This privacy policy applies to the websites matplus.eu, mmpds.eu, stahldaten.de and matglobe.eu operated by Matplus GmbH.
The protection of your privacy during the processing of personal data as well as the security of all business data is a major concern for us that we take into consideration in our business processes. We process personal data, collected during your visit to our online offerings, confidentially and only in accordance with legal regulations.
Data protection and information security are integral parts of our corporate policy.
Responsible for the processing of your data is:
Matplus GmbH
Friedrichstraße 51
42105 Wuppertal
E-mail: [email protected]
Data protection officer: You can reach our data protection officer at [email protected] or at our postal address, marked ‘For the attention of the data protection officer’.
Communication data (e.g., name, telephone number, e-mail address, address, IP address) are processed.
Personal data includes all information that relates to an identified or identifiable natural person, such as names, addresses, telephone numbers, or e-mail addresses, which express the identity of a person.
We process personal data only when there is a statutory legal basis for doing so or if you have given us your consent, e.g., within the scope of a registration.
We and the service providers commissioned by us process your personal data for the following purposes:
3.3.1 · Provision of this online service: Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free and secure provision of our website. Where information is stored on or read from your device, this is done only where strictly necessary (Section 25(2) No. 2 TDDDG) or with your consent (Section 25(1) TDDDG).
3.3.2 · Responding to enquiries (e.g. via contact forms or email): Legal basis: Article 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract; otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries) or Article 6(1)(a) GDPR where you have consented.
3.3.3 · Detecting faults and ensuring security: Legal basis: Article 6(1)(c) in conjunction with Article 32 GDPR (data security obligation) and Article 6(1)(f) GDPR (legitimate interest in remedying faults and securing our services).
3.3.4 · Our own advertising and market and opinion research: Legal basis: Article 6(1)(a) GDPR (consent), in particular for marketing emails where required under Section 7(2) German Act against Unfair Competition (UWG); otherwise Article 6(1)(f) GDPR (legitimate interest in direct marketing, Recital 47 GDPR), e.g. for marketing to existing customers under the conditions of Section 7(3) UWG. You may object to processing for advertising purposes at any time (no. 11.5.2).
3.3.5 · Safeguarding and defending our rights: Legal basis: Article 6(1)(f) GDPR (legitimate interest in establishing, exercising and defending legal claims).
3.3.6 · Compliance with statutory retention obligations: Legal basis: Article 6(1)(c) GDPR in conjunction with Section 257 German Commercial Code and Section 147 German Fiscal Code.
Whenever you use the Internet, specific information is automatically transmitted from your Internet browser and stored by us in so-called log files. We store the log files for a short period for the identification of malfunctions and for security reasons (e.g., to investigate attempted attacks) and delete them afterwards. If further retention of log files is required for evidence purposes, these files are exempt from deletion until the incident is finally clarified and can be handed over to investigating authorities in individual cases.
The following information, in particular, is stored in the log files:
Our website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, on servers in Germany. The hosting provider processes the data generated when the website is accessed (in particular IP address, pages accessed, time, browser and device information, see no. 3.4 “Log files”) on our behalf under a data processing agreement pursuant to Article 28 GDPR.
The website is delivered via the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare forwards your browser’s requests to our server, serves content from caches and protects the website against attacks (e.g. DDoS attacks) and abusive access. In doing so, Cloudflare processes in particular your IP address, the requested URL, the time of access and browser and device information. Cloudflare is placed in front of our hosting provider and acts as our processor.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our website.
Cloudflare may transfer data to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers are based on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR), supplemented by EU standard contractual clauses (Article 46(2)(c) GDPR). More information: https://www.cloudflare.com/privacypolicy/
We deliver fonts, icon libraries and scripts from our own server; no content is loaded from third-party servers (e.g. content delivery networks) for this purpose.
We will only transfer your personal data to other responsible parties if it is necessary for contract performance, if we or a third party have a predominantly legitimate interest in the transfer, or if you have given your consent. Details concerning the legal bases can be found in the section “Processing purposes and legal grounds” (see no. 3.3). This privacy policy explains if data is transferred based on a predominantly legitimate interest.
Additionally, data may also be transferred to other responsible parties if we are legally obligated to do so due to statutory regulations or enforceable official or judicial orders.
We assign tasks such as marketing services, programming, data hosting, and hotline services to external service providers. We have carefully selected these service providers and monitor them regularly, particularly regarding their careful handling and protection of the data they store. All providers are bound to confidentiality and compliance with legal requirements by us.
We may also transfer personal data to recipients headquartered outside the EEA in so-called third countries. In this case, we ensure before the transfer that the recipient either possesses an appropriate standard of data protection (e.g., based on an adequacy decision by the EU Commission for the relevant country or the agreement of so-called EU standard contractual clauses with the recipient) or that you have consented to the transfer.
You can obtain an overview of the recipients in third countries and a copy of the concrete agreed regulations to guarantee the appropriate standard of data protection from us. Please use the information provided under “Responsible authority and contact” (see no. 2).
In principle, we store your data as long as it is necessary for the provision of our online offering and the associated services or when we have a legitimate interest in further storage (e.g., after fulfilling a contract, we could still have a legitimate interest in postal marketing). In all other cases, we delete your personal data except for data we are legally obligated to retain (e.g., due to tax and commercial retention periods, we are obligated to retain documents such as contracts and invoices for a specific period).
Cookies are small text files stored on your computer when you visit a website. If you revisit this online offer, your browser sends the content of the cookies back to the respective provider, enabling the recognition of the device. Reading cookies allows us to optimize our online offer for you and facilitate its use.
When you first visit our website, a banner asks whether you consent to the “Statistics” category. You can choose “Accept all” or “Only necessary”, or select individual categories and save your choice. Services in the “Statistics” category are only loaded after you have consented. Without your consent, only the strictly necessary information described in no. 4.3.1 is stored in your browser.
Your choice is valid for 12 months, after which we ask again.
You can change your choice at any time via the “Cookie settings” link in the footer of every page and withdraw any consent given with effect for the future. After withdrawal, the statistics services stop immediately without reloading the page, and the cookies set by Google Analytics are deleted. The lawfulness of processing carried out before withdrawal remains unaffected.
You can also delete or block cookies and other site data in your browser at any time. If you delete the site data, we will ask for your choice again on your next visit. If you block them completely, some features of the website may no longer work as intended.
The following overview applies to matplus.eu, mmpds.eu and stahldaten.de. Entries that only occur on one of these sites are marked accordingly. On matglobe.eu we do not use any analytics, marketing or other third-party services. We only store that you have seen the storage notice (matplusCookieConsent, local storage, 12 months). Legal basis: Section 25(2) No. 2 TDDDG.
In addition to cookies, we use your browser’s local storage (“local storage”). This information stays on your device until it is deleted; it is not sent to our server with every page request.
These entries are strictly necessary to provide the features you request and to respect your choice in the banner. They cannot be deselected in the banner. Legal basis: Section 25(2) No. 2 German Telecommunications Digital Services Data Protection Act (TDDDG); for any related processing of personal data, Article 6(1)(f) GDPR (legitimate interest in a functioning website and in documenting your choice).
These services help us understand how our website is used so that we can improve it. They are only loaded once you consent to the “Statistics” category. Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Withdrawal: via the “Cookie settings” link in the footer (see no. 4.2).
We do not use any other categories, such as marketing or advertising.
In our online offer, we use so-called social plugins from different social networks; these will be described individually in this section.
When using the plugins, your Internet browser establishes a direct connection to the servers of the respective social network. The respective provider thereby obtains the information that your Internet browser has called up the corresponding page of our online offer, even if you do not have a user account with the provider or are not currently logged in with the provider. Log files (including the IP address) are directly transmitted from your Internet browser to a server of the respective provider, where they may be stored. The headquarters of the provider or its server could be located outside the EU or the EEA (e.g., in the USA).
The plugins are independent extensions of the social network providers. Therefore, we have no influence on the extent of the data collected and stored by the social network providers via the plugins.
The purpose and scope of the collection, further processing of the data by the social network, as well as your associated rights and setting options for the protection of your privacy, can be found in the data protection notices of the respective social network.
You should not use the respective plugins if you do not want social network providers to obtain data concerning this online offer or to continue using this data.
With a so-called 2-click solution, we protect you from having your visits to our websites automatically recorded and evaluated by social network providers. When you access a page of our Internet offering that contains such plugins, they are initially deactivated. The plugins are not activated until you click the provided button.
LinkedIn is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). You will find an overview of the plugins from LinkedIn and their appearance here: https://developer.linkedin.com/plugins; you will find information on data protection at LinkedIn here: https://www.linkedin.com/legal/privacy-policy.
This online offer uses the video platform YouTube, which is provided by YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”). YouTube is a platform that allows the playback of audio and video files.
If you access a corresponding page of our offer, the embedded YouTube player will establish a connection to YouTube so that the video or audio file can be transmitted and played. In the process, data is also transmitted to YouTube as the responsible body. We are not responsible for the processing of this data by YouTube.
Further information concerning the extent and purpose of the collected data, further processing and utilization of your data by YouTube, your rights, and selectable data protection options can be found in YouTube’s privacy policy.
On matplus.eu, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to evaluate how our website is used. This may include information about the device used, browser software, pages visited, time spent on the site, and shortened or pseudonymized IP addresses.
Google Analytics is only loaded once you have consented to the “Statistics” category in our cookie banner; before that, no connection to Google is established. Via Google Consent Mode v2, we only signal your consent to analytics (analytics_storage) to Google. The advertising signals (ad_storage, ad_user_data, ad_personalization) are always set to “denied”, even if you choose “Accept all”. We do not use advertising features, Google signals or a link to Google Ads. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer.
Data may be transferred to the USA (Google LLC). Google relies inter alia on the EU-US Data Privacy Framework and standard contractual clauses. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/12017362.
Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Retention: user- and event-level data is automatically deleted in Google Analytics after 2 months. For cookie lifetimes, see no. 4.3.2.
With your consent, we use the web analytics service Google Analytics 4 on stahldaten.de. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data on our behalf (Article 28 GDPR, Google Ads Data Processing Terms).
Purpose: to understand how visitors use stahldaten.de (e.g. which pages are visited and how visitors reach the website) in order to improve our offering.
Data processed: pages visited and interactions (e.g. page views, scrolling, clicks on outbound links, downloads), date and time, visit duration, referrer URL, information on device, browser, operating system and screen resolution, approximate location (country, region, city), a randomly generated online identifier (client ID) and a session identifier. According to Google, for visits from the EU your IP address is used only on servers in the EU to derive your approximate location and is then discarded; it is neither stored nor logged in Google Analytics. Data is not linked to your Google account. We do not use advertising features or a link to Google Ads.
Cookies: after you consent, Google Analytics stores the following cookies in your browser:
| Name | Purpose | Retention |
|---|---|---|
_ga | distinguishing visitors (client ID) | 2 years |
_ga_RC7254D5SM | persisting session state | 2 years |
We store your choice in the cookie banner in the strictly necessary cookie consent-settings-v2 (retention 12 months; legal basis Section 25(2) No. 2 TDDDG, Article 6(1)(c) in conjunction with Article 7(1) GDPR).
Legal basis: your consent under Section 25(1) German Telecommunications Digital Services Data Protection Act (TDDDG) (storing and accessing information on your device) and Article 6(1)(a) GDPR (further processing). Google Analytics is only loaded once you have accepted the category “Statistics” in the cookie banner of stahldaten.de. Before that, no connection to Google is established and no Google cookies are set.
Withdrawal: You can withdraw your consent at any time with effect for the future by deselecting the category “Statistics” via the “Cookie settings” link in the footer of stahldaten.de. The Google Analytics cookies are then deleted. The lawfulness of processing carried out before withdrawal remains unaffected.
Retention: user- and event-level data is automatically deleted in Google Analytics after 2 months. Aggregated statistical reports without personal reference are not affected.
Transfer to the USA: it cannot be ruled out that Google transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers are based on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR). In addition, Google has concluded EU standard contractual clauses (Article 46(2)(c) GDPR).
More information: https://policies.google.com/privacy, https://support.google.com/analytics/answer/12017362 and https://business.safety.google/adsprocessorterms/
On matplus.eu, mmpds.eu and stahldaten.de we use Plausible Analytics with your consent, open-source software for statistical analysis of how our websites are used. Plausible is only loaded once you accept the “Statistics” category in the cookie banner. Plausible runs on our own instance operated by us at analytics.matplus.eu; no data is transmitted to Plausible Insights OÜ or other third parties. The servers are located in Germany at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; Hetzner acts as our processor (Article 28 GDPR).
Plausible does not set cookies and does not store any analytics data in your browser. If you decline the ‘Statistics’ category or withdraw your consent, we only store the entry ‘plausible_ignore’ in your browser’s local storage so that Plausible does not send any data. This entry contains no personal data. It is removed automatically if you later consent to ‘Statistics’, or when you delete it in your browser. After you have given your consent, the script reads information from your browser (e.g. user agent, screen size, page visited, referrer). Your IP address is used only briefly, together with your user agent and a random value that changes daily, to calculate a pseudonymous visitor identifier, which therefore changes every day; the IP address itself is not stored. Only aggregated statistics are collected (e.g. pages visited, visit duration, referrer, country, device type, browser, operating system). No user profiles are created.
Purpose: improving our online services on the basis of aggregated usage statistics.
Legal basis: your consent under Section 25(1) German Telecommunications Digital Services Data Protection Act (TDDDG) (access to information on your device) and Article 6(1)(a) GDPR. Your consent is valid for 12 months, after which we ask again.
Withdrawal: you can withdraw your consent at any time with effect for the future by deselecting the “Statistics” category via the “Cookie settings” link in the footer. The lawfulness of processing carried out before withdrawal remains unaffected.
Retention: only aggregated, non-personal statistics are retained.
Our contact and inquiry forms are provided via Formspree, Inc., USA (“Formspree”). When you submit a form, the details you enter (e.g. name, e-mail address, telephone number, message and any other form fields) as well as technical metadata (e.g. IP address at the time of submission) are transmitted to Formspree and forwarded to us so that we can process your inquiry.
Formspree processes data in the USA. The transfer is based on your consent or on processing your request (Art. 6(1)(a) or (b) GDPR) and in compliance with third-country transfer requirements (see no. 3.5.3). Further information: https://formspree.io/legal/privacy-policy.
If you contact us by email, your messages are delivered to our @matplus.eu mailboxes, which are operated for us by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, the Netherlands (“Zoho”), as our processor (Article 28 GDPR). The mailboxes are hosted in Zoho’s EU data centre (Amsterdam, the Netherlands; secondary data centre Dublin, Ireland). In rare cases, employees of Zoho Corporation Pvt. Ltd. (India) may access data for technical support, on the basis of EU standard contractual clauses between Zoho Netherlands and Zoho India (Article 46(2)(c) GDPR) with supplementary measures. According to Zoho, data is not physically transferred out of the EU. For the legal basis for handling your enquiry, see no. 3.3.2. More information: https://www.zoho.com/privacy.html
Our online offer may contain links to third-party websites – to providers who are not affiliated with us. After clicking the link, we no longer have any influence on the collection, processing, and utilization of any personal data that may be transmitted to third parties after clicking the link (such as the IP address or the URL of the site on which the link is located), as the behavior of third parties is naturally beyond our control. We assume no responsibility for the processing of such personal data by third parties.
Within the scope of our business relationship, we require the personal data necessary for the initiation and performance of the business relationship and for the fulfillment of the associated contractual obligations or for which we are legally obligated to collect. Without this data, we are generally unable to conclude or execute a contract with you.
Within the scope of using our online offer, it is particularly necessary for you to provide your IP address. We are unable to address your device without your IP address.
Within the scope of using our contact forms and service chats, you must provide the personal data necessary to respond to the inquiry or fulfill the order. Without this data, we will not be able to answer your inquiries or execute your orders, or an existing communication may need to be terminated.
Our employees and the service providers we engage are obliged to maintain confidentiality and comply with the provisions of applicable data protection laws.
We take all necessary technical and organizational measures to ensure an appropriate standard of protection and to protect your data managed by us, particularly against the risks of unintentional or unlawful destruction, manipulation, loss, alteration, or unauthorized disclosure or access. Our security measures are continuously improved in line with technological developments.
Please use the information provided under “Responsible authority and contact” (see no. 2) to assert your rights. Please ensure that we can clearly identify you.
You have the right to obtain information from us regarding the processing of your data. For this purpose, you can enforce a right to information concerning the personal information we process from you.
You can demand the correction of incorrect data from us and – insofar as the legal prerequisites are fulfilled – the completion or deletion of your data.
This does not apply to data necessary for invoicing or accounting purposes or subject to a statutory retention obligation. If access to such data is not required, the processing will be restricted (see below).
You can demand the restriction of the processing of your data from us, provided the legal requirements are met.
You also have the right to obtain data that you have provided to us in a structured, commonly used, and machine-readable format or, as far as technically feasible, to demand that the data is transmitted to a third party.
If we process data based on a predominantly legitimate interest, as outlined in this privacy policy, you have the right to object to this processing at any time for reasons arising from your particular situation.
We will then discontinue the processing of your data unless we can prove compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
You can also object to the processing of your personal data for direct marketing purposes at any time (“objection to advertising”). Please note that there may be an overlap between your objection and the use of your data in the context of an ongoing campaign.
If you have given us your consent to process your data, you can revoke it at any time with future effect. This also applies to the revocation of declarations of consent granted to us before the validity of the GDPR, i.e., before May 25, 2018. The legality of the processing of your data remains unaffected until revoked.
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) – State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 (0)211 38424-0
Email: [email protected]
https://www.ldi.nrw.de
This online offer is not directed at children under the age of 16.
We reserve the right to make changes to our security and data protection measures as required by technical developments. In such cases, we will also adapt our privacy policy accordingly. Please note the current version of our privacy policy.
Last revised: October 12, 2026