Privacy Policy

Controller

Moving Targets Consulting GmbH
Arndtstraße 34
10965 Berlin, Germany

We take the protection of personal data very seriously. We treat your personal data confidentially and in accordance with data protection legislation and this privacy policy.

Server Log Files

The provider of these pages automatically collects and stores information in server log files that your browser transmits automatically:

  • IP address
  • Pages accessed and time of access
  • HTTP status code
  • Amount of data transferred
  • Browser information, language, version, operating system

This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security).

Cookies and Local Storage

This website sets only technically necessary cookies, and only when you use the function they belong to. No advertising, tracking or social media cookies are used.

  • customer_session: keeps you signed in after you open a sign-in link. Lifetime: 30 days.
  • Report access cookie (one per report): remembers that you entered the password of a password-protected report or opened it through a shared access link. Lifetime: 7 days.
  • admin_session: only for administrators of this site. Lifetime: 24 hours.
  • pr-theme (browser local storage, not a cookie): remembers your choice of light or dark mode. It never leaves your browser.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the function you requested); access to your device is strictly necessary within the meaning of § 25 (2) no. 2 TDDDG.

Website Hosting

Hetzner Online GmbH (Gunzenhausen, Germany). The website runs on our server operated by Hetzner in a data centre in Helsinki, Finland (European Union). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in not maintaining own servers).

Fonts are hosted locally (no Google Fonts CDN).

Reach Analysis with Plausible

We measure how the site is used with Plausible Analytics (plausible.io). Your browser loads the Plausible script from plausible.io. According to the provider, Plausible sets no cookies and does not build profiles of individual visitors; it receives the page address, the referrer and technical data your browser sends, such as browser, operating system, device type and your IP address (which is used to derive an approximate country and not stored in raw form). We use Plausible as processor. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the site).

Customer Accounts and Sign-in by E-Mail Link

Some reports are available to signed-in customers only. To sign in, you enter your e-mail address and we send you a one-time sign-in link. For this we process:

  • your e-mail address and the status and dates of your account (created, activated);
  • a login token, stored only in hashed form, valid for 15 minutes and usable once;
  • your IP address together with the e-mail address entered, to limit abuse (at most 3 sign-in e-mails per address and 10 different addresses per IP address within one hour); these entries are only needed for that one-hour window; expired entries are removed at the next application start;
  • your session (30 days) and the reports assigned to your account.

Our application logs do not contain the sign-in link or the token. Your account stays until you ask us to delete it. Legal basis: Art. 6(1)(b) GDPR (providing the access you requested) and Art. 6(1)(f) GDPR (security and abuse prevention).

Resend (resend.com) delivers the login e-mails as our processor. It receives your e-mail address and the content of the message. The data of the accounts is stored in a database on our server operated by Hetzner Online GmbH (Gunzenhausen, Germany) in a data centre in Helsinki, Finland (European Union; see Website Hosting). Daily backups of this database are kept for 30 days in Hetzner’s object storage, also in Helsinki, Finland (European Union).

Contact

If you write to us by e-mail, we process your e-mail address, your message and the data you give us, to answer your request. Legal basis: Art. 6(1)(b) GDPR for requests about a contract or its preparation, otherwise Art. 6(1)(f) GDPR. We delete the correspondence when the matter is settled and no retention duty applies.

Booking a Call with Calendly

Buttons for booking a call link to Calendly (calendly.com) and open in a new tab. Calendly is not embedded and loads nothing while you read our pages; data is passed to Calendly only when you open the link and book. On calendly.com, Calendly’s own privacy policy applies, and we receive your booking details (name, e-mail address, chosen time and what you enter). Legal basis: Art. 6(1)(b) GDPR (arranging the call you asked for).

Patent Data and Google BigQuery

The reports are computed from EPO PATSTAT patent data in Google BigQuery (EU region) before they are published. The website does not send any data of its visitors or account holders to BigQuery, and no personal data of visitors is processed there.

SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes. An encrypted connection is indicated by the “https://” protocol and the lock icon in the address bar.

Data Security

We have implemented technical and organisational security measures to protect your data against manipulation, loss, destruction, and unauthorised access. These measures are continuously improved in line with technological developments.

Your Rights

Under the EU General Data Protection Regulation, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact kontakt@mtc.berlin or write to the postal address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.

Data Protection Officer

Email: ds-beauftragter@streit-online.de

Changes to This Policy

We reserve the right to amend this privacy policy as necessary. The current version is always available at /privacy.