Privacy Policy

1. Introduction

This Privacy Policy explains how metrica GmbH & Co. KG (“we”, “us”, “our”) processes personal data when you visit our website, regardless of your location. We are committed to protecting your privacy and handling personal data responsibly and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Controller

metrica GmbH & Co. KG
Bahnhofstraße 73
48308 Senden
Germany

Email: info@metrica.de

Data Protection Officer:
Our Data Protection Officer can be contacted at the above address or via email at
datenschutzbeauftragter@metrica.de

3. Website Hosting and Access

Our website is hosted in the United Kingdom.
When you access the website, server log files and further categories of personal data are automatically processed, including:

Categories of data:

IP address
Date and time of access
Requested page or file
Browser type and operating system
Referrer URL

Purpose of processing:

For transmitting requested content (especially texts, images and product information as well as electronic files provided for downloading, etc ),
to ensure the security, stability and functionality of the website,
for improvements to the service’s presentation, features and functionalities as well as general administration tasks.

Legal Basis:

This processing is based on our legitimate interest in operating a secure and functional corporate website in order to present the company and thereby attract potential customers (Art. 6(1)(f) GDPR).

Data Retention:

We store this information for a maximum of 7 days for the purpose of recognizing and pursuing misuse.

4. Embedded Video Content (Vimeo)

Our website uses embedded videos provided by Vimeo Inc., USA.

When you play a video, personal data (including your IP address and device information) may be transmitted to Vimeo. Vimeo may process this data in the United States.

Categories of data:

IP address, device information.

Purposes of processing:

Your personal data is processed to enable us to present audiovisual content as requested by you.

If you have a Vimeo user account and are logged in, Vimeo will link the transmitted information to your user account. You can prevent this by logging out of your user account before visiting the subpage and deleting cookies set by Vimeo. For more information on how Vimeo processes your personal data, please refer to Vimeo's privacy policy, available at https://vimeo.com/privacy. Data is only transferred to Vimeo if you activate a video integrated into the website by clicking on a corresponding area when using our website.

Legal bases:
This processing is based on our legitimate interest in making our company and products more attractive to potential customers through presenting audiovisual content (Art. 6(1)(f) GDPR).

5. Contact

You may contact us via E-Mail. If you do so, we will process various personal data.

Categories of data:

E-Mail-address; in case that you disclose it to us, your name as well as the content of your query.

Purposes of processing:

Answering your query.

Legal basis:

Your personal data is processed for the purpose / legitimate interest of processing your request based on Art. 6 para. 1 lit. b or lit. f GDPR.

Data retention:

After answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.

6. Whistleblowing Reports

Categories of data:

When we receive a report from a whistleblower, we process your name, if the whistleblower chooses to provide it, as well as the content of the report and the surrounding circumstances (such as the date of receipt). Depending on the communication channel of use, we may also store data relating to that medium (email address, telephone number, etc.). In addition, we share your data with our service provider responsible for receiving reports under the HinSchG, FP OrgaConsult GmbH, Dülmener Straße 92, 48653 Coesfeld, Germany.

Purposes of processing:

We process your data for the prevention and investigation of potential breaches of applicable laws as set out in Section 2 of the German Whistleblower Protection Act (HinSchG).

Legal bases:

The processing of data relating to the employees concerned for the purpose of investigating potential criminal offences in the employment context is carried out on the basis of Section 26 (1) sentence 2 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – “BDSG”).

In addition, we process your data on the basis of our legal obligation to follow up on reports and to investigate potential misconduct, pursuant to Article 6 (1) (c) GDPR in conjunction with Sections 10, 17 et seq. HinSchG.  

No obligation to provide data and anonymity:

You are not obliged to provide us with personal data. However, if you choose not to do so, it may not be possible, or only to a limited extent possible, for us to investigate the alleged misconduct.

Data retention:

When we receive a report, we investigate the facts of the case with due sensitivity. If it becomes apparent that an allegation is not sufficiently substantiated, we will delete the data relating to it without undue delay and at the latest within [depending on deletion routine, e.g. “two months”] after completion of the investigation, unless storage is lawfully permitted on another legal basis.

If the allegations prove to be substantiated, we will retain the data for as long as is necessary to clarify the facts and for any subsequent legal action. Beyond any pending proceedings, this will generally not exceed a period of three years after completion of the investigation.

7. Google Analytics

We use Google Analytics (GA4) to analyse website usage and improve performance. Google Analytics is a web analytics service provided by Google Ireland Limited. (Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland) and Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) (“Google”).

For this purpose, a cookie is stored on your device. This cookie collects data such as browser and device information, your IP address, websites visited and the date and time of server request in order to analyse your use of the website, compile reports on website activity for website operators and provide the website provider with other services relating to website activity and internet usage. The cookie also collects in-formation about users’ interactions with adverts (clicking on a text advert or watching a video advert). In addition, we may provide Google with information on the status and scope of your consent.

We use the data collected to optimize this website and campaigns, for retargeting (i.e., to display advertising after you have visited our website) and to personalize advertisements. The cookies stored by Google on your device enable retargeting on Google’s websites (e.g. as part of “Google Ads”) and also (e.g. as part of “Google Campaign Manager 360”) on our websites and – depending on your interests – when you visit other websites.

We have implemented Google Analytics in such a way that the last octet (the last part) of your IP address is immediately rendered unrecognisable if the IP address is collected within the EU or EEA. Only in exceptional cases will the full IP address be sent to Google servers in the US and shortened there.

Google may also process the data concerning you in order to predict the behaviour of other users who have not consented to the use of cookies and the processing of their data for personalised marketing, using algorithms (for machine learning) that can also be trained using this data, in particular their potential responses to advertisements.

Google Analytics cookies are only activated after your consent via Cookiebot.

Legal basis:
Art. 6(1)(a) GDPR (consent)

8. Cookies and Consent Management

We use Cookiebot, a consent management platform provided by:

Cybot A/S
Havnegade 39
1058 Copenhagen
Denmark

Cookiebot allows you to control which categories of cookies you consent to. Cookies that are not strictly necessary are only set after your explicit consent.

You may change or withdraw your consent at any time via the “Cookie Settings” link on our website.

A detailed and current overview of all cookies in use can be found in our  Cookie Policy / Cookie Declaration.

9. Disclosure of Data

In addition to the recipients mentioned above, we may disclose personal data to the following recipients, respectively for the following purposes:

Service providers / third country transfers:

In order to provide the website and the services contained therein, we may engage service-providers (e.g. for the hosting of our websites, computing and database management, tracking, playing video content etc.) which therefore may also process your personal data when you use our websites.

Most of these service providers are contractually bound to only process such personal data on behalf of us and are located (i) within the EU/EEA, (ii) in countries for which the EU Commission has officially recognised the existence of an adequate level of data protection, including the US insofar as the data recipients participate in the EU-U.S. Data Privacy Framework.

Where this is not the case or if service-providers themselves engage sub-contractors your personal data may potentially be transferred to third countries (i.e. countries outside of the EU/EEA without an adequate level of data protection).

All of our service-providers are, however, obligated to solely process in or transfer any of your personal data to third countries in case the additional requirements for international data transfers enshrined in Art. 44 et. seqq. of the GDPR are complied with, pre-dominantly by concluding EU Standard Contractual Clauses and, if required, implement additional measures in order to establish an adequate level of data protection. The EU Standard Contractual Clauses are model contracts provided by the EU Commission which – if required – together with additional measures are intended to ensure that your personal data are processed in accordance with European data protection standards even if the processing takes place outside the EU/EEA.

Further recipients/disclosures:

You have given explicit consent.
Disclosure is necessary for contractual or legal obligations, e.g. to law enforcement agencies, authorities that prosecute administrative offenses punishable by fines, and tax authorities.
Disclosure is required to protect our legitimate interests, e.g. If it is necessary to investigate illegal or abusive use of the service or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if necessary, to injured third parties.

No personal data is sold.

10. Data Retention

In addition to the retention periods stated herein, personal data is retained only for as long as necessary to fulfil the purposes described in this policy or to comply with statutory retention obligations.

Consent records are stored for a period of three years after their withdrawal.

11. Your Rights (EU / EEA)

You have the right to:

Access your personal data: You have the right to obtain confirmation as to whether your personal data are being processed by us.
Rectify inaccurate data: You have the right to have false personal data concerning you corrected.
Request erasure: You may also request the deletion of your personal data, for example if your data are no longer required for the purposes for which they were collected or otherwise processed.
Restrict processing: You also have the right to request the processing of your personal data to be restricted; in such a case, the data will be blocked for any processing. This right exists in particular if the accuracy of the personal data between you and us is debated.
Object to processing: In case of processing activities involving your personal data that are carried out on basis of a legitimate interest of us or a third party, you have the right to object against such processing of your personal data at any time for reasons resulting from your specific situation. We will stop that processing unless we can prove important reasons for the processing which deserve protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend against legal claims.
In addition, you have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing in accordance with Art. 21 para. 2 GDPR.
Data portability: If we process your personal data to fulfil a contract with you or on the basis of your consent, you also have the right to receive your personal data in a structured, commonly used and machine-readable format, provided and to the extent that you have made the data available to us.
Withdrawal of consent: If you have provided consent to us to process your personal data, you have the right to withdraw any such consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on con-sent before its withdrawal.
If you want to assert any of these rights or if you have any other questions (e.g., on agreements on data processing under joint controllership with other companies) or wishes in connection with regard to your personal data, please send an email or a letter using the contact details provided above.
After answering of your inquiry, we delete your inquiry with a period of three years after the end of the respective calendar year.
You also have the right to file a complaint at any time with a supervisory authority, in particular a supervisory authority in the Member State where you are staying, working or the place of alleged infringement, if you believe that the processing of personal data concerning you is in violation of applicable data protection laws.
Competent authority for us is:
Federal State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf

Telefon: 0211/38424-0
Fax: 0211/38424-999

E-Mail: poststelle@ldi.nrw.de

12. US Privacy Notice

For visitors located in the United States, we do not sell personal data and do not engage in targeted advertising or profiling. Requests regarding personal data may be submitted via the contact details above.

13. Changes to this Policy

This Privacy Policy may be updated from time to time.
Last updated: February/2026