Privacy policy

Privacy policy pursuant to Art. 13 GDPR

This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter “data”) within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

I. Controller

Materion GmbH (hereinafter “controller”)
Alter Holzhafen 15
23966 Wismar, Germany
Email address: info ( at ) materion-gmbh.de
Managing Director: Marion Wienecke
Link to the legal notice: www.materion-gmbh.de/en/impressum

II. Purpose of the website

Visiting the website is non-binding. The website enables prospective customers and business partners to gain an overview of the products of Materion GmbH and to get in touch with us.

III. Collection and storage of personal data and the type and purpose of their use when visiting the website; automatic deletion

When you access our website, the browser used on your device automatically sends the following information to the server of our website:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• website from which the access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer, and
• name of your access provider.

For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data whose further retention is required for evidence purposes is exempt from deletion until the respective incident has been finally clarified.

The data mentioned is processed for the following purposes:

• ensuring a smooth connection to the website,
• ensuring convenient use of our website,
• evaluating system security and stability.

The legal basis for the data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

IV. Categories of data subjects

Visitors and users of the online offering (hereinafter we also refer to the data subjects collectively as “users”).

V. Disclosure of data; cookies, analysis tools, social media plug-ins

Your personal data is not transferred to third parties. We do not use cookies, analysis tools or social media plug-ins on our website.

VI. Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. If the legal basis is not stated in this privacy policy, the following applies: the legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR; the legal basis for processing in order to provide our services and carry out contractual measures as well as to answer enquiries is Art. 6 (1) lit. b GDPR; the legal basis for processing in order to fulfil our legal obligations is Art. 6 (1) lit. c GDPR; and the legal basis for processing in order to protect our legitimate interests is Art. 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

VII. Cooperation with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of a legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 (1) lit. b GDPR), if you have given your consent, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called “data processing agreement”, this is done on the basis of Art. 28 GDPR.

VIII. Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this happens in the context of using third-party services or disclosing or transferring data to third parties, this only takes place if it is necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process data in a third country, or have it processed there, if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection equivalent to that of the EU (e.g. for the USA through the “Privacy Shield”), or in compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

IX. Rights of data subjects

You have the right:

pursuant to Art. 15 GDPR

to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;

pursuant to Art. 16 GDPR

to demand without delay the rectification of incorrect personal data stored by us or the completion of such data;

pursuant to Art. 17 GDPR

to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

pursuant to Art. 18 GDPR

to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you object to its erasure, if we no longer need the data but you need it for the establishment, exercise or defence of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR

to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller;

pursuant to Art. 7 (3) GDPR

to withdraw your consent at any time vis-à-vis us. As a result, we may no longer continue the data processing based on this consent in the future, and

pursuant to Art. 77 GDPR

to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our registered office.

pursuant to Art. 21 GDPR

to object to the processing of your personal data if your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR and there are reasons for this arising from your particular situation, or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation. If you wish to exercise your right of withdrawal or objection, an email to info (at) materion-gmbh.de is sufficient.

X. Competent supervisory authority; reporting of data protection breaches

The authority responsible for the controller is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit
Mecklenburg-Vorpommern
(State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania)
Werderstraße 74a
19055 Schwerin
Email: info@datenschutz-mv.de

XI. Right of withdrawal

You have the right to withdraw consent given pursuant to Art. 7 (3) GDPR with effect for the future.

XII. Right to object

You can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for the purposes of direct advertising.

XIII. Erasure of data

The data processed by us will be erased or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no statutory retention obligations preventing its erasure. If the data is not erased because it is required for other and legally permissible purposes, its processing will be restricted, i.e. the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to statutory requirements in Germany, data is retained in particular for 10 years in accordance with Sections 147 (1) AO, 257 (1) no. 1 and 4, (4) HGB (books, records, management reports, accounting vouchers, trading books, documents relevant for taxation, etc.) and for 6 years in accordance with Section 257 (1) no. 2 and 3, (4) HGB (commercial letters).

XIV. Business-related processing

In addition, we process

• contract data (e.g. subject matter of the contract, term, customer category),
• payment data (e.g. bank details, payment history)

of our customers, prospective customers and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

XV. Administration, financial accounting, office organisation, contact management

We process data in the context of administrative tasks and the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases for the processing are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Customers, prospective customers, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lie in administration, financial accounting, office organisation and the archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The erasure of data with regard to contractual services and contractual communication corresponds to the information provided for these processing activities.

In this context, we disclose or transmit data to the tax authorities, consultants such as tax advisors or auditors, as well as other fee offices and payment service providers.

Furthermore, on the basis of our business interests, we store information on suppliers, event organisers and other business partners, e.g. for the purpose of contacting them later. As a rule, we store this predominantly company-related data permanently.

XVI. Contacting us

When you contact us (e.g. via the contact form, email, telephone or social media), the user’s details are processed in order to handle the contact enquiry in accordance with Art. 6 (1) lit. b GDPR. The users’ details may be stored in a customer relationship management system (“CRM system”) or a comparable enquiry management system.

We delete enquiries as soon as they are no longer required. We review the necessity every two years; statutory archiving obligations also apply.

XVII. Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospective customers and visitors to this online offering on the basis of our legitimate interest in the efficient and secure provision of this online offering in accordance with Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

XIX. Currency and amendment of this privacy policy

This privacy policy is currently valid and is dated April 2018. Due to the further development of our website and the offers on it, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current privacy policy at any time on our website at www.materion-gmbh.de/en/datenschutz.

Adapted by the website owner
Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke