Privacy Policy

We, Graichen und Emrich Match & Thrive GbR (hereafter "we" or "Match & Thrive"), appreciate your visit to our website and your interest in our company and services. Your privacy is important to us. We take the protection of your data very seriously and treat it with the strictest confidence. Your data is processed solely under the provisions of European data protection law, particularly the General Data Protection Regulation (hereafter "GDPR"). In this Privacy Policy, we provide information on how we process your personal data and your rights as a data subject when using our website.If we refer to this Privacy Policy from external social media platforms, the provisions below apply only to the extent that the processing of personal data takes place within our area of responsibility, unless those platforms provide a separate, overriding privacy policy.

1. Controller and contact for data protection

The controller within the meaning of the GDPR is:
Graichen und Emrich Match & Thrive GbR
Winterfeldtstraße 92
10777 Berlin
Germany
If you have any questions or suggestions relating to data protection, feel free to contact us:
Email: info@matchthrive.com

2. Subject matter of data protection

The subject of data protection is personal data. This includes all information relating to an identified or identifiable natural person (referred to as the "data subject" under the GDPR). This may include details such as your name, address, email address, telephone number, or data arising from your use of our website, such as IP address, usage times, and technical identifiers.

3. Type, scope, purposes of, and legal basis for automated data processing

When you visit our website, we process certain personal data to ensure the proper and secure operation of the site.

3.1 Provision of our website

When accessing our website, the following data is automatically processed:
- Date and time of access
- Duration of visit
- Device type and operating system
- Functions used
- Amount of data transmitted
- Access events
- Referring URL
- IP address
- Domain name
- Screen and viewport resolution
- Pixel ratio

This data is processed under Article 6(1)(f) GDPR to provide our website, ensure its technical functionality, and detect and correct any errors. This is in our legitimate interest. This data is necessary for the use of our website and is processed automatically. We do not use it to personally identify you.

To secure and optimize the delivery of our website, we use the services of Cloudflare (Cloudflare Inc., USA/EU). Cloudflare processes technical access data (e.g. IP addresses, timestamps) on our behalf to detect security threats such as DDoS attacks and to improve website load times. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in the secure and efficient provision of our website).For more information, please see: https://www.cloudflare.com/privacypolicy/

3.2 Cookies

When you visit our website, small text files (“cookies”) may be stored on your device to ensure full functionality, simplify your experience, and secure our content.
We only use technically necessary cookies that do not require your consent (Art. 6 (1) lit. f GDPR in conjunction with § 25 (2) No. 2 TTDSG).
These cookies are essential for operating the website and cannot be deactivated. In particular, we use services provided by Cloudflare Inc. (USA/EU), a provider of web security and content delivery solutions.
‍
In this context, the following technically necessary cookies may be used:
‍__cf_bm: protects against malicious traffic and bots (retention: 30 minutes)
‍cf_clearance: stores the result of a security check (e.g. Captcha) (retention: up to 30 days)
‍__cfruid: manages secure connection routing and load balancing (session-based)

These cookies are essential for the secure availability of our website. You can find more information on Cloudflare’s data practices at: https://www.cloudflare.com/privacypolicy/

4. Individual services and contact options

You may voluntarily submit personal data via contact forms or email (e.g., inquiries). Such data is processed based on Article 6(1)(b) GDPR (contract initiation) or Article 6(1)(f) GDPR (legitimate interest in responding). If required, your data may be shared with external providers (e.g., email or CRM tools) to process your request appropriately.

We will update this Privacy Policy should we offer additional services on our website that involve the processing of personal data.

5. Safeguarding legitimate interests

We also process your data to safeguard our legitimate interests, especially regarding the availability, security, and technical stability of our systems and the ongoing improvement of our services. Data processing is based on Article 6(1)(f) GDPR.

6. Consent

If you have given your consent for specific data processing activities, we will process your data based on Article 6(1)(a) GDPR. Consent is always linked to a specific purpose and can be withdrawn at any time with effect for the future. Withdrawal does not affect the legality of processing carried out before consent was withdrawn.

7. Recipients of personal data

Within our company, only those individuals who need access to your data for the specified purposes will receive it.

We only disclose your data to external recipients if required to process your inquiry, if another legal basis exists, or if you have given your consent. External recipients may include:

Processors: We may engage external service providers (“processors”) for hosting, IT maintenance, communication, or analytics. These providers are contractually bound to our instructions and are regularly monitored. This includes, in particular, Cloudflare Inc. (USA/EU), which we use as a technical service provider to ensure the security and delivery of our website content (e.g. DNS, CDN, DDoS protection).
Public authorities: Where required by law (e.g., tax offices, courts).
Private entities: Cooperation partners, service providers, or other third parties where the transfer is based on consent, contract execution, or legitimate interests.

8. Data transfers to third countries

If we transfer personal data to countries outside the European Economic Area (EEA), we ensure appropriate safeguards are in place following Article 44 et seq. GDPR. These include adequacy decisions by the European Commission, standard contractual clauses, or your explicit consent. You may request copies of the applicable safeguards by contacting us as described in Section 1.

9. Storage duration and deletion

We retain your data only as long as necessary to fulfill the intended purposes or until you withdraw your consent. Where legal retention obligations apply (e.g., under commercial or tax law), data is stored accordingly and deleted once those obligations expire.

Data will be deleted if:

The legal basis for processing no longer applies, and no other legal basis exists
The purpose of the collection is no longer relevant, and no other legal basis exists
You withdraw your consent, and no legal obligation to retain the data exists

10. Your rights as a data subject

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR): You may request information on the data we store about you.
Right to rectification (Art. 16 GDPR): You may request the correction of incorrect or incomplete data.
Right to erasure (Art. 17 GDPR): You may request deletion of your personal data if the legal conditions are met.
Right to restriction of processing (Art. 18 GDPR): You may request processing to be limited.
Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest.
Right to withdraw consent (Art. 7 GDPR): You may withdraw your consent at any time with future effect.
Right to complain (Art. 77 GDPR): You may complain to a data protection supervisory authority.

To exercise any of these rights or for questions regarding the processing of your data, please contact us at info@matchthrive.com. Please ensure that your identity can be verified.

11. Use of third-party services

Our website may contain links to external third-party services or websites (e.g., social media platforms). These services are operated independently, and we have no control over their content or privacy practices. Please refer to the respective privacy policies of the providers for details on data collection and processing.

12. Status

This Privacy Policy is current and valid.
Date: May 25, 2025

Get to know us – no strings attached