Data protection
With this data protection statement, we inform you about the extent of processing your personal data (hereinafter called “data”).
1. Responsible for data processing
Responsible for data processing according to the General Data Protection Regulation (GDPR) is:
Patrick Marx
MADA Marx Datentechnik GmbH
Hinterhofen 4
78052 Villingen-Schwenningen
Phone: +49 7721 8848-0
E-Mail: info@mada.de
2. Contact details of our data protection officer
Michael Schill
E-mail: datenschutz@mada.de
3. General information about data processing
We process data within the scope of our business and website operation.
This also includes the disclosure by transmission to third parties and if necessary, in so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). As far as we submit data outside the EU or the EEA, we have marked this accordingly below.
4. Data processing
The individual data affected, processing purposes, legal bases, recipients and, if necessary, transmissions to third countries are shown in the following list:
a) Logfile when visiting the website
We record your website visit. We process:
- Name(s) of our requested website(s),
- date and time of request,
- data volume transferred,
- type of browser together with version,
- the used operating system,
- the referrer URL (the previously visited website),
- your IP address,
- the requesting provider.
Legal basis of data processing is our overriding legitimate interest in the ongoing provision and security of our website according to Article 6 Section 1 f) GDPR.
The logfile will be deleted after seven days, unless it is needed to prove or clarify concrete infringements of rights which have become known within the retention period.
b) Hosting
For the provision of our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (logfile when visiting the website).
The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 para. 1 f) GDPR.
c) Hosting via Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter called „Strato“). When visiting our website, Strato records different logfiles including your IP addresses.
Further information are provided in the data protection statement of Strato: https://www.strato.de/datenschutz/.
The utilization of Strato takes place on the basis of Article 6 Section 1 Littera f GDPR. We have a legitimate interest in providing our website as reliable as possible. If a corresponding consent has been requested, the processing takes place only on the basis of Article 6 Section 1 Littera a GDPR and § 25 Section 1 TTDSG, unless the consent includes the storage of cookies or the access to information of the user’s end device (e.g. device fingerprinting). The consent is revocable at any time.
Order processing
We have concluded a contract about the order processing for using the above mentioned service. This is a contract prescribed by data protection law, ensuring the processing of the personal data of our website visitors only according to our instructions and GDPR-compliance.
SSL- or TLS-encryption
This site is using a SSL- or TLS-encrpytion for security reasons and for the transmission protection of confidential contents, such as purchase orders or inquiries sent to us as website provider. You can recognize an encrypted connection by the change of “http://“ to “https://“ in your browser’s address bar and the lock symbol in the browser line.
If the SSL- or TLS-encryption is activated, the data sent to us cannot be read by a third party.
d) Contacting
Contact form
If you send us inquiries via contact form, your information and contact data indicated there will be saved for processing purposes and potential follow-up questions. We do no transer these data without your consent.
Processing such data takes place on the basis of Article 6 Section 1 Littera b GDPR, provided that your inquiry is related to a contract fulfillment or is necessary for executing pre-contractual measures. In all remaining cases, data processing is based on our legitimate interest in an effective handling of inquiries received (Article 6 Section 1 Littera f GDPR) or on your consent (Article 6 Section 1 Littera a GDPR), provided that it has been given; this consent is revocable at any time.
We will retain the data entered in the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. after completed inquiry processing). Mandatory legal regulations – especially retention periods – remain unaffected.
Inquiry by e-mail, phone or fax
If you contact us by e-mail, phone or fax, we will save and process your inquiry including all the personal data indicated (name, request) for the purpose of processing your inquiry. We do not pass on these data without your consent.
Processing such data takes place on the basis of Article 6 Section 1 Littera b GDPR, provided that your inquiry is related to a contract fulfillment or is necessary for executing pre-contractual measures. In all remaining cases, data processing is based on our legitimate interest in an effective handling of inquiries received (Article 6 Section 1 Littera f GDPR) or on your consent (Article 6 Section 1 Littera a GDPR), provided that it has been given; this consent is revocable at any time.
We will retain the data entered in the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. after completed request processing). Mandatory legal regulations – especially retention periods – remain unaffected.
e) Contacting for job applications
If you contact us to send us your application as en employee, e.g. via e-mail or contact form, the data provided (e.g. name, e-mail address, preferred place of work etc.), your message as well as the provided application documents will only be processed to handle and work on your job inquiry.
The legal basis of data processing is mainly § 26 BDSG (Federal Data Protection Act). Accordingly, the processing of data which is necessary in connection with the decision on the establishment of an employment relationship is permitted.
If the data might be necessary for legal prosecution after having completed the application process, data processing may be carried out to safeguard our legitimate interests according to Article 6 Section 1 f) GDPR, namely to assert and/or defense against claims.
f) Pool of applicants
If you give us your consent for the further storage of your application documents after the application process has been completed, we will save these documents in our pool of applicants for the purpose of contacting you if future vacancies match your profile. The legal basis for processing in the context of our pool of applicants is your prior consent according to Article 6 Section 1 a) GDPR.
g) Use of functional cookies
We use so-called cookies on our website. Cookies are small text files stored on your respective end device (PC, smartphone, tablet etc.) and saved by your browser.
We only use technically necessary session cookies on our website. The use of cookies or comparable technologies takes place on the basis of § 25 Section 2 TTDSG.
h) Use of marketing cookies
We use so-called tracking cookies on our website. Cookies are small text files stored on your respective end device (PC, smartphone, tablet etc.) and saved by your browser, subject to you prior consent.
You can find informations about the specific cookies we use, their providers and purposes in our consent banner. In this banner, you give your necessary consent to the respective services in accordance with § 25 Section 1 TTDSG, can revoke it or adjust your settings subsequently.
Our consent banner
In order to document your choice of certain data processing procedures and fulfill our data protection obligations, we use a consent banner. When visiting our website, your cookie preferences are requested via this banner. We then set a cookie in which data about given or revoked consents are saved. The data processing is effected to comply with our legal obligations according to Article 6 Section 1 c) GDPR.
Google consent
We use the Google service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter called „Google“) on our website. With this function we coordinate your consent with the Google services used. Depending on confirmation or rejection by the user, the conversion tracking by Google will be continued or prevented. The data processing is effected to comply with our legal obligations according to Article 6 Section 1 c) GDPR.
It is possible that data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
Google is certified under the EU-US Data Privacy Framework and falls under the EU’s adequacy decision for the USA.
i) Analysis / marketing
aa) WP Statistics
This website is using the analytical tool WP Statistics to evaluate visitor accesses statistically. The provider is Veronalabs, Tatari 64, 10134, Tallinn, Estland (https://veronalabs.com).
We can analyze the use of our website by using WP Statistics. Among other things, WP Statistics records logfiles (IP address, referrer, used browser, origin of the user, search engine used) and actions taken on the website by the visitor (e.g. clicks and views).
The data recorded with WP Statistics are only stored on our own server.
The use of this analytical tool takes place on the basis of Article 6 Section 1 Littera f GDPR. We have a legitimate right in the anonymized analysis of the user behaviour in order to optimize our web offer and advertising. Provided that a corresponding consent has been requested, the processing is made only on on the basis of Article 6 Section 1 Littera a GDPR and § 25 Section 1 TTDSG, as far as the consent includes the cookie storage or the access to information of the user’s end device (e.g. device fingerprinting) in the sense of TTDSG. The consent is revocable at any time.
IP anonymization
We use WP Statistics with anonymized IP which means that your IP address is shortened so that it can not be assigned to you directly.
j) External contents
We use external content in connection with the following functionalities:
aa) Integration of YouTube videos
This website integrates videos from the website YouTube. The sites’ operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.
We use YouTube in the extended data protection mode. According to YouTube, this mode ensures that YouTube does not save any information about visitors of this website before watching the video. However, the data transfer to partners of YouTube is not mandatory excluded by using the data protection mode. This is how YouTube establishes a connection to the Google marketing network, regardless of whether you are watching a video.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established, informing the servers which sites you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can avoid this by logging out of your YouTube account.
Furthermore, YouTube can save different cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting) after starting a video. In this way, YouTube is able to obtain information about the user of this website. Among other things, this information is used to record video statistics, improve user-friendliness and prevent fraud attempts.
After the start of a YouTube video, further data processing operations can possibly be initiated which are beyond our control.
Using YouTube takes place in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest in the sense of Article 6 Section 1 Littera f GDPR. Provided that a corresponding consent has been requested, the processing is made only on on the basis of Article 6 Section 1 Littera a GDPR and § 25 Section 1 TTDSG, as far as the consent includes the cookie storage or the access to information of the user’s end device (e.g. device fingerprinting) in the sense of TTDSG. The consent is revocable at any time.
Further information about the privacy of YouTube are provided in their data protection statement: https://policies.google.com/privacy?hl=de.
The company is certified according to the „EU-US Data Privacy Framework“ (DPF). This is an agreement between the European Union and the USA, ensuring the compliance of European data protection standards for data processing in the USA. Every company certified according to the DPF makes a commitment to comply with these data protection standards. Further information in this regard can be obtained from the provider: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
bb) Google Fonts (local hosting)
This website uses so-called Google Fonts, provided by Google, for a uniform presentation of fonts. Google Fonts are installed locally. A connection to the servers of Google is not established.
You will find further informationen about Google Fonts here: https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de
5. Period of data retention
We only store personal data for as long as it is necessary for the purposes for which it is processed or until your given consent is revoked. As far as legal retention periods have to be observed, the duration of storage of certain data can be up to 10 years notwithstanding the processing purposes.
Please refer to the information of the cookie banner for the individual storage duration of cookies defined.
6. Your rights as person affected
a) Information
Upon request, you can obtain information at any time and free of charge about all personal data saved.
b) Correction, deletion, limitation of processing (blocking), objection
If you no longer agree to the storage of your personal data or the data has become incorrect, we will arrange, upon instruction, for a deletion or blocking of your data, make the necessary corrections (as far as this is possible in accordance with the applicable law). The same applies for a future limited data processing. You have the right of objection in particular in such cases, where your data are necessary because of executing a task of public interest or the data processing takes place on the basis of our legitimate interest, as well as on the profiling based on this. Your also have the right to object in case of data processing for the purpose of direct advertising.
c) Right to withdraw consents with effect for the future
You can revoke any given consents with effect for the future at any time. Your revocation does not affect the legality of processing up to the time of revocation.
d) Data transferability
In case of data processing on the basis of a contract, pre-contractual negotiations, a consent or by means of automated procedures, you have the right to data transferability. Upon request, we will provide your data in a common, structured and machine-readable format, so that you can transmit the data to another responsible person, if required.
e) Limitation of processing
In case of data which are not serving to identify the person affected, respectively if they had been anonimized for analytical purposes, are not covered by the above mentioned rights. Information, deletion, blocking, correction or transfer to another company are potentially possible in relation to these data if you provide us additional information which allow an identification.
f) Execution of your rights as affected person and right of appeal
Please contact info@mada.de in case of questions about your personal data processing, information, correction, blocking, objection or deletion of data or the request for data transfer to another company.
Furthermore, you have the option to complain about your rights as person affected to a regulatory authority.