Data protection

1. Collection of data

1.1 Use of the website for information purposes

Every time you access a page of our offer and every time a file is called up, access data about this process is stored in a log file on the server.

In particular, this includes the following information:

• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• amount of data transferred
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software
• IP address

The IP address of your computer is only stored for the time you are using the website and then immediately deleted or anonymized by being shortened.

We collect the aforementioned data because this is technically necessary for us to be able to display our website to you and to guarantee the stability and security of the website. The legal basis for this is Article 6, Paragraph 1, Sentence 1, Letter f) GDPR.

1.2 Providing personal data

If you do not only use our website for information purposes, you usually have to provide additional personal data, such as name, date of birth, address, postal address or telephone number, which we use to provide the respective services. We only collect the relevant personal data if this is permitted by law (e.g. to execute a contract, Art. 6 Para. 1 S.1 lit.b) GDPR, or if there is a legitimate interest, Art. 6 Para. 1 S. 1 lit.f) GDPR) or you consent to the collection of data, Art. 6 Paragraph 1 S. 1 lit. a) GDPR.

You can revoke your consent to the processing of your personal data at any time. A corresponding revocation has a direct influence on the permissibility of the processing of your personal data as soon as you have given it to us.

If the processing of your personal data is based on a balancing of interests, you can object to the processing. If you exercise your right to object, we ask you to explain the reasons why we should not process your personal data, if your objection is justified , we will examine the situation and discontinue or adapt the data processing or inform you of compelling reasons worthy of protection on the basis of which we will continue the processing.

We delete your personal data as soon as it is no longer required for the respective purposes. It can happen that personal data is stored for the time in which claims can be made against us (e.g. statutory limitation period of three or thirty years). Furthermore, we are legally obliged to store certain data due to obligations to provide evidence and retention, among others from the Commercial Code, the Tax Code or the Money Laundering Act. The storage periods are up to ten years.

1.2.1 Data for the newsletter service

With the newsletter service you will be informed about our own offers by email or by post. You can also receive information about offers from certain manufacturers by email or by post. Your consent is required for this.

The so-called double opt-in procedure is used to send newsletters, ie you will only be sent a newsletter if you have previously expressly confirmed that the newsletter service should be activated. A confirmation e-mail will then be sent to you and you will be asked to confirm that you would like to receive the newsletter by clicking on a link contained in this e-mail.

If you do not confirm your registration within 24 hours, we will block your information immediately and delete it automatically after a month. In addition, we only save your IP address and the times of registration and confirmation in order to be able to prove your registration and to be able to clarify any misuse of your data.

All you have to do to send newsletters is your email address. Providing further data is voluntary.

We only save your e-mail address for the purpose of sending our newsletter. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR.

If you no longer want to receive a newsletter at a later date, you can revoke your consent at any time and unsubscribe from the newsletter. A message in text form to the contact details mentioned (e.g. e-mail, letter) is sufficient for this. Of course, there is also an unsubscribe link in every newsletter by email.

1.2.2 User account

When you set up an account to use our services, e.g. to participate in campaigns by the manufacturers associated with us, your data will be stored in the user database either permanently or for the period of an action, depending on the service. If you would like to use the services, you must provide personal data to process the contract. The mandatory information required for using the services (e.g. name, email address, date of birth, telephone) is marked accordingly and is processed for this purpose. The legal basis this can be found in Art. 6 Para. 1 S. 1 lit. b) GDPR.

You undertake to treat your personal access data confidentially and not to make it accessible to unauthorized third parties. We cannot accept any liability for improperly used passwords, unless we are responsible for the abuse. You should inform us immediately if you have reason to worry that a third party has learned your password or that your password is being used without authorization or that this is likely. You are responsible for ensuring that the information you provide to us is correct and complete, and you are responsible for us notify you of any changes to the information you have provided. You can view and update information that you have given us as well as your account settings in the "My user account" area of the website. After you have finished communicating with MMW services, you should log out and close the browser window, especially if you share the computer with other people.

We use various algorithms (mathematical-statistical processes) to prevent violations of the conditions of participation in the promotions or to detect fraud. We check the results of the evaluations again and then evaluate them accordingly. A transfer of personal data to third parties does not take place in this context.

If you take part in a marketing survey of the respective manufacturer in the course of registration, this data will not be stored personally.

The storage of the data provided during registration can be revoked at any time. The specified data and your entire user account can always be deleted in the customer area.

Due to commercial and tax law requirements, we are obliged to keep your address, payment and order data for the duration ofat least 10 years to save. However, after 3 years after an order, we will restrict the use of the relevant data, with the result that these may only be used to comply with legal obligations.

1.2.3 Data transmission by business partners

If we receive personal data from third parties (e.g. business partners), e.g. to process promotions, these will also only be used in compliance with data protection laws and this data protection declaration.

1.2.4 Upload

Consumers and dealers can upload documents (e.g. receipts, invoices, etc.) to us. The personal data contained herein will also only be used in compliance with data protection laws and this data protection declaration.

1.2.5 Chat

In our chat you have the opportunity to contact us directly if you have any questions about our offer. Your IP address is anonymized in accordance with the statutory provisions. The chat history is saved and evaluated anonymously. To participate, you must provide your email address and also either your name or a synonym.

We reserve the right to end chats in which insults are expressed or which are offensive, racist or otherwise illegal or violate our terms and conditions and to block users in the event of particularly serious violations.

The legal basis is Article 6 Paragraph 1 Sentence 1 lit. b) and lit. f) GDPR.

1.2.6 Contact form or contact by e-mail or fax

If you write to us using the contact form on our website or by email or fax, the information you provide will be saved and processed for the purpose of processing the request and in the event that follow-up questions arise. We delete the corresponding data after the storage is no longer necessary or we restrict the processing if there are statutory retention periods. The legal basis is Article 6 Paragraph 1 Sentence 1 lit. a), lit. b) and lit.f) GDPR

2. Transfer of data

We do not pass on your personal data to third parties unless you have consented to the data being passed on or this is necessary for the purpose of processing the contract or we are entitled or obliged to pass on data due to legal provisions and / or official or judicial orders.

We sometimes use external service providers to process your personal data. This was carefully selected and commissioned by us. They are bound by our instructions and are checked regularly.

The data passed on to our service providers may only be used by them to fulfill their tasks.

No personal data will be transmitted to third parties outside the European Economic Area (EEA).

2.1 Passing on to process the promotion

The data collected by us will be passed on to the transport company commissioned with the delivery as part of the campaign dispatch processing, insofar as this is necessary for the delivery of the goods. The legal basis is Article 6 Paragraph 1 Sentence 1 lit. b) GDPR.

2.2 Passing on to the organizers of the campaigns

For the fulfillment of the purpose of the contract, it may be necessary to pass on personal data from customers or dealers to the organizers of the campaigns. Otherwise, the data in connection with the execution of the contract or campaign will be forwarded to the organizers of the campaigns in anonymised reports and will be used by them in particular for statistical purposes. The legal basis is Article 6 Paragraph 1 Sentence 1 lit. b) GDPR.

2.3 Transfer for payment processing

We pass on your payment data to the commissioned credit card company or PayPal or the respective payment service provider as part of the processing of payments. If you have registered as a customer with your customer account, you have the option of storing a certain type of payment for further purchases. The legal basis is Article 6 Paragraph 1 Sentence 1 lit. b) GDPR.

2.4 Disclosure for sending newsletters

With your consent to the sending of newsletters (section 1.2.1) you also agree that your email address or address may be passed on to certain manufacturers whose newsletters you will then receive. A corresponding note can also be found in the confirmation email. The legal basis is Article 6, Paragraph 1, Sentence 1, Letter a) GDPR.

3. Cookies

In addition to the aforementioned usage data, cookies are stored on your computer when you use our website. These are small text files that are stored on your end device and through which we receive certain information. However, cookies cannot run programs or transmit viruses to your computer. We use cookies to make visiting our website attractive and to enable the use of certain functions.

We use transient and persistent cookies on our website. If you close your browser, transient cookies are automatically deleted. Session cookies in particular also belong to these cookies. This makes it possible to recognize your computer when you return to our website. Session cookies are deleted as soon as you close the browser or log out.

In contrast, persistent cookies are automatically deleted after a specified period. These cookies can be deleted at any time in the security settings of your browser.

In principle, you can configure your browser settings according to your wishes and, for example, reject all cookies. However, if you do not accept cookies, the functionality of our website may be restricted.

The Flash cookies we also use are not recorded by your browser but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. Data is saved regardless of the browser you use and does not have an automatic expiry date. If you do not want the Flash cookies to be processed, you must install an appropriate add-on, eg "Better Privacy" (Mozilla Firefox) or "Adobe Flash Killer Cookie" (Google Chrome). If you use HTML5 storage objects, you have to use the private mode in your browser. In addition, we recommend that you delete your cookies and browser history at regular intervals.

4. Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and In order to provide the website operator with other services related to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available at the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are further processed in abbreviated form, a reference to people can be excluded. If the data collected about you is personal, this is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyze the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit.f DS-GVO.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de .html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy .

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account "My data", "Personal data".

5. Matomo

This website uses the web analysis service Matomo to analyze the use of our website and to improve it regularly. Using the statistics obtained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

For this evaluation, cookies are stored on your computer (see section 3 for more details). The person responsible stores the information collected in this way exclusively on his server in Germany. You can set the evaluation by deleting existing cookies and preventing the storage of cookies If you prevent the storage of cookies, we would like to point out that you may not be able to use this website in its entirety. You can prevent the storage of cookies by changing the settings in your browser. You can prevent the use of Matomo by removing the following check mark and activating the opt-out plug-in: [Matomo iFrame].

This website uses Matomo with the "AnonymizeIP" extension. As a result, IP addresses are further processed in abbreviated form, a direct reference to persons can be excluded. The IP address transmitted by your browser via Matomo will not be merged with other data collected by us.

The Matomo program is an open source project. You can find information from the third-party provider on data protection at http://piwik.org/privacy/policy.

6. Data security

We take all suitable technical and organizational security measures to protect your data from manipulation, loss, destruction or unauthorized access by third parties. Our systems are secured against unauthorized access. In particular, your personal data will be transmitted encrypted with us. We use the coding system SSL (Secure Socket Layer).

We expressly point out that the Internet does not allow absolute data security despite all technical precautions. We are not liable for the actions of third parties.

7. Change of data protection declaration

We reserve the right to change this data protection declaration at any time with effect for the future. The latest version is available on the website. Please visit the website regularly to find out about the applicable data protection declaration.

8. Rights

You have the right to information, correction or deletion, restriction of processing, objection to processing and data portability with regard to the personal data concerning you.

We are available at the address given for requests or messages from users.

We would also like to point out that user data can only be deleted if there are no legal provisions to the contrary.

Information is generally transmitted in electronic form (by email). If you take advantage of this option of providing information via email, the specified email address (both sender and recipient) will not be used for any other purpose than providing information and its documentation.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Should we be legally obliged to pass on data to local, state, national or international authorities, we will comply with this obligation.

Furthermore, we will disclose data to third parties if applicable laws and regulations require this.

In addition, we may disclose information in order to investigate illegal activities or suspected fraud, to prevent or to initiate appropriate countermeasures or to enforce or apply our contracts and license rights.

9. Contact

If you have any questions, comments or inquiries regarding the collection, processing and use of your personal data by us, please contact us using the contact details provided.

marken mehrwert - brand added value AG
Data Protection Officer 
Schildkrötstrasse 15 
68199 Mannheim, Germany 

Email: datenschutz@mmw.ag 
Fax: 0621 37701-807 

marken mehrwert - brand added value AG, as of 05/2018