Status: 08.10.2026 · Convenience translation. Only the German version is legally binding: https://metrixmundi.de/datenschutz/
Privacy Policy
This is a translation for your convenience. In case of any discrepancy, the German version prevails.
Information pursuant to Art. 13 of the General Data Protection Regulation (GDPR) for the service MetrixMundi (metrixmundi.de), including the free Open Online Radar.
1. Controller
Cambium Holding UG (haftungsbeschränkt)
Im Haag 107, 66679 Losheim am See
Represented by Marcus Alexander Kluge, Managing Director
Telephone: +49 6872 9611628
Email: info@cambiumholding.de
No data protection officer has been appointed. The requirements of § 38 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) are not met: fewer than twenty persons are constantly engaged in the automated processing of personal data, there is no large-scale systematic monitoring, and no special categories of personal data within the meaning of Art. 9 GDPR are processed.
For data protection matters, you can reach us at the address given above.
2. What MetrixMundi does not do
So that you read the most important points first:
- No account, no purchase. The home page and the Open Online Radar can be used without registration. There are currently no sales and no accounts on metrixmundi.de.
- No cookies and nothing on your device. We do not set cookies and do not write anything to
your browser's local storage (
localStorage,sessionStorage) — details in section 9. - No tracking. No audience measurement, no analytics services, no advertising networks, no social media buttons, no fingerprinting.
- No requests to third parties. Fonts and all other components of the pages come from our own server; no content is loaded from third-party servers or content delivery networks; doing so would transmit your IP address to third parties.
3. What data we process
3.1 Accessing the pages (server access log)
When you access metrixmundi.de or the Online Radar, your browser necessarily sends certain information to our server for technical reasons. For each request, our web server and the pre-registration service write a log line containing:
- your IP address,
- date and time,
- the address (path) requested — the personal confirmation and unsubscribe codes of the pre-registration (section 3.2) are masked in it before the line is written,
- the status code of the response,
- the browser identifier (user agent).
We need this information in order to deliver the pages, find errors and detect and fend off attacks. We do not evaluate it in order to recognise visitors or create profiles, and we do not combine it with other data.
Protection against misuse of the pre-registration form. To prevent anyone from using the form on a mass scale, the service briefly counts how often requests come from the same IP address (for IPv6: from the same /64 network). This count is held in working memory only, covers at most the last hour and is not written to disk; it is gone when the service is restarted.
The log of email dispatch (section 3.2) does not contain your email address, but only a shortened check value (hash value) derived from it and the result of the delivery.
3.2 Pre-registration (double opt-in)
On the home page, you can pre-register to be informed by email about the launch of MetrixMundi and about new offers. This is advertising, and it therefore only takes place with your consent.
Your consent. The checkbox in the form is not pre-ticked. It bears the following wording
(version v2-2026-10-08):
I would like to be informed by email about the launch of MetrixMundi and about new offers. This is advertising. I can withdraw my consent at any time without giving reasons, for example via the unsubscribe link in every email.
On the German and French home pages (/, /fr/) the box carries the same content in the
respective language (versions v1-2026-10-08 and v3-2026-10-08). We store the version you saw.
Confirmation (double opt-in). After submitting the form, you will receive an email with a link. It opens a page with the button "Confirm pre-registration"; only clicking this button confirms the pre-registration. Merely opening the link — for example by a scanning program of your email provider — does not confirm anything. Until confirmation, we will not write to you except for the confirmation email. A pre-registration can only be confirmed within 30 days.
What we store:
| Data | Why |
|---|---|
| Email address (mandatory) | to send you the confirmation email and, later, the information |
| a simplified spelling of the same address (lower case, without "+suffix", for Gmail without dots) | so that the same person is not registered more than once, the sending limit is not circumvented by other spellings, and an unsubscription covers all entries |
| "I am interested as: public administration / business / private individual / press" (optional) | to send you suitable information |
| the version of the consent text you agreed to | proof of your consent (Art. 7(1) GDPR) |
| time of the entry, of the confirmation and of the last email to you | proof of consent; deletion periods |
| check values (hash values) of your confirmation and unsubscribe links — not the links themselves | so that only the link from your email can confirm or delete the pre-registration |
We store no IP address and no free text in connection with your pre-registration. We respond to every registration in the same way — even if the address is already pre-registered. In this way, the page does not reveal to anyone which addresses are known to us.
Protection against registrations by others. No more than three confirmation emails per hour are sent to the same address. Anyone who enters someone else's address achieves nothing by doing so: without confirmation by the holder of the address, nothing further is sent, and the entry is deleted after 30 days.
Withdrawal and unsubscribing. You can withdraw your consent at any time without giving reasons:
- via the unsubscribe link in every email (one click; email programs that offer unsubscribing in the header of the email can also do this directly), or
- by email to info@cambiumholding.de.
Upon withdrawal, we immediately delete all entries relating to your address — including the stored version and the times that evidenced your consent. The only thing that remains is the note "unsubscribed" in the integrity log (section 3.3). It contains no information about who unsubscribed — only randomly generated identifiers of the deleted entries — and therefore remains. The withdrawal does not affect the lawfulness of the processing carried out up to that point (Art. 7(3) GDPR).
If you pre-register again with the same address and confirm this, the new pre-registration replaces the old one; the old one is deleted.
Emails without tracking. Our emails — the confirmation email as well as the later information — contain no tracking pixels and no click tracking. We do not learn whether or when you open an email or click a link in it.
3.3 Integrity log (without personal reference)
Every step of the pre-registration — registered, confirmed, replaced, unsubscribed, deletion run — is recorded in a continuous, cryptographically chained event log. This makes it possible to determine subsequently whether entries have been altered or have disappeared. The log contains no email address, no hash value derived from it, no IP address and no other information about you — only randomly generated identifiers of the entries, the version of the consent text and counts. As long as your pre-registration exists, it bears the same random identifier; once it has been deleted, there is no longer any way to trace the identifier back to you. Erasure pursuant to Art. 17 GDPR therefore leaves the log unaffected. It is append-only: entries are added, never changed or removed.
3.4 If you write to us
If you send us an email — for example to withdraw your consent or to ask a question —, we process your address and your message in order to deal with your request. The mailbox info@cambiumholding.de is operated for us by IONOS SE, Montabaur, as processor in Germany (section 7). We keep your message until your request has been dealt with, and delete it afterwards — unless it is a business letter which we must retain for six years pursuant to § 257 of the German Commercial Code (Handelsgesetzbuch, HGB) and § 147 of the German Fiscal Code (Abgabenordnung, AO).
3.5 Backups
We back up the pre-registration database daily. The backups are encrypted before they leave our server, and stored in a second data centre in Germany (Hetzner, Falkenstein). If we delete a pre-registration, it remains contained in backups already created until these are overwritten — after 90 days at the latest. Deleting a single person from a backup is technically not possible without rendering the backup itself unusable; during this time, the data are used exclusively for restoration in an emergency and are otherwise not touched.
4. Legal bases
| Processing | Legal basis |
|---|---|
| Delivery of the pages, access log, short-term counting per IP address against misuse | Art. 6(1)(f) GDPR — legitimate interest in secure, functioning operation (cf. Art. 32 GDPR) |
| Pre-registration: storage and sending of information about the launch and about new offers | Art. 6(1)(a) GDPR (consent) in conjunction with § 7(2) no. 2 of the German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG) |
| Confirmation email (double opt-in) and storage of version and times as proof | Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR — obligation to be able to demonstrate consent |
| Integrity log | insofar as there is any personal reference at all: Art. 6(1)(f) GDPR — legitimate interest in traceable, unaltered processes |
| Backups | Art. 6(1)(f) GDPR — protection against data loss (Art. 32(1)(c) GDPR) |
| Handling of your enquiries and withdrawals by email | Art. 6(1)(c) GDPR (withdrawal, data subject rights; retention of business letters), otherwise point (f) |
5. No automated decisions
There is no automated individual decision-making within the meaning of Art. 22 GDPR and no profiling. The information on what capacity you are interested in (public administration, business, private individual, press) serves only to send you suitable information.
6. Artificial intelligence
Personal data of visitors are not processed with artificial intelligence and are not used to train AI models — neither by us nor by third parties. No figure in the Online Radar or in our reports comes from a language model. The images on the website have been created with an image generator and are labelled pursuant to Art. 50 of the EU AI Act (KI-Verordnung, KI-VO); texts that we draft with AI tools are reviewed by a human, who takes responsibility for them. Details in the AI transparency statement.
7. Recipients
We do not pass on your data for advertising or sales purposes. Only the following service providers are involved, each as a processor pursuant to Art. 28 GDPR:
| Service provider | Task | Place of processing |
|---|---|---|
| Hetzner Online GmbH, Gunzenhausen | Operation of the server and the database; encrypted backup copies | Data centres Nuremberg (server) and Falkenstein (backups), Germany |
| Scaleway SAS, Paris | Sending of the pre-registration emails (transactional email) | France (EU region Paris) |
| IONOS SE, Montabaur | Domain management and DNS; mailbox info@cambiumholding.de | Germany |
The emails bear the sender "MetrixMundi noreply@mail.metrixmundi.de"; replies to them reach us at info@cambiumholding.de.
There is no transfer to a third country outside the EU.
8. Storage period
| Data | Period |
|---|---|
| Access log of the server and of the pre-registration service (with IP address), log of email dispatch (hash value of the address) | 7 days, then deletion |
| Counting per IP address against misuse | in working memory only, one hour at most |
| Unconfirmed pre-registration | 30 days after the entry, then deletion |
| Confirmed pre-registration | until you withdraw your consent (then immediately), otherwise no later than 24 months after the last email to your address |
| Integrity log (without personal reference) | for the duration of operation |
| Your emails to us | until your request has been dealt with; business letters six years (§ 257 HGB, § 147 AO) |
| Backups | up to 90 days; they are then overwritten |
The deletion periods of the pre-registration are enforced by an automatic deletion run.
9. Cookies and storage on your device
MetrixMundi stores nothing on your device and reads nothing from it: no cookies, no
entries in local storage (localStorage, sessionStorage), no fingerprinting. Even the
choice between light and dark appearance and the choice of language are not stored.
§ 25 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG) covers any storage in your terminal equipment, not just cookies. Because we store nothing and read nothing, no consent pursuant to § 25(1) TDDDG is required, and therefore we display no consent banner — we do not display one because there is nothing to consent to.
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can object at any time to the use of your data for direct marketing (Art. 21(2) GDPR); you can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR, section 3.2).
For all rights, an informal message to info@cambiumholding.de is sufficient. The quickest way to unsubscribe is to do it yourself via the link in every email.
You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is:
Unabhängiges Datenschutzzentrum Saarland (Independent Data Protection Centre Saarland) Fritz-Dobisch-Straße 12, 66111 Saarbrücken
11. Is the provision of data required?
You do not have to provide any information to visit the website and the Online Radar. The information listed in section 3.1 is sent by your browser for technical reasons; without it, no page can be delivered.
The pre-registration is voluntary. Only your email address is required for it; the information on what capacity you are interested in is optional. Without pre-registration, you can use everything that metrixmundi.de offers today.
12. Changes
We will adapt this policy if the processing changes — at the latest when accounts or sales are added. The version published on metrixmundi.de at the relevant time is authoritative.
Last updated: 8 October 2026