Privacy Policy


1. Data protection at a glance


General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed data protection information can be found in our Privacy Policy provided below this text.



Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You will find its contact details in the “Data controller information” section of this Privacy Policy.

 

How do we collect your data?
One way we collect your data is through the information you provide to us. For example, this might be data that you provide in a contact form.

 

Other data is collected by our IT systems either automatically or with your consent when you visit the website. This is mainly technical data (e.g., internet browser, operating system, and time of website visit). This data is collected automatically as soon as you visit this website.

 

What do we use your data for?
Some of the data is collected to ensure that the website runs smoothly. Other data may be used to analyze your user behavior.

 

What are your rights concerning your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge and at any time. You also have the right to obtain the rectification or erasure of this data. If you have consented to data processing, you may withdraw this consent at any time with effect for the future. In addition, you have the right to obtain restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

 

Please feel free to contact us at any time if you have further questions about this or other issues relating to data protection.

 

Analytics and third-party tools
Your browsing behavior may be statistically analyzed when you visit this website. This is mainly done using what are known as analytics programs.

 

Detailed information on these analytics programs can be found in the following Privacy Policy.



2. Hosting

We use the following provider to host our website content:


External Hosting


This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may mainly include IP addresses, contact requests, metadata, communication data, contract information, contact details, names, website accesses, and other data generated via a website.

We use external hosting for the purpose of performing a contract with our potential and existing customers (Art. 6 (1) (b) of the General Data Protection Regulation [GDPR]) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6 (1) (f) GDPR). If the relevant consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) if the consent involves the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) as defined by the TDDDG. This consent may be withdrawn at any time.

Our hosting provider(s) will only process your data to the extent necessary to fulfil their obligations and will follow our instructions in relation to this data.


We use the following hosting provider(s):


Jonas Pasche Network Operations
Kaiserstr. 15
55116 Mainz


Commissioned data processing


We have concluded a data processing agreement (DPA) with the above-mentioned provider. This agreement is prescribed by data protection law and ensures that the provider always processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.



3. General and mandatory information
Data protection



The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and handle it in accordance with data protection laws and this Privacy Policy.

Various types of personal data are collected when you use this website. Personal data is data that can be used to identify you personally. This Privacy Policy explains which data we collect and what we use it for. It also sets out how and for what purpose this is done.

Please bear in mind that transmitting data over the internet (e.g., when communicating by e-mail) may give rise to security risks. It is not possible to completely protect the data from access by third parties.

Data controller information
The data controller for this website is:


MeData EDV-System GmbH
Kosakenallee 1C
49324 Melle

Phone: +49 5422 94440
E-Mail: info@medata.de


The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, or similar).



Storage duration

Unless a more specific storage period is stated in this Privacy Policy, we retain your personal data until the purpose for the data processing no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, we erase your data unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, your data is erased after these reasons no longer apply.


General information on the legal basis for data processing on this website


If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR and Art. 9 (2) (a) GDPR, but special categories of data are processed in accordance with Art. 9 (1) GDPR. If you have explicitly consented to the transfer of personal data to third countries, your data is also processed on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to the retrieval of information from your device (e.g., via device fingerprinting), your data is also processed on the basis of Section 25 (1) TDDDG. This consent may be withdrawn at any time. If your data is necessary for the performance of a contract or in order to take steps prior to entering into a contract, we process your data on the basis of Art. 6 (1) (b) GDPR. We also process your data when this is necessary for compliance with a legal obligation on the basis of Art. 6 (1) (c) GDPR. Furthermore, your data may be processed on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. The following paragraphs of this Privacy Policy provide information on the applicable legal basis in each specific case.


Data protection officer
We have appointed a data protection officer.



DSO Datenschutz Osnabrück GmbH

Stephan Beume, attorney
Mercatorstr. 11
49080 Osnabrück

Phone: +49 541 6008 1631
E-Mail: info@dso-datenschutz.de


Information on data transfer to the US and other third countries
Among other things, we use tools from companies based in the US and other third countries that do not ensure an adequate level of data protection. When these tools are enabled, your personal data may be transferred to and processed in those third countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in those countries. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. For this reason, there is always a possibility that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data on US servers for monitoring purposes. We have no control over such processing activities.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may withdraw your consent at any time. The lawfulness of the data processing that took place until the withdrawal remains unaffected by the withdrawal.

Right to object to the collection of data in particular situations and to direct marketing (Art. 21 GDPR)
IF YOUR DATA IS PROCESSED ON THE BASIS OF ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS FOR DATA PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS PERSONAL DATA CONCERNING YOU UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or for the performance of a contract provided to you or to a third party in a commonly used and machine-readable format. If you ask to have the data transmitted directly to another controller, this is only done where technically feasible.

Access, erasure, and rectification
Within the framework of the applicable legal provisions, you have the right to free information at any time about your stored personal data, its origin and recipients, and the purpose of the data processing as well as, if necessary, a right to rectification or erasure of this data. Please feel free to contact us at any time if you have further questions about this or other issues relating to personal data.

Right to restriction of processing
You have the right to obtain restriction of processing of your personal data. Please feel free to contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

If you contest the accuracy of your personal data stored by us, we usually need time to verify this. While this verification is underway, you have the right to obtain restriction of processing of your personal data.
If the processing of your personal data was/is unlawful, you may obtain restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense, or establishment of legal claims, you have the right to obtain restriction of processing of your personal data instead of erasure.
If you object pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. Until the point when it has been determined whose interests prevail, you have the right to obtain restriction of processing of your personal data.
If you have restricted the processing of your personal data, such data will, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.


SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to ensure secure transmission of confidential content, such as orders and queries that you send to us as the site operator. If the connection is encrypted, the browser address bar will start with “https://” instead of just “http://” and display a lock icon.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to promotional emails
Any use of contact details published in the context of the obligation to provide a legal notice for the purpose of sending unsolicited advertising and information materials is prohibited. The operators of this website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.


4. Data collection on this website


Cookies


Our website uses what are known as cookies. Cookies are small data packets and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your browser automatically deletes them.
In some cases, third-party cookies may also be stored on your device when you visit our website. These enable us or you to use certain services provided by third-party companies (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary for the operation of certain website functions (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or for advertising purposes.

Cookies that are required for electronic communication, for the provision of certain functions you wish to use (e.g., the shopping cart function), or for the optimization of the website (necessary cookies, such as cookies for web traffic analysis) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure that it can provide services that are optimized and free from technical errors. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG); this consent may be withdrawn at any time.

You can configure your browser in such a way that you are notified when cookies are being set and only permit them on an individual basis, accept them in certain cases, block them in general, or enable automatic deletion of cookies when you exit the browser. The functionality of this website may be restricted if cookies are disabled.
If cookies are used by third-party companies or for analysis purposes, we inform you separately about this in this Privacy Policy and, if necessary, ask for your consent.


Server log files
The provider of the website automatically collects and stores information in what are called server log files, which your browser automatically transmits to us. The following information is contained:
Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.

This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website—the server log files must be collected for this purpose.


Contact form


If you send us a query via the contact form, we store your details from the query form, including the contact details you provide there, for the purpose of processing the query and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your query is related to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective processing of the queries submitted to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; this consent may be withdrawn at any time.

We retain the data you provide in the contact form until you ask us to erase it, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after we have finished processing your query). Mandatory statutory provisions—in particular retention periods—remain unaffected.


E-mail, phone, and fax queries


If you contact us by e-mail, phone, or fax, your query, including all resulting personal data (name, query), are stored and processed by us for the purpose of processing your query. We do not pass on this data without your consent.

This data is processed on the basis of Art. 6 (1) (b) GDPR if your query is related to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective processing of the queries submitted to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; this consent may be withdrawn at any time.

We retain the data you send to us via contact requests until you ask us to erase it, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after we have finished processing your request). Mandatory statutory provisions—in particular statutory retention periods—remain unaffected.


5. Social Media


LinkedIn


This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

A connection is established to LinkedIn’s servers each time a page of this website containing LinkedIn elements is accessed. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn “Recommend” button while you are logged into your LinkedIn account, LinkedIn is able to associate your visit to this website with you and your user account. Please note that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by LinkedIn.

If consent has been obtained, the use of the above-mentioned service is based on Art. 6 (1) (a) GDPR and Section 25 TDDDG. This consent may be withdrawn at any time. If consent has not been obtained, the use of the service is based on our legitimate interest in the widest possible visibility on social media.

The data transfer to the US is based on the European Commission’s Standard Contractual Clauses. For details, please visit: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en 

Further information can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy

 




6. Plugins and Tools



Font Awesome (local Hosting)
This website uses Font Awesome to uniformly display fonts. Font Awesome is installed locally. No connection is established to Fonticons, Inc. servers.


For more information about Font Awesome, please see the Font Awesome Privacy Policy at: https://fontawesome.com/privacy

Danke für deine Bewerbung! Wir melden uns bei dir!