Data Protection statement - Mennes GmbH

data protection statement

1. General information on the gathering of personal data

1.1 We would like to explain, in the data privacy statement below, how we handle personal data transmitted to us. Personal data is any data that can be connected with you as a person, such as your name, address, e-mail addresses or usage patterns.
Personal data is only gathered on this website within the context of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The specialist terms used in the text are explained in more detail in Art. 4 of the GDPR.

1.2 Controller pursuant to Art. 4(7) GDPR: Mennes GmbH
Spezialglas- & Kunststofftechnik
D-59379 Selm
E-mail: info@mennes.de

1.3 You can reach our corporate Data Protection Officer at:
Mennes GmbH
Spezialglas- & Kunststofftechnik
D-59379 Selm
E-mail: datenschutzbeauftragter@mennes.de

1.4 According to the GDPR, data processing is in particular permitted in three cases:

  • under Art. 6(1)(a) and 7 GDPR, if you have consented to your data being processed by us. We shall always brief you in detail in this Data Privacy Statement, such as concerning why your data is processed by us and
  • under what circumstances, in advance of and on the occasion of obtaining your consent in accordance with Art. 4(11) GDPR;
  • under Art. 6(1)(b) GDPR, if we need to process your persona data in order to initiate, conclude or execute a contractual relationship;
  • under Art. 6(1)(f) GDPR, if, upon weighing up the interests of the respective parties, the processing is necessary in order to preserve our legitimate interests. That in particular includes our interest in analysing, optimising and securing the services on our website – which especially includes analysing user patterns, creating profiles for promotional purposes and storing access data, as well as commissioning third party providers.

2. Rights of data subjects

2.1 You have the following rights in relation to us in regard to the personal data concerning you:

  • the right to information about your personal data processed by us (Art. 15 GDPR);
  • the right to correction or completion of your personal data processed by us (Art. 16 GDPR);
  • the right to deletion of your personal data processed by us (Art. 17 GDPR), as long as the processing is not, exceptionally, necessary under Art. 17(3) GDPR;
  • the right to restriction of processing (Art. 18 GDPR)
  • the right to be notified (Art. 19 EU GDPR)
  • the right to data portability (Art. 20 EU GDPR)
  • the right to revocation of any consent once granted to us (Art. 7(3) GDPR). The legitimacy of the processing that has been carried out based on the consent prior to revocation is not affected by the consent being revoked.

2.2 You are also entitled to file a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data by us is illegitimate. This is the State Data Protection Officer for your state. You can find the contact person responsible for your case at the following URL: https://www.ldi.nrw.de/mainmenu_Ueberuns/index.php.

2.3 Objecting to the processing of your data
To the extent that we base the processing of your personal data on the weighing up of interests, you may file an objection to the processing. This is the case if the processing is in particular not necessary in order to fulfil a contract with you, which is always explained by us in the corresponding description of the functions. When exercising such an objection, we ask you to explain the reasons why we are not supposed to process your personal data as carried out by us. In the event of your filing a substantiated objection, we will review the circumstances and will either cease processing or adapt it or point out to you our compelling reasons, worthy of protection, based on which we will continue to process your data. You can, of course, object to the processing of your personal data for the purposes of advertising and data analysis at any time.
You may inform us about your objection to advertising using the following contact details: [Mennes GmbH, Spezialglas- &Kunststofftechnik, D - 59378 Selm, E-mail: info@mennes.de].

3. Visiting our website

When the website is merely used to obtain information, we only gather the personal data that your browser transmits to our servers. Once you request a file from our website, access data is routinely gathered and stored.

Such data set consists of:

  • your IP address
  • the type, version and language of your browser
  • the time and date of your visit
  • the exact point in time of access
  • the access status/http status code (i.e. whether the file has been transmitted or possibly not found, etc.)
  • the operating system installed, the language of the operating system and the resolution selected.

This data is necessary for us in order to display our website to you, as well as to ensure its stability and security. It is, moreover, evaluated for internal statistical purposes, as well as for the technical administration of the website.
The legal basis for it is Art. 6(1)(1)(f) GDPR. Our legitimate interest arises from the purposes for gathering data specified.
Said access data is deleted no later than 30 days after the procedure, unless we have been able to detect abuse. In that case, we will continue to store the data for the purposes of legal prosecution. The legal basis for it is Art. 6(1)(1)(f) GDPR.

4. Orders placed with us

4.1 If you would like to place an order with us, you will need, during the course of the ordering process, to specify personal data such as
Name
Address
E-mail address
Telephone number.
What data is gathered for this purpose can be seen from the respective ordering process, in regard to which mandatory details are indicated as such. Any further details are voluntary.

4.2 Giving your personal details serves the purpose and is necessary to the extent that they are needed in order to conclude the contract and execute your order. The legal basis for it is Art. 6(1)(1)(b) GDPR.

4.3 Due to commercial and tax law requirements, we are obliged to keep your address, payment and order data for a period of ten years. Your data is therefore not deleted entirely, even if it is no longer necessary to save it in regard to the agreement concluded. The processing is, however, restricted to any activities that may be necessary in order to comply with the statutory requirements. The legal basis for it is Art. 6(1)(1)(c) GDPR.

4.4 We shall exclusively use the data that you have transmitted to us in the course of placing your order in order to execute your order. In order to execute the order, we deploy the external service providers specified below:
For delivering the goods, it is necessary to pass on your address data to our freight forwarders. The latter are obliged to treat your data confidentially and only store and use it for the purpose of delivery, as well as delete it again once delivery has been successfully completed. The legal basis for the passing on of the data is Art. 6(b) GDPR.
For processing payment, your payment data is passed on to the bank commissioned or the respective payment service provider chosen. The legal basis for passing on said data is, in this respect, Art. 6(1)(b) GDPR.
Should you wish to pay on account, we will have an assessment of the credit risk carried out by the credit reference agency [CRIF Bürgel Dortmund GmbH & Co. KG, Poststraße 8, 44137 Dortmund], based on mathematical/statistical procedures (scoring). For that purpose, the personal data necessary for checking creditworthiness [name, address, telephone number] is transferred to the credit reference agency, in regard to which your address data is also taken into account. Thus, the data is gathered, stored and passed on for the purpose of checking creditworthiness in order to avoid default on payment and based on Art. 6(1)(1)(b) GDPR and Art. 6(1)(1)(f) GDPR. Based on this information, a statistical likelihood of default on credit given, and thus your ability to pay, is calculated. If the credit assessment comes out positive, it is possible to order on account. Should the credit assessment turn out to be negative, we cannot offer you the option of paying on account. You may object to said data being transmitted to the credit reference agency at any time, however payment on account will then no longer be possible. The scope of the scoring is solely limited to whether it is possible to order on account. We only use the scoring to protect ourselves from any default on payment.

5. E-mail advertising in the case of existing customer relationships

5.1 If you buy goods from use or make use of our services and have forwarded us your e-mail address in this connection, we reserve the right to send you e-mails in future with offers for similar goods or services to those that you already purchased (so-called “direct advertising”). Pursuant to Sec. 7(3) German Act on Unfair Competition (UWG), no special consent is required. The legal basis is our legitimate interest in personalised direct advertising pursuant to Art. 6(1)(1)(f) GDPR.

5.2 You may object to this processing at any time. To do so, write an e-mail to (info@mennes.de) or contact us using the controller’s above-mentioned contact details.

6. When making contact with us by e-mail or via the contact form and call-back service

6.1 In the course of your making contact with us by e-mail, the following personal data will be gathered and stored by us: e-mail address and text of the e-mail, as well as further details given voluntarily. We only process the data given by you to handle your contact enquiry. The legal basis is Art. 6(1)(1)(b) GDPR or our legitimate interest in answering your concern pursuant to Art. 6(1)(f) GDPR.

6.2 Should storage no longer be required, we shall delete all the personal data gathered in this context. Should a statutory archival obligationexist, the processing will be limited to said
purpose. The legal basis for it is Art. 6(1)(1)(c) GDPR.

7. Cookies

In an effort to ensure an enjoyable experience visiting our website and to enable the use of certain features, we use cookies on various pages. These are small text files, which are stored in your web browser on your terminal (PC, laptop, tablet, smartphone, etc.). Most of the cookies used by us are removed from your hard drive again once the browser session has been terminated (i.e. they are session-based cookies). Other cookies will remain on your computer, and enable us to recognise your computer during your next visit (i.e. they are permanent cookies). In addition, the cookies make it possible to design the use of our website in a way that is pleasanter and more convenient for you, or for analytical purposes.
You can prevent the cookies from being installed by setting your web browser accordingly. We would like to point out that you will, in such a case, not necessarily be able to use all the functions of this website in their entirety.
Should the cookies be deployed in order to guarantee our legitimate interests in pleasant and convenient functionality, as well as the analysis and improvement of our website, the legal basis is Art. 6(1)(1)(f) GDPR.

7.1 This website uses the following types of cookies: We mostly use cookies that are automatically deleted from your hard drive once you close down your browser or when you log out (transient cookies, in particular session cookies). Other cookies will remain on your terminal, and enable us to recognise your terminal during your next visit (i.e. they are permanent cookies). These cookies are automatically deleted from your system after a pre-set period of time, which differs according to the particular cookie.

7.2 You can change the storage of cookies in your browser settings at any time, e.g. refuse to accept or delete cookies in their entirety, third party cookies (cookies that are placed by a third party, i.e. not by the actual website on which one is browsing) or individual cookies. We would, however, like to point out that, in such a case, it may no longer be possible to use all the functions of our website. In order to secure your private sphere, we recommend you to delete the cookies on your terminal and the browsing history at regular intervals.

8. Duration of storage of personal data

Essentially, your data is only stored for as long as is required for the purpose of the respective data processing. Any further storage especially comes into consideration if it is still required by us for legal prosecution or based on any other legitimate interests or if we are legally obliged to continue to keep your data safe (due to minimum archival periods under commercial and fiscal law).

8.1 In order to process your data and operate this website we sometimes make use of external service providers for hosting, maintenance, installing updates and in order to further extend our website. The latter have been carefully selected and commissioned by us, are bound to our instructions and are monitored regularly. The legal basis for it is Art. 28 GDPR.

8.2 Beyond the cases specified above, we only pass on your personal data to third parties in the cases detailed below:

  • if you have given us your explicit consent pursuant to Article 6(1)(1)(a) GDPR; or
  • if, pursuant to Art. 6(1)(1)(c) GDPR, a statutory obligation to pass it on exists, e.g. in the event of criminal prosecution; or
  • pursuant to Art. 6(1)(1)(f ) GDPR, it is necessary to pass it on in order to assert or defend legal claims or exercise rights, and it is not to be assumed that an overwhelming interest on the part of the data subject, worthy of protection, that is in conflict with the data being passed on, exists.

9. Social Media

9.1 General remarks:
We make reference, by means of links, to the social media profiles we maintain. Other than social media plug-ins, links do not already lead to the social media platform finding out about your visit to our website when you access it. As with every other link, however, they at the latest lead to your data being processed by the social media platform when you click on the link. The social media platform will usually store cookies on your device, or even record information on your usage patterns in regard to your account, in particular if you are personally logged in. The social media platform may use your data to analyse your usage patterns and use the latter to generate (interest-related) advertising. That may lead to you being shown advertising both within and outside the social media platform. Please make up your own mind whether you wish to accept this, and only use a social media platform if you have sufficiently informed yourself about the data processing there and are in agreement with it (that in particular applies if you personally have up to now not used such platforms). We have included links to the data privacy statements of the respective social media platforms.

9.2 Facebook:
Our page uses links to our profile on the social network Facebook of Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. It is just a normal link. When you access our page, Facebook does not thus find out about your visit to our website. If you click on the link, however, you will be re-directed to Facebook and Facebook will, as a result, also find out that you visited our page.
That means that your data will be passed on to the USA. Facebook is, however, registered with Privacy Shield, and obliged to comply with the EU data privacy regulations.
We have no information about any gathering and use of your data by Facebook once you have clicked on the link, and have no control over the latter. You can infer further information on Facebook’s data privacy policy at https://www.facebook.com/privacy/explanation.

9.3 YouTube (Two-Click Solution)
Within the context of our legitimate interest in providing technically impeccable online services and their economically efficient design and optimisation pursuant to Art. 6(1)(f) GDPR, in order to incorporate videos we deploy the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Normally, your IP address is already sent to YouTube and cookies installed on your PC when you access a page containing embedded video. However, we use a two-click solution, by means of which Google only finds out about your IP address and your visit to our website once you have activated the button. If you activate the plug-in while you are simultaneously logged into YouTube, Google may allocate your user activities to your user account.
That means that your data is passed on to the USA. Google is, however, registered with Privacy Shield, and obliged to comply with the EU data privacy regulations. You can find out further information concerning your rights arising from the latter at https://policies.google.com/privacy?hl=deWe have no information about any gathering and use of your data by Google, and have no control over the latter. You can infer further information from Google’s Data Privacy Policy at https://www.google.de/intl/de/policies/privacy.
In addition, in regard to the subject of generally dealing with and deactivating cookies we make reference to our general explanation on those topics in this data privacy statement.

10. Google

10.1 Google Analytics
Within the context of our legitimate interest in providing technically impeccable online services, designing them to be economic and efficient and optimising them pursuant to Art. 6(1)(f) GDPR, we use the tool Google Analytics of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94.043 USA. Google Analytics enables us to analyse the use of web pages. Pseudonymous profiles of users may be created from the data in that context. Various technologies are applied by Google for that purpose, also including cookies being stored on your computer. The latter store information on the use of our website. We make use of such information to improve our services.
 
The data gathered by Google is transmitted by Google to countries outside the EU, in particular the USA. Google has submitted to the Privacy Shield Framework. You can find more detailed information on your rights arising therefrom at https://www.google.de/intl/de/policies/privacy/.

Should this not be sufficient for you, you can, moreover, download and install Google’s plug-in for blocking Google Analytics at the link http://tools.google.com/dlpage/gaoptout?hl=de. This plug-in blocks the recording and passing on of your personal data by Google.
You can likewise prevent your activity from being recorded by Google Analytics by clicking on the following link: [Deactivate Google Analytics], to place an opt-out cookie, which likewise prevents your data from being recorded.
If you would like to obtain information on Google’s data privacy precautions, please click on the following link: https://www.google.de/intl/de/policies/privacy/.

In addition, in regard to the subject of generally dealing with and deactivating cookies, as well as passing on data to third parties, in particular also to the USA, we make reference to our general explanation on those topics in this data privacy statement.

11. Fan page

11.1 General remarks
Besides our website, we maintain a fan page on Facebook. Since we have already explained to you our policy regarding the processing of data on our website and we have in particular accordingly ensured that not already your accessing of our website is transmitted to Facebook, we would like to explain to you our data processing procedures on the occasion of visiting our fan page:
We present ourselves and our services based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, in timely customer communication, as well as for the purpose of advertising and our public relations on the social media fan page(s).
You can usually access our social media fan page(s), irrespective of whether you yourself have set up a user account on the corresponding platform on the Internet or not. In either case, your data is, however, processed by the social media platform.
Every time you access the social media platform, your IP address is recorded and saved. Furthermore, a cookie is usually placed on your page, which saves information on your visit and further data on your visit to the social media platform.
Should you additionally be personally registered at the social media platform, information on your visit is likewise recorded by means of cookies or other technical means, and allocated to your user account.
In this way, the social media platform is usually enabled to analyse your usage patterns. A user profile with your interests is created in the process, that serves the purpose of allowing the social media platform to give you a user experience that is in line with your interests, however especially also showing you interest-related advertising within and outside the boundaries of the social media platform– possibly even across all your terminals. Your data may also be used for market research. In regard to the details, we make reference to the data privacy statements below of the social media platform(s) used by us.
We can usually likewise use the data of the social media platform to enable you to make use of our fan page in line with your interests or to show you advertising in line with your interests.
When you interact with our fan page, and if you are registered with the corresponding social media platform, we will, in line with the terms and conditions of use of the social media page, also be able to recognise your user profile and see your content.
Should you not wish this, in regard to the subject of generally dealing with and deactivating cookies we make reference to our general explanation on those topics above under the heading “Cookies”. We have generally explained there how you can prevent or restrict the storage of cookies on your devices. You can find further information on the corresponding social media platform below.
Following the CJEU judgment of 05/06/2018 mentioned, we are always jointly responsible for our social media fan page(s) together with the respective social media platform. That means that you may also assert your general rights that we have detailed under the heading “Rights of the user” vis-à-vis us. In this context, we make reference to our contact details at the beginning of this data privacy statement. Please note, however, that we have no conclusive knowledge about the exact scope of the processing of your data on the social media platform, and have even less control over it. We thereforeask you to contact the corresponding social media platform directly in  
regard to your rights.
We basically leave your data on the social media platform, and do not import it to our servers. Should this, however, exceptionally, occur, our general information on the duration of storage applies.
Please infer further information on the processing of your data and the period of storage on the social media platform from the respective data privacy statement of the social media platform, which we have cited below.

11.2 Facebook
We present ourselves on the social media platform Facebook. Joint Controller
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland.
Contact
Contact: Data Protection Officer

Should you access our fan page at Facebook, your data is passed on to the USA. Facebook is, however, registered with Privacy Shield, and obliged to comply with the EU data privacy regulations. You can find out further information on your rights arising from the latter at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdfIn an agreement concluded with us, https://www.facebook.com/legal/terms/page_controller_addendumon our joint responsibility for the processing of the data, Facebook recognises its primary responsibility and in particular vouches for the fact that you may assert your rights to information, as described in the general section. You can obtain further information from Facebook's privacy policy at http://de-de.facebook.com/policy.php.
Facebook also provides statistics within the context of “Facebook Insights”, for approaching potential customers with advertising in a targeted manner. The latter are generated and provided to us without our involvement. The data comprises, for example, interactions with our site, such as “Likes”, page activities, video views, the reach of our posts, comments, sharing of content, clicks on offers or further information on our fan page, as well as statistical data on the parties interacting, such as sex, origin by country, town and language. The same applies to any groups administered by us.

You can have a lot of control over your data on Facebook, from various perspectives, if you are logged in.
You can set your “timeline”, i.e. what is visible of you and your Facebook profile, here: https://www.facebook.com/settings/?tab=timeline&privacy_source=timeline_gear_menu. You can, moreover, set your advertisement settings here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.