1) Introduction and contact details of the responsible person
1.1
We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.
1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
MACMontage
Landstraße 35
79809 Weilheim
Tel.: +0176 8344 7114
Email: info@macmontage.de
Register court:
Commercial register number:
Managing director:
VAT identification number:
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
EU Commission platform for online dispute resolution: https://ec.europa.eu/odr
We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.
2) Data collection when visiting our website
2.1
If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the website server (so-called „server log files“). When you visit our website, we collect the following data, which is technically necessary to display the website to you:
-
Our visited website
-
Date and time of access
-
Amount of data sent in bytes
-
Source/reference from which you came to the page
-
Browser used
-
Operating system used
-
IP address used (possibly in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.
2.2
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string „https://“ and the lock symbol in your browser bar.
3) Cookies
To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called „session cookies“); others remain on your device longer and allow us to save page settings (so-called „persistent cookies“). You can find out how long cookies are stored in your web browser’s cookie settings.
If personal data is also processed through cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the fulfilment of the contract, in accordance with Art. 6 (1) (a) GDPR if consent has been given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
When you contact us (e.g., via contact form or email), personal data is collected. The data collected when you use a contact form is stated in the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for the contact and associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been processed, unless there are statutory retention periods to the contrary.
5) Use of customer data for direct marketing
MailChimp
Our email newsletter is sent via the following provider:
The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Based on our legitimate interest in effective and user-friendly newsletter advertising, we transmit the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) (f) GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) (a) GDPR, the provider also conducts a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can be used to measure opening rates and specific interactions with the newsletter content. Device information (e.g., time of retrieval, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with future effect.
We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits its transfer to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.
6) Page functionalities
6.1 Adobe Fonts (Typekit)
This site uses web fonts from the following provider for the uniform display of fonts: Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA
When you visit a page, your browser loads the required web fonts into the browser cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.
Personal data related to the connection to the font provider will only be processed if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service using the „Cookie Consent Tool“ provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection.
6.2 Google Web Fonts
This site uses web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the required web fonts into the browser cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.
Data may also be transferred to Google LLC in the USA.
Personal data related to the connection to the font provider will only be processed if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service using the „Cookie Consent Tool“ provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection.
7) Rights of the data subject
7.1
The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made in each case to the specified legal basis for the conditions for exercising them:
-
Right to information pursuant to Art. 15 GDPR;
-
Right to rectification pursuant to Art. 16 GDPR;
-
Right to erasure pursuant to Art. 17 GDPR;
-
Right to restriction of processing pursuant to Art. 18 GDPR;
-
Right to information pursuant to Art. 19 GDPR;
-
Right to data portability pursuant to Art. 20 GDPR;
-
Right to revoke consent given in accordance with Art. 7 (3) GDPR;
-
Right to lodge a complaint pursuant to Art. 77 GDPR.
7.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
If you exercise your right of objection, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes. You can exercise your right of objection as described above.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
8) Duration of storage of personal data
The duration of storage of personal data is determined based on the respective legal basis, the purpose of the processing and – where applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).
-
If personal data is processed on the basis of an express consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until you revoke your consent.
-
If there are statutory retention periods for data that is processed within the framework of legal transactions or similar obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the fulfilment or initiation of a contract and/or we no longer have a legitimate interest in further storage.
-
If personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
-
If personal data is processed for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right of objection in accordance with Art. 21 (2) GDPR.
Unless otherwise stated in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer required for the purposes for which they were collected or otherwise processed.
