Contact data of the responsible person/s

mh SERVICE GmbH
Martin Hermann
Barthelsmühlring 24
D-76870 Kandel
07275-40444-0
07275-40444-49
info@mh-service.de

Welcome on our homepage. The protection of your data is most important to us. Therefore, we show you below how we process your personal data.

Data categories; data sources

In principle, we process the personal data that you provide to us in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and if this is necessary for the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial register, debtor directory, internet) or permissibly transmitted to us by third parties (e.g. credit bureaus).

This may include personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising letters) and other comparable categories of personal data.

General processing of visitor data

The use of our website is generally possible without providing personal data.

However, we would like to point out that access data is also collected in this case and stored in the server log files. These are in particular the following data:

• Browser type / your browser version,
• Operating system,
• The website from which you are visiting us,
• Date and time of your visit,
• Your IP address.

As a matter of principle, we evaluate this information in anonymised form to defend against attacks and to improve our offer (processing of personal data within the framework of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) GDPR) and subsequently delete it. The data is regularly not traceable to your person and is also not merged with other data.

However, in the event of concrete indications of unlawful use, we reserve the right to subsequently evaluate the data.

Processing of personal data after consent (Art. 6 para. 1 p. 1 lit. a) GDPR)

We obtain consent from you in individual cases for specific purposes expressly designated in connection with the collection of data (e.g. contact via a contact form).

Data processing only takes place if you give us your consent. It may not be possible to process your request without your consent and must therefore be made dependent on it. The data is processed exclusively for the purpose(s) expressly stated.

You can revoke your consent at any time with effect for the future. The revocation shall not affect the lawfulness of the processing operations prior the date of the revocation.

Processing of personal data for contract processing or contract initiation (Art. 6 para. 1 p. 1 lit. b) GDPR)

If a contract is concluded with us, we process personal data insofar as this is necessary to process the contract or to carry out pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.

If a contract with us already exists, we process your data in order to check that you are our contractual partner and in order to properly provide the contractual service owed.

Processing of personal data within the scope of a balancing of interests (Art. 6 para. 1 p. 1 lit. f) GDPR)

We process personal data after weighing up the interests, insofar as this is necessary to protect our interests or the interests of third parties.

Examples of such purposes are:

• Ensuring the IT security and integrity of our systems,
• Prevention or detection of crimes,
• Assertion or defence of legal claims.

Contact

If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your enquiry. We delete the data after the final processing of your enquiry, unless there is a contractual or legal obligation to retain the data.

Contact form

If you send us an enquiry via our contact form, we process the data you provide on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR in order to process your enquiry. In principle, your data will be deleted after the enquiry has been processed, unless there is a contractual or legal obligation to retain the data. If you provide us with contractually relevant information, we will transfer it to our inventory system.

You can revoke your consent at any time with effect for the future using all the contact details provided.

Data transfer to a third country

Data transfer to a third country is intended. This transfer is made on the basis of the consent you have given. The recipients of the data you provide are the following companies:

• mhc (mhc Hardware & Software Trading LLC, Office No 10, Alfa Offices, Nadd Al Hamar, Dubai, United Arab Emirates)
• MailChimp, a service from The Rocket Science Group, LLC, 512 Means St., Suite 404 Atlanta, GA 30318

If data is transferred to a third country on the basis of consent without an adequacy decision or other suitable guarantees being in place at the same time, the associated increased risk of data processing in the context of the transfer must be pointed out on the basis Art. 49 para. p. 1 lit. a) GDPR. However, we would like to assure you that thanks to careful selection and constant review of the standards of our contractual partners, potential risks are successfully minimised.

Newsletter

If you have registered for our newsletter, we process the data you have provided on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR in order to send you our newsletter on a regular basis. To register, it is sufficient to provide an e-mail address. The other information is provided voluntarily. For legal reasons, we store the IP address and the date of registration.

Our newsletter is sent via MailChimp, a service of The Rocket Science Group, LLC, 512 Means St., Suite 404 Atlanta, GA 30318 (“Mailchimp“). We have concluded an order processing agreement with the provider.. The transfer of data to the USA is legitimised on the basis of your consent pursuant to Art. 49 para. 1 lit. a) GDPR. We use the so-called double opt-in procedure for registration, in which you must explicitly confirm your e-mail address again in a second step after giving your consent to receive the newsletter. Only then is the service activated.

The data you provide during registration is transferred to MailChimp and stored there. The data is processed for the purpose of analysing whether the newsletter was opened and how it was specifically used. We do this to increase the attractiveness of our newsletter and to review our marketing measures. However, we do not process the data for an individual evaluation of user behaviour. This data processing is based on your consent.

You can find more detailed information on data protection at MailChimp at https://mailchimp.com/legal/privacy/ https://mailchimp.com/legal/privacy/

You can revoke your consent at any time with effect for the future. A link for revocation can be found at the end of every newsletter email. Of course, you can also revoke your consent via the other contact options offered.

Links to other websites

Our website contains links to other external websites (e.g. YouTube and LinkedIn). These are not so-called social plugins. If you click on a link, you will call up the corresponding website and be redirected to it.

Insofar as we process your data on these external websites (e.g. by you contacting us via these websites), our data protection provisions apply, which you can access at https://www.mh-service.de/de/datenschutz.

In addition, Facebook processes your personal data on the aforementioned websites for its own purposes. We cannot make any statement about the manner of processing, the purposes or the storage period of your personal data by these providers. Please refer to the data protection regulations of the respective provider to obtain further information about the processing of your personal data by them. These can be found here:

• YouTube: https://policies.google.com/privacy?hl=de&gl=de
• LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Use of cookies

During your visit to our website, cookies may be used on various pages. These are text files that are placed on your computer and, among other things, enable a smooth visit to our website.

We use cookies on the basis of Art. 6 para. 1 p. 1 lit. f) GDPR, i.e. on the basis of a legitimate interest. The cookies are those that are technically necessary.

The use of cookies takes place within the framework of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored.

The cookies we use are deleted from your computer again after you close the browser (session cookies). Other types of cookies may remain on your computer and enable us to recognise your computer by means of the user profile created the next time you visit our site (permanent cookies).

Cookies on our site are only used by ourselves and not by third parties. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

 

Application

If we process data in the course of your application, please refer to the data protection declaration for applicants, available at https://www.mh-service.de/de/datenschutz.

We process your data, in particular name, contact information, curriculum vitae, evidence of academic, professional and vocational achievements and content data that you provide in your cover letter, for the purpose of concluding an employment contract. The legal basis for this data processing is § 26 BDSG Federal Data Protection Act). We will store your data for 6 months if the application is unsuccessful, unless you have given your consent for us to store your data for longer. In this case, we store your data for 12 months. If your application leads to employment, your data will be stored for the duration of the employment relationship.

We ask you not to provide any particularly sensitive data with your application. These are data on racial or ethnic origin, political opinion, religious or philosophical beliefs or trade union membership, genetic data, biometric data uniquely identifying a natural person, health data, data on sex life or sexual orientation, cf. Art. 9 para. 1 GDPR.

Data transfer

We pass on data to other third parties if and to the extent that we have delegated the fulfilment of tasks to them. Data shall only be passed on insofar as this is necessary for the fulfilment of the assigned tasks.

We work together with the following companies:

• mhc Service (mhc Hardware & Software Trading LLC, Office No 10, Alfa Offices, Nadd Al Hamar, Dubai, United Arab Emirates)
• Mailchimp, The Rocket Science Group, LLC, 512 Means St., Suite 404 Atlanta, GA 30318 when signing up for the newsletter
• Lombego Systems GmbH, Kaufstraße 2–4, 99423 Weimar

Furthermore, service providers can be entrusted with tasks in the following areas, for example:

• IT maintenance
• IT development
• IT provision
• Lawyers

The data transfer always takes place on the basis of a legal standard or an appropriate contract in accordance with Art. 26 or 28 GDPR, which ensures compliance with all data protection requirements.

Apart from that, data is only passed on in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. The data transfer is legitimised in these cases in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR.

Duration of the data storage

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfilment of contractual and legal obligations.

Personal data shall be stored at least for as long as is necessary for the fulfilment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contract period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.

The criteria for the duration of the storage of cookies can be found in the corresponding section.

Rights of affected persons

As a person affected by the processing of personal data, you have the following rights:

You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data and to the information listed in detail in Art. 15 GDPR.

You have the right to request from the controller without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data (Art. 16 GDPR).

You have the right to demand from the controller that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure).

You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of the controller's review.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the aid of automated procedures (Art. 20 GDPR). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible (right to data portability).

You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The responsible person will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 GDPR).

With regard to exercising your rights, you can contact us at any time via the contact form.

Right of objection in the case of direct advertising

In individual cases, we process personal data in order to conduct direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising (Art. 21 GDPR).

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made form-free at any time via one of the contact options given in this data protection declaration or in our imprint.

Right of complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR). You can assert this right with a supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement. In Rhineland-Palatinate, the competent supervisory authority is the Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information.

You can find more information under the following link: www.datenschutz.rlp.de

However, you can of course also contact us directly if you are dissatisfied or have questions about data protection.

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.