Data Protection Declaration

 

I. Name and address of the responsible

Responsible within the meaning of the General Data Protection Regulation, other data protection laws in force in the Member States of the European Union and other provisions of a data protection nature is:

 

 

Meffert AG Farbwerke

Klaus Meffert (Vorstandsvorsitzender), Dieter Meffert (Vorstand)

Sandweg 15

55543 Bad Kreuznach

Deutschland

 

 

 

Tel.: +49 671-870-0

E-Mail: info@meffert.com

Website: www.meffert.com

 

II. Name und Anschrift des Datenschutzbeauftragten

Der Datenschutzbeauftragte des Verantwortlichen ist:

 

 

Markus Milferstedt

Datenschutzbeauftragter

Meffert AG Farbwerke

Sandweg 15

55543 Bad Kreuznach

 

 

 

Telefon: +49 671-870-0

E-Mail: datenschutzbeauftragter@meffert.com

Website: www.meffert.com

 

 

III. General information for data processing

1. Scope of processing personal data

In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar we obtain the consent of the data subject for processing of personal data, Article ( 1) (a) EU General Data Protection Regulation (GDPR) serves us as legal basis for the processing.

For processing of personal data required for the fulfillment of a contract the processing is based on Article 6 (I) (b) GDPR. This also applies to processing operations required to carry out pre-contractual actions.

Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company Article 6 (1) (a) GDPR serves us as legal basis.

Provided that the processing of personal data gets required to protect essential interests of the person concerned or another individual person the processing would be based on Article 6 I lit. d GDPR.

If processing is necessary to safeguard the legitimate interests of the Meffert AG or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Article 6 (1) (f) GDPR as legal basis for processing.

3. Data deletion and storage period

The personal data of the corresponding person will be deleted or blocked as soon as the purpose of their storage is achieved. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

IV. Providing the website and creating logfiles

1. Description and scope of data processing

On each access of our website our system automatically collects data and information from the computer system of the calling party.

The following data are collected:

 

(1) Information about Browser type and version used

(2) The operating system used

(3) Internet service provider of the user

(4) IP-address

(5) Date and time of access

(6) The Internet page from which an accessing system reaches our Internet page (so-called referrer)

(7) The internet page which is called on our site

The data is stored in log files of our system. A storage of this data together with other personal data of the user does not take place.

 

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6 (1) lit. f GDPR.

 

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to allow the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

The storage in log files is done to ensure that the website works. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes will not take place in this context.

In these purposes lies our legitimate interest in data processing under Article 6 (1) lit. f GDPR.

In the case of storing the data in log files, this is the case after 60 days at the latest. It is not possible to store it beyond. In this case, users ' IP addresses are alienated, so it is no longer possible to assign the calling client.

 

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of the collection of the data to provide the website, this is the case when the respective session is finished.

 

In the case of storing the data in log files, this is the case after 60 days at the latest. It is not possible to store it beyond. In this case, users ' IP addresses are alienated, so it is no longer possible to assign the calling client.

5. Opposite possibility and remedy

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

 

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files stored in the Internet browser or from the Internet browser on the user's computer system. If a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be clearly identified when revisiting the site.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

Performance or perfomance cookies

These cookies collect information about the behavior of the users on the site and whether users get error messages (if so, where and after what events). Loading times or the behavior of the website with different browser types are also measured with perfomance cookies.

 

• Name of the cookie: _pk_id.93.5c85

Duration: 1 year

Purpose of processing: These cookies are used by the open source software Matomo for statistical analysis of visitor access.

 

 

 

• Name of the cookie: _pk_ref.93.5c85

Running time: 1 hour

Purpose of processing: These cookies are used by the open source software Matomo for statistical analysis of visitor access.

 

 

 

• Name of the cookie: _pk_ses.93.5c85

Running time: 1 hour

Purpose of processing: These cookies are used by the open source software Matomo for statistical analysis of visitor access.

 

 

 

• Name of the cookie: _ ga

Duration: 2 years

Purpose of processing: These cookies are used by Google Analytics for statistical analysis of visitor access.

 

 

 

• Name of the cookie: _ gat

Running time: 1 second

Purpose of processing: These cookies are used by Google Analytics for statistical analysis of visitor access.

 

 

 

• Name of the cookie: _ gid

Duration: 1 dayp>

Purpose of processing: These cookies are used by Google Analytics for statistical analysis of visitor access.

 

 

&nb

Functional cookies

These cookies are not strictly necessary, but they increase the "usability" of a website. For example, the once entered location is saved in order to immediately display this location for the respective user when the page is called again. Foralgained data once entered, the size of the font or similar, can also be stored.

 

 

• Name of the cookie: Cb-enabled

Duration: 1 year

Purpose of processing: Disable the cookie bar if the visitor had consented to the use of cookies..

 

 

The data of the users collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.

When our website is accessed, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how cookies can be prevented from storing cookies in the browser settings.

When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent is obtained to process the personal data used in this connection. In this context, there is also a reference to this privacy policy.

 

b) Legal basis for data processing

The legal basis for processing personal data using cookies is Article 6 (1) lit. f GDPR.

c) Purpose of data processing

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser be recognized even after a page change.

The user data collected by technical cookies is not used to create user profiles.

The user data collected by technical cookies is not used to create user profiles.

In these purposes, our legitimate interest lies in the processing of personal data in accordance with Article 6 (1) lit. f GDPR.

e) Duration of storage, possibility of objection and disposal

Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all the functions of the website to the full.

VI. Contact form and E-Mail

1. Description and scope of data processing

The contact form of our website can be used for electronic contact. If a user contacts us through this form, the data entered in the input mask will be transmitted to us and saved. These data are:

 

 

• Title

• Form of address

• First name

• Surname

• Company

• Street

• Country

• Post code

• City

• Phone

• Fax

• E-Mail Address

• Message

 

 

At the time of sending the message, the following data is also stored:

 

(1) The user's IP address

(2) Date and time of registration

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

 

In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

 

 

2. Legal basis for data processing

Legal basis for the processing of the data is in the presence of the consent of the user Article 6 (1) (a) GDPR.

 

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Article (6) (1) (b) GDPR.

3. Purpose of data processing

The processing of the personal data from the input form serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data collected by contact form and those sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is finished when it can be inferred from the circumstances that the relevant facts have been finally clarified.

 

5. Opposite possibility and remedy

The user can revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can revoke the storage of his personal data at any time. In such a case, the conversation cannot continue.

The revocation of consent and the objection of storage can be directed to datenschutzbeauftragter@meffert.com.

In this case all personal data stored in the course of contacting will be deleted.

 

VII. Web analysis by Matomo (formerly PIWIK)

1. Amount of processing of personal data

We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. The software sets a cookie on the user's computer (for cookies, see V above). If individual pages of our website are accessed, the following data will be stored:

 

(1) Two bytes of the IP address of the user's calling system

(2) The website viewed

(3) The website from which the user entered the accessed website (referrer)

(4) The subpages accessed from the website viewed

(5) The length of stay on the website

(6) The frequency of the visit to the website

 

The software runs exclusively on the servers of our website. The personal data of the users will only be stored there. The data will not be passed on to third parties.

 

The software is set in such a way that the IP addresses are not fully stored, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling machine.

 

2. Legal basis for the processing of personal data

The legal basis for processing users ' personal data is Article 6 (1) lit. f GDPR.

3. Purpose of data processing

The processing of the personal data of the users allows us to analyse the surfing behavior of our users. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. In these purposes, our legitimate interest lies in the processing of the data in accordance with Article 6 (1) lit. f GDPR. By anonymizing the IP address, the interest of users in protecting them personal data is sufficiently taken into account.

4. Duration of storage

The data will be deleted as soon as it is no longer needed for our recording purposes.

 

In our case after 30 days.

5. Opposite possibility and remedy

Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all the functions of the website to the full.

We offer our users on our website the possibility of an opt-out from the analysis process. To do this, you need to follow the link. In this way, another cookie is placed on their system, which signals our system not to store the user's data. If the user clears the corresponding cookie from his own system in the meantime, he must reset the opt-out cookie.

 

For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.

VIII. Google Analytics

Meffert AG uses color works for the website Google Analytics, a web analytics service of Google Inc. ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your computer and that allow you to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide other services related to the use of the website and the internet. To the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being stored by adjusting your browser software accordingly; However, we would like to point out that in this case you may not be able to make full use of all the functions of this website.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing that data by using it by using it by using the browser plugin available below the link below Download and install: tools.google.com/dlpage/gaoptout

Meffert AG Colour Works uses its own cookies on the website in various places, which serve to make the website's offer more user-friendly. Each user is free to prevent the installation of such cookies by adjusting their browser accordingly. However, Meffert AG Colours points out that the user may not be able to make full use of all the functions of the website in the event of such a setting.

IX Google Maps plugin

We use a plugin of the internet service Google Maps on our website. The operator of Google Maps is Google Inc., based in the United States, CA 94043, 1600 Amphitheatre Parkway, Mountain View. By using Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the transmitted data, nor about its use by Google. In this context, Meffert AG denies linking the data to information from other Google services and collecting personal data. However, Google can submit the information to third parties. If you turn it off in your browser, you prevent Google Maps from running. You will not be able to use a map display on our website. By using our website, you will agree to the described collection and processing of the information by Google Inc. For more information on the privacy policy and terms of use for Google Maps, please visit: www.google.com/intl/de_de/help/terms_maps.html

X. Rights of the affected person

If your personal data is processed, you are a victim within the meaning of GDPR. Then you have the following rights to the person responsible:

1. Right of information

Every data subject has the right granted to request confirmation from the controller whether or not personal data relating to him/her are being processed.

Every person affected by the processing of personal data has the right, granted by the European guideline and regulation provider, to receive information regarding:

(1) the processing purpose of personal data;

(2) the categories of personal data;

(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(5) the existence of a right to rectify or delete personal data concerning him/her or to restrict the processing by the controller or to have a right of objection to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) if the personal data are not collected from the person concerned: All available information about the origin of the data;

(8) das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling gemäß Art. 22 Abs. 1 und 4 DSGVO und – zumindest in diesen Fällen – aussagekräftige Informationen über die involvierte Logik sowie die Tragweite und die angestrebten Auswirkungen einer derartigen Verarbeitung für die betroffene Person.

Remember, the data subject has a right to know whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject shall otherwise be entitled to obtain information on the appropriate guarantees based on Article 46 GDPR in connection with the transmission.

2. Right of rectification

Every person affected by the processing of personal data has the right, to demand the immediate correction of inaccurate personal data concerning him/her. Furthermore, the data subject has the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of processing. The responsible person must make the correction without delay.

3. Right to restrict processing

Every person affected by the processing of personal data has the right, to require the data controller to restrict the processing if one of the following conditions is met:

(1) if the accuracy of the personal data is denied by the person concerned for a period of time that allows the person responsible to verify the accuracy of the personal data;

(2) processing is unlawful, the person concerned refuses to delete personal data and instead demands that the use of personal data be restricted;

(3) the controller no longer requires personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

(4) if the data subject has lodged an objection against the processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate grounds of us outweigh those of the data subject.

If the processing of your personal data has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, you will be notified by the person responsible before the restriction will be removed.

4. Right of deletion (right to be forgotten)

a) Deletion obligations

Every person affected by the processing of personal data has the right, to demand that the person responsible delete the personal data concerning him/her immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

(1) Personal data have been collected or otherwise processed for such purposes, for which they are no longer necessary.

(2) The data subject withdraws his or her consent, on which the processing is based pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for processing.

(3) The data subject submits an objection to the processing in accordance with Article 21 (1) GDPR and there are no primordial legitimate grounds for processing, or you object to the processing in accordance with Article 21 (2) GDPR.

(4) Your personal data have been processed illegally.

(5) The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

(6) Personal data were collected in relation to the information society services offered in accordance with Article 8 (1) GDPR.

b) Information to third parties

If personal data have been made public, our company is the person responsible pursuant to Article 17 (1) GDPR is obliged to delete personal data, we shall take appropriate measures, taking into account the available technology and the implementation costs, including technical measures, to inform other data controllers who process the published personal data, that the data subject has requested the deletion of all links to or copies or replications of these personal data from these other data controllers, insofar as the deletion of all links to these personal data is obligatory, taking into account the available technology and implementation costs. We will make the necessary arrangements in individual cases.

c) Exceptions

The right of deletion does not exist if the processing is necessary:

(1) to exercise the right to freedom of expression and information;

(2) to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or in the exercise of public authority delegated to the controller;

5. Right to teaching

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about these recipients.

6. Right to transfer data

Every person affected by the processing of personal data shall have the right, granted by the European guideline and regulatory body, to receive personal data concerning him/her in a structured, established and machine-readable format. It also has the right to transfer these data to another controller without hindrance by us to whom the personal data have been made available, provided that

(1) the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2)(a) GDPR or on a contract pursuant to 6 (1) (b) GDPR and

(2) the processing is carried out by means of automated procedures.

In the exercise of its right to transfer the data subject has the right to obtain that the personal data be transferred directly from us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

7. Right to revocation

Any person affected by the processing of personal data shall have the right to object at any time to the processing of personal data relating to him/her on the basis of Article 6 (1)(e) or (f) GDPR, for reasons arising from his particular situation. This also applies to profiling based on these provisions.

We will no longer process personal data in the event of an objection, unless we can prove compelling grounds worthy of protection for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If we process personal data in order to carry out direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.

If the data subject objects to the processing of personal data by us for direct advertising purposes, we will no longer process the personal data for these purposes.

8. Right to revoke consent under data protection law

Every person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time, granted by the European guideline and regulation provider. If the data subject wishes to exercise his or her right to revoke consent, he or she may at any time contact our data protection officer or another employee of the controller.

9. Automated decision on a case-by-case basis including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – that has legal effect on you or similarly significantly impairs you. This does not apply if the decision

(1) is necessary to conclude or fulfil a contract between you and the person responsible;

(2) is permitted under legislation by the Union or Member States to which the person is responsible and that legislation contains appropriate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(3) with your express consent.

However, these decisions may not be based on specific categories of personal data under Article 9 (1) of the GDPR, unless Article 9 (2) lit. (g) GDPR and appropriate measures have been taken to protect rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms and legitimate interests, for which at least the right to the right of a person to intervene on the part of the person responsible, Presentation of one's own position and to challenge the decision.

10. Right to complain with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of your personal data based on GDPR is lawfully.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.