Privacy Policy
The person responsible within the meaning of the General Data Protection Regulation (GDPR) is:
mycon GmbH
Senner Street 156
33659 Bielefeld
Tel.: (0521) 403090
E-mail:info@mycon-germany.com
Data Protection Officer
CRO Data Protection GmbH
Nora Loof
Adenauer Square 4
33602 Bielefeld
With this data protection notice we inform you (hereinafter referred to as “user” or “data subject”) about our data processing in connection with the use of digital systems that process, display data and connect to a cloud. We will also inform you about your rights regarding the processing of your data. The term “data processing” always refers to the processing of personal data. We attach great importance to protecting your privacy and the security of your personal data. Please read this Agreement carefully to understand how we will treat your information.
1. General information on data processing
The Systems may collect personal information from you when you use them, register, contact us or otherwise interact with them.
1.1 Categories of personal data
We process the following categories of personal data:
- Inventory data(e.g. names, addresses, functions, organizational affiliation, etc.);
- Contact details(e.g. email, telephone/fax numbers, etc.);
- Content data(e.g. text input, image files, videos, etc.);
- Usage Data(e.g. access data);
- Meta/communication data(e.g. IP addresses).
1.2 Recipients or categories of recipients of personal data
If we disclose personal data to other people and companies, such as contract processors or third parties, transfer it to them or otherwise grant them access to it, this is done on the basis of legal permission (e.g. if a transfer of the data to third parties is necessary for the fulfillment of the contract in accordance with Art. 6 Para. 1 lit. b GDPR) if the data subjects have consented or a legal obligation requires this.
1.3 Duration of storage of personal data
The criterion for the duration of storage of personal data is the respective statutory retention period. After the deadline has expired, the relevant data will be deleted unless it is no longer required to achieve the purpose.
1.4 Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs as part of the use of third-party services or the disclosure or transmission of data to third parties, this will only occur if it is to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 ff. GDPR are met, i.e. the processing is carried out on the basis of special guarantees, such as the officially recognized determination of a data protection level that corresponds to the EU or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
2. Data processing
We process and use your personal data to provide you with the functions and services of the systems, to process your requests, to improve the performance of the systems and to provide you with relevant information. This includes transmitting and storing your data in the cloud.
2.1 Cookies/technologies
The systems may use cookies and similar technologies to analyze your usage, store user preferences and provide you with a personalized experience. By using the Systems, you consent to the use of such technologies. However, you have the option to control the use of cookies in your browser settings. The legal basis for the use of technically necessary cookies is Article 6 (1) (f) GDPR.
2.2 Integration of third-party services and content
We are present on social networks and other virtual platforms with content in order to communicate with customers, interested parties and users and to present our services there. When accessing these networks and platforms, the terms and conditions and data protection guidelines of the respective operators apply. This is particularly important if you access our profiles via relevant links on our website.
Unless otherwise stated in our privacy policy, we process your personal data that you provide to us via social networks and virtual platforms as part of our communication, e.g. by sending messages to us, to process your inquiries. The legal basis for this processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
We also use third-party services on our website to optimize and analyze our online presence and to integrate their content and services such as videos or fonts (hereinafter referred to as “services”). This integration always requires that the third party providers of these services process your IP address. Since this cannot be technically prevented, the processing of the IP address is necessary for the use and implementation of the services. We strive to only use services whose providers only use the IP address to deliver the services. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “web beacons” can be used to evaluate various information, such as your visit to our website. Information can also be stored in pseudonymized form in cookies on your device, which processes technical information about your browser and operating system, referring websites, visiting times and other information about the use of our online offering. The legal basis for this processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR. Services used may include:
2.2.1 Google Maps
Integration of maps from the “Google Maps” service. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. The privacy policy of this third party can be found at Google Privacy Policy. If you agree to the use of Google Maps, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR. We also have a legitimate interest in optimizing our online offering, Art. 6 Para. 1 lit. f GDPR.
2.2.2 Google Fonts
Integration of fonts from Google Inc. For the European region, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. The privacy policy of this third party can be found at Google Privacy Policy. If you agree to the use of Google Fonts, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR. We also have a legitimate interest in optimizing our online offering, Art. 6 Para. 1 lit. f GDPR.
2.3 Hosting
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offering. In doing so, we or our processor process inventory data, contact data, content data, contract data, usage data, meta and communication data based on our legitimate interests in the efficient and secure provision of this online offer in accordance with Article 6 (1) (f) GDPR in conjunction with Article 28 GDPR.
3. Data processing as part of contacting you
3.1 Contacting us by email or telephone
You can contact us using the email address or telephone number published on our website. If you use this contact option, the data you provide (e.g. last name, first name, address, telephone number) as well as all other personal data you provide will be stored in order to contact you and process your request. Additionally, when you contact us via email, the following data is recorded by our system:
- IP address of the requesting computer;
- Date and time of the email.
The legal basis for the processing of personal data in the context of emails or telephone calls is Article 6 Paragraph 1 Letters b and f of the GDPR.
3.2 Contact by post
If you send us a letter, the data you provide (e.g. last name, first name, address) as well as the information contained in the letter and all other personal data you provide will be stored in order to contact you and process your request. The legal basis for the processing of personal data in the context of letters and faxes is Article 6 Paragraph 1 Letters b and f of the GDPR.
4. Your rights
As a data subject, you have the following rights in connection with the processing of your personal data:
4.1 Right to information
(1) You have the right to request confirmation from us as to whether personal data concerning you is being processed; If this is the case, you have the right to access this personal data and the following information: a) the purposes of the processing; b) the categories of personal data processed; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period; e) the existence of a right to rectification or deletion of personal data concerning you or to restriction of processing by the controller or a right to object to such processing; f) the existence of a right to lodge a complaint with a supervisory authority; g) if the personal data are not collected from the data subject, any available information about the origin of the data; h) the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
(2) You have the right to receive a copy of the personal data that is the subject of processing.
4.2 Right to rectification
You have the right to request that inaccurate personal data concerning you be corrected. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement.
4.3 Right to deletion
You have the right to request that personal data concerning you be deleted immediately, and we are obliged to delete personal data without delay if one of the following reasons applies: a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; b) you revoke your consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no other legal basis for the processing; c) You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR; d) The personal data was processed unlawfully; e) The deletion of the personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject; f) The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
4.4 Right to restrict processing
You have the right to request restriction of processing if one of the following conditions applies: a) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data; b) The processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data; c) We no longer need the personal data for the purposes of processing, but you need it to establish, exercise or defend legal claims; d) You have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR as long as it is not yet clear whether the legitimate reasons of our company outweigh those of the data subject.
4.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another person responsible without hindrance from us, provided that the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures are carried out. When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another person responsible, to the extent that this is technically feasible.
4.6 Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR; This also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct advertising purposes, the personal data will no longer be processed for these purposes.
4.7 Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.
4.8 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
5. Changes to this Privacy Policy
We may update this privacy policy from time to time. We will notify you of any material changes to the way we process your personal data. Please check this Privacy Policy periodically for any updates or changes.