This privacy policy applies to the website stahldaten.de operated by Matplus GmbH. It explains which personal data we process when you visit this website, for what purpose and on what legal basis.
The controller responsible for processing your data is:
Matplus GmbH
Friedrichstraße 51
42105 Wuppertal
Germany
Email: datenschutz@matplus.eu
Data protection officer: You can reach our data protection officer at contact@matplus.eu or at our postal address, marked “– Data Protection Officer –”.
This website is provided on a server operated by us in Germany. The server is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, which acts as our processor (Article 28 GDPR). Fonts, icons and scripts are delivered from our own server; no content is loaded from third-party servers for this purpose.
Each time you access the website, your browser automatically transmits information that we store in log files:
We use this data to provide the website without technical errors, to detect faults and to ensure security (e.g. to investigate attacks). Log files are automatically deleted after 14 days. If an incident requires longer storage for evidence purposes, the affected log files are excluded from deletion until the incident has been resolved; in individual cases they may be passed on to investigating authorities.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure and error-free provision of the website.
On your first visit, a banner asks whether you consent to the “Statistics” category. You can accept all categories, allow only necessary ones, or save your individual choice. Services in the “Statistics” category are only loaded after you have consented.
Your choice is valid for 12 months. You can change it at any time via the “Cookie settings” link in the footer of every page and withdraw your consent with effect for the future. After withdrawal, the statistics services are stopped without reloading the page and the Google Analytics cookies are deleted. The lawfulness of processing carried out before withdrawal remains unaffected.
Legal basis: Section 25(2) no. 2 TDDDG; for related processing Article 6(1)(c) in conjunction with Article 7(1) GDPR and Article 6(1)(f) GDPR.
Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
_ga and _ga_RC7254D5SM (up to 2 years each), see no. 5.1.We do not use any other categories, such as marketing or advertising.
With your consent, we use the web analytics service Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data on our behalf (Article 28 GDPR, Google Ads Data Processing Terms).
Purpose: We want to understand how visitors use stahldaten.de (e.g. which pages are viewed and how visitors reach the website) in order to improve it.
Data processed: pages viewed and interactions (e.g. page views, scrolling, clicks on outbound links, downloads), date and time, time on site, referrer URL, information about device, browser, operating system and screen resolution, approximate location (country, region, city), a randomly generated online identifier (client ID) and a session identifier. According to Google, for access from the EU your IP address is used only on servers in the EU to derive the approximate location and is then discarded; it is neither stored nor logged in Google Analytics. Data is not linked to your Google account. We do not use advertising features, Google Signals or a link to Google Ads; the advertising signals are always set to “denied”.
Cookies:
| Name | Purpose | Storage period |
|---|---|---|
_ga |
Distinguishes visitors (client ID) | 2 years |
_ga_RC7254D5SM |
Stores the session state | 2 years |
Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Before you consent, no connection to Google is established and no Google cookies are set.
Retention: event- and user-level data is automatically deleted in Google Analytics after 2 months. Aggregated reports without personal reference are not affected.
Transfer to the USA: it cannot be ruled out that Google transfers data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR). In addition, Google has concluded EU standard contractual clauses (Article 46(2)(c) GDPR).
Further information: https://policies.google.com/privacy, https://support.google.com/analytics/answer/6004245 and https://business.safety.google/adsprocessorterms/
With your consent, we use Plausible Analytics, open-source software for statistical analysis of website usage. Plausible runs on our own instance at analytics.matplus.eu; the data is not transferred to Plausible Insights OÜ or other third parties. The servers are operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Germany; Hetzner acts as our processor (Article 28 GDPR).
Plausible does not set cookies. After your consent, the script reads information from your browser (e.g. user agent, screen size, page visited, referrer). Your IP address is used only briefly to calculate a pseudonymous visitor identifier together with the user agent and a daily changing random value; the IP address itself is not stored. Only aggregated statistics are recorded (e.g. pages visited, time on site, referrer, country, device type, browser, operating system). No user profile is created.
Purpose: improving the website based on aggregated usage statistics.
Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Retention: only aggregated, non-personal statistics are stored permanently.
With your consent, we use Cloudflare Web Analytics, an audience measurement service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). After your consent, your browser loads the measurement script from static.cloudflareinsights.com and sends information about the page view to Cloudflare, e.g. page visited, referrer, load times and browser and device information. In doing so, Cloudflare also processes your IP address. Cloudflare Web Analytics does not set cookies and does not store any data in your browser. We only receive aggregated statistics, such as page views, countries of origin and load times. No user profile is created.
Purpose: measuring reach and monitoring the stability and loading speed of the website.
Legal basis: your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Processing on our behalf: Cloudflare acts as our processor (Article 28 GDPR).
Transfer to the USA: Cloudflare is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR), supplemented by EU standard contractual clauses (Article 46(2)(c) GDPR).
Retention: how long Cloudflare stores the data is determined by Cloudflare. Further information: https://www.cloudflare.com/privacypolicy/
If you contact us by email or phone, we process your details (e.g. name, email address, phone number and the content of your inquiry) to handle your inquiry. This website has no contact form.
Our @matplus.eu mailboxes are operated for us by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands (“Zoho”), as our processor (Article 28 GDPR). The mailboxes are located in Zoho’s EU data centre (Amsterdam, Netherlands; backup data centre Dublin, Ireland). In rare cases, employees of Zoho Corporation Pvt. Ltd. (India) may access data for technical support; this is based on EU standard contractual clauses (Article 46(2)(c) GDPR) with supplementary safeguards. Further information: https://www.zoho.com/privacy.html
Legal basis: Article 6(1)(b) GDPR if your inquiry relates to the conclusion or performance of a contract; otherwise Article 6(1)(f) GDPR (legitimate interest in answering inquiries).
Retention: we delete your inquiry once it has been dealt with, unless statutory retention obligations apply (e.g. Section 257 HGB, Section 147 AO).
Links to purchase StahlDat SX lead to our shop at shop.matplus.eu. The shop’s own privacy policy applies to the processing of your data there: https://shop.matplus.eu/en/privacy-policy
This website also contains links to third-party websites (e.g. steel producers or LinkedIn). Their content is only loaded when you click a link. After that, we have no influence on how the respective provider processes your data.
For subscribers we provide the StahlDat SX application at app.stahldaten.de. Sign-in runs through our central login service at sso.matplus.eu (OpenID Connect).
Data processed: At login, the application receives from the login service your user ID, name, email address, organisation, user groups and roles and, optionally, the expiry date of your access. For documents we store the date of the last change.
Cookies: sessionid (login, 14 days), csrftoken (protection against forged requests, up to 1 year), default_lang (language, until the end of the browser session). These cookies are strictly necessary (Section 25(2) no. 2 TDDDG). In your browser’s local storage we only keep display settings, for example columns, colour templates and the last selected database. We do not set tracking identifiers.
Maps: Your browser loads map views directly from servers of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. This transmits your IP address and technical browser data. An EU Commission adequacy decision applies to the United Kingdom (Art. 45 GDPR). Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in showing maps in the application.
Emails: We send workflow and wiki notifications via Mailgun [PLACEHOLDER: contract partner and region as in the shop privacy policy]. The login service sends confirmation and password emails via [PLACEHOLDER].
Hosting: [PLACEHOLDER: host and server location of the app and of sso.matplus.eu].
Server logs: IP address, time and requested address, stored for 14 days [PLACEHOLDER: only after checking deletion on the server].
Legal basis: Art. 6(1)(b) GDPR (subscription contract), for logs Art. 6(1)(f) GDPR (security).
Retention: We keep your account for the term of the subscription. After it ends [PLACEHOLDER: deletion period]. We delete it earlier if you ask at datenschutz@matplus.eu.
Your data is only received by the processors named in this privacy policy and by bodies to which we must transfer it due to legal obligations or official or court orders. Transfers to countries outside the EEA only take place with the safeguards described in nos. 5 and 6. You can request a copy of the agreed safeguards using the contact details in no. 2.
You have the following rights regarding your personal data. Please use the contact details in no. 2.
Right to object (Article 21 GDPR): where we process data on the basis of legitimate interests (Article 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf
Phone: +49 (0)211 38424-0
Email: poststelle@ldi.nrw.de
https://www.ldi.nrw.de
You are not obliged to provide us with personal data. However, the website cannot be delivered technically without transmitting your IP address. There is no automated decision-making, including profiling (Article 22 GDPR).
We update this privacy policy when the website or legal requirements change. The version published here applies.
Last updated: October 2026
We use technically necessary storage so that this website works. With your consent we also use Plausible Analytics (no cookies, our own server in Germany), Cloudflare Web Analytics (no cookies) and Google Analytics 4 to analyse how the website is used. With Cloudflare and Google Analytics, data may be transferred to the USA. You can change or withdraw your choice at any time via ‘Cookie settings’ in the footer. More in our privacy policy.