Privacy Policy
- Controller responsible for data processing (hereinafter referred to as: “we”)
- Personal data, purpose of its processing and legal basis
- Recipients of personal data
- Duration of data storage
- Provision of personal data and rights of Data Subjects
1. Controller responsible for data processing (hereinafter referred to as: “we”)
Mexperts AG
Wildmoos 7
D-82266 Inning am Ammersee
Tel.: +49-8143-59744-00
e-mail: info@mexperts.de
For further details, please refer to the information on content providers (legal notice)
2. Personal data, purpose of its processing and legal basis
This Privacy Policy provides you with information on the type, scope and purpose of the collection and use of personal data when you use our website, as well as on your rights.
Personal data refers to all information relating to an identified or identifiable natural person (hereinafter referred to as the “Data Subject”). A natural person is considered to be identifiable if he/she can be identified, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online ID or one or more specific characteristics that express the identity of this natural person.
The purpose of the processing of personal data on our website is the operation of a website containing information about our services and about us.
Personal data is processed on our website if this is required for the following purposes:
- for the use of the website (legal basis: Article 6(1) sentence 1a) and/or Article 6(1) sentence 1b) of the General Data Protection Regulation),
- to safeguard our interest in improving the user experience, promoting our services or maintaining security of use (legal basis: Article 6(1) sentence 1f) of the General Data Protection Regulation),
- for the use of the services offered on the website, as well as for pre-contractual measures, such as registration in our media database (legal basis: Article 6(1) sentence 1a) and/or Article 6(1) sentence 1b) of the General Data Protection Regulation),
- for the conclusion of a contract and for the performance of the contract, such as registration in our media database (legal basis: Article 6(1) sentence 1a) and/or 1b) of the General Data Protection Regulation) and/or
- in order to fulfil a legal obligation incumbent upon us (such as tax law requirements).
You can find further details on data processing under the appropriate headings below:
a. Access data/server log files
When you visit our website, the servers automatically save the information that your browser sends, known as server log files. The information includes the following:
- Name of the website being accessed,
- File,
- Date and time of access,
- Volume of data transmitted,
- Notification of successful access,
- Browser type, including version
- User’s operating system,
- Referrer URL (the page previously visited),
- IP address of the accessing computer and
- Provider.
The IP address has to be stored temporarily by the system in order to enable the website to be displayed on your end device. This means that the IP address has to remain saved for the duration of the session. This data is not merged with other data sources. The information is only used for analysis purposes and to maintain the technical operation of the servers and the network. Article 6(1) sentence 1f) of the General Data Protection Regulation serves as the legal basis in this regard.
b. Cookies
Our website sometimes uses what are known as cookies, albeit very sparingly. Cookies are small text files that are stored on your end device and saved by your browser. Cookies are used to make our website more user-friendly, more effective and more secure. The legal basis for this is Article 6(1) sentence 1a) of the General Data Protection Regulation if you have consented to the use of cookies, as well as Article 6(1) sentence 1f) of the General Data Protection Regulation due to our legitimate interests as described above.
Some of the cookies we use are “session cookies”. These are automatically deleted after you leave the website. Other cookies remain on your end device until you delete them.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept them. Alternatively, your browser can be configured to reject cookies under certain conditions or in general, or to automatically delete cookies when you close your browser. You can manage the cookies we use via Google here: https://policies.google.com/technologies/managing
You can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in from the following link: https://tools.google.com/dlpage/gaoptout
Disabling cookies may limit the functionality of this website.
c. Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter referred to as: “Google”) in order to analyse the use of the website and to improve its design. Google is certified under the US-EU “Privacy shield”, meaning that it is committed to observing the EU data protection requirements. In addition, we have concluded a contract data processing agreement with Google. This is an agreement in which Google undertakes to protect our users’ data, process this data on our behalf in accordance with our data privacy regulations and, in particular, not to pass this data on to third parties.
Google Analytics uses cookies, text files that are stored on your computer and allow your use of the website to be analysed, see above under b. The information generated by the cookie on your use of this website is generally sent to a Google server in the US and is stored there. The IP address transmitted by your browser to Google Analytics will not be linked to other Google data.
IP anonymity, however, is activated on our website. This means that Google will first of all shorten your IP address in member states of the European Union or other signatory states to the European Economic Area (EEA) treaty. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. Google uses this information on our behalf to analyse your use of the website, compile reports on website activity and to provide us with other services associated with the use of the website and Internet use. Article 6(1) sentence 1f) of the General Data Protection Regulation serves as the legal basis in this regard.
Our website also uses the Google Analytics “Demographics” function. This allows reports to be created that contain information on the age, gender and interests of website visitors. This data comes from Google’s interest-based advertising, as well as from visitor data of third-party providers. This data cannot be assigned to any particular person. You can disable this function at any time using the display settings in your Google account or generally prohibit the collection of your data by Google Analytics as described below under “Opting out of data collection”.
You can configure your browser software in such a way as to prevent cookies from being saved; however, please note that if you do this, you may not be able to use all of the features of our website, see above under b. You can also stop the information generated by the cookie relating to your use of the website (including your IP address) from being transmitted to Google, and you can also stop Google from processing this data by downloading and installing the browser plugin that is available at the following link: Install browser plugin.
You can stop Google Analytics from recording your data by clicking on the following link and opting out of data collection. An opt-out cookie will be stored which prevents the collection of your data for future visits to this website: Deactivate Google Analytics on this website
You can find further information on the terms of use and data protection at http://www.google.com/analytics/terms/ and https://policies.google.com/.
d. Contact by e-mail
Should you send us enquiries via e-mail, we will collect the information in the e-mail, including the contact details you provide, to process your enquiry and any follow-up questions you may have. The legal basis in this regard is Article 6(1) sentence 1a) and/or Article 6(1) sentence 1b) of the General Data Protection Regulation. In addition, we have a legitimate interest in processing this data to prevent misuse and ensure the security of our systems; the legal basis for this is Article 6(1) sentence 1f) of the General Data Protection Regulation.
e. Media database (newsletter)
Inclusion in our media database and the associated service are aimed exclusively at journalists. If you are not a journalist, or if you cannot prove this on request (by presenting a media ID card, etc.), then unfortunately you cannot be included in the database. Exceptions may be made in consultation with us: please send an e-mail to media.database@mexperts.de.
If you sign up for our newsletter using your e-mail address, we will send you press releases and invitations to press events (press conferences, press meetings, trade fairs, etc.) on behalf of our clients.
When you are added to our media database, you decide which companies or topics you would like to receive information on. The frequency of the messages depends on your selection and varies depending on current events and developments. You can change this selection (distribution list) at any time by following a link which will be attached to all e-mails that are sent out via our media database. Based on your selection and the information on your publication (for example: target group or topics), you will be included in the distribution lists of our clients and for new topics that suit your preferences.
The personal data you provide, such as your e-mail address, is processed in our own media database. We use your personal data to provide PR services. Your personal data provided by you will only be passed on to clients of the agency if this is necessary for the provision and documentation of the corresponding PR service (e.g. registration for a press conference and other events or for internal comparison of press distribution lists). Here you can find our current client list.
After registering your e-mail address, you will first of all receive a confirmation message from us sent to this address. This e-mail will ask you to confirm your registration by clicking on a link. This is necessary in order to prevent unauthorised individuals from entering your e-mail address in our distribution list without your consent. To serve as evidence of this registration process, the process will be logged by saving the time of registration and confirmation, as well as the IP addresses. This is known as the double opt-in procedure. In addition, we process your e-mail address to send messages.
The legal basis in this regard is Article 6(1) sentence 1a) and/or Article 6(1) sentence 1b) of the General Data Protection Regulation. In addition, we have a legitimate interest in processing this data to prevent misuse and ensure the security of our systems; the legal basis for this is Article 6(1) sentence 1f) of the General Data Protection Regulation.
You can unsubscribe at any time by following a link which we attach to all e-mails or by sending a message to the contact details set out above. This means that you are free to revoke your consent with future effect at any time.
f. Integration of third-party services and content (graphics from other websites, videos from YouTube and Vimeo, etc.)
Our website may sometimes include third-party content, such as videos from YouTube or graphics from other websites. This always requires the providers of this content (hereinafter referred to as the “Third-Party Providers”) to receive users’ IP addresses. This is because, without the IP address, they cannot transmit the content to the user’s browser. As a result, the IP address is required to display this content. We strive only to use content whose providers only use the IP address to display the content in question. Third-Party Providers may save the IP address, for example, for statistical purposes. You can, however, stop this data from being transmitted by disabling “Javascript” in your browser or by making use of the following opt-out options. If you do this, however, these services and third-party content cannot be displayed.
We sometimes include the following third-party services and content:
- Videos from the YouTube platform of the Third-Party Provider Google.
- Privacy Policy: https://www.google.com/policies/privacy/ and https://support.google.com/youtube/answer/7671399?hl=en&ref_topic=2803240
- Opt-out: https://www.google.com/settings/ads/
- Videos from the Vimeo platform of the Third-Party Provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA.
- Privacy Policy: https://vimeo.com/privacy
If you grant your consent, the legal basis in this regard is Article 6(1) sentence 1a) and/or Article 6(1) sentence 1b) of the General Data Protection Regulation if the data has to be processed to fulfil an agreement to which you are party, or to perform pre-contractual measures. In addition, Article 6(1) sentence 1f) of the General Data Protection Regulation serves as a legal basis because the processing serves to safeguard our interest in improving the user experience, promoting our services or maintaining security of use.
g. Our social media pages
We do not use any social media plugins on our website, but only simple links (hyperlinks) to our social media pages. This means that when you visit our website, there is no direct data processing involving transmission to the social media platforms.
If, however, you visit the social media platforms and our profiles on these platforms, we draw your attention to the following:
Twitter
The website at www.twitter.com is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”). Twitter is certified under the US-EU “Privacy shield” meaning that it is committed to observing the EU data protection requirements
LinkedIn
The website at www.linkedin.com is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information on the purpose and scope of data processing by LinkedIn, as well as the associated rights and setting options to protect user privacy, can be found in the corresponding privacy policy: https://www.linkedin.com/legal/privacy-policy
Google+
The website at www.plus.google.com is operated by Google.
Privacy Policy: https://policies.google.com/privacy
YouTube
The website at www.youtube.com is operated by Google.
Facebook
The website at www.facebook.com is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). Information on the purpose and scope of data processing by Facebook, as well as the associated rights and setting options to protect user privacy, can be found in the corresponding privacy policy: https://www.facebook.com/about/privacy/
If a user is a Facebook member and does not want Facebook to collect data on him/her via the website and then link it with his/her member data that is stored at Facebook , he/she must log out of Facebook and delete his/her cookies before visiting the website. The Facebook profile settings include other settings and opt-outs from the use of data for advertising purposes: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com
3. Recipients of personal data
Personal data is communicated to the following categories of recipients:
Contract data processors, namely the host of our website (domainfactory GmbH) and our web analytics service (Google); we have concluded contract data processing agreements with our contract data processors.
Over and above this, your personal data will not be disseminated to third parties without your express consent, unless we are legally obliged to disseminate it or if the dissemination of the data is a mandatory requirement for the performance of a contractual relationship.
4. Duration of data storage
We delete your personal data as soon as the purpose has been achieved.
Saved server log files and IP addresses are deleted at the latest after 9 weeks. After one week, the saved IP adresses are made anonymous.
If data is recorded in order to make the website available, it is deleted after the session is finished. This means that session cookies are deleted automatically after the end of the session.
Cookies are stored on your end device and you have control over their use and erasure, see above.
We have a deletion cycle of 14 months for Google Analytics data by default.
We process your data from your contact enquiries via e-mail until your request has been processed and resolved in full. The information is then deleted. Please note, however, that a legal transaction with you may result in commercial and tax law retention obligations for certain pieces of data of at least six (section 257 of the German Commercial Code (HGB)) or ten (section 147 of the German Tax Code (AO)) years and that these retention obligations may also apply to the content of contact requests and e-mails.
Newsletter/media database data will be used for as long as you are entered in the distribution list and will be deleted following the revocation of your entry/consent. In order to be able to prove that you previously granted consent, as well as to defend against claims, we will save this information for up to three years after an address is removed from the list.
In addition, checks are performed at yearly intervals to see whether the data can be deleted. This is the case if the processing purpose and the requirements for the legal basis no longer apply and there is no longer any statutory retention obligation.
5. Provision of personal data and rights of Data Subjects
You are not under any statutory obligation to provide your personal data. The provision of this data may, however, be required in order to conclude a contract or for certain website functions. This means that if you fail to make this information available, it might not be possible to offer a contract or website function. There is no automated decision-making on the website and we do not carry out any profiling activities.
The rights of Data Subjects result, in particular, from Articles 15 to 23 and Article 77 of the General Data Protection Regulation, as well as from sections 32 to 37 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – new version).
With regard to your personal data, you have the right, vis-à-vis us, to
- information,
- rectification,
- erasure,
- restriction of processing and
- portability.
You also have the right to
to the processing of personal data.
If you have granted consent to the processing of personal data, you have the right to
this consent with effect for the future.
Please send all enquiries, requests and messages to us, see above under 1.
If you are of the opinion that the processing of your personal data violates data protection law, you always have the
- right to lodge a complaint
with the responsible supervisory authority, cf. Article 77 GDPR. Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority responsible for us is the Federal State Office for Data Protection (Landesamt für Datenschutzaufsicht), Promenade 27, 91522 Ansbach, Germany.
You can find the contact details of the data protection officers in the federal states, the supervisory authorities for the non-public domain, broadcasting, the churches, in Europe and in other foreign countries, as well as the Virtual Data Protection Office at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
|
