Matrix42 Companion Privacy Policy

Roles and Responsibilities

Controller: Your organization (e.g., your employer or contracting entity) is the data controller for personal data processed via the App and the connected Matrix42 Silverback MDM.

Processor (hosting / app provider): Matrix42 GmbH acts as a data processor only when providing services and as the App provider.

Matrix42 GmbH (processor contact)
Elbinger Str. 7, 60487 Frankfurt am Main, Germany
Email: gdpr@matrix42.com

Data Collection

The App collects data required for mobile device management purposes. Collection is configured and controlled by your organization’s administrator. Depending on the configuration set by your organization’s administrator, the following types of data may be collected:

• Device information, such as device name, operating system, version, and identifiers.
• Account information, including username and managed email address.
• Location data (precise), only if explicitly enabled by your administrator.
• Security and compliance data, such as device encryption or jailbreak/root status.

The App does not collect any data for marketing or advertising purposes.

Purpose of Data Processing

All collected data is used exclusively for enterprise device management, including:

• Device registration and configuration.
• Security and compliance monitoring.
• Remote support and troubleshooting.
• Device location tracking, if activated by administrators (e.g., for asset recovery or loss prevention).

Location tracking is only active when configured by your organization’s administrator in the MDM system.

Data Storage and Access

Data collected through the App is transmitted securely to your organization’s Matrix42 Silverback MDM system.

• For on-premises environments, data is stored within your organization’s infrastructure. Access is limited to authorized administrators and system operators.
• For cloud environments, data is hosted in Microsoft Azure, managed by Matrix42 GmbH acting as a data processor on behalf of your organization. Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, U.S.A.) acts as a sub-processor of your personal data in relation to the Azure capacity and the parties acknowledge that any Personal Data processed within the cloud service shall be exclusively governed by the terms and conditions for the cloud service as stipulated and amended from time to time by Microsoft Corporate. Access is restricted to authorized Matrix42 personnel who maintain the hosting infrastructure as well as individuals in accordance with the Microsoft terms in force from time to time.

Data may be stored for up to 365 days, or as determined by your organization’s configuration from time to time.

Data Sharing

We do not sell or share personal data with third parties. Data may be shared with trusted service providers solely to operate the service (e.g., hosting), under appropriate data processing agreements, and within the managed MDM infrastructure (between the device, the hosting platform and your organization’s MDM server).

User Control

If your organization has enabled location tracking, this setting cannot be disabled by the user. Before any location collection begins, the App provides a clear in-app notice; where background location is used, a persistent system notification is shown. All tracking and data collection are controlled by your administrator in accordance with your company’s internal IT and privacy policies.

Security

We apply industry-standard security measures, including encrypted communication (HTTPS/TLS), secure key storage, and authentication controls to protect your data from unauthorized access, alteration, or disclosure.

Data Subject Rights

To exercise your privacy rights (e.g., access, deletion, restriction), please contact your organization as the data controller. Matrix42 will assist your organization as its data processor where applicable. You may also contact Matrix42 at gdpr@matrix42.com for processor-related inquiries.

Contact

If you have any questions regarding this Privacy Policy or the processing of your data, please contact:
Matrix42 GmbH
Elbinger Str. 7, 60487 Frankfurt am Main, Germany
Email: gdpr@matrix42.com

(EU/EEA) Legal Basis

Processing by or on behalf of your organization is based on GDPR Art. 6(1)(f) legitimate interests (protecting corporate assets, security and compliance) and, where applicable, Art. 6(1)(b) contract performance or Art. 6(1)(c) legal obligations. Local labor law/works council rules may apply.