Privacy statement

General information

The following information provides a simple overview of what is happening to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on the topic of data privacy can be obtained from our privacy statement set out below this text.

Data capture on this website

Who is responsible for capturing the data on this website?

Data processing on this website is done by the website operator. The contact data of the website operator can be found in the section “Information on the responsible body” in this privacy statement.

How do we capture your data?

On the one hand, your data are captured when you communicate them to us. These can, for example, be data you enter in a contact form.

Other data are captured by our IT systems either automatically or following your consent when visiting the website. These are primarily technical data (e.g. Internet browser, operating system or time the page was viewed). These data are captured automatically as soon as you access this website.

What do we use your data for?

A part of the data is captured to ensure a flawless provision of the website. Other data can be used to analyse your user behaviour.

What rights do you have with regard to your data?

You are at any time entitled to obtain information about the origin, recipient and purpose of your saved personal data at no charge. In addition, you are entitled to request the correction or deletion of these data. If you have given your consent to data processing you can revoke this consent at any time with effect for the future. Besides, you are under certain circumstances entitled to demand the processing of your personal data to be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time in this regard as well as with regard to any other questions on the topic of data privacy.

Analysis tools of third-party providers

When you visit this website, your surfing behaviour can be statistically evaluated. This is mainly done with so-called analysis programmes.

Detailed information on these analysis programmes can be found in the following privacy statement.

We are hosting the contents of our website with the following provider:

All-Inkl

The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, D-02742 Friedersdorf (hereinafter referred to as All-Inkl). Details can be gathered from the privacy statement of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The deployment of All-Inkl is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. Provided that a corresponding consent has been requested, processing exclusively takes place on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) with the above mentioned provider. This is a contract prescribed by data privacy laws, which guarantees that the personal data of our website visitors will only be processed in accordance with our instructions and in compliance with the GDPR.

Data privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data privacy regulations and this privacy statement.

If you are using this website, various personal data will be collected. Personal data refers to all data that can be used to personally identify you. The privacy statement at hand explains which data we collect and what we are using them for. It also explains how and for what purpose this is done.

We point out that data transfer on the Internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Information on the responsible body

The responsible body for data processing on this website is:

MBengineering GmbH & Co. KG
In Breiten 9-11
D-78589 Dürbheim

Phone: +49 (0)7424 94530-0
E-mail: info@mbengineering.de

Responsible body is the natural or legal entity, which on its own or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses or similar).

Storage period

Unless a more specific storage period has been specified in this privacy statement, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods in accordance with tax and commercial law); in the latter case, the data will be deleted if these reasons cease to apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of your express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or the access to information on your end device (e.g. device fingerprinting), data processing will in addition take place on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data are required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. In addition, we process your data on the basis of Art. 6 para. 1 lit. c GDPR if these are required to fulfill a legal obligation. Data processing can furthermore take place on the basis of our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy statement.

Data privacy officer

We have appointed a data privacy officer.

Thomas Aigner
MBengineering GmbH & Co. KG
In Breiten 9-11
D-78589 Dürbheim

Phone: +49 (0)7424 94530-0
E-mail: datenschutz@mbengineering.de

Information on data transfer to the USA and other third countries

Among others, we are using tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data can be transferred to these third countries and processed there. We point out that in these countries, no level of data protection comparable to that of the EU can be guaranteed. US companies are for example obliged to disclose personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) process your data on US servers for surveillance purposes, evaluate and permanently store them. We have no influence on these processing activities.

Revocation of your consent to data processing

Many data processing transactions are only possible with your express consent. You can revoke an already granted consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 PARA 1 LIT. E OR F GDPR, YOU ARE AT ANY TIME ENTITLED, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATON, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE REGULATIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY STATEMENT. IF YOU RAISE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO RAISE AN OBJECTION AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISTING; THIS ALSO APPLIES TO PROFILING PROVIDED IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 PARA 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of an infringement of the GDPR, the persons concerned are entitled to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. The right of objection exists without prejudice to other administrative or judicial remedies.

Right to data portability

You are entitled to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this is only done insofar as it is technically feasible.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if appropriate, a right to correction or deletion of this data. You can contact us at any time in this regard, as well as with regard to further questions on the topic of personal data.

Right to restriction of processing

You are entitled to request the restriction of the processing of your personal data. You can contact us at any time in this regard. The right to restriction of processing exists in the following cases:

• If you dispute the correctness of your personal data stored by us we normally require time to verify this. For the duration of this verification you are entitled to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of deletion
• If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of their deletion.
• If you have lodged an objection in accordance with Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

For security reasons and for the purpose of protecting the transfer of confidential contents, such as purchase orders or enquiries you send to us as website operator, this website uses SSL or TLS encryption. An encrypted connection can be recognised by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

Our web pages make use of so-called “cookies”. Cookies are small data packages and do not cause any damage on your terminal. They are either saved temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal. At the end of your visit, session cookies are automatically deleted. Permanent cookies are saved on your terminal until you delete them yourself or until they are automatically deleted by your web browser.

To some extent, cookies from third-party companies can be saved on your terminal when you access our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the transaction of payment services).

Cookies have different functions. Numerous cookies are technically necessary as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies serve to evaluate user behaviour or to display advertising.

Cookies that are required to carry out the electronic communication process, to provide certain functions desired by you (e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies), are saved on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in saving necessary cookies for a technically flawless and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.

You can set up your browser so that you are informed about the setting of cookies and only allow cookies in the individual case, or allow the acceptance of cookies in certain cases or generally rule out cookies and activate the automatic deletion of cookies when the browser is closed. When cookies are deactivated, the range of functions of this website can be limited.

If cookies by third-party companies are used or cookies are used for analysis purposes, we will inform you separately within the scope of this privacy statement and request your consent where necessary.

Consent with Complianz

Our website uses the consent technology of Complianz to obtain your consent for the storage of certain cookies on your terminal or for the use of certain technologies and to document these in compliance with data privacy regulations. Provider of this technology is Complianz B.V., Kalmarweg 14-5, NL-9723 JG Groningen, The Netherlands (hereinafter referred to as “Complianz”).

Complianz is hosted on our servers so that Complianz does not establish a connection to the provider’s servers. Complianz stores a cookie in your browser to be able to allocate the consent you have given or its revocation. Data captured in this manner is stored until you request us to delete them, delete the Complianz cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.

We make use of Complianz to obtain the legally required consent for the use of cookies. Legal basis for this is Art. 6 para. 1 lit. c GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server enquiry
• IP address

A consolidation of these data with other data sources will not take place.

These data are captured on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless representation and optimisation of its website – to this end, the server log files must be captured.

Contact form

If you send us your enquiries by means of contact form, the details you provided on the enquiry form including the contact details you have specified are stored by us for the purpose of processing the enquiry and to answer any follow-up questions. We will not pass on these data without your consent.

These data are processed on the basis of Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided it has been requested; the consent can be revoked at any time.

We will retain the data you have entered on the contact form until you request us to delete them, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiry by e-mail, phone or fax

If you contact us by e-mail, phone or fax, your enquiry including all resulting personal data (name, enquiry) are saved and processed by us for the purpose of processing your request. We will not pass on these data without your consent.

These data are processed on the basis of Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) provided it has been requested; the consent can be revoked at any time.

We will retain the data you have sent to us per contact request until you request us to delete them, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Google Tag Manager

We are using Google Tag Manager. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool by means of which we can integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not save any cookies and does not perform any independent analyses. It merely serves to manage and play tools integrated by it. However, the Google Tag Manager captures your IP address, which can also be transmitted to the parent company of Google in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of different tools on its website. Provided that a corresponding consent has been requested, processing exclusively takes place on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In the process, the website operator obtains various usage data, such as page views, length of stay, operating systems used and origin of the user. These data are combined in a user ID and allocated to the respective terminal of the website visitor.

In addition, we can use Google Analytics to record your mouse and scroll movements and clicks. Furthermore, Google Analytics uses various modelling approaches to supplement the captured data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that make it possible to recognise the user for the purpose of analysing the user behaviour (e.g. cookies or device fingerprinting). As a rule, the information captured by Google regarding the use of this website is transmitted to a Google server in the USA where it is stored.

This service is used on the basis of your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/

Browser plug-in

You can prevent the capture and processing of your data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on how Google Analytics deals with user data can be found in the privacy statement of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals

We are using Google Signals. When you are visiting our website, Google Analytics will among other things capture your location, search history and YouTube history as well as demographic data (visitor data). With the help of Google Signals, these data can be used for personalised advertising. If you have a Google account, the visitor data of Google Signals are linked to your Google account and used for personalised advertising messages. In addition, the data are used to draw up anonymised statistics on the user behaviour of our users.

Data processing

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics E-commerce measurement

This website uses the function “E-commerce measurement” by Google Analytics. E-commerce measurement allows the website operator to analyse the purchase behaviour of website visitors to improve its online marketing campaigns. In so doing, information, for example purchase orders placed, average order values, shipping costs and the time from viewing to purchasing a product are captured. These data can be summarised by Google under a transaction ID, which is allocated to the respective user or his device.

Fonts

This site uses so-called web fonts provided by Linotype for the uniform display of fonts. When a page is called, your browser loads the required web fonts into your browser cache to be able to correctly display texts and fonts.

To this end, the browser used by you must establish a connection to the server of Linotype. As a result, Linotype becomes aware that our website was called up via your IP address. The use of Linotype web fonts is done in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a default font from your computer is used.

Further information on Linotype web fonts can be found under https://www.linotype.com and in the data privacy statement of Linotype.