Data Policy


I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

mStats DS GmbH
c/o Marcel Hebing
Erich-Boltze-Str. 3
10407 Berlin

Email: info@mstats.io

Websites:

  1. impactdistillery.com
  2. mstats.io

II. Name and address of the data protection officer

The data protection officer of the person responsible is:

Dr. Marcel Hebing
mStats DS GmbH
Erich-Boltze-Str. 3
10407 Berlin

Email: marcel.hebing@mstats.io

III. General information on the processing of personal data

1. Scope of processing personal data

We only process personal data of users of our website if it is necessary to provide a functional website as well as our contents and offers. The processing of personal data of users of our website only takes place if the processing of the data is permitted by legal regulations. The processing of personal data is geared to the objective of protecting fundamental rights and freedoms (Article 1(2) GDPR).

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of mStats DS GmbH or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

3. Data erasure and retention period

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject intended it. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

IV. Website provision and logging

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the client computer.

The following data is collected:

  • the IP address of the client computer
  • information about the browser type and version used (user agent)
  • the operating system of the client computer
  • date and time of access
  • websites from which the user’s system reaches our website (referrer)
  • websites accessed by the user’s system via our website
  • status codes
  • amount of data
  • used protocols

The data is also stored in the log files of our system. This data is kept separated from other personal data of the user.

All our websites are hosted on eu.pythonanywhere.com

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by our system is necessary to enable the website to be delivered to the user’s computer. For this reason the IP address of the user must be kept for the duration of the session.

The data is stored in log files to ensure the functionality of the website. In addition, the data allows us to optimize the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this context.

4. Data retention period, possibility to object and erase

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after 60 days at the latest.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. According to Art. 21 para. 1 sentence 2 1st alternative GDPR there is therefore no possibility to object on the part of the user.

V. Improved the user experience

1. Description and scope of data processing

We use procedures to make our website more user-friendly and to increase the security of the website. Some elements of our website require that the calling browser can be identified even after a page change.

To this end, we use cookies, among other things, in which the following data is stored and transmitted:

  • language settings
  • log-in information
  • entered search terms

We also incorporate external media, such as videos from YouTube or maps from Google Maps.

The data will not be stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for processing personal data to improve the user experience is Art. 6 para. 1 lit. f GDPR.

3. Purpose of data processing

The purpose of the processing is to simplify the use of websites for users and to ensure the protection of the website. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

  • accepting language settings
  • remembering search terms
  • commenting on posts
  • login of registered user

The user’s data collected through technically necessary cookies are not used to create user profiles.

4. Data retention period, possibility to object and erase

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies, either directly in the browser or with the help of tools like uBlock Origin or Privacy Badger. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

When integrated content is called up, personal data is transmitted to the provider of this content, among other things. The access to these contents is subject to the full control of the users. By changing the settings in your browser, you can deactivate or restrict the access to external content, either directly in the browser or with the help of uBlock Origin or NoScript.

The integration of Google ReCaptcha is mandatory for the security of the website if you want to comment on articles on the website or log in. According to Art. 21 para. 1 sentence 2 1st alternative GDPR there is therefore no possibility of objection on your part.

VI. Web analytics

1. Description and scope of data processing

We use the web analytics tool Matomo to improve the quality of our website and its content.

If you have activated ‘Do Not Track’ in your browser or set the following opt-out cookie, no personal data will be collected, stored or used for usage analysis.

Otherwise we collect, store and use the following data:

  • web analytics cookie with unique ID
  • the IP address of the client (anonymized to 2 bytes)
  • information about the browser type underlying engine, version used and existing plugins
  • the operating system of the client
  • the screen resolution of the client
  • the probable country from which the access is made
  • the language set in the browser
  • date and time of access
  • websites from which the user’s system reaches our website (referrer)
  • websites accessed by the user’s system via our website

The IP address is shortened to 2 bytes directly during the collection and thus anonymized.

2. Legal basis for data processing

The legal basis for the processing of personal data for usage analysis is Art. 6 para. 1 lit. f GDPR

3. Purpose of data processing

The analytical tool is used to improve the quality of our website and its content. This tells us how the website is used and enables us to continually optimise our offering.

4. Data retention period, possibility to object and to erase

The web analytics cookie with unique ID is valid until the end of the browser session. The IP address is shortened to 2 bytes directly during the survey and thus made anonymous. This means that at the latest after the end of your browser session the data is no longer personal.

You can activate ‘Do Not Track’ in your browser or set the following opt-out cookie to prevent the collection, storage and use of personal data for usage analysis. The opt-out cookie is valid for two years.

VII. Rights of the data subjects

If personal data relating to you are processed, you are a data subject according to the GDPR, and you have the following rights vis-à-vis the mStats DS GmbH:

1. Right of access

You have the right to request information from us as to whether we process the personal data relating to you. In the case that we are, this also includes information about the data relating to you, as well as the information specified in Art. 15 para. 1 lit. a to h GDPR.

2. Right to rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request we complete the information you believe is incomplete.

3. Right to restriction of processing

You have the right to request us to restrict the processing of data relating to you if this request is covered by one of the reasons in Art. 18 para. 1 lit. a to d GDPR.

4. Right to erasure

You have the right to request us to delete the data relating to you, provided that this request is covered by one of the reasons in Art. 17 para. 1 lit. a to f GDPR and none of the exceptions in Art. 17 para. 3 lit. a to e GDPR applies.

5. Right to be notified

You have the right to ask us to inform you of the parties to whom we have transmitted data relating to you, unless this involves disproportionate effort on our part.

6. Right to data portability

You have the right to data transferability if data processing is carried out using automated procedures and the legal basis is Article 6(1)(b) GDPR.

7. Right to object

You have the right to object to the processing insofar as the legal basis of the processing is Art. 6 para. 1 lit. e or f GDPR.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with any supervisory authority if you believe that the processing of data relating to you is illegal.

The data protection supervisory authority responsible for the mStats DS GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Friedrichstr. 219
10969 Berlin
Germany

Phone: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
E-Mail: mailbox@datenschutz-berlin.de