Privacy Policy

The protection of your personal data is a matter of great concern to us. This page provides comprehensive information about the processing and storage of your data when visiting our website and our facilities.

Fundamentals of Data Processing

To use all functions and services of our website, collection of your personal data is required. Processing and storage are conducted in accordance with the statutory provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and any other applicable data protection laws.

Responsible Entity

furthermatch GmbH
Breite Straße 22
40213 Düsseldorf
Contact: hello@furthermatch.com

Further information can be found in our Imprint.

Data Protection Officer

Mag.a iur. Elisa Drescher
E-Mail: office@scaleline-ltd.com
(Please reference furthermatch GmbH when contacting us)

Data Protection Measures

To protect your data from unauthorized access, we implement technical and organizational measures. Your data is transmitted using TLS encryption (Transport Layer Security). You can recognize this by the padlock symbol in your browser's status bar and the address beginning with https://.

Collection and Processing of Personal Data

1. Access and Log Data

This website automatically collects and stores server log files transmitted by your browser.

Data Collected:

  • IP address of the user
  • Date and time of access
  • Type of request
  • Browser information (type and version)
  • Operating system and device version
  • Referrer information (source of access)

Legal Basis: Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR to identify unlawful usage.

Storage: This data is stored separately from personal information and does not allow identification of individuals. The provider IONOS SE stores this data for a maximum of 7 days. In case of attacks or legal violations, we may extend storage (legitimate interest for evidence preservation).

We have concluded a Data Processing Agreement with IONOS SE pursuant to Art. 28 GDPR.

2. Contact Form, Email and Telephone

Your voluntarily provided data is used exclusively to process and respond to your inquiry and is treated confidentially.

Legal Basis:

  • Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR (answering inquiries, customer satisfaction)
  • Contract initiation or performance pursuant to Art. 6 para. 1 lit. b) GDPR for natural persons

Storage Duration: Your personal data will be deleted or anonymized at the latest 2 years after our final response, unless a contract is concluded. This period allows for potential follow-up questions regarding the same matter.

3. Document Upload

Processing Purpose: Specialized personnel consulting in the field of law and compliance, including:

  • Review of your documents for suitable job opportunities
  • Contact with potential employers in our network
  • Career coaching and individual consultation
  • Interview preparation (upon request)

Data Processed:

  • Contact information (name, email, telephone)
  • Professional background, qualifications, and interests
  • CV and cover letter
  • Optional: information on health or severe disability
  • Voluntarily provided information from conversations and emails

Legal Basis:

  • Voluntary consent pursuant to Art. 6 para. 1 lit. a) GDPR
  • For sensitive data (Art. 9): Explicit consent pursuant to Art. 9 para. 2 lit. a) GDPR

Data Processors:

  • Web Hosting: IONOS SE (intermediate storage)
  • Web Agency: 21vision GmbH, Dortmund (support access)
  • Placement Platform: Starhunter GmbH, Munich (Data Processing Agreement pursuant to Art. 28 GDPR)

Storage Duration: Maximum 2 years from your last active contact (document upload, communication). Data will be deleted thereafter unless a new consent is provided or statutory retention obligations apply.

Revocation: You may revoke your consent at any time without giving reasons (e.g., by email to hello@furthermatch.com) with effect for the future. Your data will be deleted immediately upon revocation.

Data Processing of Business Partners and Customers

1. Fulfillment of Contractual Obligations (Art. 6 para. 1 lit. b GDPR)

For contract performance, we process:

  • Master data (first and last name)
  • Billing address
  • Billing and payment data
  • Email address (for communication)

2. Fulfillment of Legal Obligations (Art. 6 para. 1 lit. c GDPR)

To comply with legal requirements, we process data for:

  • Retention and identification obligations
  • Tax control and reporting obligations
  • Requests from authorities

This may result in transmission of data to our tax advisor.

3. Legitimate Interests (Art. 6 para. 1 lit. f GDPR)

We process contact data of contact persons at customers, prospects, suppliers, and business partners for communication via email, telephone, and mail.

Legitimate Interests:

  • Implementation and initiation of business relationships
  • Personal contact with contact persons
  • Selection of suitable business partners
  • Fulfillment of compliance measures
  • Assertion of legal claims
  • Defense against liability claims
  • Prevention of criminal activity
  • Regulation of damages

Sharing: Data sharing with third parties is generally excluded.

Storage Duration: Data is stored as long as a legitimate interest exists.

4. Data Processors and Service Providers

In the course of business relationships, we engage data processors and service providers who may access your data. Compliance with data protection requirements is contractually ensured.

5. Documentation of GDPR Compliance

To fulfill our accountability obligation pursuant to Art. 5 para. 2 GDPR, we process and store:

  • Evidence of your consents
  • Documentation of data subject rights claims
  • Communication with our data protection consultant (SCALELINE Datenschutz) regarding GDPR requests

Operation of Social Media Presences

We maintain the following social media profiles:

Data Processing by Us

a) Maintenance of Social Media Pages and Ad Placement

Your submitted data (comments, videos, images, likes, messages) is published by the respective platform. We reserve the right to delete content if necessary and regularly place advertisements (ads) through our pages.

Legal Basis: Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR (public relations and communication).

b) Page Insights

Platforms provide anonymized statistics that give us insights into user behavior on our pages.

Legal Basis: Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR.

Joint Responsibility: This processing occurs as joint responsibility (Art. 26 GDPR):

Right to Object: If you wish to object to data processing within our control (e.g., deletion of comments), please contact us.

Note on Data Provision

Provision of your data is neither legally nor contractually required. However, without your data, you cannot communicate with us via our social media pages or participate. Alternatively, please use our email: hello@furthermatch.com

Data Processing by Platform Operators

The operators of social media platforms are separate, independent controllers who conduct their own data processing. We have limited influence over this processing.

Privacy Policies of Platforms:

Data Transfer to Third Countries: Your data is typically processed by platform operators on servers in third countries (particularly the USA).

Adequacy Decisions: Adequacy decisions exist for:

  • Meta Platforms Inc (Facebook, Instagram)
  • LinkedIn
  • Google (YouTube)

For all other cases, we use Standard Contractual Clauses (SCC) for data transfers.

Web Tracking: Platform operators use web-tracking methods over which we have no control. This may occur regardless of whether you are logged in. The operator may use your profile and behavioral data to evaluate your habits, relationships, and preferences.

Communication via Video Conference Systems

Microsoft Teams

We use Microsoft Teams for telephone conferences, online meetings, and video conferences.

Access: You receive an access link by email. Video and microphone are disabled by default.

Data Processed:

  • Information about you (name, email, profile picture)
  • Meeting metadata (date, time, duration, participant IP)
  • Device/hardware data (IP addresses, MAC addresses, client version)
  • Text, audio, and video data (chat, recordings, presentations)
  • Connection data (telephone numbers, countries, start/end times)
  • Data from chat and whiteboard usage

Important: Information you provide during the meeting is processed at least for the duration of the meeting.

Legal Basis:

  • Direct contractual partner: Art. 6 para. 1 lit. b) GDPR
  • Business partners/external contacts: Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR

Data Transfer: We cannot exclude data being routed through servers outside the EU/EEA. Microsoft is certified under the Data Privacy Framework.

Further Information:

Data Processor: Microsoft (Data Processing Agreement pursuant to Art. 28 GDPR).

Alternative: You are not required to use Teams. Meetings can also be conducted by telephone.

Deletion: Data is deleted when there is no further requirement for storage.

Zoom

We use Zoom for telephone conferences, online meetings, and video conferences.

Access: You receive an access link by email and enter the video room by clicking the link.

Data Processed:

  • Information about you (name, email, profile picture)
  • Meeting metadata (date, time, duration, participant IP)
  • Device/hardware data (IP addresses, MAC addresses, client version)
  • Text, audio, and video data (chat, recordings, presentations)
  • Connection data (telephone numbers, countries, start/end times)
  • Data from chat and whiteboard usage

Important: Information you provide during the meeting is processed at least for the duration of the meeting.

Legal Basis:

  • Direct contractual partner: Art. 6 para. 1 lit. b) GDPR
  • Business partners/external contacts: Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR

Data Transfer: We cannot exclude data being routed through servers outside the EU/EEA. Zoom is certified under the Data Privacy Framework.

Data Processor: Zoom Video Communications Inc. (Data Processing Agreement pursuant to Art. 28 GDPR).

Alternative: You are not required to use Zoom. Communication is also possible via email or telephone.

Deletion: Data is deleted when there is no further requirement for storage.

Data Subject Rights

Under the GDPR, you have the following rights:

Right of Access (Art. 15 GDPR)

You have the right to request free information about your stored personal data.

Right to Rectification (Art. 16 GDPR)

You may request correction of inaccurate personal data.

Right to Erasure (Art. 17 GDPR)

Under certain conditions, you may request deletion of your personal data.

Right to Restrict Processing (Art. 18 GDPR)

Under certain circumstances, you may request restriction of processing.

Right to Data Portability (Art. 20 GDPR)

Where you have provided the data yourself, you have the right to data portability.

Right to Object (Art. 21 GDPR)

If processing is based on Art. 6 para. 1 lit. e) or f) GDPR, you may object. Processing shall cease unless the controller can demonstrate compelling legitimate grounds overriding your objection.

Right to Withdraw Consent (Art. 7 GDPR)

If processing is based on consent (Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR), you may withdraw consent at any time with effect for the future. The lawfulness of processing prior to withdrawal is unaffected.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection authority. This can be done in particular with an authority of your place of residence, place of work, or the place of the alleged violation.

Competent Data Protection Authority in North Rhine-Westphalia:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2–4
40213 Düsseldorf
Germany
Phone: +49 211/38424-0
Fax: +49 211/38424-999
Email: poststelle@ldi.nrw.de

Automated Decision-Making

Automated decision-making or profiling does not take place.

Data Provision

Unless otherwise specified, the provision of personal data is neither legally nor contractually required or necessary for contract conclusion. However, failure to provide such data may result in our inability to answer your inquiries, for example.

This privacy policy was created in cooperation with SCALELINE Datenschutz.

Last Updated: February 2026