Data Protection
Thank you for visiting our website and for taking an interest in our company. Data protection is of fundamental importance to the controller (as defined in Art. 4 (7) GDPR) MT Mühlbauer Technology SE (hereinafter referred to as MT SE), Elbgaustr. 248, 22547 Hamburg, as operator of the website www.mtcompanies.com. Protecting your rights to privacy is very important to us. This is why we have constructed our website in line with the principle of keeping usage of your data to a minimum.
Collection of personal data when visiting our website
If you visit our website, we will only collect the following technically necessary data to display our website and ensure its stability and security. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
The following data is collected:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status / HTTP status code
- The data volume transferred in each case
- The website the request originated from
- Browser
- Operating system and its interface
- Browser software language and version
The personal data that we receive when you use our online services is collected and used strictly within the legally permitted framework and solely for the purpose for which you have supplied the data (e.g. requesting information materials, posting comments, subscribing to newsletters). The collected data is subject to extensive security measures that prevent unauthorised access, prevent misuse and protect against the destruction or loss of data. Data transmission over the internet is carried out using SSL encryption.
When you contact us by email or using a contact form on this website, we will store the data you provide (your email address, your name and telephone number, if applicable, and the content of your message) to answer your questions. Your data will be processed in the context of pre-contractual measures or based on your express consent pursuant to Art. 6 (1) (a) and (b) GDPR. We erase the data collected in this context once storage is no longer necessary or restrict processing if legal retention periods exist.
If your email content is confidential in nature, we strongly urge you to encrypt it in order to protect it against unauthorised access or changes during transmission.
Rights of data subjects
You are entitled to assert the following rights as a data subject with regard to your personal data at any time and free of charge:
- The right of access
- The right to rectification or erasure
- The right to restriction of processing
- The right to object to processing
- The right to data portability
You also have the right to lodge a complaint with a data protection supervisory authority regarding our handling of your personal data.
Withdrawal of consent and objection to the processing of your data
If you have given consent to the processing of your data, you can withdraw this consent at any time. Such a withdrawal influences whether processing of your personal data is permissible after you have notified us of the revocation.
If processing of your personal data is based on a consideration of interests, you can object to the processing. This is especially the case if the processing is not required for the fulfilment of a contract with you, which we will outline in the following description of functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. If your objection is well-founded, we will review the situation and either discontinue or adjust data processing or provide you with our compelling legitimate grounds for continuing the processing.
Erasure of personal data
The data we process is erased in accordance with legal requirements if the purpose for processing your data no longer applies or if it is no longer required for the purpose. We will also erase your data if the processing was based on your consent and you have withdrawn it.
It may be that the storage of your data is required for other legally permissible purposes, such as to fulfil a legal obligation, to exercise legal claims or for tax law reasons. In such cases, your personal data will only be processed for these specific purposes.
Further functions and services on our website
In addition to the purely informational use of our website, we offer various services that you can access if they are of interest. For this purpose, you will usually need to provide further personal data which we use to provide the respective service and for which the aforementioned data processing principles apply.
In some cases, we use external service providers to process your data. These have been carefully chosen and commissioned by us, are bound by our instructions and are subjected to regular checks.
Where our service providers or partners are based in a country outside the European Union (EU) or the European Economic Area (EEA), we will advise you of the consequences thereof at the appropriate point in this privacy policy.
Recipients of personal data
We use national and international external service providers to process our business transactions (e.g. for IT, logistics, telecommunications, sales and marketing), who may also have access to your personal data. We have concluded order processing contracts with these providers in accordance with Art. 28 GDPR, which ensure that data processing is carried out in a lawful manner.
If we pass on your personal data to our subsidiaries or if our subsidiaries pass it on to us (e.g. for advertising purposes), this is also done in accordance with existing data processing agreements.
Requirements for the transfer of personal data to third countries
For the exceptional cases in which personal data is transferred to countries outside the European Economic Area (EEA), i.e. to third countries, this takes place under the conditions named in Art. 44 GDPR onwards. We will provide you with information on the respective details of transfer at the relevant points below.
The European Commission recognises some third countries as having an equivalent level of data protection to the EEA through what are known as adequacy decisions. However, there are other third countries to which personal data may be transferred that may not have a consistently high level of data protection due to a lack of legal provisions. In such cases, we ensure that data protection is sufficiently guaranteed. This is achieved through binding company rules, standard contractual clauses of the European Commission for the protection of personal data according to Art. 46 (1), (2) (c) GDPR, certifications and recognised codes of conduct.
Cookies
Cookies are small text files transmitted to your computer together with the online data actually requested. This data is saved on your computer in readiness for subsequent visits.
We use the consent management platform (CMP) of Cookiebot, a service provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. The tool allows you to conveniently manage your consent to the setting of technically non-essential cookies and to make changes in this respect using the tool (e.g. revoking granted consent or making objections).
The information required under Art. 13 GDPR on the processing of your personal data by the Cookiebot CMP and by technically non-essential cookies can also be found in the tool.
How to disable or enable cookies: Click on the blue-and-white cookie icon on the right edge of the page. A pop-up window will appear, showing the cookies used by the website, which are divided into the following categories: ‘Necessary’, ‘Preferences’, ‘Statistics’ and ‘Marketing’. Clicking on the ‘Show Details’ tab will expand the window to show more information about the cookies, such as the name, provider, purpose, expiry and type. You can disable or enable the cookies by clearing / selecting the check boxes next to the categories.
Photography and filming of events
We would like to inform you that we take photos and film recordings that involve references to persons at events. The purposes of data processing will be specified clearly for each event and always relate to corporate communication and documentation. These corporate purposes are pursued, for example, in the form of social media posts, photos and videos online on the company’s website and by archiving recordings internally. In this respect, the legal basis of consent according to Art. 6 (1) (a) GDPR and, in the case of overriding business interests, legitimate interest according to Art. 6 (1) (f) GDPR apply. The recordings will be erased once the purpose no longer applies, if previously granted consent is withdrawn or in the event of an objection.
Use of Google services
We use various services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. Personal data about you may be processed in this context. To ensure that our use of your data is lawful, we obtain your consent to this effect by means of our cookie banner.
The legal basis for processing is therefore Art. 6 (1) (a) GDPR. Google is a US company, which is why it is very likely that data is also processed in the USA. The European Commission issued its adequacy decision for the USA on 10 July 2023. It states that the USA guarantees an appropriate level of data protection for transfers within this context. Google LLC is certified under the EU-US Data Privacy Framework and an appropriate level of data protection can be assumed. We have provided information below about the Google services we use:
Youtube
Components (videos) provided by the company YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a Google LLC company, are used on this website. Here we use the ‘Privacy-Enhanced Mode’ option provided by YouTube. When you visit a page that contains an embedded video, a connection is made to YouTube’s web servers, which then instruct your browser to display the content on the webpage. According to YouTube, the use of this ‘Privacy-Enhanced Mode’ means that data (specifically concerning which of our webpages you have visited) is only transmitted to YouTube’s server if you watch the video. If you are logged into YouTube at the same time, this information will be linked to your account with YouTube. You can prevent this from happening by signing out of your account before visiting our website.
Further information on YouTube’s privacy policy is provided by Google at: https://www.google.de/intl/de/policies/privacy/
Google Maps
This website uses Google Maps, an online map service provided by Google LLC. This map enables us to show you the location of our company and to forward you to Google Maps so you can plan your journey to our company. The map will only be displayed to you in our CMP once you have given prior consent to this effect. Consent can be revoked at any time in our CMP.
Google Analytics
With your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses ‘cookies’, which are text files placed on your computer to help the website analyse how users make use of the site. The information generated by cookies about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
However, if IP anonymisation is activated on the website, Google will first truncate the IP address within the member states of the European Union or in other states that are party to the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA before being truncated. Acting on behalf of the operator of this website, Google will use this information to analyse your use of the website, to generate reports on website activity and to provide the website operator with other services relating to website activity and internet usage. Google will not associate the IP address transmitted by your browser as part of Google Analytics with any other data held by Google. You can prevent the setting of cookies by adjusting your browser software appropriately. However, we would like to point out that, in this case, you may be unable to use all the features of this website.
The legal basis for this is Art. 6 (1) (a) GDPR. For more information, please visit http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). Please note that Google Analytics on this website has been expanded to include the gat._anonymizeIp() code. This is used for the purpose of anonymised storage of IP addresses (IP masking).
Google Tag Manager
The activation of Google Analytics as well as other marketing tags is systematically controlled via Google Tag Manager so that the website does not lose performance when using various tags (code units, tracking tools, etc.). The Tag Manager triggers or optimises events related to marketing analysis and collects personal data in the process. Detailed information on Google Tag Manager can be found at https://www.google.de/tagmanager/faq.html. The legal basis is Art. 6 (1) (a) GDPR; consent can be revoked at any time.
Questions relating to privacy
The internet’s ongoing evolvement also has an impact on MT SE’s data protection strategy. So if you have any questions, suggestions or comments relating to data protection at DMG, you can send them at any time by email to the following address: privacy@mtcompanies.com. This privacy policy will be adapted and further developed in line with data protection and security technology developments. We therefore reserve the right to modify and amend this policy as appropriate.
Postal address:
MT Mühlbauer Technology SE
Data Protection Officer
Elbgaustr. 248
22547 Hamburg