Privacy Policy

Effective Date: August 31, 2026

Last Updated: August 31, 2026

This Privacy Policy explains how MData One (“we,” “us,” or “our”) collects, uses, stores, and protects personal data when you visit our website, contact us, request information or a demonstration, submit a form, or interact with our services, including our LinkedIn advertisements and lead-generation forms.

This Privacy Policy is intended to provide information required under applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and, where applicable, German data protection and telecommunications privacy laws.

1. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide: such as your name, business email address, telephone number, company name, job title, and information included in enquiries or forms.
Technical information: such as your IP address, browser type and version, operating system, device information, referring URL, date and time of access, and technical or security log information.
Usage information: information about how you interact with our website, where collected through cookies or similar technologies in accordance with applicable law.
Information from third parties: where permitted by law, we may receive information from advertising, lead-generation, business or other third-party platforms when you interact with our campaigns or submit information through their services.

2. Legal Basis for Processing (GDPR)

We process personal data only where a lawful basis under the GDPR or other applicable data protection law applies. Depending on the circumstances, these legal bases may include:

Consent (Article 6(1)(a) GDPR): where we have asked for and obtained your consent, including where consent is required for certain marketing activities, analytics, advertising technologies, cookies, or similar processing.
Contractual necessity or pre-contractual measures (Article 6(1)(b) GDPR): where processing is necessary to respond to a request, provide a service, arrange a demonstration, or take steps at your request before entering into a contract.
Legitimate interests (Article 6(1)(f) GDPR): where processing is necessary for our legitimate interests, such as operating and securing our website, managing business relationships, improving our services, preventing fraud or abuse, protecting our legal interests, or conducting appropriate business-to-business communications, provided that these interests are not overridden by your rights and freedoms.
Legal obligations (Article 6(1)(c) GDPR): where processing is necessary for compliance with a legal or regulatory obligation.

Where we rely on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

3. How We Use Your Information

We may use personal data for the following purposes:

To respond to your enquiries and requests.
To arrange and provide product demonstrations or requested information.
To communicate with existing and prospective business customers.
To provide information about our products and services.
To operate, maintain, secure, and improve our website and services.
To measure and improve website performance and user experience.
To measure advertising and campaign effectiveness where permitted by law.
To detect, prevent, and investigate fraud, abuse, security incidents, or unlawful activity.
To comply with applicable legal and regulatory obligations.
To establish, exercise, or defend legal claims.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies. Some technologies are necessary for the operation, security, or functionality of the website, while others may be used for analytics, advertising, measurement, or other optional purposes.

Where applicable law requires consent before information is stored on or accessed from your device, we will obtain the required consent before activating the relevant non-essential technologies. In Germany, this includes the requirements of Section 25 of the Telecommunications and Telemedia Data Protection Act (TDDDG), subject to applicable statutory exceptions.

Where applicable, you can manage or withdraw your preferences for optional cookies and similar technologies through our cookie consent mechanism.

5. Advertising and Lead-Generation Platforms

We may use third-party advertising and lead-generation platforms, including LinkedIn, to promote our services and receive enquiries from prospective customers.

If you submit information through a third-party advertising or lead-generation platform, that platform may independently process your personal data under its own privacy policy and terms. Depending on the service and the information you provide, we may receive details such as your name, business email address, company name, job title, telephone number, and other information submitted by you.

Where third-party platforms process personal data on our behalf, we will use appropriate contractual and organisational safeguards as required by applicable law.

6. Data Sharing and Transfers

We do not sell your personal data. We may share personal data with trusted service providers where necessary to operate our website, provide services, communicate with you, manage customer or prospective-customer relationships, conduct permitted analytics or advertising activities, or otherwise support our business operations.

Depending on our actual services and providers, recipients may include hosting providers, IT and website service providers, CRM and sales platforms, email and communications providers, analytics providers, advertising and lead-generation platforms, professional advisers, and competent authorities where legally required.

Where a service provider processes personal data on our behalf, we will implement appropriate contractual and organisational measures required by applicable data protection law.

Some recipients may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on an applicable lawful transfer mechanism, such as an adequacy decision, the EU Standard Contractual Clauses, or another transfer mechanism permitted under the GDPR.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including where necessary to provide requested services, manage business relationships, comply with legal, accounting, or regulatory obligations, resolve disputes, or establish and defend legal claims.

Retention periods may differ depending on the type of personal data and the purpose for which it is processed. When personal data is no longer required, we will delete it or securely anonymise it, subject to applicable legal retention requirements.

8. Your Rights

If you are located in the EEA, you may have the following rights under the GDPR, subject to applicable conditions and legal exemptions:

Right of access: to request access to your personal data.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data where legally applicable.
Right to restriction: to request restriction of processing in circumstances provided by law.
Right to object: to object to certain processing, including processing based on legitimate interests and direct marketing.
Right to data portability: to receive certain personal data in a structured, commonly used, and machine-readable format where legally applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time.
Rights concerning automated decision-making: where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.
Right to lodge a complaint: to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us using the details provided in Section 13 below. We may need to verify your identity before processing your request. We will respond within the time period required by applicable law.

9. International Access and Restrictions

Our services are primarily intended for business and professional users in the markets in which MData One operates.

Certain services may not be available in particular countries or regions. Geographic restrictions do not, however, remove any data protection rights that may apply to individuals under applicable law.

10. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

These measures may include access controls, authentication, secure hosting, encryption where appropriate, monitoring, backups, and procedures for responding to security incidents.

No method of transmission or electronic storage can be guaranteed to be completely secure.

11. Personal Data Breaches

We maintain procedures for identifying, assessing, and responding to personal data breaches. Where a breach is subject to notification requirements under applicable law, we will notify the competent supervisory authority and affected individuals where and when legally required.

12. Third-Party Links

Our website may include links to websites, platforms, or services operated by third parties. Those third parties have their own privacy policies and practices, which are not governed by this Privacy Policy.

We encourage you to review the privacy information of third-party websites before providing them with personal data.

13. Contact Us

If you have questions about this Privacy Policy, our processing of personal data, or wish to exercise your data protection rights, please contact us at:

MData One
Email: privacy@mdata-one.com
Website: https://mdata-one.com

If applicable, you may also lodge a complaint with the data protection supervisory authority responsible for MData One or with another competent supervisory authority in the EEA.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing activities, technology, or applicable legal and regulatory requirements.

Changes will be published on this page with a revised effective date and, where appropriate, additional notice or consent will be provided as required by applicable law.