Privacy policy

Last updated: 30 September 2026

This notice covers the public MatterData website at matterdata.eu and its documentation at docs.matterdata.eu. It does not cover future hosted apps, which will need their own privacy information.

Who is responsible?

The controller under the General Data Protection Regulation (GDPR) is:

Email: contact@hartenfeller.dev
Phone: +49 (0) 157 88 207 815

When you visit

Your browser sends the technical information needed to deliver the website, including your IP address, the requested URL, the time of the request and HTTP headers such as your browser information and, where supplied, the referring page. We process this information to deliver the pages and maintain a secure, reliable service. The legal basis is our legitimate interest in operating this website under Article 6(1)(f) GDPR.

Routine web access logging is disabled. Request data is processed for the connection; technical errors and security events may still appear in system diagnostics. These diagnostics use the server’s storage-based log rotation and currently have no fixed age-based retention limit. They are used for operation and troubleshooting, not visitor analytics.

Hosting

The website runs on Oracle Cloud Infrastructure in Frankfurt, Germany (eu-frankfurt-1). Oracle provides the infrastructure and may process connection data and operational information needed to deliver and secure its services.

Oracle is a global provider. Hosting in Frankfurt does not exclude processing outside the European Economic Area, including by Oracle affiliates and service providers. Oracle’s Services Privacy Policy explains its processing of service and operational data and the transfer safeguards it uses, including EU Standard Contractual Clauses where applicable. You can contact us to request information about the safeguards relevant to your data.

Cookies, analytics and external content

We use self-hosted Vince analytics on the website and documentation to understand which pages people use. The script and its requests are served through each website’s own hostname. Vince runs on our server in Frankfurt; we do not send these analytics to an external analytics service.

Analytics records page paths, referring sources, campaign parameters, approximate location and browser/device information. Your IP address and browser information are processed to derive a visitor identifier and approximate location. Vince stores the derived identifier rather than the raw IP address. This identifier can link visits; it is not an account name.

The visitor script sets no cookies and stores no identifier in your browser. Analytics records currently have no automatic age-based deletion. The dashboards require an administrator login. We use the records to understand use of the website and improve its content, not for advertising.

Fonts, styles and images are served from this website. External links connect to another provider only when you follow them. Connections use HTTPS. The private analytics dashboard uses a session cookie when its administrator signs in.

When you contact us

If you contact us by email or phone, we process the contact details and information you provide to answer your enquiry. Our email and telecommunications providers process the information needed to deliver these communications. The legal basis is Article 6(1)(f) GDPR (our interest in responding to enquiries), or Article 6(1)(b) GDPR where the enquiry concerns a contract or steps you ask us to take before entering one.

Incoming email is routed through Forward Email to our mailbox provider. Their services process the sender and recipient addresses, message contents and technical delivery information as needed to deliver the message.

We retain correspondence for as long as needed to handle the enquiry and any follow-up, or to meet applicable legal retention obligations or establish, exercise or defend legal claims. Providing this information is voluntary; without contact details and the relevant information, we may be unable to respond.

Your rights

Subject to the GDPR’s conditions, you may request access to your personal data, correction, deletion, restriction of processing and data portability (Articles 15–20 GDPR).

You may object, on grounds relating to your particular situation, to processing based on our legitimate interests (Article 21 GDPR). If processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing. Contact us using the details above to exercise your rights.

You may also complain to a data protection supervisory authority, in particular in the country of your habitual residence, workplace or the alleged infringement. Our local authority is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW).

We do not use your data for automated decision-making or profiling.