Privacy

Privacy

Thank you for your interest in our company. The management of MISA-Vertriebs GmbH attaches great importance to data protection. The use of the website of MISA-Vertriebs GmbH is possible without providing personal data. However, if a data subject wishes to use special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain the consent of the data subject.

The processing of personal data such as the name, address, e-mail address or telephone number of a data subject is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to MISA-Vertriebs GmbH. With this privacy statement, our company wishes to inform the public about the nature, extent and purpose of the personal data that we collect, use and process. Furthermore, this privacy policy informs the persons concerned of their rights.

As the data controller, MISA-Vertriebs GmbH has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, the transmission of data over the Internet can always be subject to security gaps, so that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide us with personal data by other means, such as by telephone.

Name and address of the data controller

The responsible party within the meaning of the EU General Data Protection Regulation (hereinafter: DSGVO), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

MISA-Vertriebs GmbH
Steidler-Ring 6
85669 PastettenGermany
info@misa.de

If you have any questions about this privacy policy, please contact datenschutz@misa.de.

General information on data processing

As part of the provision and operation of our website and the provision of the services offered through it, the processing of personal data of our users only takes place to the extent that this is necessary for the provision of a functioning website and the content and services offered through it. The processing of our users’ personal data is normally only carried out with the user’s consent. Exceptions are made in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

Our content and services are not intended for or directed to children under the age of 16. Therefore, we do not knowingly collect data from persons under the age of 16.

We adhere to the principles of data avoidance and data economy. The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. This includes (1) information about the browser type and version used, (2) the user’s operating system, (3) the user’s IP address, (4) the date and time of access, (5) the websites from which the user’s system accesses our website, and (6) the websites that the user’s system accesses through our website. In addition, when our website is accessed, content is loaded from third party systems (Instagram, Facebook, Linked-In), which also collects and processes the personal data described above. The information we collect is also stored in the log files of our system. This does not include the user’s IP address or any other information that could be used to identify the user. These data are not stored together with other personal data of the user. The legal basis for the temporary storage of the data is Art. 6 par. 1 lit. f) DSGVO.

Temporary storage of the IP address by our system, as well as the systems of third party providers, is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. These purposes also constitute our legitimate interest in processing data pursuant to Art. 6 par. 1 lit. f) DSGVO.

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected for the provision of the website, this will be at the end of the session. All other log files are normally deleted after 14 days.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again.

We use cookies to make our website more user friendly. Some elements of our website require the calling browser to be identified even after a page change (session cookies). These cookies store and transmit (1) a user ID and (2) the preferred language setting. We also use cookies on our website that allow us to analyse the user’s browsing behaviour (analytics cookies). This may include (1) search terms entered, (2) frequency of page views, (3) use of site features, (4) information about the devices used, and (5) user master data. The data collected in this way is made anonymous by technical means. It is therefore no longer possible to associate the data with the calling user. The data is not stored together with other personal data. The data will not be stored together with other personal data. The legal basis for the processing of personal data using cookies is Art. 6 par. 1 lit. f) DSGVO.

When users access our website, an information banner informs them of the use of cookies for analysis purposes and refers them to this privacy statement. The purpose of the use of technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised after a page change. We use cookies to remember language settings and to store the login session. The user data collected through technically necessary cookies is not used to create user profiles. Analytical cookies are used to improve the quality of our website and its content. Analysis cookies help us to understand how the website is used. This enables us to better tailor our services and products to the needs of our visitors.

Cookies are stored on the user’s computer and sent from there to our website. Therefore, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If you disable cookies for our website, you may not be able to use all the features of the website to their full extent.

We embed videos on our website that are made available on the YouTube video platform. We use YouTube’s extended privacy mode, which does not use cookies. No personal data is collected in this context while the user is on our website.

Contact

It is possible to contact us using the e-mail address provided. In this case, the user’s personal data sent with the e-mail will be stored. The data will not be passed on to third parties. All data processed in the context of contacting us will be used exclusively for processing and conducting the conversation.

The legal basis for the processing of data is art. 6 par. 1 lit. a) DSGVO, if the user has given his consent. The legal basis for the processing of data provided in the context of sending an e-mail is Art. 6 par. 1 lit. f) DSGVO. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.

In the case of contact by e-mail, personal data will be processed solely for the purpose of communicating with the user and dealing with the request in question. In the case of contact by e-mail, this also constitutes the necessary legitimate interest for the processing of the data.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected or if there is no legal obligation to retain it.

The user may at any time revoke his or her consent to the processing of personal data. To do so, the user can contact us at any time by telephone, e-mail or in writing and object to the storage of his/her personal data. In such a case, the conversation cannot be continued. In this case, all personal data collected during the contact will be deleted.

Newsletter

Through our website, we offer our visitors the opportunity to subscribe to a free newsletter. In this newsletter, we send you up-to-date information about our website and the company services offered through it (in particular, products, services, company information, special promotions, events, online presence). Among other things, we will inform you about new products and special promotions and offers. The newsletter may also contain advertisements from third parties. In this case, the email address you provide in the contact form will be collected and processed. In addition, traffic data (e.g. opening behaviour of the newsletter) is collected and processed. When subscribing via the contact form, the date of subscription or consent and the IP address of the computer used are collected.

Each newsletter contains a so-called tracking pixel, which is retrieved from the server when the newsletter is opened. This enables us to statistically analyse the opening behaviour of recipients, i.e. whether and when an email was opened by the recipient and which links in the email were called up by the recipient.

In connection with the processing of data for the dispatch of newsletters, the data will be forwarded to rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany, which operates the newsletter dispatch platform “rapidmail”. The data collected will be transferred to a rapidmail server. The data is used exclusively in connection with the dispatch and evaluation of the newsletter. rapidmail uses this data to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletter or for commercial purposes to determine the countries from which the recipients come. rapidmail does not, however, use the subscribers’ data to write to them itself and does not pass this data on to third parties. Further information on data protection at rapidmail can be found at https://www.rapidmail.de/datenschutz and https://www.rapidmail.de/newsletter-marketing-dsgvo-und-datenschutz-konform.

When registering for the newsletter via the contact form, the user’s consent to the processing of this data is obtained and reference is made to this privacy policy.

The legal basis for the processing of data after registration for the newsletter by the user is, if the user has given his consent, Art. 6 par. 1 lit. a EU-DSGVO as well as § 7 para. 2 no. 3 or para. 3 UWG. Insofar as the data is used for technical optimisation and to improve dispatch and presentation, the legal basis is Art. 6 para. 1 lit. f EU-DSGVO.

The use of the e-mail address and other visitor data collected via the contact form is for the purpose of sending you the newsletter. The personal data processed in connection with the use of the tracking pixel is stored and evaluated by us in order to optimise the dispatch of the newsletter and to better adapt the content of future newsletters to the interests of the recipients. No targeted observation or profiling of individual recipients is carried out.

The collection of further personal data as part of the subscription or unsubscription process serves to prevent misuse of the services or the email address used.

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The data collected when subscribing to the newsletter will be stored until the visitor unsubscribes from the newsletter.

The newsletter subscription can be cancelled by the visitor at any time. A link to unsubscribe is included in each newsletter. The subscription can also be cancelled at any time by sending an e-mail to info@misa.de. By doing so, the user revokes his or her consent.

Matomo

We use the Matomo tool on our website to analyse our users’ browsing behaviour. The tool places a cookie on the user’s computer (see above for information about cookies). When individual pages of our website are accessed, (1) two bytes of the IP address of the user’s accessing system, (2) the website accessed, (3) the website from which the user accessed the website accessed (referrer), (4) the sub-pages accessed from the website accessed, (5) the time spent on the website and (6) the frequency with which the website is accessed are stored:

The tool runs exclusively on the servers of our site. The user’s personal data is only stored there. The data is not shared with third parties. The tool is set so that IP addresses are not stored in full, but the last byte of the user’s IP address is deleted immediately after it is collected (e.g.: 192.168.100.xxx). In this way, it is no longer possible to associate the shortened IP address with the calling device (PC, smartphone, tablet, etc.).

The legal basis for the processing of users’ personal data is Art. 6 par. 1 lit. f DSGVO. The processing of users’ personal data enables us to analyse the browsing behaviour of visitors to our website. By evaluating the data obtained in this way, we are able to compile information on the use of the individual contents of our website. This helps us to continually improve our website and its user-friendliness. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 par. 1 lit. f) DSGVO. The anonymisation of the IP address takes sufficient account of users’ interests in the protection of their personal data.

The data is deleted as soon as it is no longer required for our collection purposes. The full IP address is anonymised immediately after it is collected by the Matomo tool and the last byte is deleted, so it is no longer personally identifiable. Anonymised IP addresses are deleted after 35 days.

You can find out more about the privacy settings we have chosen for the Matomo tool at https://matomo.org/docs/privacy/.

Rights of the data subject

If your personal data (also referred to as “data relating to you”) is processed, you are a data subject under the GDPR and you have the following rights vis-à-vis us as the controller:

Right of access

You may ask us to confirm whether we are processing personal data relating to you. If such processing is taking place, you may request information from us about (1) the purposes of the data processing, (2) the categories of personal data processed, (3) the recipients or categories of recipients to whom the data is disclosed, and (4) the nature of the data processed. the categories of recipients to whom we have disclosed or will disclose your personal data, (4) the intended retention period of your personal data or the criteria for determining the retention period, (5) the right to rectify or erase personal data concerning you, (6) the right to lodge a complaint with a supervisory authority, (7) all available information regarding the source of the data, unless we have obtained the data directly from you, and (8) the existence of automated decision making, including profiling, pursuant to Art. 22 (1) and (4) DSGVO. You have the right to be informed if your personal data are transferred to a third country or an international organisation and if adequate safeguards are in place in accordance with Art. 46 of the GDPR in connection with the transfer. The restrictions under § 34 BDSG apply to the right to information.

Right to rectification

You have the right to have your personal data corrected and/or completed if it is incorrect or incomplete. We will make the correction without delay.

Right to restrict processing

You may request the restriction of the processing of personal data concerning you (1) if you dispute the accuracy of the data concerning you and we have had sufficient time to verify it, (2) if the processing is unlawful and you may request the restriction of the use of your data instead of erasure, (3) if we no longer need the personal data for the purposes of the processing but you need it for the establishment, exercise or defence of legal claims, or (4) if you object to the processing pursuant to Art. 21 (1) DSGVO and it is not yet clear whether our legitimate reasons outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data may be processed – apart from storage – only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State. If the processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

Right to deletion

You may request us to delete your personal data without undue delay; we are obliged to do so if (1) the storage of your data is no longer necessary for the purposes for which it was collected or processed, (2) you withdraw your consent and there is no other legal basis for the processing, (3) you object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO, (4) the data concerning you have been processed unlawfully, (5) the deletion of the data concerning you is necessary to comply with a legal obligation pursuant to Art. 21 (2) DSGVO, or (5) the data concerning you have been processed unlawfully. (6) erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of a Member State of the European Union to which we are subject, or (7) your personal data has been collected in connection with information society services offered pursuant to Article 8(1) of the Regulation.

If we have made the data relating to you public and we are obliged to erase it pursuant to Article 17(1) of the GDPR, we will take reasonable steps, taking into account available technology and the cost of implementation, to notify the data controllers who process the personal data that you, as the data subject, have requested them to erase all links to, or copies or replicas of, that personal data.

In particular, the right of erasure does not apply if the processing is necessary (1) for the exercise of the right of freedom of expression and information, (2) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or (3) for the establishment, exercise or defence of legal claims. In all other respects, the restrictions of Section 35 BDSG apply.

Right of access

If you have a right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the data relating to you has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

Right to data portability

You have the right to obtain the data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to have that data transferred to another controller without hindrance from us, provided that (1) the processing is based on consent or a contract pursuant to Art. 6 (1) (b) DSGVO and (2) the processing is carried out with the aid of automated procedures. In exercising this right, you also have the right to have the data relating to you transferred by us directly to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of data relating to you which is carried out in particular on the basis of Article 6(1)(f) of the GDPR. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for such purposes.

Right to withdraw your consent under the Data Protection Act

You have the right to revoke your data protection consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Automated decision making in individual cases including profiling

We will not make any decisions based solely on automated processing – including profiling – within the meaning of Art. 22 DSGVO, which produce legal effects vis-à-vis you or similarly significantly affect you.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular with the supervisory authority responsible for your place of residence, if you believe that the processing of data relating to you is in breach of the GDPR. The supervisory authority to which the complaint is lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy.

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and has the status 01.07.2023.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. In such cases, we reserve the right to adapt this data protection declaration. The current data protection declaration can be accessed at any time on our website at https://www.misa.de/datenschutz.