Privacy

 

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

 

Sect. 2 Contact us

(1) Purpose of data processing

Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.

(2) Legal basis

a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.

b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.

c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.

You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

(3) Legitimate interest

Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).

(4) Recipient categories

Provider of hosting, service provider for direct marketing

(5) Duration of storage

Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.

However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).

(6) Right of revocation

You have the right to revoke your consent for processing at any time in compliance with your consent.

 

Sect. 3 More information

 

Sect. 4 Web analysis with Google Analytics

(1) Purpose of data processing

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. According to Google, Google Analytics 4 does not log or store individual IP addresses. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP addresses are only used to derive location data and are immediately deleted afterwards. They are not logged, are not accessible, and are not used for any other use cases. When collecting measurement data in Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing. These servers are also located outside the EU.

Google Analytics provides the User ID function. With the help of this function, sessions can be assigned permanent IDs and user behavior can thus be analyzed across devices. When using the IDs, no unauthorized personally identifiable information is used and user IDs do not contain any information that could be used by third parties to determine the identity of a user. Remarketing target groups can be created based on the user IDs. However, Analytics only collects the user ID and device ID for the last device associated with a logged-in user.

We use the Google Signals function. This feature collects additional information about website visitors who have activated personalized ads and ads can be delivered to these visitors in cross-device remarketing campaigns.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

(3) Recipient categories

Google and its partners.

(4) Transfer to a third country

Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the US is the EU-U.S. Data Privacy Framework.

(5) Duration of Storage

14 months

(6) Right of revocation

You can revoke your consent at any time with effect for the future via our cookie banner or via our website

You can prevent the installation of the cookies in your browser settings. If you choose to change your settings you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout

 

Sect. 5 Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.

(4) Duration of storage

The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.

(5) Right of objection

If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.

 

Sect. 6 Your rights as a data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

1. Right to information

You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

3. Right to erasure

You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personal data under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

6. Right to revoke the consent given under data protection law

You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).

Please also note your right of objection under Article 21 GDPR:

a) In general: reasoned objection required

If the processing of personal data concerning you takes place in order

- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)

or

- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),

you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

 

Responsible for data processing:
mpk-LUDWIG UG (haftungsbeschränkt)
Rosenstraße 5
48488 Emsbüren
Phone: 059039328101
info@mpk-ludwig.de

This document was created and is updated with technology from janolaw GmbH.

Addition:

Cloudflare Turnstile

We use “Cloudflare Turnstile” on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Turnstile”).
Turnstile is used to check whether the data input on this website (e.g., in a contact form) is done by a human or by an automated program. For this purpose, Turnstile analyzes the behavior of the website visitor based on a number of characteristics.
This analysis starts automatically as soon as the website visitor enters a website that uses Turnstile. For the analysis, Turnstile evaluates various information (e.g., IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare.
The storage and analysis of the data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting his web offerings from abusive automated spying and from Spam. If such consent has been obtained, the data will be processed exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, if the consent comprises the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined in the TTDSG (German Telecommunications Act). Such consent may be revoked at any time.
The processing of data is based on Standard Contract Clauses, which you can find here: https://www.cloudflare.com/cloudflare-customer-scc/.
For more information on Cloudflare Turnstile, please visit the privacy policy at: https://www.cloudflare.com/cloudflare-customer-dpa/.

Cookie consent with Borlabs Cookie

What is Borlabs Cookie?
Cookie plugin for compliance with the DSGVO and ePrivacy.

Who processes your data?
Only us, not the provider of Borlabs Cookie.

Where can you find more information about data protection at Borlabs Cookie?
https://borlabs.io/kb/what-information-does-borlabs-cookie-store/

How do we process your data?
We use Borlabs Cookie to obtain your consent to store cookies on your device. When you visit our website and close the Borlabs Cookie window requesting consent, a Borlabs cookie with the following content is stored in your browser:

This data is not transmitted to the provider of Borlabs Cookie.

We store the data until the purpose of the data storage no longer applies, you delete the Borlabs cookie or request us to delete the data. This does not apply only if we are required by law to retain the data.

On what legal basis do we process your data?
We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. In order to fulfill this obligation, we use Borlabs Cookie. The legal basis for data processing is therefore Art. 6 (1) lit. c) GDPR.

Google Tag Manager

What is Google Tag Manager?
Tag management system for the integration of tracking codes and conversion pixels of Google Ireland. Ltd.

Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Where can you find more information about data protection at Google Tag Manager?
https://policies.google.com/privacy

On what legal basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How do we process your data?
We use the Google Tag Manager. The tool helps us to integrate tracking codes and conversion pixels into our website, manage them and play them out. Google Tag Manager does not create user profiles itself, does not place cookies on your device, and does not analyze your behavior as a user. It does, however, record your IP address and transmit it to Google servers in the USA.

On what legal basis do we process your data?
We have a legitimate interest in a quick and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful according to Art. 6 (1) lit. f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6 (1) lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Ads

What is Google Ads?
Online advertising program of Google Ireland Ltd.

Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Has a data processing agreement been concluded with Google Ads?
Yes

Where can you find more information about data protection at Google Ads?
https://policies.google.com/privacy?hl=en&gl=en

On what legal basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How do we process your data?
We use Google Ads. Google’s advertising program enables us to play advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can place targeted advertisements based on the user data available at Google (e.g. location data and interests) (target group targeting). We evaluate the collected data quantitatively by analyzing, for example, which search terms led to the playout of our ads and how many ads resulted in corresponding clicks.

On what legal basis do we process your data?
As a website operator, we have a legitimate interest in the placement and evaluation of advertisements. The data processing is therefore lawful according to Art. 6 para. 1 lit. f) DSGVO. In the event that you have consented, for example, to the storage of cookies or have otherwise consented to data processing by Google, only Art. 6 (1) a) DSGVO is the legal basis. You can revoke your consent at any time with effect for the future.

Google Conversion Tracking

What is Google Conversion Tracking?
Tool for analyzing user behavior provided by Google Ireland Ltd.

Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland

Has a data processing agreement been concluded with Google Conversion Tracking?
Yes

Where can you find more information about data protection at Google Conversion Tracking?
https://www.google.de/intl/de/policies/privacy/

On what legal basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.

How do we process your data?
We are always interested in optimizing our web offering for users and placing advertising in the best possible way. For this purpose, we also use Google’s conversion tracking. With its help, we can record whether and how often visitors clicked on certain buttons on our website and which products were viewed and purchased particularly frequently (conversion statistics) . In the course of data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification.

On what legal basis do we process your data?
As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and the advertising placed there. The data processing is therefore lawful according to Art. 6 para. 1 lit. f) GDPR. In the event that you have consented, for example, to the storage of cookies or have otherwise consented to data processing by Google Conversion Tracking, only Art. 6 (1) lit. a) GDPR is the legal basis. You can revoke your consent at any time with effect for the future.

Manage WP

What is Manage WP?
Website management system

Who processes your data?
GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia

Has a data processing agreement been concluded with Manage WP?
Yes

Where can you find more information about data protection at Manage WP?
https://managewp.com/privacy

How do we process your data?
With ManageWP, we can monitor the security and performance of our website and initiate automatic backups, among other things. ManageWP thus has access to all website content, including our databases. ManageWP is hosted on the provider’s servers.

On what legal basis do we process your data?
As a website operator, we have a legitimate interest in operating our website effectively. The data processing is therefore lawful according to Art. 6 (1) lit. f) GDPR.
In the event that you have consented to data processing, only Art. 6 (1) lit. a) GDPR is the legal basis. You can revoke your consent at any time with effect for the future. From the time of revocation, we may no longer process your data.

Wordfence

What is Wordfence?
Firewall and security scanner for WordPress websites.

Who processes your data?
Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA

Has a data processing agreement been signed with Wordfence?
Yes

Where can you find more information about data protection at Wordfence?
https://www.wordfence.com/privacy-policy/

On what legal basis do we transfer your data to the USA?
On the basis of standard contractual clauses of the European Commission (see https://www.wordfence.com/help/general-data-protection-regulation/)

How do we process your data?
To protect our website from malicious traffic, we use the Wordfence plugin. It identifies and blocks data that has malicious code or content, and checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections. In order for these measures to be carried out, our website is permanently connected to Defiant Inc. servers in the USA. On these, accesses to our website are compared with the data that Wordfence has stored in its database and, if necessary, blocked.

On what legal basis do we process your data?
As a website operator, we have a legitimate interest in protecting ourselves from malicious traffic. The data processing is therefore lawful according to Art. 6 (1) lit. f) GDPR.
If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 (1) lit. a) GDPR. You may revoke your consent at any time. From the time of revocation, we may no longer process your data.