Data protection

General information

1. Name and contact details of the person responsible for data processing

This data protection information applies to the data processing by: Person responsible: MEPA – Pauli und Menden GmbH (hereinafter: MEPA), Rolandsecker Weg 37, D-53619 Rheinbreitbach, Germany, E-Mail: info@mepa.de, Telephone: +49 (2224) 929 - 0, Facsimile: +49 (2224) 929 - 149.

The company data protection officer of MEPA can be contacted at Rolandsecker Weg 37, D-53619 Rheinbreitbach, Germany, attn. Mr Tido Günther, or respectively at datenschutz@mepa.de.

2. Rights of the persons affected

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 DSGVO (German General Data Protection Regulation). Provided that we process your data, you may in particular obtain information about the purposes of processing; the category of personal data; the categories of recipients to whom your data have been or will be disclosed, particularly with recipients in third countries; the planned retention period or the criteria for their definition; the existence of a right to correction, deletion, restriction of processing or objection; the existence of a right of appeal with a supervisory authority; the origin of your data, if this has not been collected by us, and requires the existence of automated decision-making including profiling and, where appropriate, meaningful information about its detail;
• to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 DSGVO;
• to request the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is particularly necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• to demand the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need this to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 DSGVO and it has not been determined yet if our legitimate reasons are greater than your interests;
• to receive your personal data which you have provided to us in a structured, current and machine-readable format or to request their transfer to another controller pursuant to Art. 20 DSGVO, provided that the processing is based on your consent or a contract and the processing takes place by means of an automated process;
• to revoke your consent provided to us at any time pursuant to Art. 7 Para. 3 DSGVO. As a result, we would then no longer be allowed to continue processing the data obtained previously based on this consent and
• to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.

3. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 s. 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, if there are reasons, which arise from your particular situation, or if the objection is directed against direct advertisement.

In the case mentioned first we will not process your data, unless we can prove compelling reasons for the processing which outweigh your interests, freedoms and rights and or if the processing serves to assert, exercise or defend legal claims. In the latter case, you have a general right of objection, which we will implement without the need to specify a particular situation. If you wish to exercise your right of revocation or objection, simply send an email to info@mepa.de.

4. Disclosure of data

Transmission of your personal data to third parties does not take place for other purposes than listed in the following. We will only disclose your personal data to third parties if:

• you have given your express consent pursuant to Art. 6 Para. 1 s. 1 lit. a DSGVO,
• the disclosure pursuant to Art. 6 Para. 1 s. 1 lit. f DSGVO is required for assertion, exercise or advocacy of legal claims and there is no reason to believe that you have an overriding interest, worthy of protection, in not disclosing your data,
• in the event that a legal obligation exists for the transfer pursuant to Art. 6 Para. 1 s. 1 lit. c DSGVO, and
• this is legally permissible and required under Art. 6 Para. 1 s. 1 lit. b DSGVO for the execution of contractual relationships with you. Apart from that, our order processors obtain your personal data for processing bound by instructions as far as this is necessary for the execution of the contract. Our order processors do not have an own right to use data.

5. Data security

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the respectively highest encryption which is supported by your browser. Generally, it is a 256 bit encryption. If your browser does not support 256 bit encryption, we will draw on the 128-bit v3 technology instead. Whether an individual page of our internet appearance is transmitted encrypted, you can recognise by the representation of the key or padlock symbol or by using https before the address of our (sub-) website. Incidentally, we make use of suitable technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by any third party. Our security measures are continuously improved according to the technological development.

6. Third countries

Data will be transferred to third countries exclusively according to legal regulations. Provided that we execute our contract, data will be made available to third parties. Suitable guarantees pursuant to Art. 46 DSGVO or an adequacy decision pursuant to Art. 45 DSGVO are not necessary for this. Provided that your consent to transfer data is not available, the transfer of data does not serve to fulfil the contract or the transfer of data is required to assert, exercise or defend against legal claims, we transfer the data only if suitable guarantees or an adequacy decision is available. A suitable guarantee is available, for example, if the EU standard data protection clauses enacted by the EU Commission have been finished or if a certification by means of “Privacy Shields” is available. The legal basis include Art. 45 and 46 DSGVO.

Special data protection information for data processing operations on the website

1. When visiting the website

When you call up our website, data will be automatically sent to the server of our website by the browser being used on your terminal. This information is temporarily saved in a so-called logfile. In the process, the following data is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file retrieved,
• Website from which the access takes place (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of the access provider.

We will process this data for the following purposes:

• Ensuring a smooth connection establishment of the website,
• Ensuring comfortable usage of our website,
• Evaluation of the system safety and stability as well as
• for further administrative purposes.

The legal basis for processing your data is Art. 6 Para. 1 s. 1 lit. f DSGVO. Our legitimate interest exists in the operation of our website and the representation of our company connected with it.

Deletion of your data will take place, once it is not required for the stated purposes any more, but 6 months at the latest.

2. Cookies, analysis tools, plugins and other elements of third parties

We use cookies on our website. These are small files which your browser automatically creates and which are stored on your end device (laptop, tablet, smartphone or similar). Cookies do no damage to your end device, do not contain viruses, trojans or other malware. Information is stored in the cookie that links to the specific end device that has been used. However, this does not mean that we thereby immediately get to know your identity. Analysis tools evaluate the user behaviour of website visitors and enable the operator to optimise the website and adjust marketing measures. Plugins and other elements of third parties are employed in order to integrate contents of these providers into a website.

• a) Required first party cookies For one thing, the use of our required first party cookies serves to making the usage of our offering more pleasant to you. Thus, we use so-called session cookies in order to recognise that you have already visited individual pages or our website. These cookies will be automatically deleted after leaving our site. Furthermore, we also use temporary cookies to optimise user-friendliness which are stored for a particular, specified period on your end device. When you visit our site again to make use of our services, it will be automatically detected that you already visited out site and what entries and settings you had made in order to not having to enter them once again. This data will be deleted after 6 months at the latest. We process your data on the basis of our legitimate interest in the public image of our company about the website retrieved by you and to promote the user-friendliness. The legal basis for processing your data is Art. 6 Para. 1 s. 1 lit. f DSGVO. Most browsers automatically accept these cookies. However, you can configure your browser in such a way that no cookies will be stored on your computer or a note will always appear before a cookie is created. Complete deactivation of cookies, however, can lead to the fact that the website will not be correctly shown or you cannot use all functions of our website.
• b) Third party cookies, analysis tools, plugins and other elements of third parties The third party cookies, analysis tools, plugins and other elements of third parties listed below and used by us will be used only with your express consent and thus on the basis of Art. 6 Para. 1 s. 1 lit. a DSGVO. You can revoke your given consents at any time with future effect. To do so, you can change your settings here. Not giving or revoking the consent can lead to the fact that the website will not be correctly shown to you or you cannot use all functions of the website. Using the third party cookies, analysis tools, plugins and other elements of third parties, we intend to ensure that our website is designed to meet requirements and is continually optimised. Moreover, we use the tracking measures to record the use of our website statistically and to evaluate it for the purpose of optimising our offer. The relevant functional descriptions, possible recipients of the data, information about possible transfers into a third country and the storage period can be found in the following notes about the processing operations provided with third party cookies, analysis tools, plugins and other elements of third parties.
  

  (1) Google Analytics

  For the purpose of demand-oriented design and continual optimisation of our sites we use Google Analytics, a web analysis service of the Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google“). In this context, pseudonymous usage profiles are created and cookies used (see point 4). The information generated by the cookies about your use of this website, such as • browser type/version, • operating system used, • referrer URL (previously visited page), • host name of accessing computer (IP address), • time of server inquiry, is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on advertising activities and to provide further services associated with the use of the website and of the Internet for the purposes of market research and demand-oriented design of these Internet pages. In no event, your IP address is amalgamated with other data of Google. The IP addresses are anonymised so that an assignment of date is not possible (IP masking). Further information on data protection in connection with Google Analytics can be found at Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de). The Google LLC is certified according to the Privacy Shield Agreement: www.privacyshield.gov/participant

  (2) Facebook pixel

  For conversion measurement, our website uses visitor action pixels and cookies of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). That way, the behaviour of website users can be tracked after they were transferred to our website by clicking on a Facebook advertisement. As a result, the effectiveness of the Facebook advertisements can be evaluated for statistical and market investigation purposes and optimised for future advertising measures. The collected data is anonymous to us as the operator of this website, so it does not provide any conclusions to the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profiles is possible and Facebook can use the data for own advertising purposes according to the Facebook data usage policy. Thereby, Facebook can make it possible to place advertisements on Facebook sites as well as outside these networks. The usage of this data cannot be influenced by us as site operator. In the data protection notices of Facebook, you can find further notes about the protection of your privacy: https://www.facebook.com/about/privacy/.

  (3) YouTube

  On our website, we use Social Plugins from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA) a subsidiary of Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to raise awareness of our company. The plugins are indicated by a YouTube logo, for example in the form of a “YouTube camera” or a “Play” button. The integration of these plugins by us is done by means of the so-called two-click method to protect visitors to our website in the best possible way. This means that your personal data (particularly your IP address) is not already transmitted to YouTube when calling up the website. Instead, you must activate the integrated “buttons” only by a click. With this click, you give consent that a connection to the YouTube servers is established. Through this integrated plugin, YouTube receives the information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube profile or are not currently logged in to YouTube. This information (including your IP address) is transmitted from your browser directly to a YouTube server in the USA and stored there. If you are logged into YouTube, YouTube can immediately link the visit on our website to your YouTube account. When you interact with the plugins, for example operate the “YouTube” button, this information is also transmitted directly to a YouTube server and stored there. Furthermore, the information is published on your YouTube account and shown to your contacts there. If you do not want YouTube to immediately link the data collected about our web appearance to your YouTube account, you must log out from YouTube before activating the plugins with YouTube. You can find further information on this in the data protection declaration (https://www.youtube.de/t/privacy) of YouTube.

  (4) Google DoubleClick

  For the purpose of optimising our online marketing we use Google Doubleclick, a service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; in the following referred to as “Google“). In this context, pseudonymous usage profiles are created and cookies used (see point 4). The information generated by the cookies about your use of this website is transferred to a Google server in the USA and stored there. This information is used to show you, in the Google advertising network, advertising which is in keeping with your interests. In no event, your IP address is amalgamated with other data of Google. The IP addresses are anonymised so that an assignment of date is not possible (IP masking). Further information about data protection, data processing through Google can be found in the data protection declaration of Google at: (https://policies.google.com/privacy). The Google LLC is certified according to the Privacy Shield Agreement: www.privacyshield.gov/participant

• c) Google Tag Manager Our website uses “Google Tag Manager”, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Tag Manager makes it possible for us a marketer to be able to administrate website tags by means of a user interface. The tool of Google Tag Manager which implements the tags is a domain without cookies and does not collect any personal data itself. Google Tag Manager ensures initiation of other tags which for its part possibly collect data. Google Tag Manager does not access this data. If, at domain or cookie level, a deactivation has been made, this will remain in force for all tracking tags which are implemented with Google Tag Manager.

3. Topicality and modification of this data protection declaration

This data protection declaration is currently valid as of June 2020. Due to further development of our website and offers or on the basis of changed legal or official regulations, it may become necessary to modify this data protection declaration. The current data protection declaration can be called up and printed from our website at www.nextvit.de/datenschutz_en.html