Privacy policy

Data Privacy Policy – what matters gGmbH
(‘www.whatmatters.de’)

what matters gGmbH (hereafter ‘what matters’) complies with all applicable data security and data protection laws, including the applicable EU data protection regulations. We treat your personal data confidentially and in accordance with legal requirements. In the following, we would like to inform you about how we handle your data when using our website.


I. Name and address of the responsible party

The party responsible for data collection, processing, and use (‘data processing’) in accordance with the General Data Protection Regulation (GDPR) is:

what matters gGmbH
Hafenpromenade 1-2
44263 Dortmund
Germany
tetf.moatw@erdaisnh
+49 151 61592931


II. Name and address of the data protection officer

For questions regarding the collection, processing, or use of personal data, for access to or the rectification, restricting, or erasure of data, as well as the withdrawal of consents granted, the data subject may contact the data protection officer of ‘what matters’:

DATA PROTECTION OFFICER

Nora Zirkelbach
awlntbee.m.arioa@tkcsehdratrhz
+49 151 61592931

If you have any questions regarding the processing of your personal data or concerning this data privacy policy statement, please do not hesitate to contact us. Similarly, you may also contact our data protection officer in order to exercise your right to modify, erase, or rectify your personal data, restrict the processing of your personal data, or to exercise your right to object.

Irrespective of this, you also have the right to contact the competent supervisory authority at any time regarding data processing by ‘what matters’.

 

III. General information on data processing

‘what matters’ is responsible for the data processing that takes place as a result of using this website. The employees of ‘what matters’ have been obligated to maintain data secrecy and have also been made aware of the particular importance of data protection.

You can always access, print, or download this data privacy policy statement at any time at https://whatmatters.de/en/datenschutz.htm.


1. Extent of the processing of personal data

If you only call up our website, personal data is collected only to the extent technically necessary, insofar as this is required to make the website available and is not otherwise specified differently in this data privacy policy statement.

The collection and use of personal data is normally carried out only if you have given your consent, or if obtaining your advance consent is not possible due to practical reasons, or if such data processing is permitted by law. Collected data will be deleted immediately if it is no longer required and the deletion does not conflict with any legal obligations to retain data.


2. Legal basis for the processing of personal data

We process your personal data on the basis of various legal provisions. These are presented below:

 

Reason for processing:
Performance of a contract

Legal basis in the GDPR: Art. 6 para. 1 b)

Explanation:
Processing is carried out only to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless explicitly stated otherwise, data processing by ‘what matters’ is carried out only to this extent.


Reason for processing:
Legitimate interests

Legal basis in the GDPR: Art. 6 para. 1 f)

Explanation:
Processing takes place insofar as there is a legitimate interest of ‘what matters’ and no opposing overriding interests on your part are apparent. The concrete legitimate interest is explained in this data privacy policy statement within its description of data processing.


Reason for processing:
Consent

Legal basis in the GDPR: Art. 6 para. 1 a)

Explanation:
Data processing takes place only insofar as you have expressly given your consent and on the basis of having provided transparent information about the nature and extent of this processing. You can withdraw your consent at any time. However, any processing that has taken place up to that point will not be affected.


Reason for processing:
Legal compliance

Legal basis in the GDPR: Art. 6 para. 1 c)

Explanation:
Processing takes place insofar as it is necessary for the fulfilment of German or EU legal obligations.


3. Data deletion and storage period

We delete your personal data as soon as the legal basis for their processing ceases to apply and no legal retention obligations exist. A retention obligation may exist if this is specified by EU or national legislators in regulations, laws, or other provisions to which ‘what matters’ is subject.


IV. Provision of the website and creation of log files

1. Description and extent of data processing

For establishing and maintaining the connection during the purely informational use of this website, only such server log files as your browser transmits to us are automatically collected and stored. Therefore, when the website is only viewed, it is the following data, which is technically necessary for displaying the website and for IT security, that is collected:

  • your IP address,
  • the HTTP status code,
  • the browser type and browser version,
  • the referrer URL (i.e. the previously visited page),
  • time and date of the server request,
  • the files transferred,
  • as well as the size of the files transferred during the connection.

The personal data specified above is also stored in the server’s log files. This stored data is not combined with any other data about you.

Furthermore, ‘what matters’ uses cookies as well as analytics services. You will find more detailed explanations below in this data privacy policy statement.


2. Legal basis for the processing of data

The legal basis for the temporary storage of personal data and log files is Art. 6 para.1 f) of the GDPR (see also above at III. 2.).


3. Purpose of data processing

The temporary storage of data in log files is absolutely necessary to ensure the uninterrupted functionality of the IT systems and the website’s technologies, as well as for IT security. It is also necessary for enabling the correct display of the website and for optimizing the website. It therefore constitutes a legitimate interest within the meaning of Art. 6 para. 1 f) of the GDPR. The data collected in this context will not be used for marketing purposes.


4. Duration of storage

Stored log files are deleted within 30 days, provided there are no legal obligations to retain data.


V. Use of cookies

1. Description and extent of data processing

‘what matters’ uses cookies in the operation of its websites. A cookie is a small text file containing information and is transmitted by your browser. If you permit the use of cookies in your browser, this does not pose a risk to your computer. When you visit the website, technically necessary cookies are placed, as well as those for web analytics and website optimization.

For technical reasons, session cookies are used. These are technically necessary for establishing and maintaining the connection to the website. These cookies do not contain any personal data and are automatically deleted when you close your browser.

In addition to technically necessary cookies, web analytics cookies are also used, for which the same applies, unless otherwise specified in this data privacy policy statement. When you call up this website, we inform you about the use of cookies for analysis purposes and also refer you to this data privacy policy statement.


2. Legal basis for the processing of data

The legal basis for the processing of personal data in the case of technically necessary cookies and of cookies for web analytics purposes is Art. 6 para. 1 f) of the GPDR (see also above at III. 2.).


3. Purpose of data processing

Technically necessary cookies are used for the purpose of ensuring the full functionality of this website. Web analytics cookies are used so that the quality of the website and its content can be improved. These purposes constitute a legitimate interest behind the data processing done by ‘what matters’.


4. Duration of storage, as well as blocking and clearing cookies

Cookies are stored in your browser and transmitted from there to our website. In your browser settings, you can block the storage of cookies. However, this may result in certain functions of the website not being available. In your browser, you can also clear cookies at any time.


VI. Third-party recipients of personal data

Only in selected cases is personal data transmitted to third-party service providers. These have been carefully chosen by ‘what matters’ and are bound by its instructions. Third-party recipients of personal data include technical service providers for the provision and optimization of the website as well as providers of additional services such as the sending of newsletters.

Your personal data will generally be stored within the EU and managed in accordance with our privacy policy and the GDPR, unless otherwise specified in this data privacy policy statement. Should personal data be transmitted outside the EU to a company affiliated with ‘what matters’ or to other recipients, this will only be done on the basis of a permissible legal reason and in compliance with the legal requirements of the GDPR. If you would like to know more about the protection of the transmitted data, please contact our data protection officer.


1. Website analytics services

Website analytics services used by ‘what matters’ are done so on the basis of Art. 6 para. 1 f) of the GDPR. These services ensure a needs-oriented design and the continuous optimization of our websites. In addition, these tools are used to record website usage statistics and to evaluate this for the purpose of optimization. These interests are to be considered legitimate within the meaning of the aforementioned provisions.


1.1. Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google, Inc.
Google Analytics uses cookies that are stored on your computer and that enable an analysis of your usage of our websites. The information generated by the cookies about your use of these websites is usually transmitted to a Google server in the USA and stored there.

However, your IP address will be truncated and thus anonymized before transmission by Google within the European Union or into other member states of the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. IP anonymization is activated on our websites. ‘what matters’ has commissioned Google to use this information for the purpose of evaluating your use of this website, compiling reports on website activity, and providing ‘what matters’ with other services relating to website activity and internet usage.

The IP address transmitted by your browser to Google Analytics is not merged by Google with other data. You can block the use of cookies by selecting the appropriate settings on your browser, but if you do so, the full functionality of this website might no longer be available. The transmission of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google can also be blocked by downloading and installing the browser plugin available at this link: http://tools.google.com/dlpage/gaoptout?hl=de.

Instead of the browser add-on, especially with browsers on mobile devices, you can also prohibit data collection by Google Analytics by setting an opt-out cookie that blocks the future collection of your data when visiting our websites. To do so, you can click on this link: <a href="javascript:gaOptout()">deactivate Google Analytics</a>. This opt-out cookie is valid only in this browser and only for our websites and is stored on your device. If you clear the cookies in this browser, you will need to set the opt-out cookie again.

 

1.2. Google Tag Manager

This website uses Google Tag Manager, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’), to embed analytics and other tools into the website. The Google Tool Manager triggers other tools, which may in turn collect data. However, the Google Tag Manager does not access this data.

You can get more information about Google’s privacy policy here: http://www.google.de/policies/privacy/


VII. Data subject rights

If personal data of yours is processed by ‘what matters’, you are a ‘data subject’ according to Art. 4 para. 1 of the GDPR. As a result, you have the following rights regarding your personal data:

  • Right of access according to Art. 15 of the GDPR
  • Right to rectification or erasure according to Art. 16 and Art. 17 of the GDPR
  • Right to restriction of processing according to Art. 18 of the GDPR
  • Right to object to processing according to Art. 21 of the GDPR
  • Right to data portability according to Art. 20 of the GDPR
  • Right to withdrawal of consent according to Art. 7 para. 3 of the GDPR

As a visitor to our websites, you are not subjected to automated decision-making within the meaning of Art. 22 of the GDPR.

If you do not agree with the way we process your data, please contact our data protection officer, specified above at II. You also have the right to lodge a complaint with the supervisory authority responsible for your jurisdiction in accordance with Art. 77 of the GDPR.