Privacy Policy
1. Controller
The controller regarding the data processing on this website is:
MIAVIT GmbH
Robert-Bosch-Straße 3
49632 Essen (Oldb.)
Phone: +49 5434 82-0
E-mail:
Data Protection Officer
We have appointed a data protection officer.
E-mail:
2. Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the service provider. This may be all the data described in this privacy policy.
The external hosting is carried out by a professional provider in the interest of a secure, fast and efficient provision of our online offer.
Our service provider will only process your data to the extent necessary to fulfill its obligations and will follow our instructions regarding this data processing.
We use the following service provider:
MTS Systemhaus GmbH
Hinter dem Turme 7
38114 Braunschweig
Germany
Tel.: 0531 - 252525
E-mail:
Website: https://www.mts.de
Data processing
We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3. Data collection on this website
Server log files
The provider of the page automatically collects and stores information in so-called server log files, which your browser automatically transmits to us as soon as you visit our website. These are:
- Browser type and version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with data from other sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation, the optimization of its website and the possibility to clarify cases of abuse - for this purpose, the server log files must be collected and stored for a period of fourteen days on servers in Germany.
Cookies
Our Internet pages use so-called "cookies". Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain functions of the website would not work without them and certain content could not be provided in the desired manner. Other cookies are used to evaluate user behavior or to display advertising. These cookies do not count as technically necessary cookies.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions that you have requested (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services.
We may only use cookies that are not technically necessary if you have consented to their use. If you have given us your consent to store cookies and comparable recognition technologies, the processing is based exclusively on this consent (Art. 6 para. 1 lit. a GDPR and sec. 25 para. 1 TDDDG); the consent is voluntary and can be revoked at any time.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the framework of this data protection declaration and, if necessary, request your consent.
Contact form
If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Request by e-mail, phone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry, e-mail address or telephone/fax number) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.
4. Analysis tool Matomo
We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. The software sets a cookie on the user's device (see sec. 3 of this privacy policy for more information on cookies). This is not a necessary cookie, which is why we only set it if you have given us your consent to do so in accordance with Sec. 25 para. TDDDG.
If you visit individual pages of our website, the following data is stored with the help of the cookie:
(1) Two bytes of the IP address of the user's system
(2) The accessed web page
(3) The website from which the user has reached the accessed website (referrer)
(4) The subpages that are accessed from the accessed website
(5) The time spent on the website
(6) The frequency of the visit of the website
The software runs exclusively on the servers of our website. Personal data of the users is stored there. The data will not be passed on to third parties.
The software is programmed in a way that the IP addresses are not stored in full, but 2 bytes of the IP address are masked (e.g.: 123.456.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the computer of the user visiting the website.
The legal basis for the processing of your personal data for the purpose of analyzing your surfing behavior is your consent pursuant to Art. 6 para. lit. a GDPR.
By evaluating the data obtained in that way, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the interest of users in their personal data protection is sufficiently taken into account.
The data will be deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after two years.
5. Plugins and tools
YouTube with enhanced Privacy
This website embeds videos from the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended privacy mode. According to YouTube, this means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.
To counter this risk, we use the so-called "two-click solution". This means that you can only view a YouTube video when you click on it and thus actively consent to the data transfer described above.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.
Please note that further data processing operations may be triggered after the start of a YouTube video which are outside of our control.
We use YouTube in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and sec. 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.
Data transfer to the USA
This tool is an offer from a company based in the USA. If these tools are active, your personal data may be transferred and processed there. Google invokes the EU standard contractual clauses when transferring personal data from EU data controllers to the US. However, we would like to point out that the data protection supervisory authorities and the EU Commission currently classify the USA as a country in which a level of data protection comparable to the EU cannot be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for monitoring purposes and that you have no legal protection against this. We have no influence on these processing activities.
Google Fonts (local hosting)
This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers and a transmission of your data does not take place.
For more information on Google Fonts, please visit https://developers.google.com/fonts/faq and see Google's privacy policy: https://policies.google.com/privacy?hl=de.
Font Awesome (local hostig)
This site uses Font Awesome for the consistent display of fonts. Font Awesome is installed locally. A connection to servers of Fonticons, Inc. and a transmission of your data does not take place.
For more information about Font Awesome, please see the Font Awesome Privacy Policy at: https://fontawesome.com/privacy.
Spotify
On this website, functions of the music service Spotify are integrated. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on this website. An overview of the Spotify plugins can be found at: https://developer.spotify.com.
This allows a direct connection between your browser and the Spotify server to be established via the plugin when you visit this website. Spotify thereby receives the information that you have visited this website with your IP address. If you click the Spotify button while being logged into your Spotify account, you can link the content of this website on your Spotify profile. This allows Spotify to associate your visit to this website with your user account.
We would like to point out that cookies from Google Analytics are used when using Spotify, so that your usage data can also be passed on to Google when using Spotify. Google Analytics is a tool of the Google Group based in the USA for analyzing user behavior. Spotify is solely responsible for this integration. We as website operator have no influence on this processing. The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the appealing acoustic design of its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and sec. 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.
For more information, please see Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/.
If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify user account.
6. Own services
Newsletter
On our website, there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us:
- Salutation (optional)
- First and last name
- Company (optional)
- Email address
- Focus of interest (optional)
- Newsletter language (optional)
In addition, the following data is collected during registration:
- IP address of the user’s device
For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. After registering for the newsletter, you will receive an email to the email address you provided, in which you will be asked to confirm the registration (so-called "double opt-in"). The legal basis for the processing of data after registration for the newsletter is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
The collection of your email address serves to deliver the newsletter, the collection of your name serves to address you correctly. The optional information serves to make the newsletter even more appealing and suitable for you. The collection of the other personal data during the registration process serves to prevent misuse of the services or the email address used.
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your email address and the other data you have provided yourself will therefore be stored for as long as your subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of 365 days .
You can cancel the subscription to the newsletter at any time. For this purpose, you will find a corresponding link in each newsletter. This also allows you to revoke your consent to the storage of personal data collected during the registration process.
Data processing
In connection with the data processing for the dispatch of newsletters, the data is passed on to our service provider CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede. We have entered into a data processing agreement (DPA) with this service provider and the data is used exclusively for sending the newsletter and processed in accordance with our instructions. A transfer of your personal data to third countries in connection with the newsletter dispatch does not take place.
Handling of applicant data
We offer you the opportunity to apply for jobs at MIAVIT (e.g. by email, by letter or via the online application form). We inform you about the scope, purpose and use of your personal data collected as part of the application process in our privacy policy for applicants, which you can view here.
7. Your rights
Revocation of your consent to data processing (Art. 7 para. 3 GDPR)
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. Data processing on this basis will then no longer take place. The legality of the data processing carried out until the revocation remains unaffected by that revocation.
Right to object to data processing and to direct marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE PURPOSE OF ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 PARA. 2 GDPR).
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. This right is without prejudice to other administrative or judicial remedies.
Right to data portability (Art. 20 GDPR)
You have the right to have the data concerning you, which we process automatically on the basis of your consent or in fulfillment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Right to access, rectification and erasure (Art. 15, 16 and 17 GDPR)
Within the framework of the applicable legal provisions, you have the right to obtain information about the processing of your personal data, its origin and recipients and the purpose of data processing and, if necessary, a right to rectification or erasure of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.
Right to restriction of processing (Art. 18 GDPR)
If the legal requirements are met, you have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time.
8. Objection against advertising emails
MIAVIT objects to the use of contact data published in the imprint to send advertising and information materials not expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.