Privacy Policy

GENERAL NOTICE AND MANDATORY INFORMATION

DESIGNATION OF THE RESPONSIBLE BODY

The responsible party for data processing on this website is:

Moving Targets Consulting GmbH
Arndtstrasse 34
10965 Berlin, Germany.

We appreciate your interest in our company and our services and would like you to feel secure when visiting our website, also with regard to the protection of your personal data. We take the protection of personal data very seriously. Therefore, compliance with the provisions of the EU General Data Protection Regulation (EU GDPR) and other relevant data protection laws is a matter of course for us. We want you to know when we process which data and how we use it. We have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by external service providers.

SERVER - LOG - FILES

When you visit our Internet pages, our web servers automatically store the data that your browser transmits to enable you to visit the Internet pages.your IP addressthe page you called up and the date and time of your visitaccess status/HTTP status codethe amount of data transmitted in each caseyour browser, the language and version of the browser software as well as your operating system and its interface. There is no merging of this data with other data sources. The data processing is based on Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

DATA PROCESSING THROUGH THE USE OF COOKIES

We only use necessary functional cookies, which are only processed for the duration of the website visit.

THIRD PARTY PROVIDER

LinkedIn
Personio
By visiting the website, the third-party provider receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in point "1. Protocol data" is transmitted. This occurs regardless of whether this third-party provider provides a user account through which you are logged in or whether no user account exists. If you are logged in to the plug-in provider, this data is directly assigned to your account. If you do not want the assignment to your profile with the plug-in provider, you must log out before activating the button. Data processing by the third-party provider only takes place if you consent by confirming the request field (legal basis: Art. 6 para. 1 lit. a EU-DSGVO). The plug-in provider stores this data as usage profiles and uses it for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the respective providers and URL with their privacy notices:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, IrelandLinkedIn privacy policy.
Personio, Personio GmbH, Rundfunkplatz 4, 80335 Munich, GermanyPersonio Privacy Policy

Website hosting (Vercel)

We collect the following data in so-called log files, which your browser transmits: IP address, date and time of the request, time zone difference to Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request originated, and information about the browser and operating system. This is necessary to display our website and to ensure stability and security. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DSGVO. This website is hosted by Vercel Inc, 650 California St, San Francisco, California, 94108, United States. This is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) S. 1 lit. f DSGVO in not having to maintain a server on our premises ourselves. You can learn more about Vercel's privacy policy here: https://vercel.com/legal/privacy-policy. You have the right to object to the processing. Whether the objection is successful is to be determined in the context of a balancing of interests. Vercel will retain your data for as long as there is a legitimate business interest in processing your personal data. Once this ceases to exist, Vercel will either erase or anonymize it or, if this is not possible (e.g. because your personal data has been stored in backup archives), Vercel will keep your personal data secure and isolate it from any further processing until erasure is possible. Processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

Content Delivery Network (Prismic)

To optimize the presentation of these web pages, in particular to increase the loading speed of the respective page content, we use the technology partner Prismic Networks, Inc. 185 Alewife Brook Parkway, #410 Cambridge, MA 02138 (hereinafter referred to as Prismic). Data transfers between the website and the servers are made through Prismic's worldwide network or its business partners.

Web Statistics (Plausible)

Our website uses the open source web analytics service of Plausible, based in Estonia. The web analysis is based on anonymized data. It is not possible to draw conclusions about individuals. The following web statistical analyses are performed: URL, HTTP referrer, browser, operating system, end device, country. The processing is based on our legitimate interest in measuring the reach of our website (Art. 6 para. 1 lit. f DSGVO). You can find more info on Plausible at https://plausible.io/data-policyRechtsgrundlage is Art. 6 para. 1 lit. f) DSGVO. The legitimate interest lies in the optimization and economic operation of the website.Through the connection to Prismic established when you call up our website, Prismic can determine from which website your request has been sent and to which IP address the content is to be transmitted. You can find more information on data collection and processing at:https://prismic.io/legal/privacy and https://prismic.io/security

SSL/TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as contact requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar of your browser changes from http:// to https:// and by the lock symbol in your browser bar.

NEWSLETTER AND DIRECT MARKETING

Valid from Aug 1, 2025

Use of your data for direct marketing

We use your email address to send you information about our own products, services, offers, and events via a regular newsletter.

This applies in particular to:

• Customers who have provided their email address as part of a purchase or service and have not objected to receiving advertising (existing customers),
• as well as customers who have explicitly given consent to receive our newsletter via other products or registration forms (opt-in).

Legal basis

Depending on the context of data collection, the processing of your personal data for the purpose of sending newsletters is based either on:

• your consent pursuant to Art. 6(1)(a) GDPR,
• or our legitimate interest pursuant to Art. 6(1)(f) GDPR in conjunction with § 7(3) of the German Unfair Competition Act (UWG), to inform existing customers about our own, similar products or services.

Our legitimate interest lies in keeping you informed about new and relevant developments in our product portfolio.

Newsletter delivery via Brevo (formerly Sendinblue)

We use the provider Brevo, a service by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, to send our newsletters. Brevo processes your data solely on our behalf and in accordance with Article 28 GDPR on the basis of a data processing agreement. Data is stored on servers located in Germany. For more information on data processing by Brevo, please visit: Privacy Policy | Brevo 

No disclosure to third parties

Your data will not be shared with third parties beyond what is necessary for sending the newsletter via our service provider.

Right to object or withdraw consent

You have the right to object to the use of your email address for direct marketing purposes at any time or to withdraw any consent you may have given.

You can unsubscribe at any time via the link provided in each newsletter or by sending an email to kontakt@mtc.berlin .

The legality of the data processing carried out until the time of objection or withdrawal remains unaffected.

Retention period

We will store your email address for the purpose of newsletter delivery as long as we have a legitimate interest in doing so or until you object to the use or withdraw your consent. After that, your data will be immediately removed from the mailing list and no longer used for this purpose.

HANDLING OF APPLICATIONS

You can submit your applications to our job postings or also unsolicited applications via our personnel application tool personio. The legal basis for data processing is Art. 6 para. 1 lit. a EU-DSGVO.We will delete your data after three months from the decision on the allocation of the job, unless a claim is asserted on your part pursuant to the AGG on the basis of the decision (in this case, the deletion will take place after the conclusion of the proceedings on your claim). Should you be considered by us for a subsequent job assignment, we will delete your data only after two years from the date of sending if you give us your consent to do so. You can revoke this consent later with effect for the future. Such revocation will mean that you will have to resubmit your data for subsequent job advertisements if you wish to apply again. You will not suffer any other disadvantages (in particular in the selection of the applicant) as a result of this revocation.

GENERAL DATA PROCESSING TO THIRD PARTIES

Data will not be transferred to third parties unless otherwise stated in the preceding paragraphs. We would like to point out that we can only delete your data after the expiry of a legal obligation to retain data, insofar as such an obligation exists. This applies accordingly to any obligation to retain data arising from a contract with you.

DATA SECURITY

We have implemented technical and organizational security measures to protect your data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments. Our employees and, if applicable, data-processing third parties are obligated by us to maintain confidentiality.

YOUR RIGHTS

In accordance with the EU Data Protection Regulation, you have the right to request information from us at any time as to whether personal data about you is stored by us. Furthermore, you are entitled to the following rights in relation to this stored data:
The right to information about stored data (Art. 15 EU-DSGVO), the right to correct inaccurate data (Art. 16 EU-DSGVO), the right to erasure of data (Art. 17 EU-DSGVO), the right to restrict the processing of data (Art. 18 EU-DSGVO), the right to object to unreasonable data processing (Art. 21 EU-DSGVO) andthe right to data portability (Art. 20 EU-DSGVO).
If you have given your consent to the use of data, you can revoke this consent at any time with effect for the future. All requests for information, requests for information or objections to data processing should be sent by e-mail to backoffice@mtc.berlin de or to the postal address given in the imprint. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data relating to you violates the EU Data Protection Regulation (Art. 77 EU Data Protection Regulation).

CHILDREN AND ADOLESCENTS

Persons under the age of 18 are not permitted to submit personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.

FURTHER INFORMATION

Contact details of our data protection officer: ds-beauftragter@streit-online.de Information according to Art. 13 para. 2 lit. e EU-DSGVO: The provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide the personal data. Please refer to the paragraph "Which personal data do we collect and for what purpose?" for any consequences of not providing the data for the respective data processing operation.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to change our data protection measures as far as this becomes necessary due to technical development or due to changed legislation or jurisdiction. In these cases, we will also adapt our data protection declaration accordingly. Please therefore refer to the current version of our data protection declaration.