Data protection

1. Name and contact details of the data controller and the company data protection officer

This data protection notice applies to data processing by:
Controller:

MWM Solutions GmbH
represented by Managing Director Jannis Mossmann
Kurfürstenstr. 33
10785 Berlin, Germany

Tel.: 030 286 097 39
Fax: 030 286 100 25
Email: info@mwm-s.de

If you have any notes or questions regarding data protection, please contact:
privacy@mwm-s.de

Data Protection Officer of MWM Solutions GmbH: Attorney-at-Law Sascha Kugler.

ITM Innovation Technologie Management GmbH
Alte Jakobstr. 77 B
10179 Berlin
Tel.: 030 439 720 340

Email: kugler@itm-dsgvo.de

2. Erhebung und Speicherung personenbezogener Daten sowie Art und Zweck von deren Verwendung

a) Website access

IP address of the requesting device,
Date and time of access,
Name and URL of the accessed file,
Website from which access is made (referrer URL),
Browser used and, if applicable, the operating system of your device, as well as the name of your access provider.
The aforementioned data are processed by us for the following purposes:
Ensuring a smooth connection to the website,
Ensuring convenient use of our website,
Evaluating system security and stability, and
For further administrative purposes.

The legal basis for data processing is Article 6(1), sentence 1, letter (f) of the GDPR.
Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your identity.

In addition, we use cookies and Google Analytics when you visit our website. Further details can be found in Sections 4 and 5 of this privacy policy.

b) When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website.
Providing a valid email address is required so that we know who the inquiry is from and can respond to it. Additional information may be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Article 6(1), sentence 1, letter (a) of the GDPR, based on your voluntarily given consent.

The personal data collected by us for the use of the contact form are automatically deleted once your inquiry has been fully processed.

3. Disclosure of Data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only disclose your personal data to third parties if:

you have given your explicit consent pursuant to Article 6(1), sentence 1, letter (a) of the GDPR,
the disclosure is necessary pursuant to Article 6(1), sentence 1, letter (f) of the GDPR for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, letter (c) of the GDPR, or
the disclosure is legally permissible and required pursuant to Article 6(1), sentence 1, letter (b) of the GDPR for the performance of contractual relationships with you.

4. Cookies

We use cookies on our website.
These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, trojans, or other malicious software.

The cookie stores information that arises in connection with the specific device used.
However, this does not mean that we obtain direct knowledge of your identity as a result.

The use of cookies serves, on the one hand, to make our website more user‑friendly for you.
For example, we use so‑called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted once you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness.
These cookies are stored on your device for a defined period of time. When you visit our website again to use our services, it is automatically recognized that you have been here before and which entries and settings you made, so that you do not have to enter them again.

Secondly, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you (see section 5). These cookies allow us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period of time.

The data processed through cookies are required for the purposes stated above in order to safeguard our legitimate interests as well as those of third parties, in accordance with Article 6(1), sentence 1, letter (f) of the GDPR.

Most browsers automatically accept cookies.
However, you can configure your browser so that no cookies are stored on your computer or so that a notification appears before a new cookie is created. Please note that completely disabling cookies may result in you not being able to fully use all functions of our website.

5. Google Analytics

If you consent via our cookie banner, our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

The legal basis for the use is our legitimate interest pursuant to Article 6(1), sentence 1, letter (f) of the GDPR to understand how often and in what way our website is used, in order to continuously improve it.

Google participates in the Privacy Shield agreement concluded between the European Union and the United States and has been certified accordingly. By doing so, Google commits to complying with the standards and regulations of European data protection law. Further information can be found at the following link:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

We have concluded a data processing agreement with Google in accordance with Article 28 of the GDPR.
This ensures that Google processes the information on our behalf in order to evaluate users’ use of our online services, compile reports on activities within this online offering, and provide us with further services related to the use of this website and general internet usage, thereby enabling continuous improvement of our services. In this context, it is possible to create pseudonymized usage profiles based on the processed data.

Google Analytics is used on our website only with IP anonymization enabled, meaning that users’ IP addresses are generally truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Furthermore, the IP address transmitted by the visitor's browser to our website will not be merged with other Google data. You can also prevent the transmission of data generated by cookies and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

Further information on Google’s data usage, setting and objection options can be found in Google’s privacy policy
(https://policies.google.com/technologies/ads) as well as in Google’s ad personalization settings
(https://adssettings.google.com/authenticated).

The personal data collected from visitors to our website are deleted or anonymized by Google after 14 months.

6. Social Media

Wir sind zur eigenen Präsentation auf verschiedenen Onlineplattformen innerhalb sozialer Netzwerke vertreten, um mit den dort aktiven Nutzern zu kommunizieren oder um dort Informationen über uns anzubieten.

We would like to point out that user data may be processed outside the European Union in this context.
This may pose certain risks for users, as, for example, the enforcement of users’ rights could be more difficult under such circumstances.

We work exclusively with U.S.-based providers that are certified under the Privacy Shield framework or that offer comparable safeguards ensuring an adequate level of data protection.
By doing so, these providers commit to complying with EU data protection standards.

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles may be created based on users’ behavior and the interests derived from it. These usage profiles may in turn be used to display advertisements within and outside the social networks that are presumed to correspond to users’ interests.

For these purposes, cookies are typically stored on users’ devices, in which information about usage behavior and user interests is recorded. In addition, usage profiles may also contain data independent of the devices used by the users (in particular if users are members of the respective platforms and are logged in to them).

For a detailed description of the respective processing activities and the available objection (opt-out) options, we refer to the privacy policies and information provided by the operators of the respective networks.

We also note that, in the case of requests for information and the assertion of data subject rights, these can be exercised most effectively directly with the respective service providers.
Only the providers themselves have access to users’ data and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you may contact us at any time.

Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; website: https://www.instagram.com; privacy policy: http://instagram.com/about/legal/privacy.

LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (ensuring an adequate level of data protection when processing data in the U.S.): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

JOIN: Recruiting platform; service provider: Join Solutions GmbH, Schönhauser Allee 36, 10435 Berlin, Germany; website: https://join.com/de-de; privacy policy: https://join.com/de-de/privacy.

7. Rights of Data Subjects

You have the right:

pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected from you, and the existence of automated decision-making, including profiling, as well as meaningful information about its details, where applicable;
pursuant to Article 16 of the GDPR, to request the immediate rectification of inaccurate personal data stored by us or the completion of incomplete personal data;
pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
pursuant to Article 18 of the GDPR, to request restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful and you oppose deletion, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Article 21 of the GDPR;
pursuant to Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission to another controller;
pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time. This withdrawal means that we may no longer continue the data processing based on this consent in the future; and
pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or the registered office of our company:
https://www.datenschutz-berlin.de

8. Right to Object

If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1), sentence 1, letter (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing.

In the latter case, you have a general right to object, which will be implemented by us without the need to state a specific situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@mwm-s.de.

9. Data Security

We use the widely adopted SSL (Secure Socket Layer) protocol during website visits, in conjunction with the highest level of encryption supported by your browser.
As a rule, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we fall back on 128-bit v3 encryption technology. You can recognize whether a specific page of our website is transmitted in encrypted form by the closed key or lock symbol displayed in your browser’s status bar.

In addition, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

If you believe that your personal data is not adequately protected or if there are indications of misuse, please contact us at info@mwm-s.de.

10. Data Security

This privacy policy is currently valid and reflects the status as of August 2020.
Due to the further development of our website and services, or as a result of changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The most current version of the privacy policy can be accessed and printed at any time on our website at
https://mwm-s.de/datenschutz.