Data Protection

Dear Visitor, 
Thank you for visiting our web pages. In the following we would like to inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

 

DATA CONTROLLERS

 

The post named in the Legal Notice is the controller of the data collection and processing described in the following.

 

STORAGE OF IP ADDRESSES AND USAGE DATA

 

Your web browser transmits usage data every time you access our web offering. These data comprise your IP address along with a designation of the retrieved content (URL). Without the collection of the IP address of the accessing computer and the designation of the retrieved content, it is impossible to establish a connection to the server and the corresponding web offering cannot be used. In addition, your browser – depending on its settings – transmits further data. This data set typically consists of:

  • the page out of which the file was requested,
  • the name of the file,
  • the data and time of the retrieval,
  • the transmitted data quantity,
  • access status (file transmitted, file not found),

  • the description of the type of web browser used,

the IP address of the requesting computer, which is shortened to ensure that personal identification is no longer possible. 

 

The abovementioned protocol data are stored in an anonymous way only. 

 

In addition, we store the full IP address transmitted by your web browser for a period of seven days, strictly only for the purposes of detecting, limiting and eliminating attacks on our web pages. We delete or alternatively anonymise the IP address once this period has expired. The legal basis is Art. 6 paragraph 1. p. 1 lit. f GDPR. 

You must provide those personal data which are technically necessary for use of our website. Without these data, you will not be able to retrieve our website. 

Once this period has expired we will anonymise your IP address by shortening it, meaning that it is no longer possible to perform a personal identification with regard to any of the usage data. 

 

FORWARDING TO THIRD PARTIES / DATA RECIPIENTS 

 

We transfer your data to data processors who, in the context of order processing in accordance with Art. 28 GDPR, support us in running the website via their services and are correspondingly contractually bound to follow our instructions: 

  • Host: Hubspot 

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (belongs to the parent group Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA) – detailed information below under the item "GOOGLE ANALYTICS". 

  

 

COOKIES                                  

 

We use cookies on our web pages. Cookies are small text files that are stored on your device and can be read. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies may contain data that enable the used device to be recognised again. Some cookies, however, also contain information which solely concerns certain settings, and cannot lead to personal identification. 

  

Moreover, various categories of cookies are distinguished: 

  

Technically necessary cookies: These help to make a website utilisable by enabling basic functions such as page navigation and access to secure areas of the website. Without these cookies, the website is unable to function properly. 

 

The use of technically necessary cookies and similar technologies in the ""necessary"" category is performed on the basis of § 25 paragraph 2 no. 2 German Teleservices Data Protection Act (TTDSG). Subsequent data processing is performed on the basis of legitimate interests in accordance with Art. 6 paragraph 1. p. 1 lit. f GDPR. 

 

You will find a list of all technically necessary cookies under use below: 

 

Name

Necessary Cookies

Provider

Hubspot

Purpose

Technically necessary for bot protection; records categories that visitors have consented to

Cookie Name

__cf_bm; __hs_cookie_cat_pref 

Cookie lifetime/Storage duration

30 minutes; 6 months

 

Preferences: With the aid of these technologies we are able to take into consideration your actual or assumed preferences for convenient use of our web pages. 

The use of optional cookies and similar technologies in the category ""preferences"" is performed on the basis of § 25 paragraph 1 German Teleservices Data Protection Act (TTDSG). Subsequent data processing is performed on the basis of your consent in accordance with Art. 6 paragraph 1. p. 1 lit. a GDPR. 

 

Statistics: These technologies enable us to generate anonymous statistics concerning the use of our services for the purposes of tuning them to your needs. In this way, for example, we are able to determine how we can adapt our web pages to users' habits even more effectively. 

The use of optional cookies and similar technologies in the category ""statistics"" is performed on the basis of § 25 paragraph 1 German Teleservices Data Protection Act (TTDSG). Subsequent data processing is performed on the basis of your consent in accordance with Art. 6 paragraph 1. p. 1 lit. a GDPR. 

You will find a list of all "technologies / cookies statistics" under use below: 

 

Name

Analytics Cookies

Provider

Hubspot

Purpose

Tracks session; determines whether visitors have relaunched browser; contains domain, user token, initial time stamp, final time stamp, current time stamp and session number; tracks visitor's identity

Cookie Name

__hssc; __hssrc; __hstc; hubspotutk 

Cookie lifetime/Storage duration

30 minutes; expires at the end of the session; valid 6 months; valid 6 months

  

Marketing: The cookies are used in order to comprehend visitor behaviour on websites. The intention is to display advertisements that are relevant and appealing to the individual user and therefore more valuable for publishers and third-party advertisers. In this way, we are able to display advertising content that is right for you, based on analysis of your pseudonymised usage behaviour. Your usage behaviour can also be comprehended via various web pages, browsers or devices on the basis of a user ID (unique identifier). You will find a list of all ""technologies / cookies statistics"" under use below: 

 

Name

Google Analytics

Provider

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose

Cookie from Google for website analyses. Generates statistical data on how the visitor uses the website. 
Data protection declaration     https://policies.google.com/privacy?hl=de 

Cookie Name

_ga,_gat,_gid; 

Cookie lifetime/Storage duration

1 year 

   

Please note the information on Google Analytics below. 

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. In addition, you can delete cookies at any time via the relevant browser setting and prevent the depositing of new cookies. Please note that in that case, our web pages may not be displayed optimally and some functions may technically no longer be available. 

 

GOOGLE ANALYTICS 

 

Google Analytics is a web analysis service which we would like to use with your consent in accordance with Art. 6 paragraph 1 lit. a GDPR as well as § 25 paragraph 1 German Teleservices Data Protection Act (TTDSG) for the purpose of usage analysis. In the process the data are processed by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. A cookie is stored on your device for the purpose of the analysis. 

  

The data are anonymised after collection, meaning that tracing is no longer possible. 

 

You may withdraw your consent at any time. To that end, please follow this link and perform the corresponding settings via our banner. 

  

Forwarding to third countries: If you consent to data processing, please note that your data will be processed in the USA by Google LLC. The European Court of Justice considers the USA to have an insufficient level of data protection according to EU standards. In particular, there exists the risk that your data may be processed by US authorities, potentially without opportunities for legal recourse, for the purposes of control and surveillance. 

In order to secure an appropriate level of data protection – as far as this is possible under the current framework conditions – when transmitting your data to Google LLC, the standard contractual clauses of the European Commission in accordance with Art. 46 paragraph 2 lit. c, paragraph 5 p. 2 GDPR were negotiated and further technical measures were performed. 

  

If you accept only necessary cookies, the transmission described in the foregoing will not take place. 

  

You can obtain further information on the purpose and scope of data collection and their processing by Google in the provider's data protection declarations. There, you can also obtain further information on your rights and settings options in this regard for the protection of your private sphere. 

Data protection notes from Google: https://policies.google.com/privacy?hl=de 

Cookies directive from Google: https://policies.google.com/technologies/cookies?hl=de 

 

 

  

INFORMATION ON THE HANDLING OF APPLICANT DATA 

  

If you use our career portal in order to submit an application for one of the advertised positions, please pay attention in addition to the data protection notes for applicants. 

  

INFORMATION ON THE HANDLING OF CLIENT DATA 

  

We process our clients' personal data in the context of a potential or existing business relationship on the basis of Art. 6 paragraph 1 lit. f GDPR (contact partners at companies, respectively Art. 6 paragraph 1 lit. b GDPR (direct contract partner). If they are necessary for realising the order, respectively contract, data are transmitted to the other companies in the group strictly according to purpose. 

  

The data necessary for contractual and order fulfilment will be deleted after contract execution, provided that no statutory retention periods oppose this. 

  

In individual cases, we also use personal data for promotional purposes, via e-mail, telephone and by post, in order to send information about products and services to clients and prospects. The legal basis for the dispatch of postal advertising is Art. 6 paragraph 1 f) GDPR. 

  

The legal basis for marketing measures via e-mail or telephone is generally an issued declaration of consent. Exceptions from this apply only in respect of existing clients in the cases provided for by law. 

  

You may object to advertising with effect for the future at any time. Please address your objection to office@metzler-vater.com or to the postal address indicated in the Legal Notice. 

  

CONTACT FORM       

Purposes and scope of data processing / Legal bases: 

You can send us a message via our website. We require the following data for the contact form: name, e-mail address. It goes without saying that we will treat personal data you additionally hand over to us when completing the contact form (e.g. telephone nummer, details in the query) confidentially. 

  

We use your data in order to work on your query. The legal basis for the data processing is Art. 6 paragraph 1. p. 1 lit. f GDPR, respectively Art. 6 paragraph 1. p. 1 lit. b GDPR, when it is necessary for contract performance or if pre-contractual measures are being taken. Our legitimate interest lies in being able to answer your queries, provide requested information and, if applicable, solve existing problems and be able to give you as our (potential) client satisfactory feedback on your concern. 

  

Storage duration / Criteria for setting the storage duration: 

We will store your data for as long as this is necessary for achieving the abovementioned purpose. This necessity is determined by the period in which, according to experience, follow-up queries to contacts may come in, and this amounts to 90 days. After that we will delete your data, unless data processing, including in other systems if applicable, continues to be permissible or is mandatory for us based on other legal grounds (e.g. where statutory retention duties exist). 

  

DATA SECURITY 

  

In order to protect your data against unwanted access as comprehensively as possible, we take technological and organisational measures. We use a decryption method on our pages. Your details are transmitted from your computer to our server and back via the Internet by means of TLS decryption. You can identify this by the closed padlock on your browser's status bar and the address line beginning with https://.  

  

DATA PROCESSING IN THE CONTEXT OF RUNNING THE WEBSHOP 

  

The METZLER VATER Group, and respectively, individual companies of the corporate group, offer pre-registered clients the opportunity to order pre-selected products via a webshop. The webshop – like the web pages of the METZLER VATER Group – is hosted by the external service provider Mittwald in the context of order processing. 

  

On use of the webshop, personal data are processed as follows: 

 

Log-in 

Use of our webshop is only possible for users registered in advance. To this end, we will send you a user name (e-mail address or alternatively a user name individually assigned by us) as well as a so-called starter password. You can use these details to log into the webshop. After the first log-in you as user will be asked to change the starter password immediately. 

 

Basket 

You can make up an order out of the items offered in the webshop and customise some of the selected items according to your wishes. You can upload documents or templates to that end. 

You can then deposit your selection in a basket. Depending on the client, further details concerning delivery address must be provided for the ordering process. In individual cases, pre-selected delivery addresses can also be selected from a drop-down menu, or an autofill function is available. 

In individual cases and likewise client-specifically, your order will be cleared by means of a deposited approval mechanism. You will be informed about this in advance. 

 

Shipping 

After completion and, if applicable, clearance of the order, you will receive e-mail confirmation comprising an order overview at the deposited e-mail address. 

The order will be processed by us and handed over to a transport company for shipping. 

This completes the ordering process. Billing will be performed separately and independently of the webshop via the existing client contracts. 

  

YOUR RIGHTS AS USER 

  

On processing your personal data the GDPR grants you as website user certain rights: 

 

1. Right to be informed (Art. 15 GDPR): 

You have the right to demand confirmation of whether personal data concerning you are being processed; if this is the case, you have a right to be informed about these personal data and the points individually listed in Art. 15 GDPR. 

 

2. Right to Rectification and Erasure (Art. 16 and 17 GDPR):  

You have the right to demand the immediate rectification of incorrect personal data concerning you and, if applicable, the completion of incomplete personal data. 

  

Moreover, you have the right to demand that personal data concerning you be deleted immediately, if any of the grounds individually listed in Art. 17 GDPR apply, e.g. if the data are no longer required for the pursued purposes. 

 

3. Right to Restriction of Processing (Art. 18 GDPR): 

You have the right to demand the restriction of processing if any of the preconditions listed in Art. 18 GDPR prevail, e.g. if you have raised an objection against the processing in accordance with Art. 21 GDPR, or for the duration of a potential examination of whether our legitimate interests outweigh your interests as the person concerned. 

 

4. Right to Data Portability (Art. 20 GDPR): 

In certain cases, listed individually in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to demand that these data be transmitted to a third party. 

 

5. Right to Object (Art. 21 GDPR): 

If data are collected on the basis of Art. 6 paragraph 1. p. 1 lit. f GDPR (data processing for the preservation of legitimate interests), you have the right, on grounds arising from your particular situation, to raise an objection against the processing at any time. We will then no longer process the personal data, unless provable, urgent reasons for the processing, which are worthy of protection, prevail and outweigh your interests, rights and freedoms, or unless the processing serves the assertion, execution or defence of legal claims. 

 

6. Right to Lodge a Complaint with a Supervisory Authority 

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you constitutes a breach of data protection stipulations. The right to lodge a complaint may, in particular, be asserted at a supervisory authority in the member state of your place of residence, your workplace, or of the place of the alleged breach. 

  

CONTACT DETAILS OF THE DATA PROTECTION OFFICER 

 

Our company data protection officer is gladly on hand for information or suggestions on the topic of data protection: 

 

Dr. iur. Christian Borchers 

datenschutz süd GmbH 

Wörthstraße 15 

97082 Würzburg 

E-mail: office@datenschutz-sued.de 

Telephone: +49 931 304976-0