Thank you for your interest in the MMX Germany website. Data protection is a confidential matter and your confidence in MMX Germany is important. The protection of your privacy is very important to us. This is why we are fulfilling the transparency obligations we have to you as provided for in Article 12 GDPR (EU General Data Protection Regulation) and are informing you about how we handle our personal data by sending you this data privacy statement.

1. Data processing controller
The controller in accordance with Article 7(7) of the General Data Protection Regulation (GDPR), other national data protection laws of the Member States and other legal data protection provisions is:

MEYER-Hosen Aktiengesellschaft
Hauptstraße 30
51580 Reichshof-Denklingen
Deutschland
Telephone: +49 (0)2296 9812-390
Fax: +49 (0)2296 8950
service@meyer-hosen.com
www.meyer-hosen.com

https://www.mmxgermany.com/impressum

2. Name und Anschrift des Datenschutzbeauftragten
Kallweit Datenschutz
Herr Thomas Fichter

Benrother Straße 4
51588 Nümbrecht
Tel.: 02295 / 9028941
Fax: 02295 / 9028942
E-mail: info@kallweit-datenschutz.de

1. Description and scope of data processing
Every time our website is visited, our system automatically records data and information from the system of the requesting computer.

The following data is collected in this way:
(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s IP address
(4) The date and time of access
(5) Websites from which the user’s system reaches our website
(6) Websites which are visited by the user’s system via our website
The data is also stored in our system’s log files. This data is not stored together with the user’s other personal data.

2. Purpose and legal basis of the data processing
It is necessary for the system to store the IP address temporarily to enable the website to be sent to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
Storage in log files is carried out to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. An analysis of the data for marketing purposes is not carried out in this context.
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR.

3. Period of storage and erasure
The data will be erased as soon as it is no longer required to achieve the purpose of its collection in accordance with Article 17(1)(a) GDPR. When data is collected to operate a website, this is the case when the relevant session ends.
When data is stored in log files, this is the case after seven days at the latest. Extended storage is possible. In this case, users’ IP addresses will be erased or distorted so that assignment to the requesting client is no longer possible.

4. Right to object and right to rectification
Recording data to operate the website and storing the data in log files is essential for running the website. Therefore, the user does not have any right to object.

1. Description and scope of data processing
To conclude a contract for an order in the online shop, you must, as the user, provide your personal data. Mandatory details required to process contracts are marked specifically, other details are optional.

We process the following personal data for your order:
(1) Name
(2) Address
(3) E-mail address
(4) Postal address
(5) Title
(6) Telephone number, fax number

We will share your personal data only with service providers employed in the execution of your order. These are limited to:
Distributor
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn

Payment-Service Provider
GFKL PayProjekt GmbH
Am Europa-Center 1b
45145 Essen

Heidelberger Payment GmbH
Gaisbergstr. 11 – 13
69115 Heidelberg

CreditPass
Mehlbberenstrasse 2
82024 Taufkirchen b. München

Web Support
DING DONG GmbH
Adalbertstraße 8
10999 Berlin

To prevent unauthorised access of your personal data by third parties, the order process is sent over the Internet using SSL encryption. You can recognise connections that are encrypted in this manner from the prefix “https://” in the address bar of your browser. Credit card details are not saved, rather they are processed directly by our payment service provider. You should always treat your login details confidentially and close browser windows when you have finished communicating with us, especially if you share the computer with others.

The payment service provider that processes your personal data during the order process is:

Heidelberger Payment GmbH
Gaisbergstr. 11 – 13
69115 Heidelberg

The following personal data is sent to our payment service provider for your order:
(1) Name
(2) Address
(3) E-mail address
(4) Title
(5) Telephone number
(6) Buyer ID
(7) Transaction ID
Details of the payment method (credit and debit card, Paypal, SOFORT transfer) are not processed by us, rather they are recorded by the payment service provider via an interface (iFrame).

2. Purpose and legal basis of the data processing
MEYER-HOSEN AG processes your data for the processing of your order and any future warranty procedures.You can also opt to create a customer account through which MEYER-HOSEN AG can save your data for future purchases. The legal basis for processing personal data is Article 6(1)(b) GDPR.

3. Period of storage and erasure
The data will be erased as soon as it is no longer required to achieve the purpose of its collection in accordance with Article 17(1)(a) GDPR.

Due to requirements under commercial and tax law, MEYER-HOSEN AG undertakes to store your address, payment and order data for a period of ten years. However, after two years we restrict processing, i.e. your data will only be used to comply with legal obligations.

4. Right to object and right to rectification
If you want to modify your stored data, please send an email to datenschutz@meyer-hosen.com./p>

1. Description and scope of data processing
On our website we give users the option to register by providing personal data. When doing so, the data is entered into an entry form, transferred to us and stored.

The following data is collected as part of the registration process:
(1) Name
(2) Address
(3) E-mail address
(4) Postal address
(5) Title
(6) Telephone number

We will share your personal data only with service providers employed in the execution of your order. These are limited to:

Webservice
DING DONG GmbH
Adalbertstraße 8
10999 Berlin
www.dingdong.berlin

The following data is also stored at the time of registration:
(1) The user’s IP address
(2) The date and time of registration

As part of the registration process, the user’s consent to processing this data is obtained.

2. Purpose and legal basis of the data processing
Registration is optional. It allows the customer to submit orders, store memos and view previous orders more easily. It is not fundamentally required nor mandatory to conclude a contract.
If registration is required to fulfil a contract of which the contractual party is the user or the performance of precontractual measures, the additional legal basis for processing data is Article 6(1)(b) GDPR.

3. Period of storage and erasure
The data will be erased as soon as it is no longer required to achieve the purpose of its collection in accordance with Article 17(1)(a) GDPR.
This is the case to fulfil a contract or perform precontractual measures during the registration process, if the data is no longer required to perform the contract. After conclusion of the contract, it may be necessary to store the contractual partner’s personal data to fulfil contractual or legal obligations.
MEYER-HOSEN AG reserves the right to irrevocably delete your user account and data without giving a reason in the event of misuse.

4. Right to object and right to rectification
As a user, you have the option to cancel the registration and to object to the processing of your personal data. You can modify the stored data we have about you.
If the data is required to fulfil a contract or to perform precontractual measures, advance deletion of the data is possible insofar as there are no contractual or legal obligations for deletion that contradict this.

1. Description and scope of data processing
On our website there is the option to subscribe to a free newsletter.
When signing up for the newsletter, data from the entry form is transferred to us.

In addition, the following data is collected on registration:
(1) The date and time of registration

Your consent for processing the data will be obtained during the registration process and you will be referred to this data protection statement.
If you purchase goods or services on our website and thereby enter your e-mail address, we can then subsequently use this to send a newsletter. In such cases, only direct advertising for our own similar goods or services will be sent via the newsletter.
No data is disclosed to third parties in connection with data processing for the sending of newsletters. This data shall only be used to send the newsletter.

2. Purpose and legal basis of the data processing
Collection of the user’s e-mail address is used to send the newsletter.

3. Period of storage and erasure
Als Nutzer steht Ihnen gemäß Art. 21 Abs. 2 DSGVO jederzeit ein Widerspruchsrecht gegen die Nutzung der personenbezogenen Daten zum Zweck des Newsletter Versands zu. Zur Ausübung Ihres Widerspruchsrechts findet sich in jedem Newsletter ein entsprechender Link.

4. Right to object and right to rectification
As a user you have a right to object at any time to the use of your personal data for sending the newsletter in accordance with Article 21(2) GDPR. Every newsletter contains a corresponding link to click to exercise our right to object.

1. Description and scope of data processing
You have the option to rate your own performance on our website. To do this, if you have given your consent we will send your e-mail address to the customer rating system that we use.
Following an order, the Trusted Shops Trustbadge is incorporated into this web page in order to display our Trusted Shops trustmark and the rating collected, as well as to offer Trusted Shops products for buyers.
Personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops after completing an order or if you have already signed up to use the products.

On consent, the web server automatically stores a log file with the following content:
(1) IP address/p>
(2) Date and time of access

The contact details for the rating service provider are:
Trusted Shops GmbH
Subbelrather Str. 15 c
50823 Cologne
Telefon 0221 77 53 65
www.trustedshops.de

2. Purpose and legal basis of the data processing
The customer ratings serve as a trust-building measure and confirm the service quality. In addition, the customer is covered by buyer protection up to €100.
The legal basis for the processing of data when the user’s consent has been obtained is Article 6(1)(a) GDPR.

3. Period of storage and erasure
The server log files are overwritten automatically no later than seven days after the end of your visit. In addition, the personal data processed for the purpose stated above is deleted in accordance with Article 17(1)(a) insofar as this is no longer required.

4. Right to object and right to rectification
As a user you have the option at any time to withdraw your consent to transfer the personal data with effect for the future in accordance with Article 7(3) GDPR. Send any queries in this regard to datenschutz@meyer-hosen.com.

1. Description and scope of data processing
On our website there is a contact form that can be used to contact us electronically. If a user chooses this option, the data entered into the entry form will be transmitted to us and stored.

This data is:
(1) Name
(2) E-mail address
(3) Telephone number
(4) Title

The following data is also stored at the time of sending the message:
(1) The date and time of registration

Alternatively, you have the option to contact us via the e-mail address service@meyer-hosen.com. In this case, the user’s personal data transmitted with the email will be stored.
We will not distribute the data to third parties in this context. The data is solely used to process the conversation.

2. Purpose and legal basis of the data processing
We only process the personal data entered in the contact form to facilitate contact. In the event of contact by email, there is also the necessary legitimate interest in processing the data.
The other personal data processed during submission is used to prevent misuse of the contact form and ensure the security of our IT systems.
The legal basis for the processing of data when the user’s consent has been obtained is Article 6(1)(a) GDPR.
The legal basis for the processing of data that is transmitted when sending an email is Article6 (1)(f) GDPR. If the aim of contact by email is to conclude a contract, Article6 (1)(b) GDPR is also a legal basis for processing.

3. Period of storage and erasure
The data will be erased as soon as it is no longer required to achieve the purpose of its processing in accordance with Article 17(1)(a) GDPR. For personal data from the contact form and that which has been sent by email, this is the case when the conversation with the user ends. The conversation is considered to have ended when it is clear from the circumstances that the matter in hand has been fully clarified.
Additional personal data collected during submission will be erased as soon as the purpose has expired.

4. Right to object and right to rectification
As a user, you have the option at any time to withdraw your consent to the processing of personal data in accordance with Article 7(3) GDPR with effect for the future. If the user contacts us by email, they may object to the storage of their personal data at any time. Send any queries in both cases to datenschutz@meyer-hosen.com. The conversation cannot be continued in such a case.
In this case, all personal data stored during contact will be erased.

1. Description and scope of data processing
For payments on account, we obtain credit rating information using mathematical/statistical methods to safeguard our legitimate interests in accordance with Article 6(1)(f) GDPR. Credit rating information is data that offers a conclusion about the creditworthiness of a customer. To do this, the data required for this is transferred to the credit rating agency and on the basis of the evaluation a decision is made as to whether or not purchases on account are permitted.

The credit rating agency from whom we obtain customer credit rating information is:
GFKL PayProjekt GmbH
Am Europa-Center 1b
45145 Essen

and

CreditPass
Mehlbberenstrasse 2
82024 Taufkirchen b. München

We send the following personal data to the credit rating agency:
(1) Name
(2) Address
(3) E-mail address
(4) Order information
(5) IP address

The scoring method used takes account of the following information:
Age check: Is the entered date of birth >= 18 years
(1) Collection list GPP
(2) Blocked address list
(3) Repeat order with the same IP 3x in 3 hours
(4) Repeat order with the same address 3x in 3 hours
(5) Repeat order with the same address 5x in 30 days

Address check: Bürgel
Credit check: Bürgel

The decision on the option to use the payment on account method is based on an automatic decision by our online shop system. A manual check of your documents is carried out by an employee of MEYER-HOSEN AG. To safeguard integrity, personal data is always processed in compliance with the state of the art.

2. Purpose and legal basis of the data processing
To minimise risks, the processing of personal data is justified as part of credit checks for payments on account. By performing a credit check, MEYER-HOSEN AG protects itself against possible payment defaults.
The legal basis for processing personal data is Article 6(1)(f) GDPR.

3. Period of storage and erasure
The data will be erased as soon as it is no longer required to achieve the purpose of its collection in accordance with Article 17(1)(a) GDPR.

4. Right to object and right to rectification
As a user you have the option at any time to object to the processing of personal data in accordance with Article 21(1) GDPR. Send any queries in this regard to datenschutz@meyer-hosen.com.
If you object to the transfer of your personal data to the credit rating agency, payment on account will not be possible

1. Description and scope of data processing
Our website uses cookies. Cookies are text files which are saved in the user’s web browser or by the user’s web browser on their computer system. When a user visits a website, a cookie may be saved on their operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is visited.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identified even after changing pages.

These cookies store and transmit data such as the following:
(1) Session ID

When visiting our website, the user is informed of the use of cookies for analytical purposes and their consent is obtained for processing the personal data used in this regard. Reference is also made to this data protection notice in this regard.

The following data may be transmitted in this way:
(1) Search terms entered
(2) Frequency of page views
(3) Operating system, browser, device, screen resolution
(4) Surfing behaviour (time spent on pages)
(5) Page load time

The data collected from users in this way is pseudonymised by technological means. Therefore, assignment of the data to the requesting user is no longer possible. The data is not stored together with users’ other personal data.

2. Purpose and legal basis of the data processing
The purpose of using the cookies that are required for technical matters is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change.

Cookies are required for the following applications:
(1) Shopping basket
(2) Acquisition of language settings
(3) Content of the memo
(4) Login status

The user data collected by cookies that are required for technical matters is not used to generate user profiles.
The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR.

3. Length of storage, erasure and right of objection and deletion
Cookies are stored on the user’s computer and transmitted from it to our website. You, as the user, therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by adjusting the settings in your web browser. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If you disable cookies for our website, it may no longer be possible to fully use all the website’s functions.

1. Description and scope of data processing
This website uses anonymised Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies”—text files stored on your device to enable use of the website to be analysed. The information collected by cookies is usually sent to a Google server in the USA and stored there.
By anonymising your IP address, it is truncated within the Member States of the EU and the European Economic Area. This truncation removes the personal reference to your IP address.
Based on a contract data processing agreement between MEYER-HOSEN AG and Google Inc., Google evaluates website use and website activity based on the information collected and provides other services associated with Internet use. The IP address sent by your browser is not combined with the Google data.
You have the option to prevent cookies being stored on your device by choosing the relevant settings in your browser. By applying this type of settings, however, not all functions of this website can be used in their entirety.
You can find further information on the terms and conditions of use and data protection for Google Analytics at https://www.google.com/analytics/terms/ and at https://www.google.com/policies/

2. Purpose and legal basis of the data processing
MEYER-HOSEN AG uses Google Analytics to analyse and regularly improve use of the website. The statistics obtained from this allow us to optimise our content and to make it more interesting for you.
Our legitimate interest in the use of Google Analytics is in improving our services to users. The legal basis for processing your personal data is thus Article 6(1)(f) GDPR.

3. Period of storage and erasure
Due to the anonymisation of IP addresses, the data collected with a personal reference is deleted immediately.
Data at user and event level, which is linked with cookies, user IDs and advert ID, are subject to a standard storage period of 26 months.

4. Right to object and right to rectification
ou can prevent the collection of data generated by the cookies and on your use of the website (including your IP address) by Google as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de

1. Description and scope of data processing
This website uses the remarketing function of the “Visitor actions pixel” of Facebook Inc.. To do this, we use the two-click solution. This means that when visiting our website no personal data is initially forwarded to the plug-in provider. Only consent to this plug-in provider authorises the forwarding of data. (Opt-in process). You can recognise the plug-in provider by the mark in the box above the first letter of their name. This allows you to communicate directly with the plug-in provider. Only if you click the selected field and thereby enable it does the plug-in provider does receive the information that you have accessed the relevant website of our online presence. By enabling the plug-in, personal data is sent by you to the respective plug-in provider and stored there.
Data is forwarded irrespective of whether or not you have an account with the plug-in provider and are logged in there. When you are logged in to the plug-in provider, your data we have collected is assigned directly to your account with the plug-in provider. If you select the enabled button and, for example, link the page, the plug-in provider also stores this information in your user account and shares this publicly with your contacts. We recommend logging out regularly after using a social network, particularly before enabling the button, as in this way you can avoid an assignment to your profile with the plug-in provider.

2. Purpose and legal basis of the data processing
Via the plug-in, we offer you the option to interact with social networks and other users so that we can improve our content and make it more interesting for you as a user.

The plug-in provider stores the data collected for the following purposes:
(1) Advertising
(2) Market research
(3) Needs-based design of the website

This type of evaluation occurs, in particular (even for users that are not logged in), to display needs-based advertising and to inform other users of the social network about your activities on our website.
Article 6(1)(f) GDRP represents the relevant legal basis for the use of the plug-in. Our legitimate interest is in evaluating the effectiveness of Facebook adverts for statistical and market research purposes and thus in optimising future advertising measures.

3. Period of storage and erasure
We store your data sent via the Facebook plug-in.

4. Right to object and right to rectification
As a user you have the right at any time to object to the creation of user profiles in accordance with Article 21(1) GDPR. You must contact the plug-in provider if you wish to exercise this right.
You can object to the use of the Facebook Pixel at any time. Please click here: Disable Facebook Pixel
Please be aware that for technical reasons this objection must be made individually for each browser and each device.
To safeguard your right of withdrawal, you also have the right at any time to withdraw your consent to the use of social plug-ins in accordance with Article 7(3) GDPR via the following link: href="https://www.facebook.com/settings/?tab=ads#_=_

If your personal data is processed, you are the data subject in accordance with the GDPR and you have the following rights vis-à-vis the controller:

1. The right to information
In accordance with Article 15 GDPR, as a data subject within the meaning of GDPR you have the right of access vis-à-vis the controller to the respective personal data, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR, the right to object to processing in accordance with Article 21 GDPR and the right to data portability in accordance with Article 20 GDPR. The limitations according to Sections 34 and 35 BDSG (new version) apply to the right of access and the right to erasure.
You have a right of access for the purposes of processing, the categories of processed personal data, the categories of recipients of your personal data, and complaints to a supervisory authority in accordance with Article 77(1) GDPR.
You also have the right to request information on whether personal data concerning you will be transferred to a third country or to an international organisation. In this regard, you can request information on the appropriate safeguards in accordance with Article 46 GDPR related to transfer.

To safeguard your right to information, please write, identifying yourself clearly, to:
MEYER-HOSEN AG
Hauptstraße 30
51580 Reichshof-Denklingen
E-Mail: datenschutz@meyer-hosen.com
Fax: +49 2296 8950

2. Limitation of the right to erasure
The right to erasure is not granted in accordance with Article 17(3) GDPR if the processing is necessary
(1) to exercise the right of freedom of expression and information;
(2) to fulfil a legal obligation which requires processing in accordance with the law of the Union or the Member States to which the controller is subject to or to perform a task that is carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons in the public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, if the right provided in (a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
(5) to establish, exercise or defend legal claims.

3. Right to information
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged in accordance with Article 19 GDPR to inform all recipients to whom the personal data concerning you was disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or would involve a disproportionate effort.
You have the right vis-à-vis the controller to information on these recipients.

4. Automated individual decision-making, including profiling
You have the right under Article 22(1) GDPR not to be subject to a decision based solely on automated processing, including profiling, which has legal effects for you or similar significant adverse effects for you.

This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permissible under the law of the Union or the Member States to which the controller is subject, and this law provides adequate measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data in accordance with Article 9(1) GDPR, unless Article 9(2)(a) or (g) applies and suitable steps to protect rights and freedoms and your legitimate interests have been taken.

In the cases stated in (1) and (3), the controller will take suitable steps to safeguard rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

Minors must not transmit any personal data to us without the consent of their legal guardians. As part of our online presence, we do not process any knowingly acquired personal data of minors.