§ 1 Information on the collection of personal data
(1) In the following, we provide information about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In doing so, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
(2) The controller pursuant to Art. 4 (7) GDPR is M. K. & Söhne GmbH, Industriestr. 3, 25462 Rellingen, contact@mk-soehne.com, contact@mk-soehne.com (see our legal notice).
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context, if the request is assigned to a contract, after the deadlines for the contract term, otherwise after the storage is no longer necessary, or restrict the processing if there are legal storage obligations.
(4) If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail below about the respective processes. In doing so, we will also state the specified criteria for the storage period.
(5) Unless expressly stated otherwise in this data protection notice, you are neither legally nor contractually obliged to provide us with personal data. However, if you wish to conclude a contract with us, you are required to provide personal data. If you do not provide us with personal data in individual cases, you will not be able to conclude a contract with us.
§ 2 Your rights
(1) You have the following rights vis-à-vis the controller with regard to your personal data:
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The data protection supervisory authority responsible for us is the Independent State Center for Data Protection Schleswig-Holstein, mail@datenschutzzentrum.de.
§ 3 Processing of personal data when visiting our website
When using the website for information purposes, i.e. simply viewing it without registering and without providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:
§ 4 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.
(2) Insofar as we base the processing of your personal data on the balancing of interests within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to object to advertising is to contact us using the contact details given above.
§ 5 Processing of data from your end devices ("Cookie Policy")
(1) In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical point of view (2) before going into more detail about your individual choices by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).
(2) Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis are explained below:
(3) Mandatory functions that are technically or legally necessary to display the website (e.g. for age verification): The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
(4) Optional cookies if you give your consent: We only set various cookies after you have given your consent, which you can select when you first visit our website via the so-called cookie consent tool. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you when you visit us again or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
The functions we use, which you can select and revoke individually via the Consent Manager, are described below.
§ 6 Web tracking using Google Analytics
(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable us to analyze your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offering and make it more interesting for you as a user.
(2) We primarily record the interactions between you as a user of the website and our website using cookies, device/browser data, IP addresses and website or app activities. In Google Analytics, your IP addresses are also recorded to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user comes (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function ("IP masking"), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
(3) Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.
(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to withdraw your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.
(5) For more information on the scope of services provided by Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/en/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.
§ 7 Web tracking by means of Facebook Pixel
(1) This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
(2) The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
(3) The use of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
(4) Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. You can find further information on the protection of your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.
(5) You can also deactivate the remarketing function "Custom Audiences" in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
§ 8 Data processing in relation to applications
If you apply for employment with us as an employee, trainee, intern or for another contractual relationship, we provide additional information below about the processing of your data in this context.
(1) Decision on the establishment of an employment relationship, training relationship, internship relationship or other contractual relationship: Your personal data will be collected and processed by us for the purpose of deciding on the establishment of a contractual relationship for which you are applying (employment relationship, training relationship, internship relationship or other contractual relationship).
The legal basis for the processing is the GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). If the contractual relationship for which you are applying is not an employment relationship within the meaning of Section 26 (8) BDSG (i.e. in particular not an employment relationship or employment for vocational training), the legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR. Personal data may also be processed on the basis of other statutory provisions, in particular labor law, vocational training law and social law in their respective versions. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which the controller is subject, it is based on Art. 6 para. 1 lit. c GDPR. If you give us your consent to the processing of your personal data, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Personal data that is processed for the purpose of deciding on the establishment of a contractual relationship is generally deleted when the processing is no longer necessary for the decision on the establishment of a contractual relationship. In this respect, the duration of storage depends on the duration of the decision-making process. If you have sent us an unsolicited application - i.e. an application that does not relate to a specific position advertised by us - we will also process your personal data in order to decide on the establishment of a contractual relationship. The above statements apply accordingly, whereby we will generally delete your data if we do not believe that your personal data could be used to decide on the establishment of a contractual relationship. If the processing of your personal data is based on consent, the storage period resulting from the declaration of consent and the possible exercise of your right of revocation are generally the decisive criteria for the storage period, whereby the revocation does not affect the processing based on other legal bases.
(2) Any processing for the assertion, exercise or defense of legal claims in connection with applications: Under certain circumstances, it is possible that your personal data may be used for the assertion, exercise or defense of legal claims if you or the controller to whom you have submitted the application has or is asserting legal claims.
The legal basis in these cases is Art. 6 para. 1 lit. f GDPR. According to Art. 6 para. 1 lit. f GDPR, the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by your interests and rights which require the exclusion of processing for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interests of the controller or third party then lie in the assertion, exercise or defense of legal claims.
In individual cases, this may result in a storage period that extends beyond the decision on the establishment of a contractual relationship. This would be the case, for example, if there are indications that you will assert claims against the controller. The data will then be stored for as long as the processing of the data is necessary for the establishment, exercise or defense of legal claims. The criteria for the storage period may include the periods under the General Equal Treatment Act and the Labor Court Act (Section 15 (4) sentence 1 AGG; Section 61b ArbGG) as well as limitation periods or statutory retention periods. Data may also be stored if this is provided for or prescribed by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject.
(3) Legal or contractual obligations to provide personal data in relation to applications: You are not obliged to provide us with personal data in order to carry out the application process. However, we cannot carry out the application process without the information required to assess your suitability, to check the requirements for lawful employment and your availability and to contact you.
§ 9 Use of our webshop
(1) If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the purpose of processing your order. Mandatory information required for the processing of contracts is marked separately, further information is voluntary. For payment purposes, you can provide your payment details to our payment service providers or we can pass on your payment details to our house bank, whereby these third parties are each independently responsible for payment processing. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
If you wish, you can create a customer account through which we can save your data for future purchases. When you create an account at "My account”, the data you provide will be stored on a revocable basis. You can delete all other data, including your user account, at any time in the customer area.
We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you emails with technical information. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR; our legitimate interest is to provide you with the above information. Insofar as you have given your consent to this data processing, the legal basis is also Art. 6 para. 1 sentence 1 lit. a GDPR.
(2) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years.
(3) To prevent unauthorized access to your personal data by third parties, the order process is encrypted using TLS technology.
§ 10 Data integration in the event of (partial) business takeover
If we take over all or part of the business operations of other companies, we may also integrate all or part of your existing customer data into our data processing. The source of the data is the company that we have taken over in whole or in part. Your personal data will be transferred to us for the purpose of continuing your business relationship, insofar as this is necessary. In this case, you will be informed in advance about this processing and your right to object. Unless you object, we will continue to process your data. In particular, the following categories of personal data are affected:
This data is made available to us within the scope of the legitimate interests of the selling company in accordance with Art. 6 para. 1 lit. f GDPR. We process them on the basis of our legitimate interest in taking over and continuing the business relationship with you.
§ 11 Our presence on social networks
(1) We have various presences on social media platforms. We operate these sites with the following providers:
The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. You can find more information on data protection at https://privacycenter.instagram.com/
The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. You can find more information on data protection at https://www.facebook.com/privacy/policy/
(2) We use the technical platform and services of the providers for these information services. We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is stored on your device in the form of cookies. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us.
(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own information, all of the aforementioned providers comply with an appropriate level of data protection that corresponds to the former EU-US Privacy Shield and we have concluded standard data protection clauses with the companies. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device and restart your browser.
(4) As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.
(5) To exercise your rights as a data subject, you can contact us or the provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to the contact details provided by us above.
(6) What information the social media platform receives and how it is used is described by the providers in their privacy policies (see links above, para. 1). There you will also find information about contact options and the settings options for advertisements.
§ 13 No automated decision-making (including profiling)
We do not intend to use personal data collected from you for automated decision-making (including profiling).