I. Introduction and legal justifications
Data protection has a particularly high priority at Maderthoner Maschinenbau GmbH. It is possible to use this website without attribution. However, if anyone wants to take advantage of a special offer using our website, it may be necessary to process their personal data. As soon as this becomes necessary, we will obtain consent from the data subject.
In principle, we use the technical and organisational options and measures available to us in order to provide the most seamless data protection possible. However, we would like to point out that data transfers over the internet may still have security gaps: therefore, absolute protection cannot be guaranteed. As a result, we would like to alert you to the option of communicating your personal data by other means, for example by phone or by post.
The following points are mainly based on the European General Data Protection Regulation GDPR and in accordance with the legal provisions in Germany. In addition to the points mentioned below, we would like to refer in particular to point (f) of Article 6(1) of the GDPR:
“… processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
We are foregoing a definition which has already been explained in detail elsewhere.
II. Name and contact details for the controller
Maderthoner Maschinenbau GmbH
Managing director: Ingrid Maderthoner
Tel: 04821 17 89 10
Fax: 04821 8 72 61
III. Contact information
Our website has facilities which enable you to quickly contact us electronically and communicate with us directly – this includes clickable email addresses and a contact form which automatically generates an encrypted email. In the event of such voluntary and thus desired contact, the personal data submitted by the data subject shall be automatically stored and subsequently used for the purposes of editing or making contact. However, these personal data will not be forwarded to a third party as a result..
IV. Collection of general data and information
Maderthoner Maschinenbau GmbH automatically collects and stores information the website visitor’s browser transmits to us in its server log files. These data are stored exclusively for internal system-related and statistical purposes. The data stored include:
• browser type and version,
• the operating system used by the data subject,
• the referrer URL, i.e. the page visited before ours,
• the “sub-websites” which are controlled via an accessing system on our website,
• hostname of the accessing computer / IP address,
• name of each accessed file,
• the amount of data transmitted,
• notification of successful retrieval,
• requesting domain,
• date and time of the server request,
• the ISP of the accessing system
as well as similar data and information for the purposes of averting danger in the event of an attack on our IT systems.
The data in the server logfiles are stored separately from all personal data. These data will not be merged with other sources of data. In this respect, all these data for Maderthoner Maschinenbau GmbH cannot be assigned to specific people.
We need the logfiles and their analysis in order to be able to maintain the quality and functionality of the website, and in order to provide the necessary information to law enforcement authorities in the event of a cyber-attack by a third party.
In addition, we use technically necessary session cookies. The cookies are absolutely necessary for the functionality of the homepage and are automatically deleted after the end of the session.
VI. Google maps integration
We use Google Maps on this website. This allows us to display interactive maps on our website and enables you to use the map function conveniently.
http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
VII. Social media
Our website uses functions from the network XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Each time someone accesses one of our pages including functions from XING, a connection is created to the XING servers. No personal data are stored according to our knowledge. In particular, no IP addresses are stored, nor is your user behaviour evaluated.
The XING plug-in is used on the basis of point (f) of Art. 6(1) of the GDPR. The website operator has a legitimate interest in the widest possible visibility on social media.
The processing controller has integrated components from the LinkedIn Corporation into this website. LinkedIn is an internet-based social network which enables users to connect with existing business contacts and to connect with new business contacts. More than 400 million registered people use LinkedIn in more than 200 countries. That means LinkedIn is currently the largest platform for business contacts and one of the most-visited websites in the world.
Each time someone accesses a page on our website which has been furnished with a LinkedIn component (LinkedIn plug-in), the component causes the browser being used by the data subject to download an appropriate portrayal of the LinkedIn component. More information on the LinkedIn plug-in can be found here: https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about the specific subpages of our website the data subject visits.
If the data subject is logged into LinkedIn at the same time, LinkedIn identifies which specific subpages the data subject visits each time the data subject visits our website and for the duration of their visit. This information is collected by the LinkedIn component and assigned to the respective LinkedIn of the data subject by LinkedIn. If the data subject presses the integrated LinkedIn button on our website, LinkedIn assigns this information to the data subject’s personal LinkedIn user account and stores these personal data.
LinkedIn will always be informed by the LinkedIn component whenever the data subject visits our website if the data subject is logged into LinkedIn at the same time as they access our website; this happens regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject doesn’t want this kind of information to be transmitted to LinkedIn, they can prevent this by logging out of their LinkedIn account before accessing our website.
LinkedIn provides the option of unsubscribing from emails, text messages and targeted advertising, as well as managing advertising settings under https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as QuantCast, Google Analytics, BlueKai, DoubleClick, Nielsen, ComScore, Eloqua and Lotame, which may place cookies. Such cookies can be rejected here: https://www.linkedin.com/legal/cookie-policy. The applicable LinkedIn data protection provisions can be accessed at: https://www.linkedin.com/legal/privacy-policy. The LinkedIn cookie guidelines can be accessed here: https://www.linkedin.com/legal/cookie-policy.
The processing controller has integrated components from YouTube into this website. YouTube is an online video portal that enables video publishers to post videos for free, and allows other users to view, rate and comment on them. YouTube allows the publication of all kinds of videos, which is why full films and TV shows, music videos, trailers and videos made by the users themselves can all be accessed via the portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time someone accesses one of the individual pages on this website which is operated by the processing controller and into which a YouTube component (YouTube video) has been integrated, the respective YouTube component automatically causes a rendering of the relevant YouTube to be downloaded from YouTube into the web browser on the data subject’s computer. More information on YouTube can be found here: https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed which specific subpages of our website are visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube identifies which specific subpage of our website is visited by the data subject when they access a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the data subject’s YouTube account.
YouTube and Google are always informed via the YouTube component when the data subject visits our website if the data subject is logged into YouTube at the same time as they access our website; this happens regardless of whether or not the data subject clicks on the YouTube video. If the data subject doesn’t want this kind of information transmitted to YouTube and Google, they can prevent this by logging out of their YouTube account before accessing our website
The data protection provisions published by YouTube, accessible at https://www.google.de/intl/de/policies/privacy/, explain how personal data are collected, processed and used by YouTube and Google.
VIII. Automatic data erasure
We only store personal data for the period needed to fulfil the purpose for which they were stored or in order to satisfy legal requirements. If the purpose for storage ceases to apply or legal deadlines expire, the data are routinely erased.
IX. Rights of the users of our website (data subject rights)
Information: in accordance with Article 15 of the GDPR, data subjects have the right to receive information from the processor about the personal data they have stored.
Correction: should the data subject discover that the personal data stored regarding them are incorrect, they must be corrected in accordance with Article 16 of the GDPR.
Erasure (“right to be forgotten”): in accordance with Article 17 of the GDPR, data subjects have the right to request the erasure of their data. However, erasure is only permissible if no statutory periods of retention prevent it.
Restriction of processing: in accordance with Article 18 of the GDPR, you have to right to restriction of processing in specific cases (e.g. if the data subject and data processer disagree on whether the stored data are correct).
Object: in accordance with Article 21 of the GDPR, you can object to the processing of your personal data with effect for the future. Please note that objecting to the processing of required information necessary for the use of our website, you will no longer be able to use our website.
Data portability: in accordance with Article 20 of the GDPR, there is a right to data portability for certain processing. This only affects data which have been collected on the basis of consent or for performing a contract.
If you would like to make use of your data subject rights, please contact the management team of Maderthoner Maschinenbau GmbH, either in person or in writing.
Right to appeal: you are entitled to lodge an appeal with the competent data protection supervisory authority.
The competent supervisory authority is:
ULD - Independent Centre for Privacy Protection of Schleswig Holstein
Postfach 71 16
Tel.: 0431 988 - 1200
Fax: 0431 988-1223
X. Duration of storage of personal data
Personal data are stored in accordance with the respective statutory period of retention, provided that such a period exists. After this period has expired – or as soon as data without a time limit are no longer necessary for the purposes for which they were collected – the data shall be erased provided that they are no longer required to fulfil a contract or are not required to initiate a contract.
Maderthoner Maschinenbau GmbH, managing director
updates: 19.10.2020, 23.08.2022