This page explains which personal data is processed when you visit matcms.de, for what purpose, on what legal basis and for how long (Art. 13 GDPR). In short: this website works without tracking, without advertising and without a consent banner. No third-party services are loaded when a page is opened.

1. Controller

Matthias Schmoldt
Brombergweg 11
74392 Freudental
Germany
Email: hi@matthix.de

I have not appointed a data protection officer. I am not legally obliged to do so.

2. Hosting and access logs

The website runs on a server of Contabo GmbH in Munich, data centre in Germany. A data processing agreement pursuant to Art. 28 GDPR exists with Contabo.

On every request your browser transmits technically necessary data without which no page could be delivered. The web server in front logs per request: IP address, time, the address called (domain and path), type of request, status code and response time. These logs are deleted automatically after 30 days. They serve to detect and ward off faults and attacks.

The website itself does not write access logs with IP addresses. Its error log contains only the address called and the error message, no IP address, and is deleted after 90 days. To protect against misuse the IP address is used briefly in memory: it limits sign-in attempts and form submissions. It is not stored in the process.

The legal basis is Art. 6 (1) (f) GDPR, the legitimate interest in secure and trouble-free operation.

3. Visitor statistics without cookies

The website counts page views with its own built-in statistics. There is no external service, no cookie and no storage in the browser. So that a visit is counted only once, a check value is formed from the IP address and the browser identifier which cannot be calculated back. It is formed with a random value that changes daily and is kept in memory only. Permanently stored are exclusively numbers: views per page and day, referring websites, device types and addresses not found. No conclusion about individuals is possible from this.

The legal basis is Art. 6 (1) (f) GDPR, the legitimate interest in knowing which content is read.

4. Fonts

The fonts of this website are delivered from this server. When a page is opened, no connection to Google or another font provider is made.

5. Contact form

If you use the contact form, what you enter is stored — for example name, email address and message. The time of submission is added. The data lies in the database of this website on the server named in point 2. Your IP address is not stored with it.

The entries are not forwarded by email. I retrieve them in the administration area of the website.

I use the details exclusively to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if it concerns an order or an offer, otherwise Art. 6 (1) (f) GDPR, the legitimate interest in answering enquiries. Once your matter is settled, I delete the enquiry after a further six months. Exception: statutory retention obligations require longer storage, for example if the enquiry becomes an order.

6. Contact by email

If you write me an email, I process your address and the content of the message in order to answer it. Legal basis and storage period are the same as for the contact form. The mailbox is hosted by netcup GmbH in Karlsruhe, with whom a data processing agreement pursuant to Art. 28 GDPR exists.

7. Cookies

The pages of this website do not set cookies as a matter of principle. On pages with a form there are two exceptions, both technically necessary:

• a security cookie that prevents forged form submissions from other websites. It contains no information about you and is deleted when the browser is closed.
• a short-lived cookie that carries the confirmation message to the next page after submitting. It is deleted again right afterwards.

The legal basis is § 25 (2) No. 2 TDDDG; consent is not required for this. In the administration area, which only I use, a sign-in cookie is added.

8. No analytics, no tracking, no embedded content

This website uses no analytics or tracking tools, no advertising, no social media widgets, no embedded maps or videos. Links to other websites are ordinary links. Only when you click one of them do you leave this website, and the privacy policy of the provider there applies.

9. Recipients

Your data is not sold and not passed on for advertising. Access is had only by the service providers necessary for operation, each with an agreement pursuant to Art. 28 GDPR:

• Contabo GmbH, Munich: server and data centre
• netcup GmbH, Karlsruhe: email mailbox, mail delivery and domain management (DNS)

Both process the data in Germany. A transfer to countries outside the EU does not take place.

10. Storage periods at a glance

• Access logs of the web server: 30 days
• Error log of the website (without IP address): 90 days
• Check value of the statistics: in memory only, changes daily; only numbers without personal reference are stored
• Enquiries via form and email: until settled plus a further six months, unless statutory retention obligations apply

11. Your rights

You have the following rights:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)
• complaint to a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, an email to hi@matthix.de is enough.

This English version is a translation provided for convenience. In case of doubt, the German original is authoritative.