Last updated: October 12, 2026

This privacy policy explains which personal data we process when you visit edmn.eu (European Defence Materials Network, “EDMN”), for which purposes and on which legal basis, and what rights you have.

1. Controller

The controller responsible for data processing on this website is:

Matplus GmbH
Friedrichstraße 51, 42105 Wuppertal, Germany
Phone: +49 (0)202 29 78 97 80
Email: datenschutz@matplus.eu
Represented by the Managing Director Eva-Maria Dombrowa

Data protection officer: You can reach our data protection officer at datenschutz@matplus.eu or at our postal address, marked ‘For the attention of the data protection officer’.

EDMN is a network of several companies. The partners presented on this website are not responsible for the data processing on this website. If you visit partner websites, their own privacy notices apply.

2. Hosting and delivery of the website

The website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The servers are located in Germany. The hosting provider processes data on our behalf under a data processing agreement (Article 28 GDPR).

All fonts, scripts and other resources are delivered from our own server. No fonts or libraries are loaded from third-party servers (e.g. Google Fonts or content delivery networks).

3. Server log files

When you access the website, your browser automatically transmits information that is stored in server log files: IP address, date and time of access, requested page/file, amount of data transferred and HTTP status code, referrer URL, browser type and version, and operating system.

Purpose: delivering the website, ensuring stability and security, detecting and preventing attacks.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and functional provision of the website).
Retention: we store log files only for a short period and delete them afterwards, unless needed longer to investigate a specific security incident, in which case they are deleted once the incident has been resolved.

With your consent, we use the open-source software Plausible Analytics for statistical analysis of how our website is used. Plausible is only loaded once you accept the “Statistics” category in the cookie banner. Plausible runs on our own instance operated by us at analytics.matplus.eu; no data is transmitted to Plausible Insights OÜ or other third parties. The servers are located in Germany at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; Hetzner acts as our processor (Article 28 GDPR).

Plausible does not set cookies and does not store any data in your browser. However, the script reads information from your browser (e.g. user agent, screen size, page visited, referrer). Your IP address is used only briefly, together with your user agent and a random value that changes daily, to calculate a pseudonymous visitor identifier, which therefore changes every day; the IP address itself is not stored. Only aggregated statistics are collected (e.g. pages visited, visit duration, referrer, country, device type, browser and operating system). No user profiles are created and you are not recognised across days or websites.

Purpose: improving the website on the basis of aggregated usage statistics.
Legal basis: your consent under Section 25(1) German Telecommunications Digital Services Data Protection Act (TDDDG) (access to information on your device) and Article 6(1)(a) GDPR. Your consent is valid for 12 months, after which we ask again.
Withdrawal: you can withdraw your consent at any time with effect for the future by deselecting the “Statistics” category via the “Cookie settings” link in the footer. The lawfulness of processing carried out before withdrawal remains unaffected.
Retention: only aggregated, non-personal statistics are retained.

Our consent banner distinguishes the categories “Necessary” and “Statistics”. “Necessary” is always active; services in the “Statistics” category (Plausible, section 4) are only loaded with your consent. Rejecting is as easy as accepting. To store your choice in the consent banner, we place the cookie “cookie-consent” in your browser for 12 months. It only contains your choice. If you decline “Statistics” or withdraw your consent, we additionally set the entry “plausible_ignore” with the value “true” in your browser’s local storage. It ensures that Plausible sends no data, contains no other information and is deleted as soon as you consent to “Statistics”.

Legal basis: Section 25(2) No. 2 German Telecommunications Digital Services Data Protection Act (TDDDG) (strictly necessary to store your decision) and Article 6(1)(c) in conjunction with Article 7(1) GDPR or Article 6(1)(f) GDPR.

You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.

For the “Statistics” category, the legal basis is your consent (Section 25(1) TDDDG, Article 6(1)(a) GDPR), valid for 12 months. Any other services requiring consent would likewise only be loaded after your consent and described here.

6. Contact by email

If you contact us by email (e.g. at contact@edmn.eu ), we process your email address, your name (if provided), the content of your message and the email metadata in order to respond.

Legal basis: Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise Article 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Retention: we delete your enquiry once it has been dealt with, unless statutory retention obligations apply (e.g. 6 years for commercial correspondence under Section 257 German Commercial Code).
Forwarding via Cloudflare Email Routing: emails to addresses at edmn.eu (e.g. contact@edmn.eu ) are received via the “Email Routing” service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare forwards incoming messages in real time to our internal mailbox. In doing so, Cloudflare processes the sender and recipient addresses, the IP address of the delivering mail server and the technical metadata of the email; headers and content are forwarded unchanged. According to Cloudflare, the content of emails is not stored and Cloudflare does not access it; incoming messages are only checked automatically for spam and phishing. Cloudflare acts as our processor (Article 28 GDPR). The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in the reliable and secure delivery of emails to our EDMN addresses. For transfers to the USA, see section 8.
Destination mailbox: forwarded emails are delivered to a Matplus GmbH mailbox. Our @matplus.eu mailboxes are operated for us by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, the Netherlands (“Zoho”), as our processor (Article 28 GDPR). The mailboxes are hosted in Zoho’s EU data centre (Amsterdam, the Netherlands; secondary data centre Dublin, Ireland). For transfers to third countries see section 8.

6a. Email delivery via MailerLite

If you have consented to receive information from EDMN by email (e.g. about the network, events and news), we process your email address and, where provided, your name and company in order to send you these emails. We document your consent (time and manner given) in order to be able to prove it (Article 7(1) GDPR).

Service provider: we use MailerLite, a service of MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland (“MailerLite”), to send these emails. MailerLite processes the data on our behalf under a data processing agreement (Article 28 GDPR). The data is stored in EU data centres (Germany or the Netherlands) of Google Cloud EMEA Ltd, Dublin, Ireland, which MailerLite uses as a sub-processor. We do not embed any MailerLite form or script on this website.

Open and click tracking: our emails contain a small tracking pixel and links through which MailerLite records whether and when an email was opened and which links were clicked. Technical information such as IP address, time, email client or browser and device is also processed. We use this analysis to see which content is of interest to readers and to improve our emails. This analysis is part of your consent to receive the emails.

Legal basis: your consent (Article 6(1)(a) GDPR; for the tracking pixel also Section 25(1) TDDDG). Documentation of consent is based on Article 6(1)(c) in conjunction with Article 7(1) GDPR.

Unsubscribing and withdrawal: you can stop receiving emails and withdraw your consent at any time with effect for the future via the unsubscribe link in every email or by email to contact@edmn.eu . The lawfulness of processing carried out before withdrawal remains unaffected.

Retention: we store your data for as long as you have consented. After you unsubscribe, we delete your data from the mailing list. Your email address may be kept on a block list so that you receive no further emails, and proof of your earlier consent is retained for up to three years (Article 6(1)(f) GDPR; legitimate interest in defending against claims, limitation period under Section 195 German Civil Code).

Transfers to third countries: MailerLite stores the data in the EU. As the sub-processor Google Cloud EMEA Ltd is part of the Google group, access by Google LLC (USA) for maintenance and support cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023, Article 45 GDPR); EU standard contractual clauses apply in addition (Article 46(2)(c) GDPR).

More information: https://www.mailerlite.com/legal/privacy-policy

7. Recipients

Within our company, only those who need your data for the stated purposes have access. External recipients are limited to our processors (hosting: netcup GmbH; audience measurement: Hetzner Online GmbH; email forwarding: Cloudflare, Inc.; email delivery: MailerLite Limited; mailboxes: Zoho Corporation B.V.) bound under Article 28 GDPR. Data is only disclosed to other third parties where we are legally obliged to do so.

8. Transfers to third countries

The website and audience measurement are operated exclusively on servers in Germany. For email delivery via MailerLite see section 6a. Our mailboxes are hosted in Zoho’s EU data centre; in rare cases employees of Zoho Corporation Pvt. Ltd. (India) may access data for technical support, on the basis of EU standard contractual clauses (Article 46(2)(c) GDPR). Otherwise, a transfer to a third country can only occur for emails to edmn.eu addresses: Cloudflare, Inc. is based in the USA and operates a global network, so emails may be routed via servers outside the EU/EEA during forwarding.

Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers are therefore based on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR). In addition, we have agreed EU standard contractual clauses with Cloudflare (Article 46(2)(c) GDPR). More information: https://www.dataprivacyframework.gov/ and https://www.cloudflare.com/privacypolicy/

9. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to withdraw consent at any time with effect for the future (Art. 7(3)); the lawfulness of processing before withdrawal remains unaffected.

Right to object (Art. 21 GDPR): Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, please contact: Matplus GmbH, Friedrichstraße 51, 42105 Wuppertal, Germany, datenschutz@matplus.eu .

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 (0)211 38424-0
Email: poststelle@ldi.nrw.de

11. No automated decision-making; no obligation to provide data

There is no automated decision-making including profiling (Article 22 GDPR). You are not obliged to provide personal data. However, the website cannot be delivered without processing your IP address, and we cannot answer enquiries without contact details.

12. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.