Privacy and Cookie Policy

Status July 2023

• Name and address of the controller
• Contact details of the data protection officer
• General information on data processing
• Rights of the data subject
• Provision of the website and creation of log files
• Use of cookies
• Newsletter
• Email contact
• Contact form
• Application by email
• Company presences
• Use of company presences in professional networks
• Hosting
• Registration
• Plugins used
• Integration of plugins via external service providers

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

MEZ-TECHNIK GmbH

Bierwiesenstr. 7

72770 Reutlingen

Reutlingen Germany

+49 (7072) 60098-0

info@mez-technik.de

www.mez-technik.de

The data protection officer of the controller is

DataCo GmbH

Dachauer Street 65

80335 Munich

Munich, Germany

+49 89 7400 45840

www.dataguard.de 

1. Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

2.Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

3.Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.   

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. the right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

If this is the case, you have a right to information about this data and to the following information

• Processing purposes
• Categories of personal data
• Recipients or categories of recipients
• Planned storage period or the criteria for determining this period
• The existence of the rights to rectification, erasure, restriction or objection
  Right to lodge a complaint with the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
• If applicable, transfer of personal data to a third country or international organisation

2. right to rectification (Art. 16 GDPR) 

If your personal data is incorrect or incomplete, you have the right to request that your personal data be corrected or completed without undue delay.

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted

You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
In the case of unlawful processing, you oppose the erasure of the personal data and request the restriction of their use instead.
We no longer need your personal data for the purposes of the processing, but you require your personal data for the establishment, exercise or defence of legal claims or
after you have objected to processing, for the period necessary to verify whether our legitimate grounds override your grounds.

4. right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand the erasure of your personal data without undue delay

Your data is no longer necessary for the processing purposes for which it was originally collected.
You withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
Your personal data is processed unlawfully.
The deletion is necessary to fulfil a legal obligation under Union law or the law of the member state to which we are subject.
The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
Please note that the above reasons do not apply if the processing is necessary:

• For exercising the right of freedom of expression and information;
  
• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
  
• For reasons of public interest in the area of public health.
  
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
  
• For the establishment, exercise or defence of legal claims.5. Recht auf Datenübertragbarkeit (Art. 20 DSGVO)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.the supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.a list of the supervisory authorities locally competent in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

You have the right to complain to a data protection supervisory authority about the processing of your personal data.Austrian Data Protection AuthorityBarichgasse 40-421030 ViennaTelephone: +43 1 52 152-0E-mail: dsb@dsb.gv.at 

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• The user's operating system
• Date and time of access
• Websites from which the user's system accesses our website

This data is stored in the log files of our system. This does not affect the user's IP addresses or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user.

2 Purpose of data processing

Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

3 Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

5. possibility of objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

1. description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Below we describe the type of cookies we use:

We use technically necessary cookies, which are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

• Language settings
• Log-in information
• Search terms entered
• Use of website functions

We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.

The following data is processed when cookies that are not technically necessary are set:

• Location of Internet users
• Date and time of access to the website
• Tracking of surfing behaviour

2. purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require technically necessary cookies for the following applications:

• Adoption of language settings
• Remembering search terms
• Functionality of the website

Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can thus constantly optimise our offer. In particular, we use these cookies for the following purposes

• Analysis and marketing

3. legal basis for data processing

The provisions of the Telecommunications and Telemedia Data Protection Act (TTDSG) apply to the storage of information in the end user's terminal equipment and/or access to information already stored in the end user's terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored and accessed on your terminal equipment on the basis of Section 25 (2) No. 2 TTDSG. The purpose of storing and accessing the information in your terminal equipment is to make it easier for you to use our website and to be able to offer you our services as you have requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g. logging out or closing the browser) or after the expiry of a specified period. Information on different storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. Art. 6 para. 1 lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or grant it again at a later date by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.

1. Description and scope of data processing

On our website, you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us.

Email address
Surname
First name
Date and time of registration

In connection with data processing for the purpose of sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

2. Purpose of data processing

The user's email address is collected for the purpose of delivering the newsletter.

Other personal data collected during the registration process is used to prevent misuse of the services or the email address used.

3. Legal basis for data processing

The legal basis for processing the data after the user has registered for the newsletter is Art. 6 para. 1 sentence 1 lit. a GDPR, provided that the user has given their consent.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription is active.

The other personal data collected during the registration process will generally be deleted after a period of seven days.

Translated with DeepL.com (free version)

5. Right of withdrawal

The newsletter subscription can be cancelled by the user concerned at any time. A link for this purpose is provided in every newsletter.

This also allows the user to withdraw their consent to the storage of personal data collected during the registration process.

1. Description and scope of data processing

You can contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.

The data will be used exclusively for processing the conversation.

2. Purpose of data processing

In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.

3. Legal basis for data processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. Our legitimate interest is to respond to your enquiry sent by email in the best possible way.

If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Right to object

If the user contacts us by email, they may object to the storage of their personal data at any time. In such cases, the conversation cannot be continued.

Consent may be revoked and storage may be objected to using the following contact details: MEZ-TECHNIK GmbH, Bierwiesenstrasse 7, 72770 Reutlingen, Fax: +49 (7072) 6009860, info@mez-technik.de.

In this case, all personal data stored in the course of contacting us will be deleted.

1. Description and scope of data processing

Our website features a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is stored when the message is sent:

• Email address
• Name
• Date and time of contact
• Industry, company name

2. Purpose of data processing

The processing of personal data from the input mask of the contact form or via the email address provided serves solely to process the contact request.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your enquiry, which you send to us via the contact form, in the best possible way. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Right to object

If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time.

Consent can be revoked and storage can be objected to using the following contact details: MEZ-TECHNIK GmbH, Bierwiesenstrasse 7, 72770 Reutlingen, Fax: +49 (7072) 6009860, info@mez-technik.de.

In this case, all personal data stored in the course of contacting us will be deleted.

You can send us your application by email. We will record your email address and the data you provide in the email.

We also offer an applicant/talent pool.

The processing of personal data from your application email is used solely for the purpose of processing your application.

The legal basis for the processing of data within the applicant pool is the applicant's express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. You may revoke your consent at any time with effect for the future.

Use of company profiles on social networks

Instagram:

Instagram, part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate. If you perform an action on our Instagram company profile (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public. However, as we generally have no influence on the processing of your personal data by Instagram, the company jointly responsible for the MEZ-TECHNIK GmbH company profile, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our company presence on social networks for communication and information exchange with (potential) customers. In particular, we use the company presence for:

• Product advertising, updates, image

The publications about the company's image may contain the following content:

• information about productsI

• information about services
  Advertising

• Customer contact

• Applications Newsletters and other platforms

  Every user is free to publish personal data through activities.

  Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

  The data generated by the company website is not stored in our own systems.

  We have provided appropriate safeguards in the form of standard data protection clauses in accordance with Art. 46(2)(c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us.

You may object to the processing of your personal data that we collect in connection with your use of our Instagram company profile at any time and assert your rights as a data subject as set out in section IV of this privacy policy. To do so, please send us an informal email to info@mez-technik.de. For more information about the processing of your personal data by Instagram and the corresponding options for objection, please visit:

Instagram: https://help.instagram.com/519522125107875

Twitter:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

On our company page, we provide information and offer Twitter users the opportunity to communicate. If you perform an action on our Twitter company page (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public. However, as we generally have no influence on the processing of your personal data by Twitter, the company jointly responsible for the MEZ-TECHNIK GmbH company profile, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our company presence on social networks for communication and information exchange with (potential) customers. In particular, we use the company presence for:

• Product advertising, updates, image

The publications on the company website may contain the following content:

• Information about products
• Information about services
• Advertising
• Customer contact
• Job applications Newsletters and other platforms

Every user is free to publish personal data through their activities.

Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

Die durch den Unternehmensauftritt generierten Daten werden nicht in unseren eigenen Systemen gespeichert.

Für die Verarbeitung Ihrer personenbezogenen Daten in Drittländern haben wir geeignete Garantien in Form von Standarddatenschutzklauseln gem. Art. 46 Abs. 2 lit. c DSGVO vorgesehen. Eine Kopie der Standarddatenschutzklauseln kann bei uns angefordert werden.

Sie können der Verarbeitung Ihrer personenbezogenen Daten, die wir im Rahmen Ihrer Nutzung unseres Twitter - Unternehmensauftritt erfassen, jederzeit widersprechen und Ihre unter IV. dieser Datenschutzerklärung genannten Betroffenenrechte geltend machen. Senden Sie uns dazu eine formlose Email an info@mez-technik.de.\nZur Verarbeitung Ihrer personenbezogenen Daten durch Twitter und die entsprechenden Widerspruchsmöglichkeiten finden Sie weitere Informationen hier:

Twitter: https://twitter.com/de/privacy 

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity to communicate. If you perform an action on our YouTube company page (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public. However, as we generally have no influence on the processing of your personal data by YouTube, the company jointly responsible for the MEZ-TECHNIK GmbH company page, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our company presence on social networks for communication and information 

• Product advertising, updates, image

The publications about the company's image may contain the following content:

• Information about products
• Information about services
• Advertising
• Customer contact
• Job applications Newsletters and other platforms

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

The data generated by the company website is not stored in our own systems.

We have provided appropriate safeguards in the form of standard data protection clauses in accordance with Art. 46(2)(c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us.

You may object to the processing of your personal data that we collect in connection with your use of our YouTube company profile at any time and assert your rights as a data subject as set out in section IV of this privacy policy. To do so, please send us an informal email to info@mez-technik.de. For more information about the processing of your personal data by YouTube and the corresponding options for objection, please visit:

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

1. Scope of data processing

We utilise the opportunity to maintain a corporate presence on professional networks. We maintain a corporate presence on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

XING:

XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

On our page, we provide information and offer users the opportunity to communicate.

The company profile is used for applications, information/PR and active sourcing.

We have no information about the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in the privacy policy of:

LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv 

XING: https://privacy.xing.com/de/datenschutzerklaerung 

If you engage in any activity on our company website (e.g. comments, posts, likes, etc.), you may be making personal data (e.g. your real name or photo from your user profile) public.

2. Legal basis for data processing

The legal basis for processing personal data for the purpose of communicating with customers and interested parties is Art. 6(1)(f) GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to provide you with the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

3. Purpose of data processing

Our company website serves to inform users about our services. Users are free to publish personal data through their activities.

4. Duration of storage

We store your activities and personal data published via our company website until you revoke your consent. In addition, we comply with the statutory retention periods.

5. Right to object

You may object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in section IV of this privacy policy. To do so, please send us an informal email to the email address provided in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv 

XING: https://privacy.xing.com/de/datenschutzerklaerung 

The website is hosted on servers by a service provider commissioned by us.

Our service provider is:

maxcluster

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions.

The website server is located in Germany.

1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask, transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

• Email address
• Surname
• First name
• Address
• Telephone/mobile number
• Date and time of registration

During the registration process, the user's consent to the processing of this data is obtained.

2. Purpose of data processing

User registration is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

Order processing

3. Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given their consent.

If the registration serves to fulfil a contract to which the user is a party or to implement pre-contractual measures, the additional legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.

This is the case for data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store the personal data of the contractual partner in order to comply with contractual or legal obligations.

5. Option to revoke consent

As a user, you can cancel your registration at any time. You can have the data stored about you changed at any time.

All other data, including your user account, can be deleted or changed at any time in the customer area.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations preventing deletion.

We use plugins for various purposes. The plugins used are listed below:

Use of CleverReach

1. Scope of processing personal data

We use CleverReach software to send our newsletter, which is operated by CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, Germany (hereinafter referred to as CleverReach). CleverReach is an email marketing provider and enables us to communicate directly with potential customers via email newsletters. When you register for the newsletter, the data you enter during the newsletter registration process is transferred to CleverReach and stored there. This may result in further personal data being stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on) and device and browser information (especially the IP address and operating system) . Your data will also be stored by CleverReach for this purpose. Your data will not be passed on to third parties for the purpose of receiving the newsletter, and CleverReach does not acquire any right to pass on your data.

Further information on the processing of data by CleverReach can be found here:

https://www.cleverreach.com/de/datenschutz/

2. Purpose of data processing

The CleverReach plug-in is used to acquire new customers for our newsletter and to create, send and analyse newsletter campaigns.

3. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 (1) (a) GDPR.

4. Duration of storage

The data will be stored and evaluated until the processing of the data is objected to or the recipient stops receiving the newsletter.

5. Right of revocation and deletion

You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to revocation.
You can revoke your consent to the storage of data and its use for sending the newsletter by CleverReach at any time. You can exercise your right of revocation at any time by sending an email to info@cleverreach.com or by clicking on the link provided in each newsletter.
Further information on the options for objection and removal vis-à-vis CleverReach can be found at:

https://www.cleverreach.com/de/datenschutz/

Use of Google Analytics

1. Scope of processing personal data

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google Analytics examines, among other things, the origin of visitors, how long they stay on individual pages and their use of search engines, thereby enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).

We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities and to use other Google services related to the use of our online presence and the Internet.
We have requested the anonymisation of IP addresses, which means that Google shortens your IP address as soon as technically possible. However, it cannot be ruled out that your data may be transferred to the servers of Google LLC, based in the USA.
On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide other services to the operator of the online presence in connection with the use of the online presence and the internet.
Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de 

2. Purpose of data processing

We use Google Analytics (Universal Analytics) to evaluate the use of our online presence and to display targeted advertising to people who have already expressed an initial interest by visiting our website.

3. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 (1) (a) GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or until you exercise your right of withdrawal.

5. Right of revocation

You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent prior to revocation.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the ‘Do Not Track’ function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https:// noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate Google's use of your personal data by clicking on the following link:
https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

6. Risk warning

Your personal data will also be transferred to the United States. There is no adequacy decision for the United States pursuant to Article 45(3) of the GDPR. We would like to point out that data transfers without an adequacy decision involve certain risks, which we would like to inform you about below:
US intelligence services use certain online identifiers (such as IP addresses or unique identification numbers) as a starting point for monitoring individuals. In particular, it cannot be ruled out that these intelligence services have already collected information about you that could be used to trace the data transferred here back to you.

Providers of electronic communications services headquartered in the United States are subject to surveillance by US intelligence services pursuant to 50 U.S. Code § 1881a (‘FISA 702’). Accordingly, electronic communications service providers headquartered in the United States are required to provide personal data to US authorities pursuant to 50 U.S. Code § 1881a, without any possible legal recourse. Even encryption of data in the data centres of electronic communications service providers cannot offer adequate protection, as electronic communications service providers have a direct obligation to grant access to or disclose imported data in their possession, custody or control. This obligation may also expressly extend to the cryptographic keys without which the data cannot be read.
The fact that this is not merely a ‘theoretical risk’ is demonstrated by the ECJ ruling of 16 July 2020 (Case C 311/18, ‘Schrems II’).
We have concluded guarantees with Google in the form of standard data protection clauses in accordance with Art. 46(2)(c) GDPR. A copy of the standard data protection clauses can be requested from us.

Use of Google My Business

1. Scope of personal data processing

We use the Google My Business marketing platform provided by Google LLC, Gordon House, Barrow Street, 4, Dublin, Ireland (hereinafter referred to as Google).
We use Google My Business for customer acquisition with optimised company profiles, including the option of statistical analysis and contacting users.
Google cookies are stored on your device for this purpose.
In particular, the following personal data is processed by Google My Business:

• Contact details / Company details
• Address details
• Email addresses
• Telephone number
• Opening hours
• Location details
• Credit card details
• Reviews
• IP address

Data may be transferred to Google servers in the United States. Further information on data processing by Google My Business can be found here:
https://policies.google.com/privacy

2. Purpose of data processing

We use Google My Business to develop statistical methods and improve user behaviour.

3. Legal basis for the processing of personal data

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the purposes of data processing mentioned in section 2.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Right of revocation and deletion

You have the right to revoke your declaration of consent under data protection law at any time. Revocation of consent does not affect the lawfulness of processing based on consent before revocation.

1. Description and scope of data processing

We integrate certain plugins from external service providers in the form of content delivery networks on our website. When you visit our website, a connection is established to the servers of the providers we use in order to retrieve content and store it in the cache of the user's browser. This may result in personal data being stored and evaluated in server log files, in particular device and browser information (especially the IP address and operating system). We use the following services:

• Magento

2. Purpose of data processing

The use of the functions of these services serves to deliver and accelerate online applications and content.

3. Legal basis for data processing

This data is collected on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

5. Right to object

This privacy policy was created with the support of DataGuard.