Privacy Statement

Last modified: November 2018

We take the protection of your privacy very seriously. That is why we would like to inform you below of how your data will be collected, stored, processed and used when you visit our website.

1. Web server logging

When you visit our website, we collect your user data, such as the browser used, the page accessed, the data volume of data retrieved, the date and the time of access to our website, your IP address or the website from which you visited our page.
These access data do not allow us to identify who the user is. The access data only help us to facilitate your particular visit to MPDV Mikrolab GmbH, to ensure the site is operating properly, to defend the interests of the company in the event of misuse and to constantly improve our platform.

The data are processed pursuant to point (f) of Art. 6 (1) sent. 1 of the EU General Data Protection Regulation (GDPR) in order to pursue legitimate interests:

To establish legal claims and a defense in the event of disputes
To ensure the IT security and IT operations of MPDV Mikrolab GmbH
To prevent criminal offenses
To optimize delivery of the website by analyzing website usage data
For direct and remote marketing

The data will be erased after 12 days.

2. Cookies

We use what are known as cookies. Cookies are small text files that the browser of an internet user stores on their hard disk when they visit a web page. Most cookies are what we call session cookies. These are required so that you can make use of certain functions of our website and are deleted from your hard disk automatically at the end of your browser session. They are stored temporarily on the basis of point (b) of Art. 6 (1) sent. 1 GDPR.

We only use a very few persistent cookies on our website. These are cookies that are stored on your hard disk for a longer period of time, and we will only use them with your consent. The purpose of these cookies is to tell us which pages are visited and how many users have visited our website, and to enable us to analyze user behavior on our website.

When you access our web pages, you can agree to or refuse the use and storage of cookies on your hard disk. Most browsers accept cookies automatically. You can also modify your browser settings to allow or prohibit the cookies. To delete cookies, please also refer to your browser’s help function. You can view our web pages without cookies, but you should note that in this case you may not be able to use all the functions of the website.

For how to set cookies, please refer to “Cookie settings” on our website.

3. Google invisible reCAPTCHA

To ensure the appropriate level of data security when using contact forms, we use the reCAPTCHA service of Google LLC in certain cases. We do so primarily in order to distinguish between entries made by a natural person and automated processing performed by a robot. This is an overriding legitimate interest of ours within the meaning of point (f) of Art. 6 (1) sent. 1 GDPR. The service includes transmission to Google of the IP address and any further data that Google may require for the reCAPTCHA service. This is governed by the deviating data privacy policy of Google LLC.

According to the Commission Implementing Decision (EU) 2016/1250 of July 12, 2016, transfers of data from a controller or processor in the EU to organizations in the US that have self-certified their adherence to the EU-US Privacy Shield Framework Principles, including the Supplemental Principles, with the Department of Commerce and have committed to comply with them are allowed. Google has self-certified its adherence to these Principles with the Department of Commerce and has committed to comply with them.

Further information about the data protection policies of Google LLC can be found here: https://www.google.com/intl/en/policies/privacy/.

4. Web tracking

This site uses web analyses with your consent for the purposes of measuring its reach in accordance with point (a) of Art. 6 (1) sent. 1 GDPR in order to enable the effective implementation of advertising measures and public relations. The collection of personal data for this purpose is minimized in that your IP address is always anonymized when recorded on the relevant web server. The controller does not combine such data with other data that in particular enable the user to be identified.

4.1 Google Analytics

Our website uses Google Analytics, a web analysis service of Google LLC (“Google”). Google Analytics uses cookies, which are text files that are stored on your computer and enable your use of the website to be analyzed. The information created by the cookie about your use of our website (including your IP address) is generally sent to a Google server in the USA and stored there. Please note that this website uses the extension “_anonymizeIp()” from Google Analytics. This enables the IP address anonymity function on this website, so that your IP address will be abbreviated beforehand by Google within Member States of the European Union and in other signatories to the Treaty on the European Economic Area prior to transfer to the USA. Only in exceptional circumstances will the full IP address be sent to a Google server in the USA and shortened there. The shortening excludes the possibility of any direct link to a person. Google will use this information to evaluate your use of our website, to compile reports on the website activities for the website operators and to provide additional services in connection with the use of the website and the internet. Google may also transfer this information to third parties if it is required to do so by law or where third parties process these data on behalf of Google.

You can prevent the installation of cookies by making the corresponding settings in your browser software. Please note, however, that if you do so you may not be able to make full use of all functions of this website. By clicking on the “I consent” button in the cookie window that appears the first time you access our website, or by making the corresponding settings in our cookies settings, you declare that you allow Google to process the data collected about you of the type and in the manner described and for the purpose set out above. You can withdraw your consent at any time with effect for the future, i.e. without prejudice to the lawfulness of the data processing based on consent before its withdrawal, in one of the following ways:

By changing the cookie settings on our website
By downloading and installing the browser plug-in available on the following link: http://tools.google.com/dlpage/gaoptout?hl=de
By clicking on the following link:

Disable Google Analytics

This sets an opt-out cookie that prevents your data being recorded the next time you visit this website.

Further information about Google’s terms of use and data protection can be found at www.google.com/intl/en/policies/.

Google Analytics also allows us to track events on our website, such as clicking on certain buttons, downloading information, etc., by means of a JavaScript. You cannot object to the tracking of individual events; you can only disable tracking entirely as described above.

4.2 Use of Google Tag Manager

Google Tag Manager is a solution from Google (see section 4.1 above) that allows us to manage website tags by means of an interface. Tags are small code elements on our website that are used to measure traffic and user behavior, record the effect of online advertising and social channels, cater to target groups and allows remarketing, and test and optimize our website, among other features. Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not record any personal data. The tool initiates other tags that may record data under certain circumstances. Google Tag Manager does not access these data, however. If anything is disabled at domain or cookie level, this applies for all tracking tags that are implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

To be excluded from Google Tag Manager's collection, you must disable Google Analytics as described above.

4.3 Analysis by wiredminds

Our website uses the tracking pixel technology of wiredminds GmbH (www.wiredminds.de) in order to analyze visitor behavior. This may entail collecting, processing and storing data from which user profiles can be created under a pseudonym. These user profiles are completely anonymized where possible and advisable. Cookies may be used for this purpose. Cookies are small text files that are stored on the visitor’s web browser and enable the browser to be identified again. The data collected, which may also include personal data, will be transferred to wiredminds or collected directly by wiredminds. wiredminds may use information that is provided by visits to the websites in order to create anonymized user profiles. Without the specific consent of the data subject, the data obtained will not be used in order to identify the user of this website personally, nor will they be associated with personal data concerning the bearer of the pseudonym. Where IP addresses are recorded, they will be anonymized immediately by deleting the last number block.

Opt out of website tracking

5. Registration form

If you use the register form we provide in order to register for events and trade fairs which we attend, we will process your contact data, including your first name and surname, email address, position in the company, phone number and address of your company, only for the purposes of processing your registration and therefore on the legal basis of point (b) of Art. 6 (1) sent. 1 GDPR. We need your email address and phone number so that we can contact you to ask you questions or give you further information regarding your registration.

6. Registration to receive emails with information from the MPDV group

If you register with us in order to receive news and information from the MPDV group by email, you consent in the processing of the data you provide on the registration form solely for the purposes of sending and personalizing an email with information from the MPDV group. Moreover, you consent to the transfer of your data for the same purposes to our affiliate company Perfect Production GmbH, Gewerbepark Hardtwald 6, 68723 Oftersheim, 06202 9335-550, info@perfect-production.de. We will also store your IP address so that we can prove your consent. After providing us with your email address, you will receive a confirmation email containing a link which you must click on in order to actually receive the emails. This confirmation email is required so that we can verify that you are the owner of the email address provided. Only after you click on this link will your email subscription be effective.

The data will be processed on the basis of point (a) of Art. 6(1) GDPR.

We and our affiliate company use a newsletter management tool of a third-party provider in order to send the emails with information from the MPDV group. We have selected this provider carefully and concluded a data privacy contract with it so that we retain control over your data. We analyze the opening and click rates of these emails, but this is done completely anonymously, i.e. without any reference to individual users.

At the bottom of every email with information from the MPDV group is a link that you can use to unsubscribe from these mails at any time. You can also do so by contacting the address given below.

The withdrawal of your consent by unsubscribing from the emails with information from the MPDV group does not affect the lawfulness of the data processing based on consent before its withdrawal. If you unsubscribe from these emails, the data we have stored for the purpose of sending these emails will be erased unless this conflicts with duties of retention under statutory provisions.

7. Support portal/customer portal

MDPV stores and uses the personal data communicated by users of the portal for the performance and execution of software maintenance and projects. The data will be processed on the basis of the legitimate interests pursued by MPDV in performing and documenting the services owed (point (f) of Art.(1) GDPR).

Personal data communicated in tickets will be stored and used by MDPV in order to perform the software maintenance and projects within the scope of commissioned processing according to Art. 28 GDPR.

For the purposes of performing the service, it may be necessary to transmit the data to enterprises that are associated with MDPV within the meaning of section 15 of the German Stock Corporation Act (AktG). Data will not be transmitted to third parties or used for advertising purposes.

At the end of the software maintenance contract and/or project contract, the personal data of the customer will be blocked from further use and will be erased at the end of the retention periods required under tax and commercial law, but not earlier than 10 years after the end of the software maintenance contract or project contract.

8. Web shop

The web shop gives companies the opportunity to acquire tangible and intangible goods as well as services from the MPDV Group. Personal data will be processed for the accounting, shipping and provision of the goods and services on the basis of the economic interests and the interests in performing the contractually agreed service according to point (f) of Art. 6(1) GDPR.

The MDPV Group points out that the data collected will be used on the basis of its legitimate interest in direct advertising for its own products, in particular also for email advertising and customer satisfaction surveys (point (f) of Art. 6(1) GDPR in conjunction with section 7(3) of the German Unfair Competition Act (UWG)). You have the right to object to this advertising at any time with effect for the future. To do so, please contact the administrator using the contact details indicated or use the unsubscribe link shown in the letter.

The training sessions are offered with meals. It is possible that participants will notify particular dietary requirements (e.g. allergies) when registering. The MDPV Group does not require such disclosures; they are provided by the participant on a voluntary basis. The data will be processed in order to meet the particular requirements on the basis of consent according to point (a) of Art. 9(2) GDPR. These data will be erased without delay after the conclusion of the training.

Other personal data will be erased at the end of the retention periods required under tax and commercial law, but not earlier than 10 years after conclusion of the contract.

9. Customer survey

Satisfaction surveys are conducted for the purposes of continuous development and quality assurance. Satisfaction surveys are normally conducted anonymously and cannot be traced back to the individual person.

In satisfaction surveys following training courses, names and contact details can be provided on a voluntary basis (point (a) of Art. 6(1) GDPR). MPDV will use this information to make contact in the event of inquiries and if further information is requested. The survey data will be anonymized after the purpose has been achieved, and not later than after 180 days. Consent to data processing and to contact can be withdrawn at any time with effect for the future.

Satisfaction surveys will be offered to the customer after support orders. The data will be stored for the purposes of continuous development and quality assurance on the basis of a legitimate interest pursued by MPDV (point (f) of Art. 6(1) GDPR in conjunction with section 7(3) UWG) and will be erased after one year.

For the conduct of online satisfaction surveys the MPDV Group uses the services of Netigate GmbH, which can also receive access to personal data for the purposes of processing.

10. Controller

MPDV Mikrolab GmbH
Römerring 1
74821 Mosbach, Germany

Email: marketing@mpdv.com

11. Your rights

We will respect your rights listed below insofar as the statutory requirements for asserting the rights are on hand.

Right to object (Art. 21(1) GDPR)

If your data are processed for the pursuit of legitimate interests, you have the right to object to this processing at any time, using our contact details provided, if there are any grounds relating to your particular situation that conflict with this data processing. This applies accordingly to profiling based on our legitimate interests. We will then cease this processing unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Right to object (Art. 21(2) GDPR)

If your data are processed for the purposes of direct marketing, you have the right to object to this processing at any time, using our contact details given above; this also applies for profiling to the extent that it is related to such direct marketing.

Right to withdraw consent

If you have consented to the processing of your data, you have the right to withdraw this consent for the future at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal. To do so, please contact the controller using the contact details provided above.

Right to access, rectification, erasure, restriction of processing, data portability

You have the right under Art. 15 GDPR to obtain access free of charge to the personal data concerning you that have been stored. Pursuant to Art. 16, 17 and 18 GDPR, you also have the right to rectification of inaccurate data as well as to restriction of processing and erasure of your personal data.

Subject to the particular requirements of Art. 20 GDPR, you also have the right to receive the personal data concerning you that have been stored in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from us.

To do so, please contact the controller using the contact details provided above.

Right to complain

As a data subject, you can lodge complaints at any time with the competent regional commissioner for data privacy and freedom of information (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

12. Data protection officer

We take your trust very seriously. If you have any questions about data protection or our data privacy policy, please contact our data protection officer:

ENSECUR GmbH

Personally responsible: Michael Konitzer
Kaiserstraße 86
76133 Karlsruhe, Germany
Email: datenschutz@mpdv.com or dsb-mpdv@ensecur.de

13. Duration of storage and routine erasure

Unless specified otherwise for the specific data processing in this Privacy Policy, we only process and store personal data for the period required for the achievement of the purpose of the processing or to the extent provided for in laws or regulations that we are subject to.

If the purpose of storage no longer applies or a storage period prescribed by law runs out, the personal data will be routinely blocked or erased in accordance with the statutory provisions.

14. Categories of data recipients; Data transfers to third countries

Service providers and vicarious agents we use in connection with this website, e.g. host providers, agencies and IT service providers as well as the providers mentioned in sec. 3 and 4 of this Privacy Policy, may have access to your personal data. Where these service providers and vicarious agents act on our behalf, however, they only act on instruction and will be contractually obligated accordingly. This applies accordingly to service providers which have their legal seat in a third country (outside the EU/EEA). Data transfers to third countries take only place as described in sec. 3 and 4 of this Privacy Policy.

Moreover, within the scope of your consent our affiliate company Perfect Production GmbH has access to your data (see sec. 6 of this Privacy Policy).