Privacy Policy

We, Match + Thrive Systems GmbH (“we” or “Match + Thrive”), are pleased that you are visiting our website and are interested in our software. Your privacy matters to us. We take the protection of your personal data very seriously and treat it as strictly confidential. We process your data exclusively in accordance with European data protection law, in particular the General Data Protection Regulation (“GDPR”).

1. Controller and data protection contact

The controller within the meaning of the GDPR is:
Match + Thrive Systems GmbH
Winterfeldtstraße 92
10777 Berlin
Germany
Represented by its managing directors Rudine Hitz-Emrich and Laura Graichen
Email: info@matchthrive.com

Register court: Amtsgericht Charlottenburg (Berlin)

Commercial register number: HRB 292848 B

2. Subject matter of data protection

Data protection covers personal data, meaning any information relating to an identified or identifiable natural person. This may include your name, postal address, email address or telephone number, as well as data generated when you use our website, such as your IP address, times of use and technical identifiers.

3. Type, scope, purposes and legal basis of automated data processing

When you visit our website or use our software, we process certain personal data to ensure that both run properly and securely.

3.1 Provision of our website

When you access our website, the following data is processed automatically: date and time of access, duration of the visit, device type and operating system, features used, volume of data transferred, referring URL, IP address, domain name, and screen and viewport resolution.

This processing is based on Art. 6(1)(f) GDPR and serves to provide our website and keep it technically functional.

To secure and optimise our website, we use the services of Cloudflare (Cloudflare Inc., USA/EU). More information: cloudflare.com/privacypolicy

3.2 Cookies

We only use strictly necessary cookies (Art. 6(1)(f) GDPR in conjunction with Section 25(2) No. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act):

• __cf_bm: protects against malicious traffic and bots (30 minutes)
• cf_clearance: stores successfully completed security checks (up to 30 days)
• __cfruid: load balancing and secure connection routing (session)

More information: cloudflare.com/privacypolicy

3.3 Registration and use of the software

When you register to use Match + Thrive, we collect your name and email address to set up and manage your account and to perform the contract. This processing is based on Art. 6(1)(b) GDPR (performance of a contract or steps taken prior to entering into a contract).

3.4 Processing of candidate data by our customers

When using our software, our customers, i.e. the companies that use Match + Thrive, process personal data of job applicants. In doing so, we act as a processor within the meaning of Art. 28 GDPR; the respective customer remains the controller for this processing. The details are set out in a separate data processing agreement concluded with each customer.

3.5 Hosting and AI processing

Our software is hosted and processed exclusively in the EU, by Scaleway (France/EU). The AI models we use run on Amazon Bedrock in an EU region. We have data processing agreements in place with both providers; no processing takes place outside the EU.

4. Individual services and contact options

You may voluntarily provide us with personal data via contact forms or by email. This processing is based on Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

5. Safeguarding legitimate interests

We also process your data to safeguard our legitimate interests, in particular the availability, security and technical stability of our systems. The legal basis is Art. 6(1)(f) GDPR.

6. Consent

Where you have given us your consent, we process your data on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

7. Recipients of personal data

We only share your data where this is necessary to handle your enquiry or to perform a contract, or where another legal basis applies. External recipients may include: processors (including Cloudflare Inc. for operating the website, Scaleway for hosting the software and Amazon Web Services for AI processing via Amazon Bedrock), public authorities (where required by law) and private bodies (on the basis of consent, performance of a contract or legitimate interests).

8. Data transfers to third countries

We do not transfer personal data to countries outside the European Economic Area (EEA). All processing, including by the AI models we use, takes place exclusively within the EU.

9. Storage period and deletion

We only store your data for as long as is necessary for the purposes pursued or as required by statutory retention obligations. Account data is deleted when the contract ends, unless statutory retention obligations require otherwise. Data is also deleted once the legal basis no longer applies, the purpose has lapsed or you have withdrawn your consent.

10. Your rights as a data subject

Under the GDPR, you have the following rights: right of access (Art. 15), right to rectification (Art. 16), right to erasure (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), right to object (Art. 21), right to withdraw your consent (Art. 7) and right to lodge a complaint with a data protection supervisory authority (Art. 77).

To exercise these rights, please contact: info@matchthrive.com

11. Use of third-party services

Our website may contain links to external services. These are operated independently; please refer to their respective privacy policies.

12. Status

This Privacy Policy was last updated on 16 October 2026.