Last Updated: 18/03/2022

Privacy Policy

1. General Information regarding Data Processing
1.1. Niche Mates as Data Controller

Data controller is Niche Mates GmbH & Co. KG, Parkstraße 31a, 15738 Zeuthen/Germany, registered with the commercial register at local court (Amtsgericht) of Cottbus HRA 4022, represented by the managing director Stefan Wirth, phone: +4915735760905, email: oi@nichemat.es, VAT-ID DE351133905 ("we/us" or "Niche Mates").

You can contact our appointed data protection officer:

oi@nichemat.es
1.2. Scope of Data Processing

Personal data are any information relating to an identified or identifiable natural person. Applicable legal provisions are in particular those of the regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016, repealing the directive 95/46/EC, on the protection of individuals with regard to the processing of personal data, on the free movement of such data ("General Data Protection Regulation", GDPR) as well as in the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Telemedia Act (Telemediengesetz, TMG).

1.3. Your Rights

In accordance with the statutory provisions, you as the data subject have the following rights:

To exercise these rights named above you may contact us at any, for example via email to oi@nichemat.es,

You have also the right to lodge a complaint with a supervisory authority at your choice (for example: Brandenburger Beauftragte für Datenschutz und Informationsfreiheit (https://www.lda.brandenburg.de/lda/de/ueber-uns/kontakt/).

An overview of the Data Protection Authorities may be found here:(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html)or(http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080)

1.4. Storing and Deleting Data

The duration of the data storage depends on the respective data category and processing activity. If the storage period is not further specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage ceases to apply. Personal data will not be deleted if storage is required by law and in the event of a possible legal dispute.

1.5. Profiling and automated decision making

We do not use automated decision-making including profiling when processing data concerning our Website or Platform.

1.6. Data Security

For the best possible security of user data our service through the Website is provided via a secure SSL connection between your server and the browser. That means that the data shall be transferred in encrypted form. We have implemented suitable technical and organizational measures.

1.7. Data Processing by Third Parties / Data Processing outside the EU

We may use third party service providers that process your data for the purposes named in this privacy policy. We process your personal data by using third party providers in the EU and the USA, whereas data protection standards applicable in the EU are ensured. A list of the data processors processing data outside the EU and corresponding information is available by request via email to oi@nichemat.es

2. Data processing on our website
2.1. Server Logs

Nature and purpose of data processing

We collect data on each visit to our website nichemat.es ("Website") (so-called Server log files), which include:

Name of the Website visited, date and time of the visit, data amount transferred, information on a successful call, browser type as well as version, operating system of the user, referrer URL (the page visited before), IP address and the requesting provider as well as the following, if a mobile end device is being used:

country code, language, name of device, name and version of operating system.

We use these server log files only for statistical evaluations for the purpose of optimizing our services and in order to guarantee the stability and operational security of the Website.

Legal Basis

When personal data are stored the legal basis for this is Art. 6 (1) f. GDPR based on our legitimate interest in quality assurance and website security.

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

Storage duration

The log files and IP addresses of website visitors, which we process as described below, are deleted within 30 days

2.2. Newsletter

Nature and purpose of data processing

When registering for the newsletter, you have to provide an email address and your name. In our newsletter we inform you about our services and products also described on our Website. In case of registration for the newsletter we also store the IP address, the device name, the mail provider as well as the user"s first and last name and the date of registration. We also analyze how users consume our newsletter. This includes tracking of newsletter openings and how the newsletter is consumed.

Legal Basis

The data processing for sending and analyzing our newsletters as described above is based on your consent (Art. 6 (1) a GDPR).

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

Adequate safeguards for the transfer of your data to countries outside of the EU/EAA are in place. The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

Storage duration

We will process your personal information until your consent is revoked.

Revocation of consent

If you do not want to receive any newsletters by us in the future and/or wish to object to the analysis of your data through such newsletters please use the "unsubscribe" link contained in each newsletter

2.3. Contacting Us

Nature and purpose of data processing

If you send us an e-mail or contact us via an online form, your contact data, name, email address and other data provided respectively, are processed by us in order to deal with your inquiry or to be able to contact you at a later time for follow up questions.

Legal Basis

These data are processed only on the basis of our legitimate interests to offer efficient communications channels to the public (Art. 6 (1) f. GDPR), or on the basis of initiating a or communicating under an existing business relationship (legal basis Art. 6 (1) b. GDPR).

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

Adequate safeguards for the transfer of your data to countries outside of the EU/EAA are in place. The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

3. Data processing in connection with our App (Web)
3.1. Registration and Sign-in

Nature and purpose of data processing

When you register for an account or sign-in to an existing account, Niche Mates needs to process certain personal data such as Profile data (user name, email) IP address Company Data.

Legal Basis

The data processing for creating or accessing your account as described above is based on and necessary for fulfilling a contract (Art. 6 (1) b GDPR).

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

Adequate safeguards for the transfer of your data to countries outside of the EU/EAA are in place. The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

3.2. Payment Processing

Nature and purpose of data processing

When processing and monitoring payments for paid services, you need to provide us with certain information that may contain personal information, such as Profile Data, Company Name, VAT Company Address.

Legal Basis

The data processing for creating or accessing your account as described above is based on and necessary for fulfilling a contract (Art. 6 (1) b GDPR).

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

Adequate safeguards for the transfer of your data to countries outside of the EU/EAA are in place. The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

Storage duration

We will process your personal information only as long as we need to. However, given applicable tax laws, usually we will keep records of payments for 10 years.

3.3. Error Tracking

Nature and purpose of data processing

We use services to track errors on nichemat.es and monitor the availability of the service. In order to do this, we need to process the following information: profile data and usage data (logfiles, device data).

Legal Basis

When personal data are processed the legal basis for this is Art. 6 (1) f. GDPR based on our legitimate interest in quality assurance and app security.

Recipients

Recipient of the data is a service provider in the United States. As processor on behalf, the service provider is obliged to process the data only within the scope of our instructions set forth in a data processing agreement.

Third Country Transfer

The data processing agreement with the services provider includes Standard Contractual Clauses approved by the EU Commission and adequate guarantees that data protection obligations will be met.

4. Cookies

We don't use cookies.