Privacy Policy

Controller

M&M GmbH

Saarbrücker Allee 5a

66663 Merzig

Phone: +49 6861-93928-0

Email: Info.merzig.de@digitalreload.com

You can reach our Data Protection Officer at our postal address with the addition “Data Protection” or by email at datenschutz.merzig.de@digitalreload.com.

Provision of the Website and Server Logs

When the website is accessed, the hosting provider processes technically required information, in particular IP address, time of access, requested resource, amount of data transferred, referrer, browser type, and operating system. The processing serves the secure and error-free provision, the detection of attacks, and technical error analysis.

The legal basis is regularly Article 6 paragraph 1 letter f GDPR. The legitimate interest consists in the secure, stable, and economical provision of the website. Recipients, storage location, and specific deletion periods are determined by the hosting and security configuration actually deployed.

Contact

If you contact us by email, telephone, or post, we process the data you provide in order to handle your inquiry, to carry out pre-contractual measures, or to fulfill a contract. Depending on the occasion, Article 6 paragraph 1 letter b, c, or f GDPR may be considered as the legal basis.

We store the information only as long as it is necessary for processing, contract performance, provision of evidence, or fulfillment of statutory retention obligations, or until you request deletion and no other legal grounds prevent deletion.

Rights of Data Subjects

In accordance with the statutory requirements, you have in particular rights to information, rectification, erasure, restriction of processing, data portability, and objection. If processing is based on consent, such consent may be revoked with effect for the future.

Information, Restriction, Erasure, and Rectification

Within the scope of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address provided in the legal notice.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).

If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Objection to advertising emails

The use of contact data published as part of the legal notice obligation for the purpose of sending advertising and information materials not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example via spam emails. Data collection on our website.

Privacy Notice Regarding Registration for Balance Inquiry

Within the framework of registration and use of the portal, we process in particular the following data: username, first name, last name, password or authentication data, email address, card number, personnel number, as well as system and history data (e.g., user record ID, role ID, and timestamps for logins and password changes). The purpose of the processing is the establishment and provision of your personal access to the portal as well as the execution of the balance inquiry. The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you expressly grant in the registration process. You may revoke your consent at any time with effect for the future by deactivating your access or contacting customer service. The lawfulness of the processing carried out until the revocation remains unaffected. The provision of the data requested for registration is necessary for the establishment and use of your personal access to the balance portal. Without this information, no personal access can be established and the balance inquiry cannot be provided. Your registration data are not disclosed to other recipients and such disclosure is not intended. No transfer to third countries takes place. Your data are stored for the duration of the active use of your access. After active deactivation, the data no longer required for this purpose are generally deleted within 7 days; in the absence of use, deletion generally occurs after one year of inactivity. Insofar as statutory retention obligations prevent deletion, the data concerned are only processed in a restricted manner for the duration of the respective retention obligation for this purpose and are subsequently deleted.

Security

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, data that you transmit to us are protected against unauthorized access in accordance with the general requirements of the state of the art.