Privacy Policy - M+M-Group

1. Name and Address of the Data controller

Meyle+Müller GmbH+Co.KG
Maximilianstraße 104
75172 Pforzheim
Germany
Tel.: 07231 – 941 – 0
E-Mail: info@meyle-mueller.de
Website: www.meyle-mueller.de

is the data controller as defined by the EU General Data Protection Regulation and other national data protection laws. The protection of our website’s users’ privacy is important to M+M and it would therefore like to inform the user how their data is handled in detail below.

Data Processing – General Information
Scope of the Processing of Personal Data

The personal data of our website users is only collected and used for the necessary provision of a functioning website as well as our content and services. The collection and usage of our users‘ personal data only takes place after the user’s consent. An exception applies in situations where the processing of this data is legally permitted or prior consent cannot be obtained for practical reasons.

Legal basis for the Processing of Personal Data

The legal basis for the processing of personal data is derived in principle from:

Art. 6 para. 1 a. GDPR when the data subject has given consent to the processing of his or her personal data
Art. 6 para 1 b. GDPRfor the fulfilment of contractual obligations with a data subject, or for tasks which are necessary for the completion of pre-contractual measures.
Art. 6 para 1 c. GDPRthe compliance with a data controller’s legal obligations
Art. 6 para 1 d. GDPR, if the vital interests of a data subject or another individual require the processing of personal data.
Art. 6 para 1 f. GDPR, if the processing is necessary to safeguard the legitimate interests of our company or of a third party and the interests, basic rights and freedoms of the data subject do not outweigh interests of the former.

Data Erasure and Storage Period

The personal data of the data subject will be either deleted or blocked as soon as the specific purpose for storage expires. Continued storage can occur if provided for within European or national legislation in accordance with EU regulations, laws, or other provisions which the responsible is subject to. The blocking or erasure of data occurs when the defined standard storage period expires unless there is a need for the further storage of the data for the conclusion or fulfilment of a contract.

The Usage of our Website – General Information
Description and Scope of Data Processing

Whenever our website is accessed, our system automatically collects data and information from the user’s computer system. The following information is collected:

The IP address of the user
Data and time of access

The described data is stored in the log files of our system. This data is not stored together with other personal data of the user.

The following data will be used in the CRM system (SugarCRM) for contact purposes. This personal data is stored by Meyle + Müller GmbH+Co KG and is used exclusively for acquisition or the approved purpose of services commissioned by the customer:

Company address
Name of contact person
Telephone
E-mail

Purpose and Legal Basis for Data Processing

Our system’s temporary storage of an IP address is necessary for the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the visit.

Storage in log files takes place to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this context.

The collection of your personal data for our online presence and the storage of data in log files is absolutely necessary for the operation of the website. As a result, the user can have no grounds for objection.

The legal basis for the temporary storage of data and log files is Art. 6 para 1 f. GDPR.

Storage Duration

Your data will be deleted as soon as the purpose of its collection has been achieved. If your data is collected to facilitate the delivery of the website, the data will be deleted when the respective session is finished.

If your data is stored in log files, it will be deleted after seven days at the latest. Continued storage is possible, in which case the user’s IP address is deleted or encrypted. It is therefore no longer possible to connect this data to the visiting client.

III. Your Rights / Rights of the Person Concerned

According to the EU GDPR you have the following rights as a data subject:

The Right of Access to Information

You have the right to obtain information from us as the data controller as to whether we are processing personal data pertaining to you.

In addition, you could request information about the following:

(1) The purpose of the data processing;

(2) The types of personal data processed;

(3) The recipient or type of recipient to whom your personal data has been or will be disclosed;

(4) The expected duration of the storage of your personal data or, if specific details are not possible, criteria for determining the storage duration;

(5) The existence of a right to the correction or erasure of your personal data, a right to have the processing limited by the data controller or a right to object to such processing;

(6) The existence of the right of appeal to a regulatory body;

(7) Any available information as to the source of the data if the data isn’t collected directly from the data subject;

(8) The existence of automated decision-making, including profiling in accordance with Art. 22 para 1 and 4 GDPR and, at least these cases, meaningful information on the rationale involved, and the scope and intended consequences of such processing on the data subject.

Finally, you also have the right to request information as to whether your personal data will be transferred to a third country or to an international organization. In this case, you may request information on the appropriate safeguards in connection with the transfer in accordance with Art. 46 GDPR.

You are entitled to exercise your right to information at: info@meyle-mueller.de

2. Right to Correction

Should the data we collect relevant to you be incorrect or incomplete you have the right to ask us to correct and / or complete it. This correction will be carried out immediately.

3. Right of Restriction

The right to limit the processing of your personal data may be exercised in the following cases:

(1) The accuracy of the personal data is being contested for a period of time which enables the data controller to verify the accuracy of the personal data;

(2) The processing is unlawful and the erasure of the personal data is denied, requiring the restriction of the use of the personal data instead;

(3) The data controller no longer needs the personal data for the specific purposes of the processing, but the data subject needs them in order to exercise or defend their rights; or

(4) The data subject has lodged an objection to the processing in accordance with Art. 21 para 1 GDPR and it is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject.

If the processing of your personal data has been restricted such data may be processed – apart from its storage – only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal entity or on the basis of an important public interest for the EU or a member state.

Should there be a restriction in place on processing which meets the aforementioned criteria, you will be informed by us before the restriction is lifted.

4. Right to Erasure

Should the reasons set out below be applicable to you, you may request that your personal data be immediately deleted. The data controller is obliged to delete this data immediately. The reasons are:

(1) Your personal data is no longer necessary for the purpose of its collection or otherwise processed.

(2) The processing is subject to consent in accordance with Art. 6 para 1 a. or Art. 9 para 2 a. and you revoke the consent. A further condition is that there is no other legal basis for the processing.

(3) You submit an objection to the processing (Art. 21 para 1 GDPR) and there are no overriding legitimate reasons for the processing. A further possibility is that you submit an objection to the processing in accordance with Art. 21 para 2 GDPR.

(4) The processing of your personal data is unlawful.

(5) The erasure of personal data relating to you is necessary to comply with legal requirement under EU law or the law of the member state(s) to which the data controller is subject.

(6) Your personal data has been collected in relation to offered information society services in accordance with Art. 8 para 1 GDPR.

If we have made your personal data public and we are obliged to delete it in accordance with Art. 17 (1) GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and its implementation cost to inform data controllers processing your personal data that you, the data subject, have requested the erasure of all links to this personal data or of copies or replication of this personal data.

We would like to inform you that the right to erasure does not exist where the processing is necessary

(1) to exercise the right to free speech and information;

(2) to comply with a legal obligation requiring the processing of data under EU law or national law to which the data controller is subject or to perform a task being carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with points h. and i. of Art. 9 para 2 as well as Art. 9 para 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para 1 GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defence of legal claims.

5. Right to Information

Should you have asserted your right to correction, erasure or restriction of processing, we are obliged to notify all recipients to whom your personal data has been disclosed of this correction, erasure or restriction of data processing, unless this proves impossible or involves a disproportionate amount of effort. You also have the right to be informed about the recipients.

6. Right to Data Portability

According to the GDPR you have the right to receive your personal data which you have provided to a data controller in a structure, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided where:

the processing is based on consent in accordance with Art. 6 para 1 a. GDPRor Art. 9 para 2 a. GDPR or in a contract in accordance with Art. 6 para 1 b. GDPR and
the processing is carried out by automated means.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from one data controller to another, where technically feasible, and as long as the freedoms and rights of another person are not adversely affected.

The right to data transferability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Revoke the Consent Agreement in Accordance with GDPR

You have the right to revoke your consent at any time. We would like to point out that the revocation does not affect the legality of the processing that has taken place on the basis of your original consent until revocation.

8. Right to Object

Furthermore, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 para. 1 e. or f. GDPR, including profiling based on those provisions. The data controller shall no longer process the personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Should your personal data be processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Should you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Regarding the use of information society services and notwithstanding Directive 2002/58/EC, you have the right to object by automated means using technical specifications.

9. Automated Individual Decision Making, including Profiling

In accordance with the GDPR you have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect or similar on you. However, there is an exception to this principle should the decision be:

(1) necessary for the completion or performance of a contract between you and the data controller;

(2) is authorised by Union or Member State law to which the data controller is subject, and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent.

In the cases referred to in points (1) and (3), the data controller shall implement suitable means to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

The decisions based on (1) – (3) shall not be based on special categories of personal data referred to in Art. 9 para 1 GDPR unless Art. 9 para 2 a. or g. apply and suitable measures to safeguard your rights, freedoms and legitimate interests are in place.

10. Right of Appeal to a Regulatory Body

If you believe that the processing of your personal data is in breach of the GDPR, you have the right to complain to a regulatory body, specifically in the Member State in which you are a resident, your place of work, or the place where the alleged breach took place.

Use of Social Media Plug-ins

We currently use the following social media plug-ins: Facebook, Twitter, Xing

On its website M+M uses plug-ins from the social media network facebook.com (http://www.facebook.com),Facebook Inc., 1601 S California Ave, Palo Alto, CA 94304 USA (subsequently referred to as “Facebook“). These plug-ins can be recognised by the Facebook logo or a corresponding tag. The list and appearance of the Facebook social media plug-ins can be seen at: developers.facebook.com/plugins

1.2. When the user clicks on the icon, the Facebook plug-in establishes a direct connection between the user’s browser and the Facebook server. M+M has no influence on the data transmitted in this process and has no knowledge of this data because the transmission doesn’t take place via the M+M website but directly from the user’s computer to Facebook. The fact that the user has visited the M+M website will be initially transmitted, and the IP address of the user can also be recorded. If the user is simultaneously logged in to Facebook, the information is assigned to the user’s Facebook account and is thus connected with the user. The same applies if the user clicks on the icon and makes comments. If the user is a Facebook member and does not want Facebook to collect data on their visit to the M+M website and record it in the user’s Facebook account, or link it to the user’s Facebook membership data, the user must first log out of Facebook.

1.2.3. Information regarding the purpose and scope of the data collection and further processing and use of collected data by Facebook can be found in the Facebook Privacy Policy at www.facebook.com/note.php. Information regarding the user’s rights and privacy settings options can also be found here.

Integration of YouTube videos

We have embedded YouTube videos on our website which are stored at www.YouTube.com and can be played directly from our website.

On your visit to the site, YouTube receives information that you have visited the relevant page on our website. This occurs regardless of whether you are logged in with a YouTube user account or no account exists. If you are logged into Google, your information will be connected directly with your account. If you don’t want this link on your YouTube profile, then you need to log before activating the icon. YouTube stores your data as a user profile and uses it for advertising purposes, market research and / or demand-focused website design. The evaluation of your data is carried out especially for the purpose of providing needs-based advertising and to inform other users on the social media network about your activities on our website (even for users who are not logged in). You have the right to object to the creation of these user profiles, however you must contact YouTube to exercise this right.

For further information on the purpose and scope of data collection and processing by YouTube, please see the Privacy Policy. It also contains further information on your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and complies with the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

Integration of Google Maps

We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables the convenient use of the map function. By visiting the website, Google receives the information that you have visited the corresponding page on our website. In addition, the data mentioned in section IV of this declaration is sent to Google. This occurs regardless of whether you are logged in through an existing Google account or no user account exists. If you are logged in to Google, your data will be connected directly with your account. If you do not want the data to be connected to your Google profile, then you need to log out before activating the icon. Google stores your data as user profiles and uses them for advertising purposes, market research and / or the demand -focused design of its website. The evaluation of your data is carried out especially for the purpose of providing needs-based advertising and to inform other users on the social media network about your activities on our website (even for users who are not logged in). You have the right to object to the creation of these user profiles, however you must contact Google to exercise this right.

For further information on the purpose and scope of data collection and ist processing by the plug-in provider, please refer to the provider’s Privacy Policy. It also contains further information on your rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy . . Google also processes your personal data in the USA and complies with the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

11. Newsletter Data

To send our Newsletter we need an email address and your name. Verification of this email address is required and you have to agree to receive the newsletter. Additional data is not collected or is submitted voluntarily. The data is used exclusively for sending the newsletter.

Data submitted when registering for the newsletter is processed exclusively on the basis of your consent (Art. 6 para 1 a. GDPR). Revocation of your consent is possible at any time. To revoke your consent, notification by email or clicking on the “unsubscribe” link in the newsletter is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

When cancelled, the data required for the subscription will be erased. If this data has been submitted to us for other purposes and at other points, it will remain with us.

If you have any questions about data protection at Meyle+Müller, please contact our data protection officer at:
privacy@meyle-mueller.de

12. Mailchimp

This website uses the services of MailChimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. When you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data is stored on MailChimp’s servers in the USA.

MailChimp has a certification according to the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (so-called web-beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not want any analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

For more details, please refer to the privacy policy of MailChimp at: https://mailchimp.com/legal/terms/.

Conclusion of a data processing agreement

We have concluded a so-called “Data-Processing-Agreement” with MailChimp, in which we oblige MailChimp to protect the data of our customers and not to pass it on to third parties. This agreement can be viewed at the following link: https://mailchimp.com/legal/data-processing-addendum/

13. use of SalesViewer® technology:

On this website, data is collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 para.1 lit.f DSGVO).

For this purpose, a javascript-based code is used to collect company-related data and the corresponding use. The data collected with this technology is encrypted via a non-reversible one-way function (so-called hashing). The data is immediately pseudonymised and not used to personally identify the visitor to this website.

The data stored within the framework of Salesviewer will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to retain data to prevent its deletion.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out in order to prevent the collection of data by SalesViewer® within this website in the future. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you must click this link again.