Data protection
General information
The following statement informs you about what type of personal data is collected on this website by us as the responsible party and for what purpose and to what extent this data is made accessible to third parties.
Legal basis for processing
The processing of personal data requires a legal basis, which we would like to introduce to you below.
When processing personal data for which we obtain the consent of the data subject, Article 6 Section 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary to fulfil a contract to which the data subject is a party, Article 6 Section 1 lit. b GDPR serves as the legal basis. This also includes processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 Section 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 Section 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in carrying out our business activities as well as in analysing, optimizing and maintaining the security of our online offering.
Transfer of data to third parties
We pass on data to third parties if this is necessary to fulfil the contract and/or we are legally obliged and/or entitled to do so in individual cases.
In some cases, we use external service providers within the scope of our legitimate interests regarding the analysis, optimization and economic operation of the online offering. This always assumes that the third-party providers of this content are aware of the user's IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and, among other things, contain technical information similar to log files. Below we list our service providers.
If your data is to be used for other purposes, we will inform you in advance and only use the data if you have expressly given your consent to this beforehand.
Hosting
This website is hosted by an external service provider (host):
Shopify
The host is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).
Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address and information about your browser and the device you are using. Shopify is also used to analyse the number of visitors, their sources and customer behaviour and to create user statistics. When you make a purchase on our website, Shopify additionally records your name, e-mail address, delivery and billing addresses, payment data and other data related to the purchase (e.g. telephone number, volume of sales, etc.). For analytical purposes, Shopify stores cookies in your browser.
Details can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy.
The use of Shopify is based on Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a relevant consent has been requested, the processing is carried out exclusively based on Art. 6 Sect. 1 lit. a GDPR and § 25 Sect. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's device (e.g. device fingerprinting) according to the TDDDG. Consent can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Responsible body
Mettenmeier GmbH
Klingenderstrasse 10-14
33100 Paderborn
Telephone: +49 5251 150-300
Fax: +49 5251 150-311
Email: mettenmeier@mettenmeier.de
Managing Directors: Stefanie Mollemeier, Ludger Schulte
Commercial register entry:
Competent court: Paderborn District Court
HRB number: B1114
Statutory data protection officer
We have appointed a data protection officer for our company in accordance with Article 37 GDPR:
Holger Döring
ITS Informationstechnik Service GmbH
Phoenixseestraße 6
44263 Dortmund | GERMANY
Tel.: +49 231 222 49 100
E-Mail: datenschutz@mettenmeier.de
Rights of the data subject
You have the right to information about the personal data we store about you. According to the legal provisions, you also have the right to correct incorrect data, block, data portability and delete your personal data. To do this, send us an email with the subject “Data Protection”.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the legal provisions.
If you have given your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing carried out based on consent until its revocation.
You can object to the future processing of your personal data at any time in accordance with legal requirements. The objection can in particular be made against processing for direct advertising purposes.
Storage period of personal data
We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After the retention period has expired, the data will be routinely deleted unless there is a need to initiate a contract or fulfil the contract. Unless the user's data is deleted because it is required for other legally permissible purposes, its processing will be restricted as much as possible. The data will accordingly be blocked if possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Cookies
This site uses cookies. Cookies are small text files that are stored on your computer and through which the entity that sets the cookie receives certain information. They serve to make the website more user-friendly and effective and/or to make it easier for you to navigate our website.
Of course, you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies or delete cookies that have already been saved. If you do not accept cookies, please note that in this case our offer may not work correctly. You can find out which function on our website sets cookies below under the individual functions.
CCM19
Our website uses CCM19 to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (“CCM19”).
When you access our website, a connection is established to the CCM19 servers in order to obtain your consent and other declarations regarding the use of cookies. CCM19 then stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the CCM19 cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
CCM19 is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 Sect. 1 S. 1 lit. c GDPR.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Server log files
Data that the browser transmits to us is automatically stored in the server statistics as part of our legitimate interest in analysis and for security reasons (so-called “log files”).
These are the following data:
- Language and version of the browser software
- operating system used and its interface
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Date and time of the server request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- amount of data transferred
- Access status/HTTP status code.
As a rule, we cannot assign this data to specific people. This data will not be merged with other data sources. The data will also be deleted within 7 days after a statistical evaluation. Data whose further storage is necessary for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.
Contact
When you contact us by email or via the contact form, we will store your information in order to answer your questions.
In principle, data will not be passed on to third parties unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with future effect. In the event of revocation, your data will be deleted immediately unless there is a legal exception to further processing. Otherwise, your data will be deleted once we have processed your request or the purpose of storage no longer applies and there are no other legal exceptions to the contrary. You can find out about the data stored about you at any time.
Contractual processing
The personal data you provide for contractual purposes, e.g. when requesting a quote, such as your name, address or email address, will only be used internally to answer your inquiries, process your orders or give you access to certain contractual information.
Registration
Our website offers a registration option. The personal data entered during registration will be transmitted to the person responsible for processing. The data is stored by us exclusively for internal use.
When registering, the user's IP address as well as the date and time of registration are saved. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass it on.
Registration of data is required for the provision of content or services. Registered persons have the option of having the stored data deleted or changed at any time. The person concerned receives information about the personal data stored about him at any time.
hCaptcha
We use hCaptcha (“hCaptcha”) on this website. The provider is Intuition Machines Inc 2211 Selig Dr, Los Angeles, CA 90026, United States (“IMI”).
The purpose of hCaptcha is to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyses the behaviour of the website visitor based on various characteristics.
This analysis begins automatically as soon as the website visitor enters a website with activated hCaptcha. hCaptcha evaluates various pieces of information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. If hCaptcha is used in ‘invisible mode’, the analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data is stored and analysed based on Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in protecting our website from abusive automated spying and SPAM. If a corresponding consent has been given, the processing is carried out exclusively based on Art. 6 Sect. 1 lit. a GDPR and § 25 Sect. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data processing is carried out on the legal basis of the Standard Contractual Clauses (SCC), which are contained in the Data Processing Addendum to IMI's General Terms and Conditions or the data processing contracts.
Further information on hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Google Analytics uses technologies that make the recognition of the user for the purpose of analysing the user behaviour patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
This analysis tool is used based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively based on Art. 6 Sect. 1 lit. a GDPR; the agreement can be revoked at any time.
Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en .
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:
https://support.google.com/analytics/answer/6004245?hl=en.
Archiving period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. For details, please click the following link: https://support.google.com/analytics/answer/7667196?hl=en
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Newsletter
Newsletter data
If you would like to receive the newsletter offered on our website, we need a valid email address from you that allows us to verify that you are the owner of the email address provided or that you are the owner of the email address when you receive the newsletter agrees.
Once you have provided your email address, we will send you a confirmation email to the address provided, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe from the newsletter. We only send newsletters with your consent or legal permission.
Your personal data will not be disclosed to third parties.
You can revoke your consent to the storage of data, email address and their use to send the newsletter at any time. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have only registered for the newsletter and cancelled this registration, their personal data will be deleted.
CleverReach
This website uses CleverReach for the sending of newsletters. The provider is the CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service that can be used to organize and analyse the sending of newsletters. The data you have entered for the purpose of subscribing to our newsletter (e.g. e-mail address) are stored on servers of CleverReach in Germany or in Ireland.
Newsletters we send out via CleverReach allow us to analyse the user patterns of our newsletter recipients. Among other things, in conjunction with this, it is possible how many recipients opened the newsletter e-mail and how often which link inside the newsletter has been clicked. With the assistance of a tool called Conversion Tracking, we can also determine whether an action that has been predefined in the newsletter occurred after the link was clicked (e.g. purchase of a product on this website). For more information on the data analysis services by CleverReach newsletters, please go to: https://www.cleverreach.com/en/features/reporting-tracking/.
The data is processed based on your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.
If you do not want to permit an analysis by CleverReach, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message.
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Sect. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please consult the Data Protection Provisions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Translated with DeepL.com (free version)