DigiVET UG (haftungsbeschränkt)

Privacy policy

Great that you're interested in Maty and DigiVET UG (haftungsbeschränkt). Protecting your personal data is important to us. On this page we explain which personal data we collect when you visit our website matyapp.de, what we use it for, on what legal basis this happens, and what rights you have. The basis for this is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications-Digital-Services-Data Protection Act (TDDDG).

You can generally visit our website without providing us with any personal data. We only process personal data to the extent necessary to provide the website, to deliver the services you request (for example, trial access, newsletter, contact request), or due to legal requirements. Where we need your consent for a processing activity, we obtain it separately.

Please note: The transmission of data over the internet, for example by email, can have security vulnerabilities. Complete protection against access by third parties is not technically possible. You are therefore welcome to send us confidential information by phone or by post at any time.

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:
DigiVET UG (haftungsbeschränkt)
Bergedorfer Str. 13
27726 Worpswede
Germany

Tel.: 04792 9879035
E-mail: hello@matyapp.de
Webseite: matyapp.de

2. Data Protection Officer

Our Data Protection Officer is:
Vanessa Auferkamp
DigiVET UG (haftungsbeschränkt)
Bergedorfer Str. 13
27726 Worpswede
Germany

Tel.: 04792 9879035
E-mail: hello@matyapp.de

If you have any questions or concerns about data protection, you can contact our Data Protection Officer directly at any time.

3. Terms

In this privacy policy we use the terms of the GDPR. The most important ones explained briefly:

Personal data are all information relating to an identified or identifiable individual – for example, name, address, email address, phone number, but also an IP address or an identifier in a cookie.

Processing is any handling of personal data, such as collecting, storing, using, transmitting or deleting it.

Controller is the entity that decides on the purposes and means of processing – here, DigiVET UG (haftungsbeschränkt).

Processor is a service provider who processes personal data on our behalf and according to our instructions, for example our hosting provider. We conclude data processing agreements with such service providers pursuant to Art. 28 GDPR.

Consent is your voluntary, informed and unambiguous agreement to a specific processing activity. You may withdraw consent already given at any time, with effect for the future.

4. Hosting and Server Log Files

This website is hosted by dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

Every time our website is accessed, your browser automatically transmits technical information that the server stores in what are known as log files. This includes: the IP address of the accessing device, the date and time of access, the page or file accessed, the amount of data transferred, notification of successful retrieval, browser type and version, the operating system, the previously visited page (referrer), and the internet service provider.

We do not analyze this data to draw conclusions about you personally. We need it to deliver the website technically, to ensure its stability and security, and to be able to detect and clarify attacks or misuse. The legal basis is our legitimate interest in a secure and stable operation of the website (Art. 6(1)(f) GDPR). The log files are stored separately from other personal data and are automatically deleted after a short period, unless they are needed for longer to clarify a specific security incident.

5. Cookies and Similar Technologies

Cookies are small text files that your browser stores on your device. They usually contain an identifier that allows your browser to be recognized on subsequent visits. Cookies do not cause any damage and do not contain viruses.

On this website we use, on the one hand, technically necessary cookies that are required for the display and function of the site (for example, to store your language setting). The legal basis for this is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. On the other hand, services we embed use cookies and comparable technologies, in particular Google Analytics, Google reCAPTCHA and Digistore24. Which data is processed and how you can object is explained in the respective sections of this policy.

You can delete, restrict or completely block cookies at any time in your browser settings and have yourself warned before new cookies are set. If you disable cookies, not all functions of this website may be available.

6. Contacting Us by Email, Phone or Contact Form

If you contact us by email, phone or via the contact form on our website, we process the data you provide (such as name, email address, phone number, practice name and the content of your message) in order to process and respond to your inquiry. For the contact form, we additionally store the date and time it was submitted.

The legal basis is Art. 6(1)(b) GDPR, insofar as your inquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). We do not pass your data on to third parties. We delete it once your inquiry has been finally dealt with and no statutory retention obligations apply.

7. Google reCAPTCHA

To protect our contact form from automated use (spam, bots), we use the Google reCAPTCHA (version 3) service on the “Contact” page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

reCAPTCHA analyzes the behavior of the website visitor in the background in order to distinguish whether an input is made by a human or an automated program. To do this, data is already transmitted to Google when the contact page is loaded, including your IP address, information about browser and operating system, the time spent on the page, and mouse movements and keyboard input on the page; Google may also set cookies. The analysis runs automatically as soon as the contact page is accessed; an indication of this is the reCAPTCHA logo displayed. In the process, data may also be transferred to Google LLC servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Processing is based on our legitimate interest in protecting our website from abusive automated access and spam (Art. 6(1)(f) GDPR). Further information: https://policies.google.com/privacy and https://www.google.com/recaptcha/about/

8. Newsletter, Trial Access and Sign-Up Forms (Quentn)

On our website you can subscribe to our newsletter, request trial access to the Maty software, or sign up via forms for other offers. Which data is collected in each case depends on the respective form; usually this is your email address, your name and, where applicable, practice name and phone number.

To send emails, manage sign-ups, and provide the forms, we use the service Quentn from Quentn.com GmbH, Friedrich-Ebert-Straße 51, 14469 Potsdam, Germany (“Quentn”). The forms are loaded as an iframe from Quentn's servers. When a page containing such a form is accessed, a connection to Quentn is established; in the process your IP address and technical information about your browser are transmitted to Quentn, even if you do not fill out the form. Quentn processes all data on our behalf on servers within the European Union; a data processing agreement pursuant to Art. 28 GDPR has been concluded. Further information: https://quentn.com/datenschutz

Sign-Up and Double Opt-In: After signing up, you will receive an email with a confirmation link. Only once you click this link does the sign-up take effect. This way we ensure that no one enters your email address without your knowledge. We log the sign-up and the confirmation, each with date, time and IP address, in order to be able to prove consent.

Content and Analytics: With the newsletter we inform you about Maty, new features, offers and topics relating to veterinary practice. Our emails contain tracking pixels and personalized links, which allow us to evaluate whether and when an email was opened and which links were clicked. We use this analysis to improve our content and adapt it to the interests of recipients.

Legal Basis and Withdrawal: Processing is based on your consent (Art. 6(1)(a) GDPR); for trial access requests, additionally based on Art. 6(1)(b) GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of every email or with a message to hello@matyapp.de. After withdrawal, we delete your data from the distribution list; we retain the sign-up log data as proof of the original consent for as long as required for legal protection.

9. Meta (Facebook and Instagram)

On our website, we link to our company page on Facebook and our profile on Instagram. Both services are operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). These are simple links, not social media plugins: merely visiting our website does not transmit any data to Meta. Only when you click on one of the links will you be redirected to Meta's pages; from that point on, Meta's privacy policy applies (https://www.facebook.com/privacy/policy/). If you are logged into Facebook or Instagram at the time, Meta can attribute the visit to your account.

To operate our Facebook page and our Instagram profile, Meta provides us with anonymized usage statistics ("Page Insights"). We are jointly responsible with Meta for this processing within the meaning of Art. 26 GDPR; the basis is Meta's agreement on Page Insights (https://www.facebook.com/legal/terms/page_controller_addendum). You can assert your rights against both us and Meta. The legal basis is our legitimate interest in effective information and communication with prospective clients and customers (Art. 6(1)(f) GDPR).

In addition, we run advertisements via Meta (Meta Ads). Target audiences are selected using the criteria provided by Meta; personal data of our website visitors is not transmitted to Meta for this purpose as long as no Meta Pixel is embedded on our website. Should we use a Meta Pixel or the Conversions API in the future, we will update this privacy policy accordingly and, where required, obtain your consent.

10. Google Tag Manager and Google Analytics 4

On this website, we use Google Tag Manager. Google Tag Manager is a service that allows website tags (small code elements) to be managed and implemented centrally. The Tag Manager itself does not create user profiles and does not store cookies; however, it triggers the implementation of Google Analytics described below. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Via the Tag Manager, we integrate Google Analytics 4, a web analytics service by Google. Google Analytics uses cookies (including "_ga" and "_ga_..." with a retention period of up to two years) and comparable technologies to analyze the use of our website. In particular, this includes the pages visited, the time spent on the site, the source of access (referrer), the device and browser used, and a pseudonymous user ID. With Google Analytics 4, the IP address is only processed in truncated form and is not stored. The information generated is transmitted to and stored on a Google server; this may also involve transfer to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework.

We also use the "Google Signals" feature. If you are signed into your Google account and have activated personalized advertising there, Google may combine usage data across devices and use it for demographic and interest-based reports. You can deactivate this association in your Google account settings under "Personalized advertising."

This processing takes place for the purpose of reach measurement as well as the analysis and optimization of our website, based on our legitimate interest in the statistical evaluation and improvement of our online offering (Art. 6(1)(f) GDPR). User and event data stored in Google Analytics are automatically deleted after 14 months at the latest.

You can prevent Google Analytics from collecting your data by installing the browser add-on for deactivating Google Analytics at https://tools.google.com/dlpage/gaoptout or by preventing the setting of cookies in your browser settings, or by deleting cookies that have already been set. Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245

11. Fonts (locally hosted)

This website uses the fonts "Poppins" and "Open Sans." The font files are delivered exclusively from our own server. When you visit our pages, no connection is made to Google servers (Google Fonts) or other third-party providers to load the fonts; no personal data is transmitted to third parties in this process.

12. Digistore24 (Payment Processing and Affiliate Tracking)

The purchase of paid Maty subscriptions through our website is processed via the platform Digistore24, operated by Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany ("Digistore24"). Digistore24 acts as a reseller and payment processor. The purchase agreement for the software license is concluded between you and Digistore24, and Digistore24 processes the data required for the order and payment (name, address, email address, payment data) under its own data protection responsibility. We receive from Digistore24 the order data required to provide access, issue invoices, and provide customer support.

In addition, our website includes a script from Digistore24 (".digistore.js"). It is used to attribute orders placed on our website to us and, where applicable, to a referring affiliate partner, and to technically evaluate order processes. For this purpose, a connection to Digistore24's servers is established when the page is loaded, and cookies may be set that allow a visit to be matched with a subsequent order. Data transmitted in this process includes, in particular, the IP address, browser information, and the page visited.

This processing takes place for the performance of the contract (Art. 6(1)(b) GDPR) as well as based on our legitimate interest in correct billing with sales partners and in evaluating our sales (Art. 6(1)(f) GDPR). You can prevent the setting of cookies at any time via your browser settings. Further information on data protection at Digistore24: https://www.digistore24.com/info/privacy

13. Processing within the Maty Software (App)

On this website, we provide information about the Maty practice software and offer trial access. For the processing of personal data within the Maty software – in particular the account and usage data of our customers as well as the data of their animal owners stored by our customers on their behalf – our separate privacy policy for the Maty App applies in addition: https://matyapp.de/datenschutz-app/

The Maty software is operated and hosted at DigitalOcean, LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA, in data centers within the European Union. DigitalOcean processes the data as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR, including the EU Standard Contractual Clauses; DigitalOcean, LLC is also certified under the EU-U.S. Data Privacy Framework. Access from the USA, for example for maintenance or support purposes, cannot be ruled out in individual cases. The legal basis is Art. 6(1)(b) GDPR (performance of contract) as well as Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

14. Legal Bases for Processing

Where we obtain your consent for processing, Art. 6(1)(a) GDPR is the legal basis. Where we process data to fulfill a contract with you or to carry out pre-contractual measures at your request – for example in connection with a trial access or a subscription – this is based on Art. 6(1)(b) GDPR. Processing required to comply with legal obligations, for example tax retention obligations, is based on Art. 6(1)(c) GDPR. In all other cases, we process data on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, weighing your interests and fundamental rights in each case. Our legitimate interest lies in particular in the secure and economical operation of our website, in protection against misuse, in the analysis and improvement of our offering, and in communication with prospective clients and customers. We state the respective legal basis in the individual sections of this policy.

15. Retention Period and Deletion

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Once the purpose no longer applies or a period expires, the data is routinely deleted or, if deletion is not yet possible, restricted from further processing. We state specific retention periods in the individual sections. Data that we are required to retain due to commercial or tax law regulations (for example, invoices) is stored for the legally required period of generally six or eight years, and we restrict its processing during this time to the purpose of retention.

16. Your Rights

As a data subject, you have the following rights against us. To exercise them, an informal message to hello@matyapp.de or to our data protection officer is sufficient.

a) Access (Art. 15 GDPR)

You can request confirmation from us as to whether we process personal data concerning you, as well as information about this data and about the purposes of processing, recipients, storage duration, origin of the data, and your other rights.

b) Rectification (Art. 16 GDPR)

You can request that we correct inaccurate data without delay and complete incomplete data.

c) Erasure (Art. 17 GDPR)

You can request that we erase your data without delay if, for example, the purpose of the processing no longer applies, you have withdrawn your consent, or the data was processed unlawfully – provided no statutory retention obligation or other exception applies.

d) Restriction of Processing (Art. 18 GDPR)

You can request that we restrict the processing of your data, for example while we review a dispute over its accuracy, or if you prefer restriction over erasure.

e) Data Portability (Art. 20 GDPR)

You can receive the data you have provided to us, and which we process on the basis of your consent or a contract by automated means, in a structured, commonly used, and machine-readable format, or – where technically feasible – have it transmitted directly to another controller.

f) Objection (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. If your data is processed for direct marketing purposes, you can object to this processing at any time without giving reasons; your data will then no longer be used for this purpose.

g) Withdrawal of Consent (Art. 7(3) GDPR)

You can withdraw any consent given at any time with effect for the future. The lawfulness of processing carried out until withdrawal remains unaffected.

h) Lodging a Complaint with a Supervisory Authority (Art. 77 GDPR)

If you believe that the processing of your data violates the GDPR, you can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement. The supervisory authority responsible for us is: Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Tel.: 0511 120-4500, Email: poststelle@lfd.niedersachsen.de.

17. Obligation to Provide Data

To visit our website, you do not need to provide us with any personal data. However, if you want to use certain services – for example, requesting a trial access, subscribing to the newsletter, submitting an inquiry, or taking out a subscription – we need the data required for that purpose (such as your email address and name). Without this information, we cannot provide the respective service. Which information is required is indicated by the labeling in the respective form.

18. Automated Decision-Making and Profiling

We do not use automated decision-making within the meaning of Art. 22 GDPR and do not create profiles that produce legal effects concerning you or similarly significantly affect you.

19. Changes to This Privacy Policy

We will adapt this privacy policy whenever our data processing, the services we use, or the legal requirements change. The version published on this page shall apply in each case.

As of: September 2026