Data Protection

Privacy policy

We are delighted that you are visiting our website www.muerdter.de and are interested in our company. We attach a great deal of importance to protecting your personal data. Personal data is information about an identified or identifiable natural person’s personal or factual circumstances. This includes details such as the person’s real name, address, phone number and date of birth, as well as all other data which may refer to an identifiable person.

Because personal data is afforded special legal protection, we only collect it insofar as doing so is necessary to making our website available and providing our service. Below, we have provided an outline of what personal information we collect about you during your visit to our website and how we use it.

Our data protection practices comply with legal regulations, particularly those set down in the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the EU’s General Data Protection Regulation (GDPR). We will only collect, process and store your personal data insofar as doing so is necessary to making this website and our contents and services functionally available, as well as for the purpose of processing enquiries and, if necessary, handling orders / contracts, but only if there is a legitimate interest for doing so under the terms of Art. 6, Para. 1, Clause 1, lit. f of the GDPR or other statutory permission. Your data will also be used for further purposes precisely defined in your consent, e.g. to send advertising information by newsletter, only if you have separately given your consent beforehand.

Controller under the terms of Art. 4, §7 of the GDPR

The controller under the terms of the GDPR, other national data protection legislation of the member states and other provisions under data protection legislation is:

Mürdter Metall- und Kunststoffverarbeitung GmbH
Bergstraße 28
73557 Mutlangen

Email: muerdter@muerdter.de
Tel.: +49 (0)7171 704-0
Fax: +49 (0)7171 704-158

Name and address of the data protection officer

Dominik Lorenz
Bergstraße 28, 73557 Mutlangen

Email: dsb@muerdter.de

Providing the website and creating log files

Each time our website is accessed, our system automatically records data and information from the accessing computer’s computer system. The following data is collected in this regard:

EXTENT OF DATA PROCESSING

(1) Information about the browser type and the version used
(2) The accessing device’s operating system
(3) The accessing device’s IP address
(4) The date and time of access
(5) Websites and resources (images, files, other page contents) which were accessed on our website
(6) Websites from which the user’s system accessed our website (referrer tracking)

This data is stored in our system’s log files. This data is not stored together with personal data belonging to a specific user, so individual site visitors are not identified.

• Legal basis for personal data processing
  Art. 6, Para.1, lit. f of the GDPR (legitimate interest). Our legitimate interest is to guarantee achievement of the purpose outlined below.

• Purpose of data processing
  Logging is carried out to maintain our website’s compatibility for all visitors where possible and to combat misuse and eliminate faults. To this end, it is necessary to log the accessing computer’s technical data, so that we can respond to display errors, attacks on our IT systems and/or functionality errors on our website as early as possible. Additionally, we also use the data to optimise the website and to ensure the general security of our IT systems.

• Duration of storage
  The above technical data is deleted as soon as it is no longer needed to guarantee the website’s compatibility for all visitors, but at the latest within three months of our website being accessed.

• Opportunity to object and remove
  The opportunities to object and remove are based on the general regulations outlined below in this privacy policy on the right of objection and claim for deletion under data protection law.

Special features of the website

Our site offers you a variety of features which, when used by us, serve to collect, process and store personal data. We have provided an explanation of what happens to this data below:

Contact form(s):

• Extent of personal data processing
  The data you entered in our contact forms.

• Legal basis for data processing
  Art. 6, Para. 1, lit. a of the GDPR (implicit consent)

• Purpose of data processing
  We will use the data captured by means of our contact form(s) only to process the specific contact request received through the contact form(s).

• Duration of storage
  The data captured is deleted immediately after your request has been processed, provided that there are no statutory retention periods.

• Opportunity to object and remove
  The opportunities to object and remove are based on the general regulations outlined below in this privacy policy on the right of objection and claim for deletion under data protection law.

• Necessity of providing personal information
  The use of contact forms is voluntary and is neither contractually nor legally prescribed. You are not obligated to contact us using the contact form; you can also use the other contact options indicated on our site. If you would like to use our contact form, you must complete the fields identified as required information. If you do not complete the required information in the contact form, either you cannot submit the inquiry or we unfortunately cannot process your request.

Login area:

• Extent of personal data processing
  The registration and login data you entered on our site.

• Legal basis for data processing
  Art. 6, Para. 1, lit. a of the GDPR (implicit consent)

• Purpose of data processing
  You can use a separate login area on our website. If you have forgotten your password or username for this area, you can request to have this data sent to you again after firstly entering your contact details (email address). Any usage data incoming within the context of using the login area is collected, saved and processed by us for the sole purpose of tackling misuse, troubleshooting and maintaining functionality. This data is not used for any other purposes or transferred to third parties.

• Duration of storage
  The collected data is stored for as long as you maintain a user account with us.
  Data collected within the context of the ‘Forgotten your username or password?’ function is only used to re-send forgotten login data.

• Opportunity to object and remove
  The opportunities to object and remove are based on the general regulations outlined below in this privacy policy on the right of objection and claim for deletion under data protection law.

Integration of external web services and data processing outside the EU

We use active JavaScript contents from external providers (“web services”) on our website. When you access our website, these external providers may receive personal information about your visit to our website. Data may be processed outside the EU in this regard. You can prevent this from happening by installing a JavaScript blocker, such as the ‘NoScript’ browser plugin (www.noscript.net), or by disabling JavaScript in your browser. This can lead to functional restrictions on websites you visit.

We use the following external web services:

• Google Fonts
  A web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Fonts) runs on our website. We use this data to ensure the full functionality of our website. In connection with this, your browser may transmit personal data to Google Fonts. The legal basis for data processing is Art. 6, Para. 1 lit. f of the GDPR. The legitimate interest is that of correct functionality of the Internet site. The data is deleted once the purpose of its acquisition has been fulfilled. More information on the handling of transmitted data can be found in the data privacy statement of Google Fonts: https://policies.google.com/privacy You can prevent the capture and the processing of your data by Google Fonts by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

• Google APIs
  A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter referred to as “Google APIs”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google APIs in this regard. The legal basis for data processing is Art. 6, Para. 1, lit. f of the GDPR. The legitimate interest is to ensure error-free operation of the website. Google APIs has certified itself in the context of the EU/US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list). The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the Google APIs privacy policy: https://www.google.com/intl/de/policies/privacy/. You can prevent Google APIs from collecting and processing your data by deactivating the execution of script codes in your browser or by installing a script blocker in your browser (which you will find at www.noscript.net or www.ghostery.com, for example).

• gstatic
  A web service provided by Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA (hereinafter referred to as “gstatic”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to gstatic in this regard. The legal basis for data processing is Art. 6, Para. 1, lit. f of the GDPR. The legitimate interest is to ensure error-free operation of the website. gstatic has certified itself in the context of the EU/US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list). The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in gstatic’s privacy policy: https://www.google.com/intl/de/policies/privacy/. You can prevent gstatic from collecting and processing your data by deactivating the execution of script codes in your browser or by installing a script blocker in your browser (which you will find at www.noscript.net or www.ghostery.com, for example).

• website-check.de
  A web service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany (hereinafter referred to as “website-check.de”) is downloaded on our site. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to website-check.de in this regard. The legal basis for data processing is Art. 6, Para. 1, lit. f of the GDPR (legitimate interest). The legitimate interest is to ensure error-free operation of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the website-check.de privacy policy: https://www.website-check.de/datenschutzerklaerung/. You can prevent website-check.de from collecting and processing your data by deactivating the execution of script codes in your browser or by installing a script blocker in your browser (which you will find at www.noscript.net or www.ghostery.com).

Information on the use of cookies

• Extent of personal data processing
  On various pages, we integrate and use cookies in order to enable certain functions of our website and to integrate external web services. These so-called "cookies" are small text files which your browser can store on your access device. These text files contain a characteristic character chain which uniquely identifies the browser when you return to our website. The process of saving a cookie file is also described as "setting a cookie."

• Legal basis for personal data processing
  Art. 6 Para. 1 lit. f GDPR (legitimate interest) and/or Art. 6 Para. 1 lit. a and/or Art. 9 Para. 1 lit. a GDPR (consent). The legal basis that applies results from the cookie table shown later in this section. In general, in the case of cookies that are collected due to a legitimate interest, our legitimate interest consists of ensuring the functionality of our website and the services integrated into it (technically necessary cookies). In addition, it is also possible that the cookies increase user friendliness and enable a more customized interaction. We have made a trade-off between your interests and our interests in this case. Using cookie technology, we can only identify, analyze and track individual website visitors if the website visitor has consented to the use of cookies according to Art. 6, Para. 1, lit. a GDPR.

• Purpose of data processing
  The cookies are set by our website and/or external web services in order to ensure the full functionality of our website and to improve user friendliness or for tracking for the purpose of which consent is given. Cookie technology also enables us to identify individual visitors based on pseudonyms, e.g. individual or random IDs, so that we can offer more individualized services. Details are listed in the following table.

• Duration of storage
  The cookies listed in the following are saved in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are listed in the following table:

• Opportunity to object, revocation of consent and deletion
  You can then decide on whether to accept cookies on a case-by-case basis or categorically accept cookies. Cookies can be used for various purposes, e.g. to identify that your access device is already connected to our website (permanent cookies) or to save the last viewed offerings (session cookies). If you have explicitly granted us permission to process your personal information, you can revoke this consent at any time. Please note that the legality of any processing carried out on the basis of consent before revocation is not affected by this.

Data security and data protection, communication by email

When it is collected, saved and processed, your personal data is protected by means of technical and organisational measures to ensure that it is inaccessible to third parties. Since we cannot guarantee complete data security on the transmission path to our IT systems during unencrypted communication by email, we advise sending highly confidential information using encrypted communication or by post.

Automatic email archiving

• Extent of personal data processing
  We would like to expressly point out that our email system has an automated archiving process. It digitally archives all incoming and outgoing emails in an audit-proof manner.

• Legal basis for personal data processing
  Art. 6, Para.1, lit. f of the GDPR (legitimate interest). Our legitimate interest is to comply with specifications set down in fiscal law and commercial law (e.g. Sections 146 and 147 of the German Tax Code).

• Purpose of data processing
  The purpose of archiving is to comply with specifications set down in fiscal law and commercial law (e.g. Sections 146 and 147 of the German Tax Code).

• Duration of storage
  Our email communication is saved until the retention requirements under fiscal and commercial law have expired. The storage period may be up to ten years.

• Opportunity to object and remove
  Emails sent to bewerbung@muerdter.de are excluded from archiving. If you have any questions about our email archiving system, please contact our data protection officer. We would also like to point out that we only consider application documents in PDF format. Zipped (WinZip, WinRAR, 7Zip, etc.) files are filtered out by our security systems and are not delivered. We do not consider applications made in the Word file format or other file formats and will delete the same without reading them. Please note that it may be possible for third parties to open application documents sent in unencrypted format by email before they reach our IT systems. We assume that we may also answer unencrypted application emails in unencrypted format. If you would not like us to do so, please inform us to this effect in your application email.

Revocation of consent – data information and change requests – deleting and blocking data

You have a right to obtain free information concerning the data saved about you at appropriate intervals, and a right to correct, block or delete such data at any time. We then delete your data upon your first request, unless statutory regulations to the contrary exist. You can therefore revoke the permission you granted us to use your personal data at any time. You are more than welcome to send any information, deletion and correction requests concerning your data, as well as any suggestions, to the following address at any time:

Mürdter Metall- und Kunststoffverarbeitung GmbH
Bergstraße 28
73557 Mutlangen

Email: muerdter@muerdter.de
Tel.: +49 (0)7171 704-0
Fax: +49 (0)7171 704-158

Right to data portability

You are entitled to have us provide you with the personal data concerning you which you sent to us in a structured, common and machine-readable format. You can also request that we send this data to a third party without delay, on your first instruction, provided that processing is based on consent according to Art. 6, Para. 1, lit. a of the GDPR or Art. 9, Para. 2, lit. a of the GDPR or on a contract according to Art. 6, Para. 1, lit. b of the GDPR, and our processing forms part of an automated data processing operation.

In exercising this right to data portability, you further have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected by the exercising of this right. The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to lodge a complaint with the supervisory authority according to Art. 77, Para. 1 of the GDPR

If you suspect that your data is being processed unlawfully on our site, you can naturally obtain judicial clarification of the issue at any time. Regardless of this, you have the option of contacting a supervisory authority. You have a right to lodge a complaint in the EU member state of your place of residence, your workplace and/or the place of the suspected violation, i.e. you can choose the supervisory authority you wish to contact from the aforementioned locations. The supervisory authority with whom the complaint was lodged then informs you of the status and results of your petition, including the possibility of a judicial remedy according to Art. 78 of the GDPR.

Created by:
© IT-Recht-Kanzlei DURY – www.dury.de
© Website-Check GmbH – www.website-check.de