Skip to main content

Privacy Policy

Information about how we handle your data at gooda11y.

GENERAL NOTICE AND MANDATORY INFORMATION

DESIGNATION OF THE RESPONSIBLE BODY

The responsible party for data processing on this website is:

Moving Targets Consulting GmbH
Arndtstraße 34
10965 Berlin, Germany

We appreciate your interest in our company and our services and would like you to feel secure when visiting our website, also with regard to the protection of your personal data. We take the protection of personal data very seriously. Therefore, compliance with the provisions of the EU General Data Protection Regulation (EU GDPR) and other relevant data protection laws is a matter of course for us. We want you to know when we process which data and how we use it. We have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by external service providers.

SERVER - LOG - FILES

When you visit our Internet pages, our web servers automatically store the data that your browser transmits to enable you to visit the Internet pages: your IP address, the page you called up and the date and time of your visit, access status/HTTP status code, the amount of data transmitted in each case, your browser, the language and version of the browser software as well as your operating system and its interface. There is no merging of this data with other data sources. The data processing is based on Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

DATA PROCESSING THROUGH THE USE OF COOKIES

We only use necessary functional cookies, which are only processed for the duration of the website visit.

WEBSITE HOSTING (VERCEL)

We collect the following data in so-called log files, which your browser transmits: IP address, date and time of the request, time zone difference to Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred, website from which the request originated, and information about the browser and operating system. This is necessary to display our website and to ensure stability and security. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DSGVO.

This website is hosted by Vercel Inc, 650 California St, San Francisco, California, 94108, United States. This is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) S. 1 lit. f DSGVO in not having to maintain a server on our premises ourselves. You can learn more about Vercel's privacy policy here: https://vercel.com/legal/privacy-policy .

You have the right to object to the processing. Whether the objection is successful is to be determined in the context of a balancing of interests. Vercel will retain your data for as long as there is a legitimate business interest in processing your personal data. Once this ceases to exist, Vercel will either erase or anonymize it or, if this is not possible (e.g. because your personal data has been stored in backup archives), Vercel will keep your personal data secure and isolate it from any further processing until erasure is possible. Processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

DATA PROCESSING WITH MONGODB ATLAS

For storing and processing accessibility test data, we use MongoDB Atlas, a secure cloud-based database service provided by MongoDB, Inc. The data stored includes test results, user comments, and website accessibility evaluations. This processing is necessary to provide the gooda11y service and improve website accessibility.

MongoDB Atlas implements industry-standard security measures, including encryption at rest and in transit, to protect your data. Our data is hosted in EU-based data centers (e.g., Frankfurt, EU-Central-1) to ensure compliance with GDPR requirements.

The legal basis for this processing is Art. 6 para. 1 lit. b DSGVO (performance of contract). The data will be stored as long as necessary to provide the service and to comply with legal retention requirements.

For more information on MongoDB's data handling, please refer to MongoDB's Privacy Policy: https://www.mongodb.com/legal/privacy-policy

WEB STATISTICS (PLAUSIBLE)

Our website uses the open source web analytics service of Plausible, based in Estonia. The web analysis is based on anonymized data. It is not possible to draw conclusions about individuals. The following web statistical analyses are performed: URL, HTTP referrer, browser, operating system, end device, country. The processing is based on our legitimate interest in measuring the reach of our website (Art. 6 para. 1 lit. f DSGVO). You can find more info on Plausible at https://plausible.io/data-policy . The legal basis is Art. 6 para. 1 lit. f) DSGVO. The legitimate interest lies in the optimization and economic operation of the website.

SSL/TLS ENCRYPTION

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as contact requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar of your browser changes from http:// to https:// and by the lock symbol in your browser bar.

HANDLING OF APPLICATIONS

You can submit your applications to our job postings or also unsolicited applications via our personnel application tool personio. The legal basis for data processing is Art. 6 para. 1 lit. a EU-DSGVO.

We will delete your data after three months from the decision on the allocation of the job, unless a claim is asserted on your part pursuant to the AGG on the basis of the decision (in this case, the deletion will take place after the conclusion of the proceedings on your claim). Should you be considered by us for a subsequent job assignment, we will delete your data only after two years from the date of sending if you give us your consent to do so. You can revoke this consent later with effect for the future. Such revocation will mean that you will have to resubmit your data for subsequent job advertisements if you wish to apply again. You will not suffer any other disadvantages (in particular in the selection of the applicant) as a result of this revocation.

GENERAL DATA PROCESSING TO THIRD PARTIES

Data will not be transferred to third parties unless otherwise stated in the preceding paragraphs. We would like to point out that we can only delete your data after the expiry of a legal obligation to retain data, insofar as such an obligation exists. This applies accordingly to any obligation to retain data arising from a contract with you.

DATA SECURITY

We have implemented technical and organizational security measures to protect your data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments. Our employees and, if applicable, data-processing third parties are obligated by us to maintain confidentiality.

YOUR RIGHTS

In accordance with the EU Data Protection Regulation, you have the right to request information from us at any time as to whether personal data about you is stored by us. Furthermore, you are entitled to the following rights in relation to this stored data:

  • The right to information about stored data (Art. 15 EU-DSGVO)
  • The right to correct inaccurate data (Art. 16 EU-DSGVO)
  • The right to erasure of data (Art. 17 EU-DSGVO)
  • The right to restrict the processing of data (Art. 18 EU-DSGVO)
  • The right to object to unreasonable data processing (Art. 21 EU-DSGVO)
  • The right to data portability (Art. 20 EU-DSGVO)

If you have given your consent to the use of data, you can revoke this consent at any time with effect for the future. All requests for information, requests for information or objections to data processing should be sent by e-mail to backoffice@mtc.berlin or to the postal address given in the imprint. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data relating to you violates the EU Data Protection Regulation (Art. 77 EU Data Protection Regulation).

CHILDREN AND ADOLESCENTS

Persons under the age of 18 are not permitted to submit personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.

FURTHER INFORMATION

Contact details of our data protection officer: ds-beauftragter@streit-online.de

Information according to Art. 13 para. 2 lit. e EU-DSGVO: The provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide the personal data. Please refer to the paragraph "Which personal data do we collect and for what purpose?" for any consequences of not providing the data for the respective data processing operation.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to change our data protection measures as far as this becomes necessary due to technical development or due to changed legislation or jurisdiction. In these cases, we will also adapt our data protection declaration accordingly. Please therefore refer to the current version of our data protection declaration.

©2025 Moving Targets Consulting GmbH