About this translation
This English translation is provided for convenience. The German version (Datenschutzerklärung) is legally binding.
1. Privacy at a glance
This privacy policy informs you about which personal data we process when you visit diversitycheck.de, for what purpose, on what legal basis and for how long. Personal data means any data by which you can be personally identified (Art. 4 (1) of the General Data Protection Regulation – GDPR).
In short: this website works without analytics tools, without advertising tracking, without social media plugins and without embedded third-party content. We process data when you visit the website (technically necessary server log files) and when you write to us or call us.
2. Controller
The controller responsible for data processing on this website (Art. 4 (7), Art. 13 (1) (a) GDPR) is:
Jasmin Matthies
Breitenanger 4
37133 Friedland
Germany
Phone: +49 159 02250249
Email: me@jasminmatthies.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
No data protection officer has been appointed, as there is no legal obligation to do so (Section 38 (1) of the German Federal Data Protection Act – BDSG).
3. General information
Legal bases
We process personal data only where a legal basis permits it. On this website, the following may apply:
- your consent (Art. 6 (1) (a) GDPR),
- the performance of a contract or pre-contractual measures at your request (Art. 6 (1) (b) GDPR),
- a legal obligation, such as retention obligations (Art. 6 (1) (c) GDPR),
- our legitimate interest (Art. 6 (1) (f) GDPR); we state which interest that is for the respective processing.
Which basis applies in each case is set out in the following sections.
Recipients
We pass on personal data only where this is necessary for the respective purpose. Recipients are our hosting provider as a processor (Section 4) and the members of the Diversity Check team who handle your enquiry. Data is not passed on to other third parties, for example for advertising purposes.
Transfers to third countries
The website and the mailbox hallo@diversitycheck.de are operated in Germany. This website does not transfer data to countries outside the EU or the EEA.
Retention period
We store personal data only for as long as is necessary for the respective purpose, or for as long as statutory retention periods require (for example six years for commercial correspondence under Section 257 of the German Commercial Code – HGB, eight years for accounting records under Section 147 of the German Fiscal Code – AO). After that, the data is deleted.
Obligation to provide data
You are neither legally nor contractually obliged to provide us with personal data. Without the mandatory information in the contact form, however, we cannot process your enquiry.
No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
4. Hosting
This website is hosted by an external service provider:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
All data generated in the operation of the website is stored on the host’s servers, in particular server log files (Section 5) as well as the email mailboxes and email dispatch of the domain diversitycheck.de. The servers are located in Germany.
We use the host in the interest of a secure, fast and reliable provision of our website (Art. 6 (1) (f) GDPR) and, insofar as enquiries about our services are concerned, for the performance of pre-contractual measures (Art. 6 (1) (b) GDPR).
We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The host processes your data only on our instructions.
5. Server log files
Each time the website is accessed, the server automatically stores information that your browser transmits:
- the IP address of the requesting device,
- the date and time of access,
- the page or file accessed and the amount of data transferred,
- the HTTP status code,
- the previously visited page (referrer URL),
- browser type and version, operating system.
This data is technically necessary to deliver the website, to detect malfunctions and to ensure the security of the server. It is not combined with other data sources. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR).
The log files are deleted automatically after the retention period set by our host has expired.
6. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption, for example for the transmission of enquiries via the contact form. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar. When encryption is active, the data you transmit to us cannot be read by third parties.
7. Cookies and access to your device
This website does not set cookies when you visit it and does not read any information from your device beyond what is technically necessary to display the pages (Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act – TDDDG). A consent request (“cookie banner”) is therefore not necessary.
Cookies are set only when members of our team log in to the editorial area of the website; they are technically necessary for that purpose.
8. Contact form
When you write to us via the contact form, we process your details in order to answer your enquiry and to arrange an initial consultation:
- mandatory information: name, organisation or company, email address, your message,
- voluntary information: phone number, the package you are interested in, your role in the organisation.
How the processing works: The form sends your details by email to our mailbox hallo@diversitycheck.de. The email is sent via our host’s mail server (Section 4); no other service provider is involved. The form itself does not store your enquiry in the website’s database. Our email dispatch log keeps a copy of the sent message for seven days so that we can detect delivery errors; after that it is deleted automatically.
Protection against abuse: To ward off mass automated enquiries, the website counts enquiries per connection. For this purpose, an encrypted check value (hash) is generated from your IP address and stored for one hour; the IP address itself is not stored. In addition, the form contains a field that is invisible to humans and is filled in only by automated programs. The legal basis is our legitimate interest in protecting the website and our mailbox from spam and abuse (Art. 6 (1) (f) GDPR).
Legal basis: If your enquiry is aimed at commissioning us, we process your data for the performance of pre-contractual measures (Art. 6 (1) (b) GDPR). In all other cases, the processing is based on our legitimate interest in answering enquiries addressed to us (Art. 6 (1) (f) GDPR).
Retention period: We delete your enquiry as soon as it has been fully dealt with and no statutory retention obligations apply. If a contract is concluded, the retention periods set out in Section 3 apply.
9. Contact by email or phone
If you contact us by email or phone, we process your details (for example name, contact details, the content of your message) in order to handle your request. The legal basis and the retention period correspond to Section 8.
Emails to hallo@diversitycheck.de are received in a mailbox at our host. Access is limited to the members of our team who handle your enquiry.
10. Fonts
This website uses the font Source Sans 3. It is stored locally on our server. When the pages are accessed, no connection is established to third-party servers (such as Google Fonts).
11. Links to other websites
Our pages contain links to other websites, for example to the personal websites of our team members. Merely accessing our pages does not transmit any data to those websites. Only when you click on a link do you leave our website; the respective provider is responsible for the data processing there.
12. Your rights
You have the following rights towards us with regard to your personal data:
- access to the data we process about you (Art. 15 GDPR),
- rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability – receiving the data you have provided to us in a common, machine-readable format (Art. 20 GDPR),
- withdrawal of consent you have given, with effect for the future (Art. 7 (3) GDPR); the lawfulness of processing carried out until then remains unaffected.
To exercise these rights, simply contact us using the contact details given in Section 2.
Right to object (Art. 21 GDPR)
Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
(State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover, Germany
13. Changes to this privacy policy
We update this privacy policy when our website, the services we use or the legal situation change. The version published here at any given time applies.
Last updated: 30 October 2026 (German version); English translation: 2 November 2026