Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Matthias Panitz
Torstraße 22
10119 Berlin
Germany
Email: mat.panitz@gmail.com
Website: matthiaspanitz.com

Last updated: 29 September 2026

2. General information

I process personal data only where this is necessary to operate this website, respond to enquiries, provide information about my professional services, or where you have consented to processing.
Depending on the processing activity, the legal bases are in particular Article 6(1)(a), (b) and (f) GDPR.

3. Hosting and website platform – Wix

This website is created and hosted using services provided by Wix.com Ltd. (“Wix”).
When you visit this website, technical information may be processed by Wix in order to provide, secure and operate the website. This may include, for example, IP address, browser and device information, date and time of access, referring pages and technical log information.
The processing is carried out where necessary for the secure and reliable provision of this website on the basis of Article 6(1)(f) GDPR. My legitimate interest is the secure and functional operation of my professional website.
Wix processes personal data on my behalf as a service provider / processor where applicable.
Wix is an international service provider. Personal data may therefore be processed in Israel, the United States and other jurisdictions. Wix states that international transfers are based on applicable adequacy decisions or appropriate safeguards such as the European Commission’s Standard Contractual Clauses where required.
Further information about Wix’s data protection practices can be found in Wix’s privacy documentation.

4. Contact form

If you contact me through the website, the following information is collected:
first name
last name
email address
the content of your message
Wix Forms processes the submission and stores the information within Wix’s Forms & Submissions system and Wix Contacts / CRM.
I use this information solely to review and respond to your enquiry and, where relevant, to discuss a potential professional engagement or employment opportunity.
Where your enquiry relates to a potential contract or engagement, processing is based on Article 6(1)(b) GDPR.
For other professional enquiries, processing is based on Article 6(1)(f) GDPR. My legitimate interest is communicating with people and organizations who contact me in connection with my professional activities.
The information is retained only for as long as necessary for the relevant communication or business purpose. Where correspondence becomes relevant to a contractual relationship, legal claim or statutory accounting or tax obligation, it may be retained for the applicable statutory period.

5. Email communication

If you contact me directly by email, I process your email address, the contents of your message and any other information you voluntarily provide for the purpose of responding to your enquiry.
The legal basis is Article 6(1)(b) GDPR where the communication relates to a possible contractual relationship and Article 6(1)(f) GDPR for other professional communication.

6. Cookies and similar technologies

This website may use cookies and similar technologies.
Technologies that are strictly necessary for providing the website may be used without consent where permitted by §25(2) TDDDG.
Non-essential technologies, particularly those used for analytics or marketing, are used only where you have provided consent through the website’s cookie consent system. The legal basis for any related processing of personal data is Article 6(1)(a) GDPR.
You can withdraw or change your consent at any time using the Cookie Settings link on this website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7. Wix Analytics

I currently use Wix Analytics to understand in aggregate how visitors use this website and to improve its content and performance.
Where Wix Analytics relies on non-essential analytics cookies or comparable technologies, those technologies are activated only after the visitor has provided the relevant consent through the cookie banner.
Depending on the visitor’s consent settings, information may include pages visited, approximate location, device/browser information, referral source and interaction data.
The legal basis for consent-based analytics is Article 6(1)(a) GDPR in conjunction with §25(1) TDDDG.

8. Embedded YouTube Videos

This website may contain embedded videos provided by YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube content is treated as a non-essential service and is only loaded after you have given the relevant consent through the website’s consent management platform.

When YouTube content is activated, information such as your IP address, device and browser information, referrer URL and information about the video viewed may be transmitted to Google. Data may also be processed outside the European Economic Area, including in the United States.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR in conjunction with §25(1) TDDDG.

You can withdraw or change your consent at any time through the website’s cookie/privacy settings.

Further information about Google’s processing of personal data can be found in Google’s privacy information.

9. Downloadable CV

My CV is provided as a file hosted through Wix.
Downloading the file does not require you to provide additional personal information. The same technical connection and server information described above may be processed when the file is accessed.

10. Recipients and service providers

Personal data may be processed by service providers that are necessary to operate this website, particularly Wix and its approved subprocessors.
I do not sell visitors’ personal data to advertisers or other third parties.
Data is otherwise disclosed only where this is necessary for a legitimate business purpose, required by law, necessary for the establishment, exercise or defence of legal claims, or where you have consented.

11. International data transfers

Because Wix and some of its subprocessors operate internationally, personal data may be processed outside the European Economic Area.
Where personal data is transferred to a country for which the European Commission has not issued an adequacy decision, appropriate safeguards such as Standard Contractual Clauses are used where required.

12. Storage periods

Personal data is retained only for as long as required for the purpose for which it was collected, unless longer storage is required by law or is necessary for the establishment, exercise or defence of legal claims.
Consent-based processing ends when consent is withdrawn, unless another legal basis permits continued processing.

13. Your rights

Subject to the conditions of the GDPR, you have the right to:

request access to your personal data;
request correction of inaccurate data;
request deletion of your data;
request restriction of processing;
receive data you have provided in a portable format where applicable;
object to processing based on legitimate interests;

withdraw consent at any time for future processing.

To exercise these rights, contact:
mat.panitz@gmail.com

You also have the right to lodge a complaint with a competent data protection supervisory authority.
For a controller established in Berlin, the competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

14. Changes to this Privacy Policy

I may update this Privacy Policy where the website, the services used on it or applicable legal requirements change. The current version is always available on this website.