements. We use Microsoft 365 / Exchange Online for our email mailboxes; Microsoft processes sender and recipient addresses, message content and technical delivery data, among other information.
Booking a meeting with Microsoft Bookings
A link takes you to the external Microsoft Bookings page. Your browser connects to Microsoft and transmits technical connection data. The booking page asks for your name, email address and chosen appointment; address, phone number and further information are optional. We use the information you provide to arrange and conduct the meeting and communicate about it.
The legal basis is Article 6(1)(b) GDPR where booking serves pre-contractual or contractual purposes; for other enquiries it is Article 6(1)(f) GDPR, based on our interest in organising meetings and responding to enquiries. Retention depends on how long the information is needed for the meeting, handling the request, any subsequent business relationship and applicable statutory retention requirements.
Microsoft provides Bookings and the associated Microsoft 365 services. See the Microsoft Privacy Statement for further information about Microsoft’s processing. You can also contact us by email.
Recipients and processing outside the EEA
Within our company, personal data is made available only to people who need it for their work. Service providers may also receive data where necessary for hosting, communication or meeting organisation. International services may involve access to or processing of data outside the European Economic Area. Such transfers are subject to Articles 44 et seq. GDPR, including an adequacy decision or appropriate safeguards such as EU standard contractual clauses and supplementary measures where necessary. The AWS Service Terms include standard contractual clauses for customer data when applicable; see the Microsoft Products and Services Data Protection Addendum for information on Microsoft processing and contractual terms. Contact us at the address above for information about the safeguards used in a particular case and how to obtain them.
Your rights
Subject to the legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time with effect for the future (Article 7(3)). You also have the right to lodge a complaint with a data protection supervisory authority (Article 77), for example the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information.
You may object on grounds relating to your particular situation to processing based on Article 6(1)(e) or (f) GDPR (Article 21(1)). You may object at any time to processing for direct marketing (Article 21(2)). Please use the contact address above.