Privacy notice
The Minderleinsmühle GmbH & Co.KG are the carrier of the internet presence ‘minderleinsmuehle.de’ and take the protection of your personal dates seriously. Consequently, we strictly adhere to the rules of the data protection law. In general, we process our users’ data provided that this is necessary for a functional website as well as for our contents and services.
A process of individual-rated data will be effected only according to the compliance of the user. Moreover, a processing could be effected if a previous obtaining of a compliance is not possible for, for real reasons and legal provisions will allow this data processing. Especially, through the European general data protection regulation (GDPR) and the German ‘Bundesdatenschutzgesetz’ (BDSG 2018)
Used terminologies
‘Personal data’ means according to art. 4 no. 1 GDPR any information relating to an identified or identifiable natural person (‘data subject’). This includes e.g. name, address, birth date, email address and phone number.
‘Processing’ means according to art. 4 no 2. GDPR any operation or set of operations, which is performed on personal data or on, sets of personal data such as recording, storage, use or disclosure).
‘Controller’ means according to art. 4 no 7 the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
‘Processor’ means a natural or legal person, public authority, agency or other body, which processes personal data on behalf of the controller.
Index
With this privacy notice, we will primarily inform you by what method you could contact us - as responsible or alternatively our privacy officer (digit 1).
Moreover, we will present you, what kind of data will be processed in using and visiting our internet site, why this should be taken and on which legal basis this will be effected, if exists an obligation to make this data available and how long this data will be saved (digit 2).
Additionally, we will explain to what extent data processing will be effected, what kind of security measures will be taken and if an automatic decision finding will be effected (digits 3 to 5).
Finally, we will inform you what kind of right you will enjoy regarding processing personal data (digit 6).
1. Contact to responsible person and privacy officer
1.1 Name and address of responsible person
The responsible person according to general data protection regulation and other national data protection regulations of the member state as well as other data protection regulation is
Minderleinsmühle GmbH & Co. KG
Minderleinsmühle 1
91077 Neunkirchen am Brand
Phone: +49 9126 296 - 0
Fax: +499126 296 - 0
Email: info@minderleinsmuehle.de
Website: minderleinsmuehle.de
1.2 Name and address of privacy officer
The privacy officer of the responsible person is
Mr. Sascha Kuhrau
a.s.k. Datenschutz e.K.
Schulstr. 16a
81245 Simmelsdorf
Phone: +49 9155 2639970
Email: extdsb@ask-datenschutz.de
Website: www.bdsg-externer-datenschutzbeauftragter.de
2. Data processing when visiting and using our website
2.1 Provision of the website and creation of logfiles
2.1.1 Description and scope of data processing
In general, it is possible for you to visit our internet site without giving your personal data. Whenever you call up our internet site, our system gathers data and information, which your used internet browser will transport automatically.
Following information will be transported:
Type/version of browser
Used operating system
Referrer URL (latest visited site)
Hostname of accessing data processor (IP address)
Time of server demand
We will also memorize the data in the log files of our system. A storage of this data together with other personal data of the user will not be effected.
2.1.2 Legal basis for data processing
Legal basis for temporary storage of data and log files is art. 6 no. 1 lit. f GDPR
2.1.3 Type and aim of data processing
We will save the above-mentioned data temporarily. Using the system, a temporary storage is necessary to enable a distribution of the website to the computer. For this, the IP address of the user has to be saved for the duration of the session. The temporary storage in an own protocol data (so-called “log file” will be effected to ensure the functionality of the website. Moreover, we use this data to optimize the website and to ensure the safety of our IT system. For marketing propose, an evaluation of this data will not be occurred.
According to art. 6 no1 lit. f GDPR we have a legitimate interest on this data processing.
2.1.4 Duration of storage
The data will be delete as soon as it is no more necessary. In case of data capture to designate the website, this will occur if the correspondent session will be closed. In case of storage of log files, this will not occur later than a day. In some circumstances, it could be possible that we will made an exceeding storage. In this case, we will delete or alienate the IP address of the user with the result that a mapping of the calling client will no more possible.
2.1.5 Possibility to appeal and to remove
For the company, processing the data to gathering the website and the data storage on log files is necessary. On the part of the user, there is no possibility to appeal.
2.2 Using cookies
2.2.1 Description, extent and aim of data processing
Visiting our Internet site, there will be saved so-called “cookies” on your terminal or on your data carrier. In the case of viewing a web site, the system can save a cookie on the operating system of the user. This cookie will contain a characteristic string, which will allow a clear identification of the browser on calling the website again.
The information, which will generated or transmitted through the cookies are not personal. Based on this information it is impossible for us to identify you in person. Furthermore, cookies cannot run a program or damage your terminal.
Using cookies, we provide you a user-friendly, efficient and safe offer. We are unable to provide some features of our internet site without using cookies; for this, it is necessary that the browser will be recognized after a page changing. Our so-called “session cookies” show us that you have already visited single pages of our internet site. Ending your visit, these will be deleted automatically.
Following data will be saved and transmitted in our cookies:
__csrf_token-1
-for crosstie-script safety of shop ware
-duration: limited on browser session
session-1
-Shopware-Session
-duration: limited on browser session
X-ua-device
-will save app type (for templates)
-duration: limited on browser session
2.2.2 Legal basis for data processing
Legal basis for processing personal data using cookies is art. 6 no. 1 lit f GDPR. With this data processing, we pursue the justify interest optimizing the user-friendliness of our internet site.
2.2.3 Duration or storage, possibility to appeal and to remove
Our so-called “session cookies” show us that you have already visited single pages of our internet site. Ending your visit, these will be deleted automatically.
The most internet browser accept cookies automatically. On the computer of the user, cookies will be storage and transmitted to us. Consequently, you have the full control of the usage of cookies. You have also the possibility to use our internet site without cookies.
Through a change of adjustment on your internet browser, you can deactivate or restrict the cookies. You have also the possibility to delete cookies. This can also be effected automatically. Depending on the using internet browser and its version, you can obtain further information and necessary steps using the help function of your browser.
However, we would point out, that you are eventually unable to use all services or functionalities of our internet offer.
2.3 Contact form and email contact
2.3.1 Description and comprehension of data processing
On our internet site, you will find a contact form, which you can use for get in touch with us electronically. If you use this opportunity, your data will transmitted and storage. This data is
Salutation
Prename, name
Email address
Title (optional)
Enterprise (optional)
Phone (optional)
Sending your message, we will storage the following data
IP address of the user
Date and time of emailing
Type/version of the browser
For processing the data, we will seek your compliance and point out to this privacy notice.
Alternatively, you have the possibility to contacting us using the available email address. In this case, our system will save personal data which will transmitted by email.
In this context, we will not communicate this personal data to third. We use this data only for processing the conversation.
The transmission will be effected through https-ciphering depending on current stand of technology.
2.3.2 Legal basis for data processing
If the user compliance is on hand, the legal basis for data processing is art. 6 no.1 lit. a. GDPR.
Legal basis for processing the data, which will transmitted via email, is art. 6 no. 1 lit. f GDPR.
If email contacting considers a conclusion of a contract, in this case the additional legal basis for processing is art. 6 no 1 lit. b GDPR.
2.3.3 Type and aim of data processing
Personal data for the processed input template serves only for contacting. In case of contacting via email, we have the required and eligible allowance to process the data.
While sending, other personal data will also be saved. This will prevent abuse of contact form and will back up our IT system.
2.3.4 Duration of storage
We will storage the personal data of the form and the email. This storage of the data will be effected until you ask us to delete, you revoke your compliance or we no more need the storage of personal data. Mandatory legal provisions - especially storage period - remain unaffected.
2.3.5 Possibility to appeal and to remove
The user has always the possibility to revoke his compliance of personal data processing. In the case that you would like resort your litigation, you could contact us according to digit 1.
If the user contact us via email, he has the possibility to revoke the storage of his personal data. In this case, we cannot continue the conversation.
All personal data, which we will storage during contact, will be deleted.
2.4 Google Maps
2.4.1 Description, extent and intention of data processing
On our internet site, we use the offer of Google Maps, a service of Google LLC (“Google”). In this way, we ca show you interactive maps on the web site and facility the comfort usage of the maps function.
2.4.2 Information referring third provider
Visiting our internet site, google will obtain the information that you have called up the correspondent subpage of our web site. Moreover, we will transfer the mentioned data of this privacy notice according to digit 2.1.1. This will be effected irrespective of whether Google will provide a user account, whereby you are logged in or not. Whether you are logged in Google, your data will directly matched to your account. In the case that you not require a matching, you should logged out before activating the button. Google will storage you data s user profile and apply this for advertising, market research and/or demand-adequate decoration of its website. Such an analysis will be effected especially (even for not logged user) for demand-adequate advertising and to inform other user about your acting on our website.
You will find further information regarding aim and scope to data collection and your processing through third provider as well as law and installation possibilities to protect your privacy directly at Google:
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Phone: +1 / 650 253 0000
Fax: +1 / 650 253 0001
Email: support-de@google.com
Terms: https://www.google.com/intl/de_US/help/terms_maps.html
Overview of privacy: https://www.google.com/intl/de/policies
Technologies and principals inclusive cookies https://www.google.de/intl/de/policies/technologies/
Privacy: https://www.google.de/intl/de/policies/privacy
2.4.3 Legal basis for data processing
Legal basis for so-called data processing is art. 6 no 1 S. 1 letter f GDPR. Using this measure, we are interested in creating you an adequate and convenient offer.
2.4.4 Possibility to appeal and to remove
You have the possibility to contradict Google compiling user profiles. For this, you should contact Google. Above-mentioned you will find information and contact
2.5. Registration and use of the miller area
2.5.1 Description and scope of data processing
On our internet site, we provide an area, exclusively for our existing miller customer, which will obtain information and downloads. This access is reserved only for miller. If you wish to be recorded, we require counting you to our customer’s base. The registration for using miller’s area will be effected by writing. Contemporaneously, we will haul a written compliance from the user for processing his data. Data and compliance will be transmitted to us via scan or copy of email, post or fax – we will storage and use this personal data to establish an access for our customers. We will not transfer this data to third. Following data will be saved:
Appellation
Prename, name
Company
Street, house number
Zip code, city, country
Phone
Fax
Email
Apart from the data of compliance, we will also save the login data using miller’s area:
User name
Login and logout
Time of your download
2.5.2 Legal basis for data processing
Legal basis for so-called data processing is art. 6 no 1 S. 1 letter f GDPR. Using this measure, we are interested in creating you an adequate and convenient offer.
2.5.3 Aim and scope of data processing
It is necessary, that the user is logged in for holding issues and services on our website. Recorded users will find in the miller’s area downloads, which are not presented to final customers. For more details, see digit 2.5.1.
2.5.4 Duration of storage
The data will be deleted as soon as it is no more necessary to storage your data. We will storage your data while registration, if registration on our internet site will be repealed or changed.
2.5.5 Possibility to appeal and to remove
We will save the above-mentioned information as soon as you will appeal the storage process, it is no more necessary to storage your data or if your storage is undue for legal reason. Moreover, you have the opportunity to change the saved data.
To delete your account or change your details, simply contact the controller via the contact details specified in digit 1.
3. Data transfer; recipients of data
Your personal data will only be disclosed to third parties for the purposes listed below.
We will only disclose your personal data to third parties
• if you have given your consent for us to do so in accordance with art. 6 no. 1 S. 1 letter a of the General Data Protection Regulation (GDPR), or
• if the disclosure is required in accordance with art. 6 no. 1 S. 1 letter f GDPR in order to establish, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed, or
• if there is a legal obligation to disclose the data in accordance with art. 6 no. 1 S. 1 letter c GDPR, or
• if the disclosure is legally permissible and is required in accordance with art. 6 no. 1 S. 1 letter b GDPR in order to perform a contract with you.
When you visit our website, data regarding this visit may be sent to companies based in the USA. This is carried out for the purposes of integrating an interactive map. Further information on the integration of and data transmission to Google Maps is provided in digit 2.4.1 f.
Within the context of an agreement with the USA (EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework), the European Commission has issued an adequacy decision according to which the guarantees for the transmission of data on the basis of the agreement correspond to the data protection standards in the EU. Any American companies to whom data regarding visits to our website is transferred have registered in a corresponding list and themselves undertake to meet the obligations defined in the agreement.
The agreement and further information is available on the EU website for legal texts. The English texts are currently available here:
http://eur-lex.europa.eu/homepage.html?locale=en
A HTML version of the full English document is available at:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250&from=EN
It is available in PDF format here:
https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016D1250&from=EN
4. Data security
We strive to ensure that your data is secure at all times. We have physical, electronic and administrative measures in place, and adapt these measures in accordance with the latest technology and developments in order to prevent the loss, misuse or modification of personal data. Our employees who have access to personal data receive appropriate training. Secure passwords are used for our own online activities.
For security reasons and to protect the transfer of confidential content that you send to us as the site operator, our website uses SSL encryption. This ensures that the data you send via this website cannot be read by third parties. You can recognise encrypted connections by the “https://” address line in your browser and the padlock symbol in your browser address line.
5. No use of automated decision-making, including profiling
We do not use profiling or other decision-making processes that are based exclusively on automated data processing and will have legal consequences for you or will similarly significantly affect you.
6. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the controller:
6.1 Right of access (art. 15 GDPR)
You can obtain confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is carried out, you can request the following information from the controller:
• the purposes for which the personal data is being processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
• the planned duration of storage of the personal data concerning you or, if it is not possible to provide specific details in this regard, the criteria for determining the storage duration;
• the existence of a right to the rectification or erasure of the personal data concerning you, a right to the restriction of processing by the controller or a right to object to this processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all information available regarding the source of the data if the personal data was not collected from the data subject;
• the existence of automated decision-making, including profiling, in accordance with art. 22 no. 1 and 4 GDPR.
You have the right to request information regarding whether the personal data concerning you is being sent to a third country or an international organisation. In this regard, you may request information regarding the appropriate safeguards provided for the transmission in accordance with art. 46 GDPR.
6.2 Right to rectification (art. 16 GDPR)
You have a right to rectification and/or completion with respect to the controller if the processed personal data concerning you is incorrect or incomplete. The controller must carry out the rectification promptly.
6.3 Right to erasure (art. 17 GDPR)
You may obtain from the controller at any time the erasure of the personal data concerning you without undue delay. The controller is obligated to erase this data promptly.
The right to erasure does not exist if the processing is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
6.4 Right to restriction of processing (art. 18 GDPR)
You may request the restriction of the processing of the personal data concerning you under the following conditions:
• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of use of the personal data instead;
• the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
• if you have objected to processing pursuant to art. 21 no. 1 GDPR pending the verification whether the legitimate grounds of the controller override yours.
Where the processing of the personal data concerning you has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Where processing has been restricted in accordance with the provisions specified above, you will be informed by the controller before the restriction is lifted.
6.5 Right to notification (art. 19 GDPR)
If you have asserted the right to rectification, erasure or the restriction of processing against the controller, the controller is obligated to notify all recipients to whom the personal data concerning you has been disclosed of said rectification or erasure of the data or restriction of processing, unless this proves to be impossible or involve disproportionate effort.
You have the right vis-à-vis the controller to be informed about these recipients.
6.6 Right to data portability (art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Furthermore, you have the right to obtain the transfer of this data to another controller where
• the processing is based on consent pursuant to art. 6 no. 1 letter a GDPR or art. 9 no. 2 a GDPR or on a contract pursuant to art. 6 no. 1 letter b GDPR and
• the processing is carried out by automated means.
6.7 Right to object (art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on art. 6 no. 1 letter e or f GDPR.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.
6.8 Right to withdraw data protection declaration of consent (art. 7 no. 3 in conjunction with art. 6 no. 1 S. 1 letter a and art. 9 no. 2 letter a GDPR)
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out based on the consent up to the time of withdrawal.
6.9 Right to lodge a complaint with a supervisory authority (art. 77 GDPR in conjunction with section 19 of the German Federal Data Protection Act (BDSG) 2018)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside, in which your place of work is located or where the alleged infringement took place, if you believe that the processing of the personal data concerning you is in violation of the GDPR.
To assert your rights, you can contact us via the contact details in digit 1.
7. Changes to this privacy policy
The company reserves the right to change or update parts of this privacy policy at any time. The current version of the privacy policy will always be available here on our website.
8. Security notice
We make every effort to ensure that your personal data is stored in such a way that it is not accessible to third parties by taking all available technical and organisational measures. In the case of communication via email, we are unable to guarantee complete data security, so we recommend sending any confidential information by post.
Minderleinsmühle, 25.05.2018