Data Protection Declaration
of M-Back GmbH
M-Back GmbH take the protection of our personal data very seriously and adhere very strictly to all the valid data protection laws and regulations, particularly the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). The following contains information on the collection and processing of personal data when using our website. You can revoke this declaration on our website at any time. This Data Protection Declaration applies to the M-Back GmbH websites and their subdomains.
- THE DATA CONTROLLER RESPONSIBLE FOR THE PROCESSING
1.1 The service provider and data controller, as defined under data protection law, is M-Back GmbH, Hasslocher Str. 19, 99189 Gebesee, E-mail: firstname.lastname@example.org.
You can reach our Data Protection Officer at:
Hasslocher Str. 19
Tel.: +49 (0) 36201 / 577 – 0
- YOUR RIGHTS
2.1 You have the right to request information from us at any time about the data stored at our company concerning you, as well as the origin, recipients or categories of recipients to whom this data is passed on and the purpose of the storage.
2.2 You have the right to request the immediate rectification of incorrect personal data concerning you or the restriction of the processing. In addition, taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
2.3 You have the right to request that we erase your personal data without delay. Among other things, we are obligated to erase it if it is no longer necessary for the purposes for which they were collected or otherwise processed or if you have revoked your consent.
2.4 You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer such data to another data controller without hindrance, provided the processing is based on your consent or was done by automated means.
2.5 If you have given your consent to the use of your data, you have the right to revoke it at any time.
2.6 If we process your personal data on the basis of legitimate interests, you have the right to file an objection to this processing.
2.7 Please direct all requests for information, enquiries or objections to the processing of data by e-mail to email@example.com or to the address specified in Section 1.
2.8 In the case of any breaches of data protection law, you have a right to lodge a complaint with a competent supervisory authority. For M-Back GmbH, the competent supervisory authority in matters of data protection is the Thuringia State Office for Data Protection Supervision:
Landesamt für Datenschutzaufsicht
Tel.: +49 (0) 361 57 311 29 00
Fax: +49 (0) 361 57 311 29 04
- DATA SECURITY
We implement technical and organisational security measures to protect the data we manage against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Your data is transmitted in an encrypted form: the key protocol used is TLS 1.2.
- COLLECTIONOF PERSONAL DATA IN THE CASE OF INFORMATIONAL USE, COOKIES
4.1 In the case of a merely informational use of the website, i.e. if you do not contact us beyond simply using the website or otherwise provide us with information, we collect usage data that your browser automatically transmits in order to enable you to visit the website. This data storage is done for exclusively system-related and statistical purposes (on the basis of Art. 6 para. 1 b) GDPR), as well as, in exceptional cases, for reporting criminal offenses (on the basis of Art. 6 para. 1 e) GDPR).
4.2 The personal data of the data subject will be erased or blocked as soon as the purpose of the storage has ceased to exist. In addition, such storage can be carried out if it is provided for in the European or national legislator in EU regulations, laws or other regulations to which the data controller is subject. The blocking or erasure of the data also takes place when a storage period stipulated in the aforementioned legal standards expires, unless there is a need to further store the data for the purpose of concluding a contract or performance of a contract.
4.3 The data transmitted by your internet browser, as specified in Section 4.1, consists of:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status / HTTP status code
– Volume of data transmitted each time
– Website from which the request comes
– Operating system and its interface
– Language and version of the browser software
4.4 The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session. The storage of the data in log files is done to ensure the functionality of the website. In addition, we use the data optimise the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes is carried out in this context.
Our legitimate interest in the processing of data in accordance with Art. 6 para. 1 f) GDPR is based on the purposes outlined above.
5.2 Cookies that are necessary for carrying out the electronic communication process or for providing certain functions that you desire (for example, the shopping cart function) are stored on the basis of Art. 6 para. f) GDPR. We have a legitimate interest in storing cookies in order to ensure the technically faultless, optimised provision of our services. Insofar as other cookies (such as cookies for analysing your browsing habits) are stored, they are explained in a separate section of this Data Protection Declaration.
5.3 You can configure your browser settings in accordance with your wishes and, for example, refuse to accept cookies. However, we wish to draw your attention to the fact that if you do this, you may not be able to make use of all the functions of this website.
5.4 This stored data is stored separately from any data that may be provided to us. In particular, the data from cookies will not be linked to your other data.
5.5 In principle, a distinction is drawn between the following types of cookie:
- Session cookies: These are stored on our web pages, on your computer or device while browsing and then deleted.
- Persistent cookies: These cookies remain on your computer for a long time.
- Third-party cookies: These cookies are created by affiliate websites and embedded in our website. They are used, for example, to delivery personalised advertisements.
5.6 In general, we use internet technologies (eg cookies, Java Script) for the sole purpose of making it easier for you to use our website and of optimising our website and your communication with our content:
- We use what are called “session cookies” to keep the current session active.
5.8 We currently use the following cookies:
- M-Back: euCOOKIE
5.9 Management of Cookies / Dissenting to cookies
- View cookies
- Allow cookies
- Deactivate all or certain cookies
- Deactivate all cookies when closing the browser
- Block cookies
- Notify if a cookie is to be placed and
- Dissent to tracking web analysis
5.10 In the case of the following browsers, you can find the instructions for deactivating cookies on the software developers’ websites. If you block our cookies in your browser, you will not be able to use some parts of our website.
- Internet Explorer
- Chrome (Windows) / Chrome (Mac) / Chrome for iOS / Chrome for Android
- COLLECTION AND PROCESSING OF PERSONAL DATA WHEN YOU CONTACT US AND FOR ADVERTISING PURPOSES
6.1 The collection and processing of personal data (including, for example, your name, telephone number and e-mail address) is carried out in the event that you expressly disclose this data to us in order to contact us through our contact form. This personal data is used exclusively for the purpose of processing your enquiries and on the basis of Art. 6 para. 1 a) and f) GDPR.
6.2 The data will only be used for advertising purposes subject to your prior consent and on the basis of Art. 6 para. 1 a) GDPR. The data you provide to us for the purpose of receiving the newsletter will be stored by us until your removal from the newsletter mailing list and will be deleted after you unsubscribe from the newsletter.
- COLLECTION AND PROCESSING OF PERSONAL DATA FOR ORDERS, OPENING A CUSTOMER ACCOUNT, USE FOR DIRECT MARKETING
Personal data is stored on the basis of Art. 6 para. 1 b) GDPR, if you disclose it to us yourself for the performance of a contract or to open a customer account. Without your explicit consent, this data will only be used for the purpose of contract execution and for processing your requests. After completion of the contract and full payment of the purchase price, your data will, taking into consideration statutory fiscal and commercial storage periods, be erased after the expiry of these periods.
- COLLECTION AND PROCESSING PERSONAL DATA FOR JOB APPLICATIONS
8.1 We also collect personal information when you submit a job application to us. The processing of this personal information is required to complete the application process, including setting up an electronic application file, managing your application and organising job interviews – in short, the processing is a prerequisite for concluding an employment contract with you. Processing is done on the basis of Art. 6 para. 1 b) GDPR.
8.2 We also use your personal data on the basis of Art. 6 para. 1 f) GDPR to enable us to consider you for possible future vacancies and, after an unsuccessful application, we will store your data for this purpose for a period of 1 year. You can file an objection to this use of your personal data at any time.
- RECIPIENTS / CATEGORIES OF RECIPIENTS OF PERSONAL DATA, THIRD COUNTRY DATA TRANSFERS, THE PURSUIT OF OUR LEGITIMATE INTERESTS
9.1 Your data will not be disclosed to third parties, with the exception of service providers whom we have commissioned with the data processing within the scope of this Data Protection Declaration, e.g. in the context of order processing and the technical infrastructure of the websites.
The said service providers are:
9.1.1 InnNet GmbH, Internet Services, Schmerbeckstrasse 4, 83512 Wasserburg, Germany, for web hosting
Our website uses the etracker analysis service. The provider is etracker GmbH, Erste Brunnenstrasse 1, 20459 Hamburg, Germany. From the data, usage profiles can be created under a pseudonym. Cookies can also be used for this purpose. Cookies are small text files that are stored locally in the cache of your browser. The cookies make it possible to recognise your browser on subsequent visits. Without the specific consent of the data subject, the data collected using the etracker technologies will not be used to personally identify visitors to our website and will not be combined with personal data of the bearer of the pseudonym.
You can at any time dissent to this data collection and storage with effect for the future.
In order to prevent the collection and storage of your visitor data in the future, you can use the following link to get an opt-out cookie from etracker: this ensures that no visitor data from your browser will be collected and stored by etracker in the future:
This results in the setting of an opt-out cookie called “cntcookie” by etracker. Please do not delete this cookie for as long as you wish to keep your dissent active.