Privacy Policy
Controller
MRK-Systeme GmbH Stätzlinger Straße 70 86165 Augsburg, Germany Managing Director: Dr.-Ing. Peter Heiligensetzer Email: info@mrk-systeme.de Phone: +49 821 66 60 12-0
Hosting
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA ("Vercel"). Vercel automatically processes technical information transmitted by your browser (so-called server log files), such as IP address, browser type, operating system, referrer URL, and the date and time of access. This data is technically necessary to deliver the website to you and to ensure system security (Art. 6 (1)(f) GDPR). Vercel stores the server log files only briefly and then deletes them automatically. A data processing agreement (Art. 28 GDPR) is in place with Vercel. As Vercel Inc. is based in the USA, your data may be transferred to the USA. This transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Vercel Inc. is certified; in addition, Vercel has committed to complying with the EU Standard Contractual Clauses.
Web Analytics
We use Vercel Analytics, a privacy-friendly web analytics service provided by our hosting provider Vercel Inc. Vercel Analytics does not set cookies. Visitors are only distinguished pseudonymously by means of a daily changing hash value that is discarded after 24 hours; only aggregated usage statistics are evaluated (e.g. pages visited, country of origin, device type). The legal basis is our legitimate interest in analyzing and improving our website (Art. 6 (1)(f) GDPR). A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework (see section "Hosting").
Contact Form
If you send us a request via the contact form, we process the information you provide (name, email address, company if given, message) to handle your request and any follow-up questions. The legal basis is Art. 6 (1)(b) GDPR where your request aims at concluding a contract (pre-contractual measures), and otherwise Art. 6 (1)(f) GDPR (our legitimate interest in answering general inquiries). For the technical transmission we use the form service Web3Forms. The provider is Web3Creative, based in India. Your input is transmitted to Web3Forms together with technical data (IP address, time, referring page) and forwarded from there to us by email. Web3Forms uses sub-processors, including Amazon Web Services and Cloudflare (hosting, email delivery, security) as well as the spam filters CleanTalk and Akismet (Automattic), which receive your IP address and email address for this purpose. Your data is therefore also processed in third countries outside the EU, in particular in India and the USA. A data processing agreement (Art. 28 GDPR) is in place with the provider, which incorporates the EU Standard Contractual Clauses for transfers to third countries (Art. 46 (2)(c) GDPR). Under this agreement, submissions are technically stored at Web3Forms for up to three years and then deleted automatically; if we stop using Web3Forms, they are deleted within 90 days. We delete your request no later than 6 months after it has been fully processed, unless statutory retention obligations (e.g. for business correspondence) apply.
Google Maps
On the “Company” page you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The map is only loaded when you actively click “Load map”; no data is transferred to Google beforehand. After the click, your IP address and technical information about your browser in particular are transmitted to Google; Google may also set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give by clicking. Consent applies only to the respective page view; the map is not loaded automatically on your next visit. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. Google is independently responsible for the processing of your data after the map has been loaded. For more information, see Google’s privacy policy: https://policies.google.com/privacy
Google Analytics
If you have given your consent in the cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics sets cookies (including “_ga” and “_ga_<ID>”, stored for up to 2 years) and collects information about your use of this website, such as pages visited, time spent, referral source, device, browser and approximate location. Your IP address is transmitted to Google in full; Google Analytics 4 uses it only to determine your approximate location and, according to Google, does not store it. We have disabled Google Signals and the use of the data for personalized advertising. The purpose is the statistical evaluation and improvement of our website. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer and selecting “Reject”; the Google Analytics cookies are then deleted. Personal data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, we have concluded a data processing agreement with Google. Data collected by Google Analytics is deleted after 2 months. More information: https://policies.google.com/privacy
Your Rights as a Data Subject
Under the GDPR, you have the following rights regarding your personal data: – Right of access (Art. 15 GDPR) – Right to rectification (Art. 16 GDPR) – Right to erasure (Art. 17 GDPR) – Right to restriction of processing (Art. 18 GDPR) – Right to data portability (Art. 20 GDPR) – Right to object to processing (Art. 21 GDPR) – Right to withdraw any consent given, with effect for the future (Art. 7 (3) GDPR) Please contact us using the details given in the "Controller" section above. Right to object: Where we process your data on the basis of Art. 6 (1)(f) GDPR (legitimate interest), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27 (Schloss) 91522 Ansbach, Germany