Privacy Policy

As of August 2021

Table of Contents

  1. Name and address of the responsible person
  2. Contact details of the data protection officer
  3. General information about data processing
  4. Rights of the person concerned
  5. Provision of the website and creation of the log files
  6. Use of Cookies
  7. Registration
  8. Online Shop
  9. Our Payment Methods
  10. Shipping service
  11. Newsletter
  12. E-mail contact
  13. Online Form
  14. Corporate appearances
  15. Use of corporate appearances in job-oriented networks
  16. Plugins used
  1. Name and address of the responsible person

  2. The person responsible within the meaning of the basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations is the:

    Mahlwerck Concepts GmbH

    An der Alten Spinnerei 1

    83059 Kolbermoor

    Germany

    + 49 80 31 - 27 47 0

    info@mahlwerck.de

    https://www.mahlwerck.de

  3. Contact details of the data protection officer

  4. The data protection officer of the responsible person is:

    DataCo GmbH

    Dachauer Strasse 65

    80335 Munich

    Germany

    +49 89 7400 45840

    www.dataguard.de

  5. General information about data processing

  6. 1. Extent of processing of personal data

    We only process the personal data of our users as far as this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

    2. Legal basis for the processing of personal data

    Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 S. 1 lit. a GDPR serves as the legal basis.

    When processing personal data, which is necessary for the performance of a contract to which the data subject is a party, Art. 6 Para. 1 S. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

    Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR as the legal basis.

    In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

    If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 S. 1 lit. f GDPR as the legal basis for processing.

    3. Data erasure and storage duration

    The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

  7. Rights of the person concerned

  8. If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

    1. right

    You can ask the controller to confirm whether he or she is processing personal data.

    If such processing is available, you can request information from the person responsible about the following information:

    1. the purposes for which the personal data are processed;
    1. the categories of personal data that are processed;
    1. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
    1. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
    1. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
    1. the existence of a right of appeal to a supervisory authority;
    1. all available information on the source of the data if the personal data are not collected from the data subject;
    1. The existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the person concerned.

    You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 DSGVO to be informed in connection with the transmission.

    2. Right to rectification

    You have a right to rectification and / or completion to the controller, provided the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

    3. Right to restriction of processing

    You may request the restriction of the processing of your personal data under the following conditions:

    • if you contest the accuracy of your personal data for a period of time that enables the person responsible to check the accuracy of the personal data;
    • the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
    • the controller no longer requires personal data for the purposes of processing, but you need them for the purposes of asserting, exercising or defending legal claims, or
    • if you have filed an objection against the processing according to Art. 21 para. 1 DSGVO and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.

    If the processing of your personal data has been restricted, this data - apart from its storage - may only be used with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest processed by the Union or a Member State.

    If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is lifted.

    4. Right to delete

    a) Obligation to delete

    You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

    1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
    1. You revoke your consent on which the processing is based in accordance with Art. 6 para. 1 sentence 1 lit. a or Art. 9 Para. 2 lit. a GDPR was based, and there is no other legal basis for the processing.
    1. You gem gem. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO objection to the processing.
    1. Your personal data has been processed unlawfully.
    1. The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
    1. The personal data relating to you were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

    b) Information to third parties

    If the person in charge has made the personal data concerning you public and is acc. Art. 17 para. 1 DSGVO, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and the implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.

    c) Exceptions

    The right to erasure does not exist if the processing is necessary

    1. to exercise the right to freedom of expression and information.
    1. to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the controller;
    1. for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
    1. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 DSGVO, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the achievement of the objectives of this processing, or
    1. to assert, exercise or defend legal claims.

    5. Right to information

    If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

    You have a right to the person responsible to be informed about these recipients.

    6. Right to data portability

    You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

    1. processing based on consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 sentence 1 lit. b GDPR is based and
    1. the processing is done using automated procedures.

    In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

    The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

    7. right to

    You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR occurs to file an objection; this also applies to profiling based on these provisions.

    The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

    If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

    If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

    In connection with the use of information society services - regardless of Directive 2002/58 / EC - you have the option of exercising your right of objection by means of automated procedures that use technical specifications.

    8. Right to revoke the data protection consent declaration

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

    9. Automated decision on an individual basis including profiling

    You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or which significantly affects you in a similar manner. This does not apply when making the decision

    1. is required for the conclusion or performance of a contract between you and the controller,
    1. is permissible on the basis of Union or Member State legislation to which the controller is subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
    1. with your express consent.

    However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or b GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

    With regard to the cases mentioned in 1 and 3, the person responsible takes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to state your own position and to contest heard the decision.

    10. Right to complain to a supervisory authority

    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.

    The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

  9. Provision of the website and creation of the log files

  10. 1. Description and scope of data processing

    Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

    The following data is collected here:

    • Information about the browser type and version used
    • The operating system of the user
    • The Internet service provider of the user
    • Date and time of access

    This data is stored in the log files of our system. This does not affect the user's IP addresses or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

    2. Purpose of data processing

    Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

    Our legitimate interest in data processing according to Art. 6 Para. 1 S. 1 lit. f GDPR.

    3. Legal basis for data processing

    The legal basis for the temporary storage of the data is Art. 6 Para. 1 S. 1 lit. f GDPR.

    4. Duration of storage

    The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of the collection of the data for the provision of the website, this is the case when the respective session has ended.

    5. Opposition and removal possibility

    The collection of data for the provision of the website and the storage of the data in log files is imperative for the operation of the website. There is consequently no contradiction on the part of the user.

  11. Use of Cookies

  12. 1. Description and scope of data processing

    Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the web page is recalled.

    We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.

    The following data is stored and transmitted in the cookies:

    • language settings
    • Articles in shopping cart
    • Log-in information

    In addition, we use cookies on our website that allow an analysis of users' browsing behavior.

    In this way, the following data can be transmitted:

    • Entered search terms
    • Frequency of page views
    • Use of website functions

    The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

    2. Purpose of data processing

    The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

    We require cookies for the following applications:

    • Cart
    • Transfer of language settings
    • Remember keywords

    The user data collected through technically necessary cookies will not be used to create user profiles.

    The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer.

    To improve the quality and content of our website. For these purposes, our legitimate interest lies in the processing of personal data in accordance with Art. 6 Para. 1 S.1 lit. f GDPR.

    3. Legal basis for data processing

    The legal basis for the processing of personal data using technically unnecessary cookies is Article 6 Paragraph 1 Clause 1 lit. a GDPR.

    The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 S. 1 lit. f GDPR.

    4. Duration of storage, objection and disposal options

    Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all functions of the website to the full.

    If you use a Safari browser from version 12.1, cookies are automatically deleted after seven days. This also applies to opt-out cookies that are set to prevent tracking measures.

  13. Registration

  14. 1. Description and scope of data processing

    On our website, we offer users the opportunity to register by providing personal information. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected during the registration process:

    • E-mail address
    • Name
    • First Name
    • Address
    • Telephone / mobile number
    • Date and time of registration

    As part of the registration process, the consent of the user to process this data is obtained.

    2. Purpose of data processing

    Registration of the user is required to fulfill a contract with the user or to carry out pre-contractual measures.

    Use of the online shop: Implementation and processing of the purchase process initiated by you as well as to comply with legal requirements, in particular customs regulations.

    3. Legal basis for data processing

    The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a GDPR.

    If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 S. 1 lit. b GDPR.

    4. Duration of storage

    The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

    This is the case for the data collected during the registration process to fulfill a contract or to carry out pre-contractual measures if the data is no longer required for the execution of the contract. Even after the contract has been concluded, there may be a need to store the contractual partner's personal data in order to meet contractual or legal obligations.

    5. Opposition and removal possibility

    As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time.

    If you have created a customer account or have sent a request via the request tool, your request and your customer data can be deleted using an email form. You will receive an email from us with a link with which you consent to the deletion of your data. You will then receive another email after your data has been deleted, in which we confirm the deletion again. The form for data deletion can be found under the following link: www.mahlwerck.de/datenloeschung/

    If the data are necessary for the fulfillment of a contract or for the execution of pre-contractual measures, a premature deletion of the data is only possible, as far as contractual or legal obligations do not preclude a deletion.

  15. Online Shop

  16. We offer a web shop on our website. For this we use the following web shop software:

    Shopware from the provider shopware AG, Ebbinghoff 10, 48624, Schöppingen, Germany (hereinafter referred to as Shopware).

    You can find more information in the privacy policy of the provider:
    https://de.shopware.com/datenschutz/

    The website and the web shop are hosted on external servers by a service provider commissioned by us.

    Our service provider is:

    Christo.Net internet service, Schelwat eK

    The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

    • Browser type and browser version
    • Operating system used
    • - Referrer URL
    • - Host name of the accessing computer
    • Date and time of the server request
    • IP address

    This data is not merged with other data sources. This data is recorded on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - the server log files must be recorded for this.

    We have concluded an order processing contract with the relevant service provider, in which we oblige the corresponding service provider to protect user data and not to pass it on to third parties.

    The server of the website is geographically located in Germany.

  17. Our Payment Methods

  18. 1. Description and scope of data processing

    We offer our customers various payment options to process their orders. To do this, we forward customers to the platform of the corresponding payment service provider depending on the payment option. After completing the payment process, we receive the customer's payment data from the payment service provider or our house bank and process it in our systems for the purposes of invoicing and accounting.

    Payment by Amazon Pay

    It is possible to process the payment process with the payment service provider AmazonPay. AmazonPay enables online payments to be made to third parties by using the payment and shipping information stored in your Amazon account.

    The European operating company of AmazonPay is Amazon Payments Europe sca, 38 avenue JF Kennedy, L-1855 Luxembourg. If you already have a Amazon.de customer account you can pay immediately with the payment method stored there - either by direct debit or by credit card. To do this, you need to log in to your Amazon account.

    Further information and your order overview for paying via AmazonPay can be found at https://pays.amazon.deWhen paying via Amazon Pay, all personal data communicated to Amazon Pay or collected by Amazon Pay is primarily from Amazon Pays sca and secondarily from Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located in 5 , Rue Plaetis L 2338, Luxembourg. For more information on how Amazon processes your data as part of AmazonPay, see the Amazon Pay privacy policy at:
    https://pay.amazon.com/de/help/201751600

    Payment via Klarna

    It is possible to process the payment process with the payment service provider Klarna.

    Klarna is a payment service provider that enables purchase on account or payment in installments.

    Klarna's European operating company is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

    If you select “purchase on account” or “installment purchase” as a payment option as part of the transaction via Klarna, your personal data will be automatically transmitted to Klarna. The personal data transmitted to Klarna are in particular

    • First Name
    • Last Name
    • Address
    • Date of Birth
    • Sex
    • E-mail address
    • IP address
    • Telephone / cell phone number
    • Bank
    • Credit card number including expiry date and CVC code
    • item number
    • item number
    • Data on goods and / or services
    • Transaction amount and tax levies

    The transmission of the data is intended in particular for identity verification, payment administration and fraud prevention. The personal data exchanged between Klarna and us may be transmitted to credit agencies by Klarna.

    The purpose of this transmission is to check your identity and creditworthiness. Klarna may also pass on the personal data to affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data is to be processed on behalf of the company.

    Further information on the processing of your data by Klarna can be found in Klarna's data protection provisions at:
    https://pay.amazon.com/de/help/201751600
    https://www.klarna.com/de/datenschutz/ be accessed.

    Payment by PayPal

    It is possible to process the payment process with the payment service provider PayPal. In addition to a direct payment method, PayPal also offers purchase on account, by direct debit, by credit card and payment in installments.

    The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg.

    If you choose PayPal as the payment method, your data required for the payment process will be automatically transmitted to PayPal.

    In particular, this concerned the following data:

    • Name
    • Address
    • E-mail address
    • Telephone / mobile number
    • IP address
    • Bank
    • card number
    • Validity date and CVC code
    • item number
    • item number
    • Data on goods and services
    • Transaction amount and tax levies
    • Information on previous buying behavior

    The data transmitted to PayPal may be transmitted to credit agencies by PayPal. The purpose of this transmission is to check your identity and creditworthiness.

    PayPal may also pass on your data to third parties if this is necessary to fulfill contractual obligations or if the data is to be processed on behalf of us. When transferring your personal data within companies associated with PayPal, the Binding Corporate Rules, which have been approved by the relevant supervisory authorities, apply. You can find them here:
    https://www.paypal.com/de/webapps/mpp/ua/bcr
    Other data transfers may be based on contractual protection provisions. For more information, please contact PayPal.

    All PayPal transactions are subject to PayPal's privacy policy. You can find them under:
    https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

    2. Purpose of data processing

    The transmission of payment data to payment service providers is used to process the payment, e.g. when you purchase a product and / or use a service.

    3. Legal basis for data processing

    The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 lit.

    4. Duration of storage

    All payment data and data on any chargebacks that may occur are only stored for as long as they are required for processing payments and possible processing of chargebacks and debt collection, as well as for combating abuse.

    Furthermore, the payment data can be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to pursue a specific case of abuse.

    Your personal data will be deleted when the statutory retention periods expire, i.e. after 10 years at the latest.

    5. Opposition and removal possibility

    You can revoke your consent to the processing of your payment data at any time by notifying the person responsible or the payment service provider used. However, the payment service provider used may still be entitled to process your payment data if and as long as this is necessary for the contractual payment processing.

  19. Shipping service

  20. 1. Description and scope of data processing

    If you order products or services on our website for the delivery of which a shipping service provider is used, you will receive your order and shipping confirmation via your email address and, depending on the shipping service provider, the notification that your shipment has arrived and / or the notification for package announcement as well as possible delivery options.

    The data is transmitted to the following service providers:

    • DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

    The transmitted data are regularly:

    • Name
    • Address
    • E-mail address

    2. Purpose of data processing

    The purpose of processing personal data is to give shipping service providers the opportunity to inform recipients about the shipment process by email and thus to increase the probability of successful delivery.

    3. Legal basis for data processing

    The legal basis for the transmission of the email address to the respective shipping service provider and its use is consent in accordance with Article 6 (1) (a) GDPR.

    4. Duration of storage

    The transmitted data will be deleted by the respective shipping service provider when the package has been delivered.

    5. Opposition and removal possibility

    The notification service provided by the shipping service provider can be terminated at any time by the user concerned. For this purpose there is a corresponding opt-out link in every email.

  21. Newsletter

  22. 1. Description and scope of data processing

    It is possible to subscribe to a free newsletter. When registering for the newsletter, the following data from the input mask is transmitted to us:

    • E-mail address
    • Name
    • First Name

    For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

    In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

    2. Purpose of data processing

    The collection of the user's email address serves to deliver the newsletter.

    3. Legal basis for data processing

    The legal basis for processing the data after the user has registered for the newsletter is Art. 6 Para. 1 S. 1 lit. a GDPR.

    4. Duration of storage

    The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.

    The other personal data collected during the registration process will normally be deleted after a period of seven days.

    5. Opposition and removal possibility

    Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.

    This also allows a revocation of the consent of the storage of the personal data collected during the registration process.

  23. E-mail contact

  24. 1. Description and scope of data processing

    On our website it is possible to contact us via the email address provided. In this case, the user's personal data transmitted with the email will be saved.

    The data will only be used to process the conversation.

    2. Purpose of data processing

    If you contact us by email, this is also the necessary legitimate interest in the processing of the data.

    3. Legal basis for data processing

    Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

    The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact aims to conclude a contract, then an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

    4. Duration of storage

    The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

    The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

    5. Opposition and removal possibility

    The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

    Users and customers can have their data deleted using an email form and revoke their consent. The form for data deletion can be found under the following link: www.mahlwerck.de/datenloeschung/

    All personal data stored in the course of contacting will be deleted in this case.

  25. Online Form

  26. 1. Description and scope of data processing

    There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved.

    The following data is stored when the message is sent:

    • E-mail address
    • Name
    • First Name
    • Address
    • Date and time of registration

    For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.

    Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be saved.

    The data will only be used to process the conversation.

    2. Purpose of data processing

    The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.

    The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

    3. Legal basis for data processing

    The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a GDPR.

    The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 S. 1 lit. f GDPR. If the email contact aims to conclude a contract, then an additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

    4. Duration of storage

    The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified.

    The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

    5. Opposition and removal possibility

    The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

    Users and customers can have their data deleted using an email form and revoke their consent. The form for data deletion can be found under the following link: www.mahlwerck.de/datenloeschung/

    All personal data stored in the course of contacting will be deleted in this case.

  27. Corporate appearances

  28. Use of corporate websites in social networks

    Instagram:

    Instagram, Part of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbor, Dublin 2 Ireland


    We provide information on our company website and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company website (e.g. comments, posts, likes, etc.), you may lose personal data (e.g. . (Clear name or photo of your user profile). Since we generally or largely have no influence on the processing of your personal data by Instagram, which is jointly responsible for the Mahlwerck Concepts GmbH corporate identity, we can provide information on the purpose and scope of the Processing of your data does not provide any binding information.

    Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate image for:

    Company and product presentations as well as for the publication of news and competitions on social networks. We only provide links from our company website to our social media pages. By clicking on this link, you leave our website and establish a direct connection between your browser and the servers of the social media site.

    The publications about the company's website can contain the following content:

    • Information about products
    • Services information
    • Sweepstakes
    • Advertising
    • Customer contact

    Every user is free to publish personal data through activities.

    The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.


    We store your activities and personal data published on our Instagram company website until you withdraw your consent. In addition, we comply with the statutory retention periods.
    We process data from our corporate identity in our systems. These are stored there for the following period: We store your data until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes.
    You can object to the processing of your personal data that we collect as part of your use of our Instagram corporate presence at any time and assert your rights as a data subject named under IV. Of this data protection declaration. To do this, send us an informal email to info@mahlwerck.de.You will find further information on the processing of your personal data by Instagram and the corresponding possibilities of objection here:

    Instagram: https://help.instagram.com/519522125107875

    Twitter:

    Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland


    We provide information on our company website and offer Twitter users the opportunity to communicate. If you carry out an action on our Twitter company website (e.g. comments, posts, likes, etc.), you may lose personal data (e.g. Clear name or photo of your user profile). Since we generally or largely have no influence on the processing of your personal data by the company Twitter, which is jointly responsible for the Mahlwerck Concepts GmbH corporate identity, we can determine the purpose and scope of the Processing of your data does not provide any binding information.

    Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate image for:

    Company and product presentations as well as for the publication of news and competitions on social networks. We only provide links from our company website to our social media pages. By clicking on this link, you leave our website and establish a direct connection between your browser and the servers of the social media site.

    The publications about the company's website can contain the following content:

    • Information about products
    • Services information
    • Sweepstakes
    • Advertising
    • Customer contact

    Every user is free to publish personal data through activities.

    The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.


    We store your activities and personal data published on our Twitter company website until you withdraw your consent. In addition, we comply with the statutory retention periods.
    We process data from our corporate identity in our systems. These are stored there for the following period: We store your data until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes.
    You can object to the processing of your personal data that we collect as part of your use of our Twitter corporate website at any time and assert your rights as a data subject mentioned under IV. Of this data protection declaration. To do this, send us an informal email to info@mahlwerck.de.You will find further information on the processing of your personal data by Twitter and the corresponding possibilities of objection here:

    Twitter: https://twitter.com/de/privacy

    YouTube:

    YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States


    We provide information on our company website and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company website (e.g. comments, posts, likes, etc.), you may lose personal data (e.g. . Real name or photo of your user profile). Since we generally or largely have no influence on the processing of your personal data by YouTube, which is jointly responsible for the Mahlwerck Concepts GmbH corporate identity, we can determine the purpose and scope of the Processing of your data does not provide any binding information.

    Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the corporate image for:

    Company and product presentations as well as for the publication of news and competitions on social networks. We only provide links from our company website to our social media pages. By clicking on this link, you leave our website and establish a direct connection between your browser and the servers of the social media site.

    The publications about the company's website can contain the following content:

    • Information about products
    • Services information
    • Sweepstakes
    • Advertising
    • Customer contact

    Every user is free to publish personal data through activities.

    The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.


    We store your activities and personal data published on our YouTube corporate website until you withdraw your consent. In addition, we comply with the statutory retention periods.
    We process data from our corporate identity in our systems. These are stored there for the following period: We store your data until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes.
    You can object to the processing of your personal data, which we collect as part of your use of our YouTube corporate presence, at any time and assert your rights as a data subject named under IV. Of this data protection declaration. To do this, send us an informal email to info@mahlwerck.de.You will find further information on the processing of your personal data by YouTube and the corresponding possibilities of objection here:

    YouTube: https://policies.google.com/privacy?gl=DE&hl=de

  29. Use of corporate appearances in job-oriented networks

  30. 1. Scope of data processing

    We use the possibility of corporate appearances on job-oriented networks. We maintain a corporate presence on the following professional networks:

    LinkedIn:

    LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

    XING:

    XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany

    On our site we provide information and offer users the opportunity to communicate.

    The company's website is used for applications, information / PR and active sourcing.

    We have no information on the processing of your personal data by the companies jointly responsible for the company's appearance. Further information can be found in the privacy policy of:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

    XING:

    https://privacy.xing.com/de/datenschutzerklaerung

    If you carry out an action on our company website (e.g. comments, posts, likes etc.), it may be that you are making personal data (e.g. clear name or photo of your user profile) public.

    2. Legal basis for data processing

    The legal basis for the processing of your data in connection with the use of our corporate website is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

    3. Purpose of data processing

    Our corporate identity serves to inform users about our services. Every user is free to publish personal data through activities.

    4. Duration of storage

    We save your activities and personal data published on our company website until your consent is withdrawn. In addition, we maintain the statutory retention periods.

    5. Opposition and removal possibility

    You can object to the processing of your personal data, which we collect as part of your use of our company website, at any time and assert your rights as a person mentioned under IV. Of this data protection declaration. Send us an informal email to the email address given in this data protection declaration.

    You can find more information about objection and removal options here:

    LinkedIn:

    https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

    XING:

    https://privacy.xing.com/de/datenschutzerklaerung

  31. Plugins used

  32. We use plugins for various purposes. The plugins used are listed below:

Use of Facebook comments


    1. Extent of processing of personal data

    We use functions of the social network Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and their representatives in the Union Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H, D2 Dublin, Ireland (hereinafter: Facebook). We use this plugin to expand the functionality of our online presence. Users can use Facebook Comments to comment on content on our online presence with their Facebook account. This allows personal data to be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system). We have no information on the exact scope of the collection of personal data.
    Further information on the processing of data by Facebook is available here:
    https://de-de.facebook.com/policy.php

    2. Purpose of data processing

    The use of the Facebook Comment plug-in serves to improve the user-friendliness of our online presence. We use this plug-in to be able to offer an embedded comment function directly on Facebook without users having to leave our online presence.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can find more information about objection and removal options against Facebook at:
    https://de-de.facebook.com/policy.php

Use of Facebook pixels


    1. Extent of processing of personal data

    We use the Facebook pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and their representatives in the Union Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H, D2 Dublin, on our online presence. Ireland (hereinafter referred to as Facebook). With its help, we can track the actions of users after they have seen or clicked a Facebook advertisement. This allows personal data to be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs). This enables us to record the effectiveness of Facebook advertisements for statistical and market research purposes.
    In doing so, data can be transmitted to Facebook servers in the USA.
    The data collected in this way is anonymous to us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook's data usage guidelines.
    Further information on the processing of data by Facebook is available here:
    https://de-de.facebook.com/policy.php

    2. Purpose of data processing

    The use of the Facebook pixel is used to analyze and optimize advertising measures.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can find more information about objection and removal options against Facebook at:
    https://de-de.facebook.com/policy.php

Use of Google AdSense


    1. Extent of processing of personal data

    We use Google AdSense from Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use this service to advertise. Google places a cookie on your computer. This allows personal data to be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).
    Further information on the processing of data by Google can be found here:
    https://policies.google.com/privacy?gl=DE&hl=de

    2. Purpose of data processing

    Google evaluates the data in order to draw conclusions about your user behavior with a view to the AdSense advertisements. The data can also be passed on to third parties if there is a legal obligation to do so or if the data is processed on behalf of Google.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Google AdWords


    1. Extent of processing of personal data

    We use Google AdWords from Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use this service to advertise. Google places a cookie on your computer. This allows personal data to be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).
    Further information on the processing of data by Google can be found here:
    https://policies.google.com/privacy?gl=DE&hl=de

    2. Purpose of data processing

    We only receive information about the total number of users who have responded to our ad. No information with which we could identify you will be passed on. It is not used for tracing purposes.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics


    1. Extent of processing of personal data

    We use Google Analytics, a web analysis service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google Analytics examines, among other things, the origin of the visitors, their length of stay on individual pages as well as the use of search engines and thus allows better control of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data to be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymised user IDs). The information generated by the cookie about your use of this online presence is transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this online presence, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases.
    On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide the operator of the online presence with other services related to the use of the online presence and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all the functions of our online presence to their full extent.
    Further information on the processing of data by Google can be found here:
    https://policies.google.com/privacy?gl=DE&hl=de

    2. Purpose of data processing

    The purpose of the processing of the personal data lies in the targeted approach of a target group, which has already expressed a first interest by the page visit.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law. Advertising data in server logs are anonymized by Google deleting parts of the IP address and cookie information after 9 or 18 months.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can also prevent Google from collecting the data generated by the cookie and related to your use of the online presence (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:
    https://tools.google.com/dlpage/gaoptout?hl=de
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Google ReCaptcha


    1. Extent of processing of personal data

    We use Google ReCaptcha from the provider Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is designed to check whether data has been entered in a compliant manner and not by a bot. For this purpose, Google ReCaptcha analyzes and authenticates the behavior of an online presence visitor with regard to various characteristics. In this way, personal data can be saved and evaluated, especially the activity of the user (in particular mouse movements and which elements were clicked on) and device and browser information (in particular time, the IP address and the operating system).
    The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
    Further information on the processing of data by Google can be found here:
    https://policies.google.com/privacy?gl=DE&hl=de

    2. Purpose of data processing

    The use of Google ReCaptcha serves to protect our online presence against misuse.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Instagram plugin


    1. Extent of processing of personal data

    We use plugins from the Instagram service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and their representatives in the Union Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (hereinafter referred to as Facebook). The integrated Instagram buttons are used by us to enable a link to our Instagram profile. A widget is also integrated, which enables us to display certain photos and videos of our Instagram profile in our online presence. When you visit a page of ours that contains such a plug-in, your browser connects directly to a Facebook server here. The content of the plug-ins is transmitted directly to your browser and integrated into the online presence. In doing so, data is automatically transmitted to Instagram and stored on their servers. This transmitted data includes connection data (such as your IP address, date and time, the URL called up) as well as the browser and operating system used.
    Your visit to our pages can be tracked by Instagram, even if you are not actively using the plug-in functions. If you are logged into your Instagram account, you can view the contents of our pages with your Instagram by clicking the Instagram button -Link profile. This enables Instagram to assign your visit to our website to your user account. If you want to prevent this direct assignment, you must log out of Instagram before visiting our online presence.
    You can find more information on this in Instagram's privacy policy:
    https://help.instagram.com/155833707900388

    2. Purpose of data processing

    The use of the Instagram plug-in serves to improve the external image of our company.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Instagram from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can find more information on options for objection and removal from Instagram at:
    https://help.instagram.com/155833707900388

Use of Pinterest


    1. Extent of processing of personal data

    We use the Pinterest plug-in from Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (hereinafter referred to as Pinterest) on our online presence. Users can save the content of our online presence with the Pinterest plugin in their Pinterest account. Your browser establishes a connection with the Pinterest servers in the USA. This allows personal data to be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system).
    We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by Pinterest.
    Further information on the processing of the data by Pinterest is available here:
    https://policy.pinterest.com/de/privacy-policy

    2. Purpose of data processing

    The use of Pinterest serves to improve the user-friendliness of our site.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent the collection and processing of your personal data by Pinterest by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can find more information on options for objection and removal from Pinterest at:
    https://policy.pinterest.com/de/privacy-policy

Use of Twitter


    1. Extent of processing of personal data

    We use the social plugins of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter: Twitter).
    With the social plugins, we can integrate content from Twitter (especially tweets or moments) or links to the Twitter platform (especially tweet or follow button) on our online presence. This means that personal data can be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked) as well as device and browser information (in particular the IP address and the operating system).
    By using Twitter and the "Retweet" function, the online presences you have visited are linked to your Twitter account and disclosed to third parties. We do not receive any information about the content of the data transmitted and how it is used by Twitter.
    Further information on the processing of data by Twitter can be found here:
    https://twitter.com/de/privacy

    2. Purpose of data processing

    The integration of the Twitter plug-in serves to improve user-friendliness. Twitter content can be displayed embedded and Twitter service users can use Twitter functions.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Twitter from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    For more information on how to object to and rectify Twitter, see:
    https://twitter.com/de/privacy

Use of YouTube


    1. Extent of processing of personal data

    We use the plugin operated by Google from YouTube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and their representatives in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google called). We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser connects to the YouTube servers. This means that personal data can be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked) as well as device and browser information (in particular the IP address and the operating system).
    We have no influence on the content of the plug-in. If you are logged into your YouTube account during the visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this corresponding information is transmitted directly to YouTube and stored there.
    Further information on the processing of data by Google can be found here:
    https://policies.google.com/privacy?gl=DE&hl=de

    2. Purpose of data processing

    The use of the YouTube plug-in serves to improve the user-friendliness and an appealing presentation of our online presence.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager


    1. Extent of processing of personal data

    We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). With the Google Tag Manager, tags from Google and third-party providers can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, the impact of online advertising and social channels, use remarketing and targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. You can find information on this in the sections on the use of the corresponding services in this data protection declaration. Google Tag Manager does not access this data.
    You can find more information about Google Tag Manager at https://www.google.com/intl/de/tagmanager/faq.html and in Google's privacy policy at https://policies.google.com/privacy?hl=de

    2. Purpose of data processing

    The purpose of processing the personal data lies in the collected and clear administration as well as an efficient integration of the services of third-party providers.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law. Advertising data in server logs are anonymized by Google deleting parts of the IP address and cookie information after 9 or 18 months.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    You can also prevent Google from collecting the data generated by the cookie and related to your use of the online presence (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:
    https://tools.google.com/dlpage/gaoptout?hl=de
    With the following link you can deactivate the use of your personal data by Google:
    https://adssettings.google.de
    You can find more information about objection and elimination options against Google at:
    https://policies.google.com/privacy?gl=DE&hl=de

Use of Facebook retargeting


    1. Extent of processing of personal data

    We use the functionalities of the Facebook Retargeting advertising plug-in from Facebook Ireland Limited, 4 Grand Canal Square, Dublin Dublin 2, Ireland (hereinafter referred to as Facebook Retargeting).
    Facebook retargeting is used to carry out advertising campaigns and to interact with them. Facebook retargeting reminds users of products that they have searched for or viewed but not purchased. In doing so, Facebook cookies are stored on your device.
    In particular, the following personal data are processed by Facebook:
    - Information about activities of the user
    - Website accessed
    - Which products have been displayed
    - Which ads have been clicked on
    - Device information, in particular device type, IP address
    - Users' Facebook accounts if they are logged into Facebook
    Data is processed on servers operated by Facebook Inc., Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
    Other recipients of the data are providers and service providers from Facebook Inc., e.g. for analysis purposes.
    Further information on the processing of data by Facebook is available here:
    https://de-de.facebook.com/privacy/explanation

    2. Purpose of data processing

    The use of Facebook retargeting enables us to place advertisements on various platforms and to analyze the interaction of users with these advertisements. The aim of this is to be able to show users personalized and therefore more relevant advertising.

    3. Legal basis for the processing of personal data

    The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
    You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, and deactivating the execution of script code in your browser or a script blocker such as NoScript (https://noscript.net/) or ghostery (https://www.ghostery.com) install in your browser.
    The deactivation of personalized advertising for Facebook users is possible for logged-in users here:
    https://www.facebook.com/settings/?tab=ads
    You can find more information about objection and removal options against Facebook at:
    https://de-de.facebook.com/privacy/explanation

Use of Google My Business


    1. Extent of processing of personal data

    We use the Google My Business marketing platform from Google LLC, Gordon House, Barrow Street, 4, Dublin, Ireland (hereinafter referred to as Google).
    We use Google My Business to acquire customers with optimized company profiles including the possibility of statistical analysis and contacting users.
    In doing so, Google cookies are stored on your device.
    In particular, the following personal data are processed by Google My Business:
    - Contact details / company data
    - address details
    - Email address
    - phone number
    - Opening hours
    - location data
    - credit card details
    - Reviews
    - IP address
    In doing so, data can be transmitted to Google servers in the USA. Further information on the processing of data by Google My Business is available here:
    https://policies.google.com/privacy

    2. Purpose of data processing

    We use Google My Business to develop statistical methods and to improve user behavior.

    3. Legal basis for the processing of personal data

    The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

    4. Duration of storage

    Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

    5. Revocation and removal options

    You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

This privacy policy has been supported by Data Guard created.