Privacy policy

Privacy information

The use of this website may be linked to the processing of personal data. In order for this processing to be transparent to you, we have provided the following information to give you an overview of the processes. In order to ensure that the processing is fair, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the (German) Federal Data Protection Act (BDSG).

The data processor is Deutsche MTM-Gesellschaft Industrie- und Wirtschaftsberatung mbH, Elbchaussee 352, 22609 Hamburg (hereinafter referred to as "we" or "us").


1. General information

Contact
If you have any questions or suggestions about this information or would like to contact us to assert your rights, please submit your request to

Deutsche MTM-Gesellschaft Industrie- und Wirtschaftsberatung mbH
Elbchaussee 352
22609 Hamburg
Telephone: +49 40 822 779 0
E-mail: contact@mtm.org

General information on data processing
If you use this website, this may result in the processing of your personal data. The term "personal data”, for data protection purposes, implies all information that relates to a particular or identifiable person. Accordingly, an IP address can also count as personal data. An IP address is assigned to every internet-connected device by the ISP so that it can send and receive data. When you use the website, we collect the information that you have provided yourself. In addition, during your visit to the site we automatically collect specific information about your use of the site.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and BDSG. Data is only processed by us on the basis of legal permission. When you use this website, we process personal data only with your consent (article 6 (1) sentence 1 a) GDPR) in order to fulfill a contract to which you are a party or in response to your request to carry out pre - contractual measures (article 6 (1) sentence 1 b) GDPR), to fulfil a legal obligation (article 6 (1) sentence 1 c) GDPR) or where the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, except where your interests or fundamental rights and freedoms that require protection of personal data do not override this (Article 6 (1) sentence 1 f) GDPR). If you apply for a vacancy in our company, we also process your personal data as part of the decision whether to establish an employment relationship with you (section 26 (1) sentence 1 BDSG).

Duration of storage
Unless otherwise stated in the following instructions, we store the data only for so long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such statutory retention requirements may arise in particular from commercial or tax regulations.

Technical service providers
Unless otherwise stated in what follows, the data is processed on the servers of technical service providers that have been commissioned by us for this purpose. These service providers process the data only according to express instructions and are contractually obliged to ensure adequate technical and organizational measures for data protection.

2. Processing of server log files

If our website is used for solely informative purposes (i.e. without any registration), general information is stored automatically and transmitted by your browser to our server. These include as standard: browser type/version, operating system used, page visited, the previously visited page (referrer URL), IP address, the date and time of the server request, and the HTTP status code.

The processing is done to safeguard our legitimate interests and is based on the legal basis of article 6 (1) sentence 1 f) GDPR. The purpose of this processing is the technical management and security of the website. The stored data will be deleted unless there is a reasonable suspicion of unlawful use based on concrete evidence, and for this reason further examination and processing of the information is necessary.

3. Contact options and inquiries

Messages
If you send us a message via the specified contact channels, we process the data you submit only in order to process your request. The legal basis for the data processing is article 6 (1) sentence 1 b) GDPR.

Callback
You have the option to ask us to call you back by means of a form on our website. For this, the transfer of your data is encrypted.

The legal basis for the data processing is article 6 (1) sentence 1 b) GDPR. All data fields marked as mandatory are necessary for us to process your request. Failure to provide this data may mean that we cannot deal with your request or are unable to call you back. The provision of additional data to this is voluntary. We will use your data solely to process your request and to call you back.


4. Ordering and use of MTM-Easy


If you wish to order our software, you must provide the personal data we require to process your order for the contract to be concluded. To use the software, registration is required. When you register, the data you provide is stored on a revocable basis. Data that is mandatory for the execution of the contracts is specially marked; any other information is voluntary. The legal basis for the processing of this personal data is article 6 (1) sentence 1 lit. b) GDPR.


We process the data you provide for the execution of the contract. If necessary we may also pass on your data to our bank and our payment and IT service providers. We are entitled to forward this personal data under article 6 (1) sentence 1 b) GDPR. Our service providers may only process or use your data for the purpose for which it was sent to them, where this is necessary. So far as data is passed on to external service providers, we have ensured through technical and organizational measures that the regulations of data protection are observed.


You are not required to provide the aforementioned personal information. The information provided is required for a contract. If the data is not provided, it is possible that communication, the conclusion of a contract or order execution may in some cases not be possible.

5. Cookies

We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. They identify the browser you are using and can be recognized by our web server, e.g. to recognize your language preferences. Insofar as this use of cookies results in the processing of personal data, this is based on the legal basis of article 6 (1) sentence 1 f) GDPR.

The cookies we use are known as "session cookies". They are automatically deleted when you close your browser. Other cookies (“persistent cookies") are automatically deleted after a specified period, which may differ for different types of cookie. You can delete the cookies at any time by means of your browser’s security settings. You can also prevent the use of cookies altogether by making the appropriate setting in your browser. Further information is available from the (German) Federal Office for Information Security here

6. Analysis of our website

AWStats
To statistically evaluate our website, we use the AWStats software. This is a free web analysis package. It is used to evaluate log files created by web servers from visitor queries. The program does not use cookie files in its evaluation. Rather, the statistical analysis is carried out using the log files, which also contain IP addresses. Normally this data is not assignable to specific persons. This data is not merged with other data sources at any time; following the statistical evaluation, moreover, it is deleted.

In contrast to other statistics programs, AWStats does not transmit any data to third-party servers. All processing takes place solely on the server of our technical service provider in Germany.

The legal basis for the use of this service is article 6 (1) sentence 1 f) GDPR. Use of the service serves our legitimate interest of analyzing user behavior on our website and user-driven design that this enables.

Google Analytics

Provided that you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Included in this is the "Universal Analytics” operating mode. In this mode, data, sessions and interactions across multiple devices can be assigned to a pseudonymized user ID and the activities of a user can thus be analyzed across devices. This data protection information is provided by www.intersoft-consulting.de.

Google Analytics uses so-called “cookies", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored by a server of Google in the USA. If IP anonymization is enabled on this website, however, Google will first truncate your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. We would point out that on this website, Google Analytics has been extended to include IP anonymization; this ensures that IP addresses are captured in an anonymized form (‘IP masking’). The IP address sent by your browser for the purposes of Google Analytics is not merged with other data from Google. For further information on the terms of use and privacy, see https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

Google uses this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

The legal basis for the use of Google Analytics is your consent in accordance with article 6 (1) sentence 1 a) GDPR.

The recipient of the data collected is Google.

The personal data is transmitted to the USA within the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission. You can view the certificate here.

The data sent by us and linked to cookies, user information (e.g. user IDs) and advertising IDs is automatically deleted after 14 months. The deletion of data once its retention period has been reached takes place automatically once per month.

You may revoke your consent at any time with future effect by setting your browser software to disable the storage of cookies; we would point out, however, that in this case you may not be able to use all the functions of this website in full.

In addition, you can disable the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing this browser add-on. Opt-out cookies prevent the collection of your data when you visit this website in future. To prevent detection by Universal Analytics across multiple devices, you must perform the opt-out on all the systems you use. Click here to set the opt-out cookie: Disable Google Analytics


7. Bundled services and third-party content

We use services, services and content provided by third parties on our website. The processing of your IP address is technically necessary to enable this integration so that the content can be sent to your browser. Your IP address will therefore be transmitted to the third-party providers concerned.

In each case, this data processing serves to safeguard our legitimate interests in the optimization and profitable operation of our website and is based on the legal basis of article 6 (1) sentence 1 f) GDPR.

The Java programming language is regularly used to integrate the content. You can therefore object to this processing of your data by disabling Java in your browser. Instructions for this and further security information is available from the (German) Federal Office for Information Security here.

In our website we have bundled content from the following third-party providers:
To display maps, we use "Google Maps" provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). Google is certified under the Privacy Shield Agreement  and thus provides a guarantee of compliance with European data protection law. 

To display videos we use the service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). YouTube, as a subsidiary of Google, is covered by Google's Privacy Shield certification.

8. Job applications

You have the opportunity to apply for vacancies in our company by e-mail. If you do so, we collect personal data from you, including in particular your name, your CV, your letter of application and other material provided by you. You can also apply in writing using the contact details provided.

Your personal application data will only be collected, stored, processed or used for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and examined by the relevant contact persons. All employees involved in processing the data are obliged to protect the confidentiality of your information.

If we are unable to offer you employment, we will retain the information you have provided for up to six months following any rejection for the purpose of answering questions related to your application and rejection. This does not apply if statutory provisions preclude deletion, if further storage is necessary for purposes of providing evidence or if you have expressly consented to a longer storage period.

The legal basis for the data processing is section 26 (1) sentence 1 BDSG. If we retain your applicant data for a period of six months and you have expressly consented to this, we would point out that this consent can be freely revoked at any time pursuant to article 7 (3) GDPR. Such revocation shall not affect the lawfulness of the processing that took place up to the time of revocation on the basis of the consent.

9. Revocation of consent

You may revoke a consent you have previously given in accordance with article 7 (3) GDPR. Such revocation shall not affect the lawfulness of the processing that took place up to the time of revocation on the basis of the consent.

10. Your rights

As the data subject, you are entitled to assert your rights toward us. In particular you have the following rights:

Pursuant to article 15 GDPR and section 34 BDSG you have the right to request information about whether or not, and if so to what extent, we process personal data about you.
You have the right to demand correction of your data under article 16 GDPR.
You have the right to demand of us the deletion of your personal data pursuant to article 17 GDPR and section 35 BDSG.
You have the right to demand from us a restriction of processing of your personal data pursuant to article 18 GDPR.
You have the right under article 20 GDPR to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller.

11. Right to object

Pursuant to article 21 GDPR you have the right to object to any processing undertaken on the legal basis of article 6 (1) sentences 1 e) or f) GDPR. Where personal data about you is processed for purposes of direct marketing, you may object to this processing as described in article 21 (2) and (3) GDPR.

12. Data Protection Officer

You can reach our data protection officer using the following contact information:
datenschutz@mtm.org

13. Complaint to a supervisory authority

If you believe that any processing of your personal data is in violation of the provisions of the GDPR, you have the right to complain to a supervisory authority under article 77 GDPR.