info@metaspace-gmbh.de

info@metaspace-gmbh.de

Privacy Policy

Privacy Policy

Information on the processing of personal data on the website of Metaspace GmbH pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)

Metaspace GmbH · Rudolf-Diesel-Str. 2, 85101 Lenting, Germany · Last updated: 11 September 2026

1.  Controller

The controller responsible for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:

Company                                  Metaspace GmbH

Address                                      Rudolf-Diesel-Str. 2, 85101 Lenting, Germany

Represented by                   Munir El Menshawi, Managing Director

Telephone                                +49 8456 9239640

Email                                            info@metaspace-gmbh.de

Commercial register       Local Court (Amtsgericht) of Ingolstadt, HRB 10567

Enquiries concerning data protection may be sent to the contact details stated above.

2.  Scope of this Privacy Policy

This Privacy Policy applies to the corporate website of Metaspace GmbH (the “Website”). The Website presents Metaspace GmbH and its areas of activity (Framework, Technology and Infrastructure) and enables prospective business partners and customers to contact Metaspace GmbH. The Website is not an online shop; contracts are not concluded through the Website.

The Website is directed at businesses. Nevertheless, the persons who visit the Website or contact Metaspace GmbH are natural persons (for example employees or representatives of a business). Their personal data are protected by the GDPR, and this Privacy Policy informs them accordingly.

The relevant legal framework consists of the GDPR (Regulation (EU) 2016/679), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and, with regard to the storage of and access to information on your device, § 25 of the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).

3.  Legal bases

Metaspace GmbH processes personal data only where a legal basis exists. Depending on the processing operation, the following legal bases apply:

  • 6 (1) (a) GDPR – consent: where you have given consent to a specific processing operation. Consent may be withdrawn at any time with effect for the future.
  • 6 (1) (b) GDPR – contract or pre-contractual measures: where processing is necessary to respond to your enquiry, to prepare an offer or to perform a contract to which you are a party.
  • 6 (1) (c) GDPR – legal obligation: where processing is necessary to comply with a legal obligation, for example statutory retention obligations under commercial and tax law.
  • 6 (1) (f) GDPR – legitimate interests: where processing is necessary for the legitimate interests of Metaspace GmbH or a third party, provided that your interests and fundamental rights do not override those interests. Where this legal basis is used, the legitimate interest pursued is stated in the relevant section below.

4.  Hosting and server log files

 The Website is hosted on the servers of an external hosting provider, which processes personal data on behalf of Metaspace GmbH as a processor within the meaning of Art. 28 GDPR on the basis of a data processing agreement.

Each time the Website is accessed, the web server automatically records information transmitted by your browser in server log files. The following data are recorded:

  • IP address of the requesting device;
  • date and time of the request;
  • requested page or file (URL) and the amount of data transferred;
  • referrer URL (the page from which the Website was accessed);
  • browser type and version, operating system;
  • HTTP status code of the

Purpose and legal basis: The processing is necessary to deliver the Website to your device, to ensure the stability and security of the Website (including the detection and defence of attacks and misuse) and to analyse and remedy technical faults. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest of Metaspace GmbH lies in the secure, stable and error-free provision of its Website. Log data are not merged with other data sources and are not used to identify individual visitors.

Retention: Server log files are deleted after 14 days at the latest. Log data are retained beyond this period only where this is necessary to investigate a specific security incident, and are deleted once the incident has been resolved.

5.  SSL/TLS encryption

The Website uses SSL/TLS encryption (recognisable by “https://” in the address bar and the padlock symbol in your browser) to protect the transmission of data between your browser and the web server, including data submitted through the contact form. Data transmitted in encrypted form cannot be read by third parties during transmission.

6.  Contacting Metaspace GmbH

6.1  Contact form

The Website provides a contact form through which you can send enquiries to Metaspace GmbH. The following data are collected through the contact form:

  • first name and last name;
  • email address;
  • telephone number (optional);
  • the content of your message;
  • date and time of

The data you enter are transmitted to Metaspace GmbH in encrypted form and are used solely to process your enquiry and any follow-up questions. They are not disclosed to third parties for their own purposes.

6.2  Contact by email or telephone

If you contact Metaspace GmbH by email or telephone, the personal data you provide (for example your name, contact details, the company you represent and the content of your enquiry) are processed for the purpose of handling and responding to your enquiry. Please note that ordinary email communication is not end-to-end encrypted; please do not send confidential information by unencrypted email.

6.3  Purposes, legal bases and retention for all contact channels

Purposes: handling your enquiry, communicating with you, preparing and following up on business relationships, and documenting business correspondence.

Legal bases: Where your enquiry is directed at the conclusion or performance of a contract to which you are a party, the legal basis is Art. 6 (1) (b) GDPR. Where you contact Metaspace GmbH on behalf of a business or organisation, or where your enquiry is of a general nature, the legal basis is Art. 6 (1) (f) GDPR; the legitimate interest of Metaspace GmbH lies in responding to enquiries addressed to it, maintaining business contacts and conducting its business activities. Where correspondence is subject to statutory retention obligations, the legal basis for continued storage is Art. 6 (1) (c) GDPR.

Retention: Enquiry data are deleted once the enquiry has been fully dealt with and no further communication is to be expected, unless a business relationship arises from the enquiry. Business correspondence that is subject to statutory retention obligations under commercial and tax law (in particular § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO)) is retained for the applicable statutory period and then deleted.

7.  Cookies and similar technologies

Cookies are small text files that are stored on your device by your browser. Similar technologies include, for example, local storage and session storage.

The Website uses only technically necessary cookies and storage items, namely those that are required for the operation of the content management system and the delivery of the pages you request. Such technologies are used on the basis of § 25 (2) no. 2 TDDDG; insofar as personal data are processed, the legal basis is Art. 6 (1)

(f) GDPR, the legitimate interest being the technically error-free and secure provision of the Website. No consent is required for technically necessary technologies.

The Website does not use cookies or similar technologies for web analytics, tracking, advertising or marketing purposes, and does not create usage profiles of visitors.

You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to reject cookies generally, or to delete cookies automatically when the browser is closed. Deactivating technically necessary cookies may limit the functionality of the Website.

Should Metaspace GmbH in future use technologies that require consent, a consent banner will be displayed before such technologies are loaded, and this Privacy Policy will be updated accordingly.

8.  Web fonts

The Website uses web fonts for the uniform display of typefaces. The fonts are hosted locally on the web server of the Website. No connection to servers of third parties is established when fonts are loaded, and no data are transmitted to third parties for this purpose.

9.  Third-party content and services

The Website does not use web analytics or tracking services, does not embed videos, maps or other content from third-party servers, and does not use newsletter, marketing or advertising technologies. No social-media plug-ins are integrated, and Metaspace GmbH does not maintain social-media profiles.

10.  Recipients of personal data and transfers to third countries

Within Metaspace GmbH, access to personal data is granted only to those persons who need it to fulfil the purposes described in this Privacy Policy. Personal data are disclosed to the following categories of recipients:

  • Processors (Art. 28 GDPR) that provide services to Metaspace GmbH under a data processing agreement and act only on its documented instructions, in particular the hosting provider and the service provider responsible for the technical maintenance of the Website;
  • Public authorities and courts, where Metaspace GmbH is legally obliged to disclose data (Art. 6 (1) (c) GDPR);
  • Professional advisers (for example legal and tax advisers), where necessary to assert, exercise or defend legal claims or to fulfil legal obligations (Art. 6 (1) (c) and (f) GDPR).

Metaspace GmbH does not sell personal data and does not disclose them to third parties for their own marketing purposes.

Transfers to third countries: Personal data collected through the Website are processed within the European Union and the European Economic Area (EEA). Should a transfer to a country outside the EU/EEA become necessary in future, Metaspace GmbH will ensure that an appropriate level of data protection is guaranteed, either by an adequacy decision of the European Commission pursuant to Art. 45 GDPR (for the United States: certification of the recipient under the EU-US Data Privacy Framework) or by appropriate safeguards pursuant to Art. 46 GDPR, in particular the Standard Contractual Clauses adopted by the European Commission, and will update this Privacy Policy accordingly.

11.  Retention periods

Metaspace GmbH stores personal data only for as long as is necessary for the purposes for which they were collected or as required by law. The specific retention periods or criteria are stated in the respective sections above. In general:

  • server log files are deleted after 14 days at the latest;
  • enquiry data are deleted once the enquiry has been dealt with, unless a business relationship arises or statutory retention obligations apply;
  • data subject to statutory retention obligations under commercial and tax law are retained for the applicable statutory period (currently up to six years for commercial correspondence and up to eight years for accounting records) and are then deleted.

12.  Your rights as a data subject

You have the following rights vis-à-vis Metaspace GmbH with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR): to obtain confirmation as to whether personal data concerning you are being processed and, if so, access to those data and the information listed in Art. 15 GDPR.
  • Right to rectification (Art. 16 GDPR): to obtain the rectification of inaccurate personal data and the completion of incomplete personal data.
  • Right to erasure (Art. 17 GDPR): to obtain the erasure of personal data where one of the grounds in 17 GDPR applies, unless processing is necessary, for example, to comply with a legal obligation or to establish, exercise or defend legal claims.
  • Right to restriction of processing (Art. 18 GDPR): to obtain the restriction of processing under the conditions of Art. 18 GDPR.
  • Right to data portability (Art. 20 GDPR): to receive the personal data you have provided, where processing is based on consent or on a contract and is carried out by automated means, in a structured, commonly used and machine-readable format, and to transmit those data to another controller.
  • Right to withdraw consent (Art. 7 (3) GDPR): to withdraw any consent you have given at any time with effect for the The lawfulness of processing based on consent before its withdrawal is not affected.

Right to object (Art. 21 GDPR)

Where personal data are processed on the basis of Art. 6 (1) (f) GDPR (legitimate interests), you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. Metaspace GmbH will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to such processing, without stating reasons; the data will then no longer be processed for those purposes.

 

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for Metaspace GmbH is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Germany https://www.lda.bayern.de

To exercise your rights, please contact Metaspace GmbH using the contact details stated in section 1. Metaspace GmbH may request information necessary to confirm your identity before acting on a request.

13.  Automated decision-making and profiling

Metaspace GmbH does not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with the Website.

14.  Obligation to provide personal data

You are not legally or contractually obliged to provide personal data when using the Website. Without the data marked as required in the contact form, however, Metaspace GmbH cannot process your enquiry through the form. You remain free to contact Metaspace GmbH by other means.

15.  Data security

Metaspace GmbH implements appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include SSL/TLS encryption of the Website, access restrictions, and the contractual obligation of processors to implement equivalent measures. Security measures are reviewed and updated in line with technological developments.

16.  Changes to this Privacy Policy

Metaspace GmbH may update this Privacy Policy to reflect changes in the Website, in the services used or in the legal requirements. The current version is always available on the Website. The date of the last update is stated at the top of this document.

Last updated: 11 September 2026