Data privacy statement

Data controller

MPM Group AG,
3, Rue Thomas Edison,
L-1445 Strassen/Luxembourg

Represented by:
Mirko Scheffler (Chairman of the Board of Directors)
Sebastian Eberwein (Director)
Peter Grünewald (Board of Directors)

Email: info@mpm-group.com
Telephone: 00352 – 20 21 15 11

Data protection officer

Attorney-at-law Jan Marschner
Markt 9
D-04109 Leipzig/Germany

Email: jm@datenschutzbeauftragter-leipzig.de
Telephone: +049 341 26 18 93 73

Provision of the website and log files

Each time our website is called up, our system, i.e. the web server, automatically collects information from the system of the querying computer or terminal equipment of the user. In this process, we collect the following data:

• Information regarding the browser type and the version used
• Operating system of the user
• Internet service provider of the user
• IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our internet site
• Websites that are called up by the user’s system via our website

The legal basis for the temporary storage of this data and the log files is Art. 6 Para. 1 Item f) GDPR.

The temporary storage of the IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage of the above-mentioned data in log files occurs in order to ensure the proper functioning of our website. In addition, this data also serves to help us optimise the website and ensure the security of our IT systems.

The above-mentioned data is deleted as soon as it is no longer required for the attainment of the purpose of its collection. When it comes to the collection of the data for the provision of the website, this is the case when the respective session is ended.
In the event that the data is stored in log files, this is the case after 28 days at the latest. Storage beyond this term is possible. In this case, the IP address of the user will be deleted or distorted by us, such that it can no longer be associated with the querying client and the data contained can no longer be connected to an individual person.

The collection of the data for the provision of the website and the storage of the data in log files is carried out exclusively by our technical service provider, Google (Google Cloud).

In general, you are free to object to the processing of personal data concerning you, pursuant to Art. 21 GDPR. We will cease to process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Email contact

You may get in contact with us using the email address provided. In this case, we store the personal data of the sender, i.e. the user, that are transmitted with the query.

The legal basis for the processing of the data that is transmitted in the course of the establishment of contact is, in general, Art. 6 Para. 1 Item f) GDPR. There is a legitimate interest in being able to conduct the communication. If contact is established with the intention of concluding a contract/mandate, the additional legal basis for the processing is Art. 6 Para. 1 Item b) GDPR.

The processing of this personal data serves exclusively to process the communication.

All data is deleted as soon as it is no longer required for the attainment of the purpose of its collection. For the personal data submitted by email, this is the case once the respective conversation with the user has been ended. The conversation is ended once the circumstances indicate that the matter concerned has been conclusively resolved.

In general, you are free to object to the processing of personal data concerning you pursuant to Art. 21 GDPR. We will cease to process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Login area

On our website, we offer our partners the option to log in by providing personal details. The following data is collected in the context of the login process:

• Username
• Password

At the time of the login, the following data is also stored:
• IP address of the user
• Date and time of the login

The legal basis for the processing of the data is Art. 6 Para. 1 Item b) GDPR (fulfilment of a contract), since the login area is necessary for the fulfilment of a contract or for the performance of pre-contractual measures. The legal basis for the storage of the log files is Art. 6 Para. 1 Item f) GDPR.

In the login area, the partner may view the data and documents that have been stored on file for him.

The above-mentioned data is deleted as soon as it is no longer required for the attainment of the purpose of its collection. This is the case once the data is no longer required for the fulfilment of the contract. There may be a necessity to store personal data of the partner even after conclusion of the contract, in order to observe contractual or legal obligations (e.g. fiscal retention obligation).

Due to security reasons, the log files from the login are stored for 28 days and subsequently deleted.

In general, you are free to object to the processing of personal data concerning you pursuant to Art. 21 GDPR. We will cease to process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

YouTube

On our website, we have integrated videos via the platform YouTube. YouTube is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).

The videos are provided in the extended data protection mode. This means that simply calling up our website does not send any data to Google. Only when you click on the preview image of the respective video is the video loaded and, as a consequence, your personal data is then transmitted to Google.

Google bears the exclusive responsibility for the data processing. More information is available at
https://www.google.de/intl/en/policies/privacy/.

Rights of the data subject

If the statutory prerequisites are met, you are entitled to the following rights:

• Right to information on personal data concerning you (Art. 15 GDPR)
• Right to rectification of incorrect personal data concerning you (Art. 16 GDPR)
• Right to deletion of personal data (Art. 17 GDPR)
• Right to restriction of the processing of personal data (Art. 18 GDPR)
• Right to objection to the processing of personal data (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)

Right to lodge a complaint with a supervisory authority

In addition, you also have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the personal data concerning you violates the GDPR.

Necessity of the data processing

The provision of the personal data is neither legally nor contractually stipulated; however, it is in part – as outlined above – technically necessary. You are not obliged to provide us with this personal data. However, without the provision of the personal data, it is not possible to call up the website, establish contact via email, use the login area or conclude a contract.

No automated decision-making or profiling

This type of algorithm is not employed.