Data privacy

1. An overview of data protection

General information

The fol­lo­wing infor­ma­ti­on will provide you with an easy to navi­ga­te over­view of what will happen with your per­so­nal data when you visit this website. The term “per­so­nal data” com­pri­ses all data that can be used to per­so­nal­ly iden­ti­fy you. For detail­ed infor­ma­ti­on about the subject matter of data pro­tec­tion, please consult our Data Pro­tec­tion Decla­ra­ti­on, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is pro­ces­sed by the ope­ra­tor of the website, whose contact infor­ma­ti­on is available under section “Infor­ma­ti­on about the respon­si­ble party (refer­red to as the “con­trol­ler” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for ins­tance be infor­ma­ti­on you enter into our contact form.

Other data shall be recor­ded by our IT systems auto­ma­ti­cal­ly or after you consent to its recor­ding during your website visit. This data com­pri­ses pri­ma­ri­ly tech­ni­cal infor­ma­ti­on (e.g., web browser, ope­ra­ting system, or time the site was acces­sed). This infor­ma­ti­on is recor­ded auto­ma­ti­cal­ly when you access this website.

What are the purposes we use your data for?

A portion of the infor­ma­ti­on is gene­ra­ted to gua­ran­tee the error free pro­vi­si­on of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive infor­ma­ti­on about the source, reci­pi­ents, and pur­po­ses of your archi­ved per­so­nal data at any time without having to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or era­di­ca­ted. If you have con­sen­ted to data pro­ces­sing, you have the option to revoke this consent at any time, which shall affect all future data pro­ces­sing. Moreo­ver, you have the right to demand that the pro­ces­sing of your data be rest­ric­ted under certain cir­cum­s­tances. Fur­ther­mo­re, you have the right to log a com­plaint with the com­pe­tent super­vi­sing agency.

Please do not hesi­ta­te to contact us at any time if you have ques­ti­ons about this or any other data pro­tec­tion related issues.

Analysis tools and tools provided by third parties

There is a pos­si­bi­li­ty that your brow­sing pat­terns will be sta­tis­ti­cal­ly ana­ly­zed when your visit this website. Such ana­ly­ses are per­for­med pri­ma­ri­ly with what we refer to as ana­ly­sis programs.

For detail­ed infor­ma­ti­on about these ana­ly­sis pro­grams please consult our Data Pro­tec­tion Decla­ra­ti­on below.

2. Hosting

We are hosting the content of our website at the fol­lo­wing provider:

External Hosting

We are using the fol­lo­wing host(s):

Timme Hosting GmbH & Co. KG
Ovel­gön­ner Weg 43
21335 Lüne­burg
Deutsch­land

Data processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the above-men­tio­ned service. This is a con­tract man­da­ted by data privacy laws that gua­ran­tees that they process per­so­nal data of our website visi­tors only based on our ins­truc­tions and in com­pli­ance with the GDPR.

3. General information and mandatory information

Data protection

The ope­ra­tors of this website and its pages take the pro­tec­tion of your per­so­nal data very serious­ly. Hence, we handle your per­so­nal data as con­fi­den­ti­al infor­ma­ti­on and in com­pli­ance with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this Data Pro­tec­tion Declaration.

When­ever you use this website, a variety of per­so­nal infor­ma­ti­on will be coll­ec­ted. Per­so­nal data com­pri­ses data that can be used to per­so­nal­ly iden­ti­fy you. This Data Pro­tec­tion Decla­ra­ti­on explains which data we collect as well as the pur­po­ses we use this data for. It also explains how, and for which purpose the infor­ma­ti­on is collected.

We here­wi­th advise you that the trans­mis­si­on of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­ti­ons) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­ple­te­ly protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data pro­ces­sing con­trol­ler on this website is:

Magne­sia GmbH
Max-Jenne-Straße 2 — 4
21337 Lüne­burg

Phone: +49 4131 8710–0
E‑mail: info@magnesia.de

Storage duration

Unless a more spe­ci­fic storage period has been spe­ci­fied in this privacy policy, your per­so­nal data will remain with us until the purpose for which it was coll­ec­ted no longer applies. If you assert a jus­ti­fied request for dele­ti­on or revoke your consent to data pro­ces­sing, your data will be deleted, unless we have other legally per­mis­si­ble reasons for storing your per­so­nal data (e.g., tax or com­mer­cial law reten­ti­on periods); in the latter case, the dele­ti­on will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have con­sen­ted to data pro­ces­sing, we process your per­so­nal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special cate­go­ries of data are pro­ces­sed accor­ding to Art. 9 (1) DSGVO. In the case of expli­cit consent to the trans­fer of per­so­nal data to third count­ries, the data pro­ces­sing is also based on Art. 49 (1)(a) GDPR. If you have con­sen­ted to the storage of cookies or to the access to infor­ma­ti­on in your end device (e.g., via device fin­ger­prin­ting), the data pro­ces­sing is addi­tio­nal­ly based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is requi­red for the ful­fill­ment of a con­tract or for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­mo­re, if your data is requi­red for the ful­fill­ment of a legal obli­ga­ti­on, we process it on the basis of Art. 6(1)© GDPR. Fur­ther­mo­re, the data pro­ces­sing may be carried out on the basis of our legi­ti­ma­te inte­rest accor­ding to Art. 6(1)(f) GDPR. Infor­ma­ti­on on the rele­vant legal basis in each indi­vi­du­al case is pro­vi­ded in the fol­lo­wing para­graphs of this privacy policy.

Designation of a data protection officer

We have appoin­ted a data pro­tec­tion officer.

Magne­sia GmbH
Max-Jenne-Straße 2–4
D‑21337 Lüne­burg

Phone: 04131 8710–0
E‑mail: datenschutz@magnesia.de

Information on data transfer to the USA and other non-EU countries

Among other things, we use tools of com­pa­nies domic­i­led in the United States or other from a data pro­tec­tion per­spec­ti­ve non-secure non-EU count­ries. If these tools are active, your per­so­nal data may poten­ti­al­ly be trans­fer­red to these non-EU count­ries and may be pro­ces­sed there. We must point out that in these count­ries, a data pro­tec­tion level that is com­pa­ra­ble to that in the EU cannot be gua­ran­teed. For ins­tance, U.S. enter­pri­ses are under a mandate to release per­so­nal data to the secu­ri­ty agen­ci­es and you as the data subject do not have any liti­ga­ti­on options to defend yours­elf in court. Hence, it cannot be ruled out that U.S. agen­ci­es (e.g., the Secret Service) may process, analyze, and per­ma­nent­ly archive your per­so­nal data for sur­veil­lan­ce pur­po­ses. We have no control over these pro­ces­sing activities.

Revocation of your consent to the processing of data

A wide range of data pro­ces­sing tran­sac­tions are pos­si­ble only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without pre­ju­di­ce to the lawful­ness of any data coll­ec­tion that occur­red prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­ti­ons of the GDPR, data sub­jects are entit­led to log a com­plaint with a super­vi­so­ry agency, in par­ti­cu­lar in the member state where they usually main­tain their domic­i­le, place of work or at the place where the alleged vio­la­ti­on occur­red. The right to log a com­plaint is in effect regard­less of any other admi­nis­tra­ti­ve or court pro­cee­dings available as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we auto­ma­ti­cal­ly process on the basis of your consent or in order to fulfil a con­tract be handed over to you or a third party in a com­mon­ly used, machine rea­da­ble format. If you should demand the direct trans­fer of the data to another con­trol­ler, this will be done only if it is tech­ni­cal­ly feasible.

Information about, rectification and eradication of data

Within the scope of the appli­ca­ble sta­tu­to­ry pro­vi­si­ons, you have the right to at any time demand infor­ma­ti­on about your archi­ved per­so­nal data, their source and reci­pi­ents as well as the purpose of the pro­ces­sing of your data. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this subject matter or any other ques­ti­ons about per­so­nal data, please do not hesi­ta­te to contact us at any time.

Right to demand processing restrictions

You have the right to demand the impo­si­ti­on of rest­ric­tions as far as the pro­ces­sing of your per­so­nal data is con­cer­ned. To do so, you may contact us at any time. The right to demand rest­ric­tion of pro­ces­sing applies in the fol­lo­wing cases:

  • In the event that you should dispute the cor­rect­ness of your data archi­ved by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­ti­on is ongoing, you have the right to demand that we rest­rict the pro­ces­sing of your per­so­nal data.
  • If the pro­ces­sing of your per­so­nal data was/is con­duc­ted in an unlawful manner, you have the option to demand the rest­ric­tion of the pro­ces­sing of your data in lieu of deman­ding the era­di­ca­ti­on of this data.
  • If we do not need your per­so­nal data any longer and you need it to exer­cise, defend or claim legal entit­le­ments, you have the right to demand the rest­ric­tion of the pro­ces­sing of your per­so­nal data instead of its eradication.
  • If you have raised an objec­tion pur­su­ant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mi­ned whose inte­rests prevail, you have the right to demand a rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, these data – with the excep­ti­on of their archi­ving – may be pro­ces­sed only subject to your consent or to claim, exer­cise or defend legal entit­le­ments or to protect the rights of other natural persons or legal enti­ties or for important public inte­rest reasons cited by the Euro­pean Union or a member state of the EU.

SSL and/or TLS encryption

For secu­ri­ty reasons and to protect the trans­mis­si­on of con­fi­den­ti­al content, such as inqui­ries via the contact form you submit to us as the website ope­ra­tor, this website uses either an SSL or a TLS encryp­ti­on program. You can reco­gni­ze an encrypt­ed con­nec­tion by che­cking whether the address line of the browser swit­ches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryp­ti­on is acti­va­ted, data you trans­mit to us cannot be read by third parties.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the indus­try refers to as “cookies.” Cookies are small data packa­ges that do not cause any damage to your device. They are either stored tem­po­r­a­ri­ly for the dura­ti­on of a session (session cookies) or they are per­ma­nent­ly archi­ved on your device (per­ma­nent cookies). Session cookies are auto­ma­ti­cal­ly deleted once you ter­mi­na­te your visit. Per­ma­nent cookies remain archi­ved on your device until you actively delete them, or they are auto­ma­ti­cal­ly era­di­ca­ted by your web browser.

In some cases, it is pos­si­ble that third-party cookies are stored on your device once you enter our site (third-party cookies). These cookies enable you or us to take advan­ta­ge of certain ser­vices offered by the third party (e.g., cookies for the pro­ces­sing of payment services).

Cookies have a variety of func­tions. Many cookies are tech­ni­cal­ly essen­ti­al since certain website func­tions would not work in the absence of the cookies (e.g., the shop­ping cart func­tion or the display of videos). The purpose of other cookies may be the ana­ly­sis of user pat­terns or the display of pro­mo­tio­nal messages.

Cookies, which are requi­red for the per­for­mance of elec­tro­nic com­mu­ni­ca­ti­on tran­sac­tions, or for the pro­vi­si­on of certain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sa­ry for the opti­miza­ti­on (requi­red cookies) of the website (e.g., cookies that provide mea­sura­ble insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fe­rent legal basis is cited. The ope­ra­tor of the website has a legi­ti­ma­te inte­rest in the storage of requi­red cookies to ensure the tech­ni­cal­ly error free and opti­mi­zed pro­vi­si­on of the operator’s ser­vices. If your consent to the storage of the cookies and similar reco­gni­ti­on tech­no­lo­gies has been reques­ted, pro­ces­sing occurs exclu­si­ve­ly on the basis of the consent obtai­ned (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be noti­fied any time cookies are placed and to permit the accep­tance of cookies only in spe­ci­fic cases. You may also exclude the accep­tance of cookies in certain cases or in general or acti­va­te the delete func­tion for the auto­ma­tic era­di­ca­ti­on of cookies when the browser closes. If cookies are deac­ti­va­ted, the func­tions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for ana­ly­ti­cal pur­po­ses, we will sepa­ra­te­ly notify you in con­junc­tion with this Data Pro­tec­tion Policy and, if appli­ca­ble, ask for your consent.

Consent with ConsentManager

Our website uses the Con­sent­Ma­na­ger consent tech­no­lo­gy to obtain your consent to the storage of certain cookies on your device or for the use of certain tech­no­lo­gies and data pro­tec­tion legis­la­ti­on com­pli­ant docu­men­ta­ti­on of the former. The party offe­ring this tech­no­lo­gy is Jaohawi AB, Hål­te­gel­vä­gen 1b, 72348 Väs­terås, Sweden, website: https://www.consentmanager.de (her­ein­af­ter refer­red to as “Con­sent­Ma­na­ger”).

When­ever you visit our website, a con­nec­tion to ConsentManager’s servers will be estab­lished to obtain your consent and other decla­ra­ti­ons regar­ding the use of cookies.

Moreo­ver, Con­sent­Ma­na­ger shall store a cookie in your browser to be able to allo­ca­te your declaration(s) of consent or any revo­ca­ti­ons of the former. The data that are recor­ded in this manner shall be stored until you ask us to era­di­ca­te them, delete the Con­sent­Ma­na­ger cookie or until the purpose for archi­ving the data no longer exists. This shall be without pre­ju­di­ce to any man­da­to­ry legal reten­ti­on periods.

Con­sent­Ma­na­ger uses cookies to obtain the decla­ra­ti­ons of consent man­da­ted by law. The legal basis for the use of such cookies is Art. 6(1)© GDPR.

Data processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the above-men­tio­ned service. This is a con­tract man­da­ted by data privacy laws that gua­ran­tees that they process per­so­nal data of our website visi­tors only based on our ins­truc­tions and in com­pli­ance with the GDPR.

Server log files

The pro­vi­der of this website and its pages auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-called server log files, which your browser com­mu­ni­ca­tes to us auto­ma­ti­cal­ly. The infor­ma­ti­on comprises:

  • The type and version of browser used
  • The used ope­ra­ting system
  • Refer­rer URL
  • The host­na­me of the acces­sing computer
  • The time of the server inquiry
  • The IP address

This data is not merged with other data sources.

This data is recor­ded on the basis of Art. 6(1)(f) GDPR. The ope­ra­tor of the website has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error free depic­tion and the opti­miza­ti­on of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inqui­ries to us via our contact form, the infor­ma­ti­on pro­vi­ded in the contact form as well as any contact infor­ma­ti­on pro­vi­ded therein will be stored by us in order to handle your inquiry and in the event that we have further ques­ti­ons. We will not share this infor­ma­ti­on without your consent.

The pro­ces­sing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the exe­cu­ti­on of a con­tract or if it is neces­sa­ry to carry out pre-con­trac­tu­al mea­su­res. In all other cases the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the requests addres­sed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been reques­ted; the consent can be revoked at any time.

The infor­ma­ti­on you have entered into the contact form shall remain with us until you ask us to era­di­ca­te the data, revoke your consent to the archi­ving of data or if the purpose for which the infor­ma­ti­on is being archi­ved no longer exists (e.g., after we have con­cluded our respon­se to your inquiry). This shall be without pre­ju­di­ce to any man­da­to­ry legal pro­vi­si­ons, in par­ti­cu­lar reten­ti­on periods.

Request by e‑mail, telephone, or fax

If you contact us by e‑mail, tele­pho­ne or fax, your request, inclu­ding all resul­ting per­so­nal data (name, request) will be stored and pro­ces­sed by us for the purpose of pro­ces­sing your request. We do not pass these data on without your consent.

These data are pro­ces­sed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the ful­fill­ment of a con­tract or is requi­red for the per­for­mance of pre-con­trac­tu­al mea­su­res. In all other cases, the data are pro­ces­sed on the basis of our legi­ti­ma­te inte­rest in the effec­ti­ve hand­ling of inqui­ries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtai­ned; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after com­ple­ti­on of your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar sta­tu­to­ry reten­ti­on periods — remain unaffected.

5. Analysis tools and advertising

Google Analytics

This website uses func­tions of the web ana­ly­sis service Google Ana­ly­tics. The pro­vi­der of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ana­ly­tics enables the website ope­ra­tor to analyze the beha­vi­or pat­terns of website visi­tors. To that end, the website ope­ra­tor recei­ves a variety of user data, such as pages acces­sed, time spent on the page, the uti­li­zed ope­ra­ting system and the user’s origin. This data is assi­gned to the respec­ti­ve end device of the user. An assign­ment to a user-ID does not take place.

Fur­ther­mo­re, Google Ana­ly­tics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Ana­ly­tics uses various mode­ling approa­ches to augment the coll­ec­ted data sets and uses machine lear­ning tech­no­lo­gies in data analysis.

Google Ana­ly­tics uses tech­no­lo­gies that make the reco­gni­ti­on of the user for the purpose of ana­ly­zing the user beha­vi­or pat­terns (e.g., cookies or device fin­ger­prin­ting). The website use infor­ma­ti­on recor­ded by Google is, as a rule trans­fer­red to a Google server in the United States, where it is stored.

The use of these ser­vices occurs on the basis of your consent pur­su­ant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mis­si­on to the US is based on an ade­quacy decis­i­on pur­su­ant to Art. 45 GDPR of the Euro­pean Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the recor­ding and pro­ces­sing of your data by Google by down­loa­ding and instal­ling the browser plugin available under the fol­lo­wing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­ti­on about the hand­ling of user data by Google Ana­ly­tics, please consult Google’s Data Privacy Decla­ra­ti­on at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have exe­cu­ted a con­tract data pro­ces­sing agree­ment with Google and are imple­men­ting the strin­gent pro­vi­si­ons of the German data pro­tec­tion agen­ci­es to the fullest when using Google Analytics.

Google Ads

The website ope­ra­tor uses Google Ads. Google Ads is an online pro­mo­tio­nal program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party web­sites, if the user enters certain search terms into Google (keyword tar­ge­ting). It is also pos­si­ble to place tar­ge­ted ads based on the user data Google has in its pos­ses­si­on (e.g., loca­ti­on data and inte­rests; target group tar­ge­ting). As the website ope­ra­tor, we can analyze these data quan­ti­ta­tively, for ins­tance by ana­ly­zing which search terms resul­ted in the display of our ads and how many ads led to respec­ti­ve clicks.

The use of these ser­vices occurs on the basis of your consent pur­su­ant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mis­si­on to the US is based on an ade­quacy decis­i­on pur­su­ant to Art. 45 GDPR of the Euro­pean Com­mis­si­on. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion-Tracking

This website uses Google Con­ver­si­on Track­ing. The pro­vi­der of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assis­tance of Google Con­ver­si­on Track­ing, we are in a posi­ti­on to reco­gni­ze whether the user has com­ple­ted certain actions. For ins­tance, we can analyze the how fre­quent­ly which buttons on our website have been clicked and which pro­ducts are review­ed or purcha­sed with par­ti­cu­lar fre­quen­cy. The purpose of this infor­ma­ti­on is to compile con­ver­si­on sta­tis­tics. We learn how many users have clicked on our ads and which actions they have com­ple­ted. We do not receive any infor­ma­ti­on that would allow us to per­so­nal­ly iden­ti­fy the users. Google as such uses cookies or com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies for iden­ti­fi­ca­ti­on purposes.

The use of these ser­vices occurs on the basis of your consent pur­su­ant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

For more infor­ma­ti­on about Google Con­ver­si­on Track­ing, please review Google’s data pro­tec­tion policy at: https://policies.google.com/privacy?hl=en

Facebook Pixel

To measure con­ver­si­on rates, this website uses the visitor acti­vi­ty pixel of Face­book. The pro­vi­der of this service is Meta Plat­forms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Accor­ding to Facebook’s state­ment the coll­ec­ted data will be trans­fer­red to the USA and other third-party count­ries too.

This tool allows the track­ing of page visi­tors after they have been linked to the website of the pro­vi­der after cli­cking on a Face­book ad. This makes it pos­si­ble to analyze the effec­ti­ve­ness of Face­book ads for sta­tis­ti­cal and market rese­arch pur­po­ses and to opti­mi­ze future adver­ti­sing campaigns.

For us as the ope­ra­tors of this website, the coll­ec­ted data is anony­mous. We are not in a posi­ti­on to arrive at any con­clu­si­ons as to the iden­ti­ty of users. However, Face­book archi­ves the infor­ma­ti­on and pro­ces­ses it, so that it is pos­si­ble to make a con­nec­tion to the respec­ti­ve user profile and Face­book is in a posi­ti­on to use the data for its own pro­mo­tio­nal pur­po­ses in com­pli­ance with the Face­book Data Usage Policy. This enables Face­book to display ads on Face­book pages as well as in loca­ti­ons outside of Face­book. We as the ope­ra­tor of this website have no control over the use of such data.

The use of these ser­vices occurs on the basis of your consent pur­su­ant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mis­si­on to the US is based on an ade­quacy decis­i­on pur­su­ant to Art. 45 GDPR of the Euro­pean Com­mis­si­on. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381.

Insofar as per­so­nal data is coll­ec­ted on our website with the help of the tool descri­bed here and for­ward­ed to Face­book, we and Meta Plat­forms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly respon­si­ble for this data pro­ces­sing (Art. 26 DSGVO). The joint respon­si­bi­li­ty is limited exclu­si­ve­ly to the coll­ec­tion of the data and its for­war­ding to Face­book. The pro­ces­sing by Face­book that takes place after the onward trans­fer is not part of the joint respon­si­bi­li­ty. The obli­ga­ti­ons incum­bent on us jointly have been set out in a joint pro­ces­sing agree­ment. The wording of the agree­ment can be found under: https://www.facebook.com/legal/controller_addendum. Accor­ding to this agree­ment, we are respon­si­ble for pro­vi­ding the privacy infor­ma­ti­on when using the Face­book tool and for the privacy-secure imple­men­ta­ti­on of the tool on our website. Face­book is respon­si­ble for the data secu­ri­ty of Face­book pro­ducts. You can assert data subject rights (e.g., requests for infor­ma­ti­on) regar­ding data pro­ces­sed by Face­book direct­ly with Face­book. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

In Facebook’s Data Privacy Poli­ci­es, you will find addi­tio­nal infor­ma­ti­on about the pro­tec­tion of your privacy at: https://www.facebook.com/about/privacy/.

You also have the option to deac­ti­va­te the remar­ke­ting func­tion “Custom Audi­en­ces” in the ad set­tings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

If you do not have a Face­book account, you can deac­ti­va­te any user-based adver­ti­sing by Face­book on the website of the Euro­pean Inter­ac­ti­ve Digital Adver­ti­sing Alli­ance: http://www.youronlinechoices.com/de/praferenzmanagement/.

LinkedIn Insight Tag

This website uses the Insight tag from Lin­ke­dIn. This service is pro­vi­ded by Lin­ke­dIn Ireland Unli­mi­t­ed Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight tag

We use the Lin­ke­dIn Insight tag to obtain infor­ma­ti­on about visi­tors to our website. Once a website visitor is regis­tered with Lin­ke­dIn, we can analyze the key occu­pa­tio­nal data (e.g., career level, company size, country, loca­ti­on, indus­try, job title) of our website visi­tors to help us better target our site to the rele­vant audi­ence. We can also use Lin­ke­dIn Insight tags to measure whether visi­tors to our web­sites make a purcha­se or perform other actions (con­ver­si­on mea­su­re­ment). Con­ver­si­on mea­su­re­ment can also be carried out across devices (e.g. from PC to tablet). Lin­ke­dIn Insight Tag also fea­tures a retar­ge­ting func­tion that allows us to display tar­ge­ted adver­ti­sing to visi­tors to our website outside of the website. Accor­ding to Lin­ke­dIn, no iden­ti­fi­ca­ti­on of the adver­ti­sing addres­see takes place.

Lin­ke­dIn itself also coll­ects log files (URL, refer­rer URL, IP address, device and browser cha­rac­te­ristics and time of access). The IP addres­ses are shor­ten­ed or (if they are used to reach Lin­ke­dIn members across devices) hashed (pseud­ony­mi­zed). The direct iden­ti­fiers of Lin­ke­dIn members are deleted by Lin­ke­dIn after seven days. The remai­ning pseud­ony­mi­zed data will then be deleted within 180 days.

The data coll­ec­ted by Lin­ke­dIn cannot be assi­gned by us as a website ope­ra­tor to spe­ci­fic indi­vi­du­als. Lin­ke­dIn will store the per­so­nal data coll­ec­ted from website visi­tors on its servers in the USA and use it for its own pro­mo­tio­nal acti­vi­ties. For details, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If your appr­oval (consent) has been obtai­ned the use of the abo­ve­men­tio­ned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TDDDG(German Tele­com­mu­ni­ca­ti­ons Act). Such consent may be revoked at any time. If your consent was not obtai­ned, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website ope­ra­tor has a legi­ti­ma­te inte­rest in effec­ti­ve adver­ti­sing pro­mo­ti­ons that include the uti­liza­ti­on of social media.

Data trans­mis­si­on to the US is based on an ade­quacy decis­i­on pur­su­ant to Art. 45 GDPR of the Euro­pean Com­mis­si­on. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of LinkedIn Insight Tag

You can object to LinkedIn’s ana­ly­sis of user beha­vi­or and tar­ge­ted adver­ti­sing at the fol­lo­wing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

In addi­ti­on, Lin­ke­dIn members can control the use of their per­so­nal infor­ma­ti­on for pro­mo­tio­nal pur­po­ses in the account set­tings. To prevent Lin­ke­dIn from linking infor­ma­ti­on coll­ec­ted on our site to your Lin­ke­dIn account, you must log out of your Lin­ke­dIn account before you visit our site.

Data processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the above-men­tio­ned service. This is a con­tract man­da­ted by data privacy laws that gua­ran­tees that they process per­so­nal data of our website visi­tors only based on our ins­truc­tions and in com­pli­ance with the GDPR.

6. Newsletter

Newsletter data

If you would like to receive the news­let­ter offered on the website, we require an e‑mail address from you as well as infor­ma­ti­on that allows us to verify that you are the owner of the e‑mail address pro­vi­ded and that you agree to receive the news­let­ter. Further data is not coll­ec­ted or only on a vol­un­t­a­ry basis. For the hand­ling of the news­let­ter, we use news­let­ter service pro­vi­ders, which are descri­bed below.

Mailchimp

This website uses the ser­vices of Mailchimp to send out its news­let­ters. The pro­vi­der is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among other things, Mailchimp is a service that can be deploy­ed to orga­ni­ze and analyze the sending of news­let­ters. When­ever you enter data for the purpose of sub­scrib­ing to a news­let­ter (e.g. your e‑mail address), the infor­ma­ti­on is stored on Mailchimp servers in the United States.

With the assis­tance of the Mailchimp tool, we can analyze the per­for­mance of our news­let­ter cam­paigns. If you open an e‑mail that has been sent through the Mailchimp tool, a file that has been inte­gra­ted into the e‑mail (a so-called web-beacon) con­nects to Mailchimp’s servers in the United States. As a result, it can be deter­mi­ned whether a news­let­ter message has been opened and which links the reci­pi­ent pos­si­bly clicked on. Tech­ni­cal infor­ma­ti­on is also recor­ded at that time (e.g. the time of access, the IP address, type of browser and ope­ra­ting system). This infor­ma­ti­on cannot be allo­ca­ted to the respec­ti­ve news­let­ter reci­pi­ent. Their sole purpose is the per­for­mance of sta­tis­ti­cal ana­ly­ses of news­let­ter cam­paigns. The results of such ana­ly­ses can be used to tailor future news­let­ters to the inte­rests of their reci­pi­ents more effectively.

If you do not want to permit an ana­ly­sis by Mailchimp, you must unsub­scri­be from the news­let­ter. We provide a link for you to do this in every news­let­ter message.

The data is pro­ces­sed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsub­scrib­ing from the news­let­ter. This shall be without pre­ju­di­ce to the lawful­ness of any data pro­ces­sing tran­sac­tions that have taken place prior to your revocation.

The data depo­si­ted with us for the purpose of sub­scrib­ing to the news­let­ter will be stored by us until you unsub­scri­be from the news­let­ter or the news­let­ter service pro­vi­der and deleted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be from the news­let­ter. Data stored for other pur­po­ses with us remain unaffected.

Data trans­mis­si­on to the US is based on an ade­quacy decis­i­on pur­su­ant to Art. 45 GDPR of the Euro­pean Com­mis­si­on. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your e‑mail address may be stored by us or the news­let­ter service pro­vi­der in a black­list, if such action is neces­sa­ry to prevent future mai­lings. The data from the black­list is used only for this purpose and not merged with other data. This serves both your inte­rest and our inte­rest in com­ply­ing with the legal requi­re­ments when sending news­let­ters (legi­ti­ma­te inte­rest within the meaning of Art. 6(1)(f) GDPR). The storage in the black­list is inde­fi­ni­te. You may object to the storage if your inte­rests out­weigh our legi­ti­ma­te interest.

For more details, please consult the Data Privacy Poli­ci­es of Mailchimp at: https://mailchimp.com/legal/terms/.

Data processing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the above-men­tio­ned service. This is a con­tract man­da­ted by data privacy laws that gua­ran­tees that they process per­so­nal data of our website visi­tors only based on our ins­truc­tions and in com­pli­ance with the GDPR.

7. Plug-ins and Tools

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website ope­ra­tor is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expan­ded data pro­tec­tion mode. Accor­ding to YouTube, this mode ensures that YouTube does not store any infor­ma­ti­on about visi­tors to this website before they watch the video. Nevert­hel­ess, this does not neces­s­a­ri­ly mean that the sharing of data with YouTube part­ners can be ruled out as a result of the expan­ded data pro­tec­tion mode. For ins­tance, regard­less of whether you are wat­ching a video, YouTube will always estab­lish a con­nec­tion with the Google Dou­ble­Click network.

As soon as you start to play a YouTube video on this website, a con­nec­tion to YouTube’s servers will be estab­lished. As a result, the YouTube server will be noti­fied, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to direct­ly allo­ca­te your brow­sing pat­terns to your per­so­nal profile. You have the option to prevent this by logging out of your YouTube account.

Fur­ther­mo­re, after you have started to play a video, YouTube will be able to place various cookies on your device or com­pa­ra­ble tech­no­lo­gies for reco­gni­ti­on (e.g. device fin­ger­prin­ting). In this way YouTube will be able to obtain infor­ma­ti­on about this website’s visi­tors. Among other things, this infor­ma­ti­on will be used to gene­ra­te video sta­tis­tics with the aim of impro­ving the user fri­end­li­ne­ss of the site and to prevent attempts to commit fraud.

Under certain cir­cum­s­tances, addi­tio­nal data pro­ces­sing tran­sac­tions may be trig­ge­red after you have started to play a YouTube video, which are beyond our control.

The use of YouTube is based on our inte­rest in pre­sen­ting our online content in an appe­al­ing manner. Pur­su­ant to Art. 6(1)(f) GDPR, this is a legi­ti­ma­te inte­rest. If appro­pria­te consent has been obtai­ned, the pro­ces­sing is carried out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

For more infor­ma­ti­on on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Google Fonts (local embedding)

This website uses so-called Google Fonts pro­vi­ded by Google to ensure the uniform use of fonts on this site. These Google fonts are locally instal­led so that a con­nec­tion to Google’s servers will not be estab­lished in con­junc­tion with this application.

For more infor­ma­ti­on on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Decla­ra­ti­on under: https://policies.google.com/privacy?hl=en.

OpenStreetMap

We are using the mapping service pro­vi­ded by Open­Street­Map (OSM).

We inte­gra­te Open­Street­Map on our own (tile) server. When calling up the map mate­ri­al, there is con­se­quent­ly no con­nec­tion to the servers of third parties.

We use Open­Street­Map with the objec­ti­ve of ensu­ring the attrac­ti­ve pre­sen­ta­ti­on of our online offers and to make it easy for visi­tors to find the loca­ti­ons we specify on our website. This estab­lishes legi­ti­ma­te grounds as defined in Art. 6(1)(f) GDPR. If appro­pria­te consent has been obtai­ned, the pro­ces­sing is carried out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

Google reCAPTCHA

We use “Google reCAPTCHA” (her­ein­af­ter refer­red to as “reCAPTCHA”) on this website. The pro­vi­der is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to deter­mi­ne whether data entered on this website (e.g., infor­ma­ti­on entered into a contact form) is being pro­vi­ded by a human user or by an auto­ma­ted program. To deter­mi­ne this, reCAPTCHA ana­ly­zes the beha­vi­or of the website visi­tors based on a variety of para­me­ters. This ana­ly­sis is trig­ge­red auto­ma­ti­cal­ly as soon as the website visitor enters the site. For this ana­ly­sis, reCAPTCHA eva­lua­tes a variety of data (e.g., IP address, time the website visitor spent on the site or cursor move­ments initia­ted by the user). The data tracked during such ana­ly­ses are for­ward­ed to Google.

reCAPTCHA ana­ly­ses run enti­re­ly in the back­ground. Website visi­tors are not alerted that an ana­ly­sis is underway.

Data are stored and ana­ly­zed on the basis of Art. 6(1)(f) GDPR. The website ope­ra­tor has a legi­ti­ma­te inte­rest in the pro­tec­tion of the operator’s web­sites against abusive auto­ma­ted spying and against SPAM. If appro­pria­te consent has been obtai­ned, the pro­ces­sing is carried out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­ti­on in the user’s end device (e.g., device fin­ger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

For more infor­ma­ti­on about Google reCAPTCHA please refer to the Google Data Privacy Decla­ra­ti­on and Terms Of Use under the fol­lo­wing links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

Privacy policy for customers and suppliers of Magnesia GmbH

For reasons of rea­da­bili­ty, the mas­cu­li­ne form is used in person names, but the female form is always included.

1. Privacy policy

We, the Magne­sia GmbH, attach par­ti­cu­lar importance to the obser­van­ce of data pro­tec­tion laws. The rele­vant data pro­tec­tion laws, in par­ti­cu­lar the EU General Data Pro­tec­tion Regu­la­ti­on and the Federal Data Pro­tec­tion Act (new), are fully com­pli­ed with by us. The pro­ces­sing of per­so­nal data takes place exclu­si­ve­ly on the basis of the rele­vant laws and takes place only for the pur­po­ses stated under No. 4. The data will only be pro­ces­sed accor­ding to the spe­ci­fi­ca­ti­ons of this privacy policy.

2. Responsible body

The body respon­si­ble for data pro­ces­sing is:

Magne­sia GmbH
Max-Jenne-Straße 2 — 4
21337 Lüne­burg

Tele­pho­ne: +49 4131 8710–0
E‑Mail: info@magnesia.de

Mana­ging Direc­tor: Markus Cording, Johann Studt­mann 
IT Manager: André Suchan

3. Data Collection

We collect, store and process the fol­lo­wing data cate­go­ries to fulfill the con­trac­tu­al and legal regulations:

Cus­to­mers:

  • Company data (name and address of the client)
  • Per­so­nal data (name, address of the contact person at the client)
  • Contact details (tele­pho­ne number, e‑mail address of the contact person)
  • Bank data
  • Other data (posi­ti­on of the contact person)

Service pro­vi­ders or suppliers:

  • Company data (name and address of the client)
  • Per­so­nal data (name, address of the contact person at the client)
  • Contact details (tele­pho­ne number, e‑mail address of the contact person)
  • Bank data
  • Other data (posi­ti­on of the contact person)

4. Purpose of the data processing

We process the data men­tio­ned in No. 3 exclusively

  1. to fulfill the con­tract
    (Article 6 (1) (b) EU GDPR)
  2. to fulfill legal, judi­cial or regu­la­to­ry requi­re­ments / orders
    (Article 6 (1) © EU GDPR)
  3. for infor­ma­ti­on about our ser­vices and events
    (Article 6 (1) (f) EU GDPR) 
  4. to perform anony­mous sta­tis­ti­cal eva­lua­ti­on such. Eg satis­fac­tion ana­ly­zes
    (Article 6 (1) (f) EU GDPR)

Regar­ding Point 3: Our legi­ti­ma­te inte­rest here is cus­to­mer loyalty and the gene­ra­ti­on of new con­trac­tu­al relationships.

Regar­ding Point 4: The legi­ti­ma­te inte­rest lies in the opti­miza­ti­on of our offer.

Submission of data

The contact details of the clerks are trans­mit­ted to trans­port service pro­vi­ders or for­war­ding agents, as well as the deli­very address, in order to ensure the proper ship­ment of goods or only to enable them.

6. Transfer of data to a third country

As part of our general busi­ness ope­ra­ti­ons, we also source pro­ducts from third count­ries. Per­so­nal data of the employees (name and contact details) are trans­mit­ted to our busi­ness part­ners. Legal basis is here our con­trac­tu­al rela­ti­onship gem. Art. 6 para. 1 sen­tence 1 lit. b DSGVO.

7. Deletion periods

The per­so­nal data stored by us are deleted or made anony­mous after the dis­con­ti­nua­tion of the pur­po­ses stated in No. 4 or after expiry of any sta­tu­to­ry reten­ti­on periods.

8. Rights of the data subject

You will receive free infor­ma­ti­on at any time (Art. 15 EU-DSGVO) about the per­so­nal data we store about you as well as the origin, the reci­pi­ent and the purpose of the data pro­ces­sing. In addi­ti­on, you have the right to request the cor­rec­tion (Art. 16 EU-GDPR), the blo­cking (Art. 18 EU-GDPR) or can­cel­la­ti­on (Art. 17 EU-GDPR) of your data. Excluded from this is data that is stored due to legal regu­la­ti­ons or requi­red for the proper conduct of busi­ness. You have the right to object to the pro­ces­sing of your data (Article 21 EU GDPR) and the right to data por­ta­bi­li­ty (Article 20 EU GDPR).

Right to object

Accor­ding to Art. 21 (1) GDPR, you have the right to object to the pro­ces­sing of your per­so­nal data at any time, as far as this does not serve the ful­fill­ment of a con­tract, a legal obli­ga­ti­on or the pro­tec­tion of vital interests.

To safe­guard your rights (also from no. 7) you can turn to the fol­lo­wing address in writing or text form:

Magne­sia GmbH
Max-Jenne-Straße 2 — 4
21337 Lüne­burg

E‑Mail: info@magnesia.de

If you do not fully under­stand your rights when dealing with your per­so­nal data, you have the right to lodge a com­plaint with your regu­la­to­ry authority.

9. Data Protection Officer

We have appoin­ted a data pro­tec­tion officer. This can be reached with all ques­ti­ons con­cer­ning the pro­tec­tion of per­so­nal data via the fol­lo­wing contact data:

Bernard van den Berg
Magne­sia GmbH
Max-Jenne-Straße 2–4
D‑21337 Lüne­burg
E‑Mail: datenschutz@magnesia.de

10. Obligation to provide personal data

If you wish to enter into a con­trac­tu­al rela­ti­onship with us, you must provide us with the per­so­nal data that are neces­sa­ry for the per­for­mance of the asso­cia­ted con­trac­tu­al obli­ga­ti­ons or that are legally requi­red to be collected.

If the data is not pro­vi­ded, no con­tract can be concluded.

11. Automated decision-making

We do not use auto­ma­ted decis­i­on-making to estab­lish or execute cus­to­mer or sup­pli­er relationships.

Privacy policy of Magnesia GmbH for applications

We are glad that you would like to apply to us. In the fol­lo­wing, we explain how we process your per­so­nal infor­ma­ti­on in an appli­ca­ti­on and provide other rele­vant infor­ma­ti­on in this context.

1. Who is responsible for the processing of your personal data?

Magne­sia GmbH, Max-Jenne-Str. 2–4, 21337 Lüne­burg (her­ein­af­ter refer­red to as “we”) is respon­si­ble within the meaning of the EU General Data Pro­tec­tion Regu­la­ti­on (“GDPR”).

2. Data Protection Officer

For all ques­ti­ons related to the pro­ces­sing of your per­so­nal data and the exer­cise of your rights under the GDPR, you can consult our data pro­tec­tion officer, who can be reached as follows:

Magne­sia GmbH
Max-Jenne-Straße 2–4
D‑21337 Lüne­burg
E‑Mail: datenschutz@magnesia.de

3. For what purposes and on what legal basis do we process personal data?

We process per­so­nal­ly iden­ti­fia­ble infor­ma­ti­on about you for the purpose of your appli­ca­ti­on for employ­ment, to the extent neces­sa­ry for the decis­i­on to estab­lish employ­ment with us. The legal basis is § 88 para. 1 in con­junc­tion with para­graph 8 sen­tence 2 BDSG.

Fur­ther­mo­re, we may process per­so­nal data about you, as far as this is requi­red to defend against asser­ted legal claims from the appli­ca­ti­on process against us. The legal basis is Article 6 (1) (f) GDPR, for example, the legi­ti­ma­te inte­rest is a burden of proof in pro­cee­dings under the General Equal Tre­at­ment Act (AGG).

Insofar as employ­ment arises between you and us, pur­su­ant to § 88 DSGVO we may further process the per­so­nal data you have already recei­ved for employ­ment pur­po­ses if this is neces­sa­ry for the per­for­mance or ter­mi­na­ti­on of the employ­ment rela­ti­onship or for per­for­mance or ful­fill­ment of requi­red by a law or coll­ec­ti­ve agree­ment, an ope­ra­ting or service agree­ment (coll­ec­ti­ve agree­ment) and duties of employee representation.

4. Which categories of personal data do we process?

We process data related to your appli­ca­ti­on. This may include general per­so­nal infor­ma­ti­on (such as name, address and contact details), details of your qua­li­fi­ca­ti­ons and edu­ca­ti­on, CV infor­ma­ti­on, or other infor­ma­ti­on that you provide to us in con­nec­tion with your appli­ca­ti­on. Inci­den­tal­ly, we can process your publicly available job-related infor­ma­ti­on, such as a profile in pro­fes­sio­nal social media networks

5. What sources of personal information come from if we do not collect them from you?

Unless we collect the data direct­ly from you and you have an active profile on online job boards or pro­fes­sio­nal social net­works such as StepStone or Xing or dis­c­lo­se an inac­ti­ve or par­ti­al­ly active profile to us during the appli­ca­ti­on process, we may also provide per­so­nal infor­ma­ti­on about it rise.

6. Which categories of recipients data are there?

We may trans­fer your per­so­nal data to com­pa­nies affi­lia­ted with us, insofar as this is pos­si­ble within the scope of the pro­vi­si­ons of point 3 (pur­po­ses and legal bases). Inci­den­tal­ly, per­so­nal data are pro­ces­sed on our behalf on the basis of con­tracts pur­su­ant to Article 28 GDPR, in par­ti­cu­lar by host pro­vi­ders or pro­vi­ders of appli­cant manage­ment systems. For further infor­ma­ti­on please contact our data pro­tec­tion officer.

7. Is the transfer to a third country intended?

A trans­fer to a third country is not intended.

8. How long will your data be stored?

We store your per­so­nal infor­ma­ti­on as long as this is neces­sa­ry to decide on your appli­ca­ti­on. Insofar as an employ­ment rela­ti­onship between you and us does not mate­ria­li­ze, we may also con­ti­nue to store data as far as neces­sa­ry to defend against pos­si­ble legal claims. The appli­ca­ti­on docu­ments will be deleted six months after noti­fi­ca­ti­on of the rejec­tion decis­i­on, unless a longer storage due to liti­ga­ti­on is required.

9. What rights do you have?

As an appli­cant with us you have depen­ding on the situa­ti­on in indi­vi­du­al cases the fol­lo­wing data pro­tec­tion rights. To exer­cise these rights, you can contact us or our data pro­tec­tion officer at the above-men­tio­ned contact details.

a. Infor­ma­ti­on

You have the right to receive infor­ma­ti­on about your per­so­nal data pro­ces­sed by us and to request access to your per­so­nal data and / or copies of this data. This includes infor­ma­ti­on on the purpose of the use, the cate­go­ry of data used, their reci­pi­ents and access rights.

b. Cor­rec­tion, erasure or rest­ric­tion of processing

You have the right to demand imme­dia­te cor­rec­tion of incor­rect per­so­nal data con­cer­ning you. Taking into account the pur­po­ses of pro­ces­sing, you have the right to request the com­ple­ti­on of incom­ple­te per­so­nal data, inclu­ding by means of a sup­ple­men­ta­ry statement.

c. Con­tra­dic­tion

Insofar as the pro­ces­sing of your per­so­nal data takes place on the basis of Article 6 (1) (f) of the GDPR, you have the right, at any time, to object to the pro­ces­sing of such data for reasons arising from your par­ti­cu­lar situa­ti­on. We will then no longer process that per­so­nal infor­ma­ti­on unless we can demons­tra­te com­pel­ling legi­ti­ma­te grounds for pro­ces­sing that out­weigh your inte­rests, rights and free­doms, or the pro­ces­sing is for the pur­po­ses of asser­ting, exer­cis­ing or defen­ding legal claims.

d. Revo­ca­ti­on

e. Right to delete

You have the right to request that per­so­nal data con­cer­ning you be deleted imme­dia­te­ly and we are obliged to delete per­so­nal data imme­dia­te­ly if one of the fol­lo­wing reasons applies:

  • The per­so­nal data are no longer neces­sa­ry for the pur­po­ses for which they were coll­ec­ted or other­wi­se processed
  • They object to the pro­ces­sing in accordance with point 9.c above and there are no legi­ti­ma­te reasons for the processing.
  • The per­so­nal data were pro­ces­sed unlawfully.
  • The dele­ti­on of per­so­nal data is requi­red to fulfill a legal obli­ga­ti­on under Union or natio­nal law to which we are subject.

This does not apply if pro­ces­sing is required:

  • to fulfill a legal obli­ga­ti­on which requi­res pro­ces­sing under the law of the Union or of the Member States to which we are subject.
  • to assert, exer­cise or defend legal claims.

f. Right to rest­ric­tion of processing

You have the right to require us to rest­rict pro­ces­sing if any of the fol­lo­wing con­di­ti­ons apply:

  • the accu­ra­cy of your per­so­nal infor­ma­ti­on is dis­pu­ted by you, for a period of time that enables us to verify the accu­ra­cy of your per­so­nal information,
  • the pro­ces­sing is unlawful and you refuse the dele­ti­on of per­so­nal data and instead demand the rest­ric­tion of the use of per­so­nal data;
  • we no longer need the per­so­nal data for the pur­po­ses of pro­ces­sing, but you need it to assert, exer­cise or defend your rights, or
  • You have lodged an objec­tion against the pro­ces­sing in accordance with point 9.c above, as long as it is not certain whether our legi­ti­ma­te reasons out­weig­hed yours.

If pro­ces­sing has been rest­ric­ted in accordance with this sub­pa­ra­graph, these per­so­nal data may only be used, with the excep­ti­on of their storage, to assert, exer­cise or defend legal claims or to protect the rights of another natural or legal person or for important public reasons Inte­rest of the Union or of a Member State. If you have a limi­ta­ti­on on the pro­ces­sing, we will inform you before the rest­ric­tion is lifted.

g. Right of appeal

Without pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­cial remedy, you have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Member State of your place of resi­dence, employ­ment or the place of the alleged inf­rin­ge­ment, if you believe that the pro­ces­sing of your per­so­nal data is con­tra­ry to the GDPR.

10. Need to provide personal information

The pro­vi­si­on of per­so­nal infor­ma­ti­on is neither requi­red by law nor by con­tract, nor are you requi­red to provide your per­so­nal infor­ma­ti­on. However, the pro­vi­si­on of per­so­nal infor­ma­ti­on is requi­red to enter into a con­tract of employ­ment with us. This means that unless you provide us with per­so­nal data when app­ly­ing, we will not enter into any employ­ment rela­ti­onship with you.

11. Encryption

This site uses, for secu­ri­ty reasons and to protect the trans­mis­si­on of con­fi­den­ti­al content, such as appli­ca­ti­ons that you send to us as a site ope­ra­tor, an SSL or. TLS encryp­ti­on. You can reco­gni­ze an encrypt­ed con­nec­tion in the address line of the browser. It is swit­ching from “http: //” to “https: //” and there is a lock symbol in your browser line. If SSL or TLS encryp­ti­on is enabled, the data you submit to us cannot be read by third parties.

12. Custom Services

Handling applicant data

We offer website visi­tors the oppor­tu­ni­ty to submit job appli­ca­ti­ons to us (e.g., via e‑mail, via postal ser­vices on by sub­mit­ting the online job appli­ca­ti­on form). Below, we will brief you on the scope, purpose and use of the per­so­nal data coll­ec­ted from you in con­junc­tion with the appli­ca­ti­on process. We assure you that the coll­ec­tion, pro­ces­sing, and use of your data will occur in com­pli­ance with the appli­ca­ble data privacy rights and all other sta­tu­to­ry pro­vi­si­ons and that your data will always be treated as strict­ly confidential.

Scope and purpose of the collection of data

If you submit a job appli­ca­ti­on to us, we will process any affi­lia­ted per­so­nal data (e.g., contact and com­mu­ni­ca­ti­ons data, appli­ca­ti­on docu­ments, notes taken during job inter­views, etc.), if they are requi­red to make a decis­i­on con­cer­ning the estab­lish­ment or an employ­ment rela­ti­onship. The legal grounds for the afo­re­men­tio­ned are § 26 BDSG accor­ding to German Law (Nego­tia­ti­on of an Employ­ment Rela­ti­onship), Art. 6(1)(b) GDPR (General Con­tract Nego­tia­ti­ons) and – pro­vi­ded you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your per­so­nal data will only be shared with indi­vi­du­als who are invol­ved in the pro­ces­sing of your job application.

If your job appli­ca­ti­on should result in your recruit­ment, the data you have sub­mit­ted will be archi­ved on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of imple­men­ting the employ­ment rela­ti­onship in our data pro­ces­sing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­ti­on, we reserve the right to retain the data you have sub­mit­ted on the basis of our legi­ti­ma­te inte­rests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­ti­on pro­ce­du­re (rejec­tion or with­dra­wal of the appli­ca­ti­on). After­wards the data will be deleted, and the phy­si­cal appli­ca­ti­on docu­ments will be des­troy­ed. The storage serves in par­ti­cu­lar as evi­dence in the event of a legal dispute. If it is evident that the data will be requi­red after the expiry of the 6‑month period (e.g., due to an impen­ding or pending legal dispute), dele­ti­on will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agree­ment (Article 6(1)(a) GDPR) or if sta­tu­to­ry data reten­ti­on requi­re­ments pre­clude the deletion.

Privacy policy for social media

When you visit our social media chan­nels, it is neces­sa­ry to process per­so­nal data from you. The­r­e­fo­re, we inform you in accordance with Art. 13 DSGVO about the data pro­ces­sing within the scope of our social media pages.

1. Responsible entity & social media channels

Magne­sia GmbH
Max-Jenne-Str. 2–4
21337 Lüne­burg

Tel. +49 4131 87100
Website: www.magnesia.de
E‑Mail-Adresse: info@magnesia.de

Manage­ment: Markus Cording, Johann Studt­mann
The fol­lo­wing pages and pro­files are ope­ra­ted on social media platforms:

  • Insta­gram
  • YouTube
  • Lin­ke­dIn

In the context of the ECJ ruling (C‑210/16 — Face­book Fan­pages) of 05.06.2018, it was ruled that in addi­ti­on to the ope­ra­tor of the social media plat­form, the page or profile ope­ra­tor is also respon­si­ble for data pro­ces­sing. The­r­e­fo­re, both we and the ope­ra­tor of the social media channel are jointly respon­si­ble for the data pro­ces­sing. Within the scope of our pos­si­bi­li­ties to exert influence, we work towards the data pro­tec­tion-com­pli­ant hand­ling of your data within the frame­work of the social media plat­form. However, we are often not in a posi­ti­on to influence the data pro­ces­sing by the social media plat­form ope­ra­tor. For more detail­ed infor­ma­ti­on, please refer to the respec­ti­ve data pro­tec­tion notices of the social media plat­form ope­ra­tors at the end.

2. Data processing by Magnesia GmbH

2.1 Processing within the framework of the social media site

The fan page you visit gives you the oppor­tu­ni­ty to respond to our posts, comment on them, create a user post yours­elf, and send us private mes­sa­ges with per­so­nal concerns.

The data you provide in this context and which may be acces­si­ble to us (e.g. user name, images, inte­rests, contact data) will be used by us for the purpose of cus­to­mer and pro­s­pect com­mu­ni­ca­ti­on based on an over­ri­ding legi­ti­ma­te inte­rest (Art. 6 para. 1 lit. f DSGVO). Our inte­rest lies in pro­vi­ding you with a plat­form on which we can display up-to-date infor­ma­ti­on and with the help of which you can address your request to us and we can comply with it as quickly as pos­si­ble. As far as we are able, your data will be deleted when the fanpage ope­ra­ti­on is discontinued.

The data you publish on the social media plat­form (for example, user­na­me, comm­ents, videos and images) are published by the cor­re­spon­ding social media plat­form and are not pro­ces­sed by us for pur­po­ses other than those listed here.

If you send us an inquiry via a social media plat­form, we may refer you to other, secure com­mu­ni­ca­ti­on chan­nels. You can always reach us via the contact details listed in the imprint.

2.2 Processing of statistical “insight data”

Some social media plat­forms (for example Insta­gram) prepare sta­tis­tics, so-called “page insights” based on usage data, which are made available to us.

Sta­tis­ti­cal data of dif­fe­rent cate­go­ries can be acces­sed by us via the so-called “page insights” (for example: total number of page views, page acti­vi­ties, etc.). These sta­tis­tics are gene­ra­ted and created by the social media plat­form, so we have no influence on them and cannot prevent them.

The social media plat­forms deter­mi­ne, with refe­rence to the joint respon­si­bi­li­ty agree­ment, the pro­ces­sing and imple­men­ta­ti­on of the “Insight Data”. Our con­tri­bu­ti­on to the purpose-means decis­i­on of the “Insight Data” is limited to the use of the “Insight Data” to make posts and acti­vi­ties on our social media site more attrac­ti­ve and to adapt them accor­din­gly for the users.

The sta­tis­tics pro­vi­ded are trans­mit­ted in anony­mi­zed form, so that we cannot iden­ti­fy any par­ti­cu­lar user via the sta­tis­tics. The page sta­tis­tics are used by us exclu­si­ve­ly for the above-men­tio­ned pur­po­ses and no con­clu­si­ons can be drawn about indi­vi­du­al persons.

The legal basis for the pro­ces­sing of the data is Art. 6 (1) lit. f DSGVO as part of the legi­ti­ma­te inte­rest to vali­da­te the inter­ac­tions with our social media site and to target content to the inte­res­ted parties.

Details on the deli­mi­ta­ti­on of respon­si­bi­li­ty can be found in the fol­lo­wing agreement:

3. Storage duration

Your per­so­nal data will be deleted if they are no longer neces­sa­ry for the pro­ces­sing pur­po­ses or if no reten­ti­on periods prevent the deletion.

4. Data processing by the operators of the social media platforms

The ope­ra­tors of the social media plat­forms use web track­ing methods. Web track­ing takes place regard­less of whether you are regis­tered on the platform.

It can the­r­e­fo­re not be ruled out that the ope­ra­tors of the social media plat­forms use your profile and beha­vi­oral data to eva­lua­te them accor­din­gly. We have no influence on the pro­ces­sing of your data by the pro­vi­ders of the social media plat­forms, so that the use of the social media plat­form is your own responsibility.

More detail­ed infor­ma­ti­on on data pro­ces­sing by the pro­vi­ders of the social media plat­forms, con­fi­gu­ra­ti­on options to protect your privacy, as well as further objec­tion options and, if available and con­cluded, the agree­ment accor­ding to Art. 26 DSGVO can be found in the privacy policy of the provider:

5. Data subject rights

Requests for infor­ma­ti­on and the asser­ti­on of data subject rights should be made direct­ly to the pro­vi­der of the plat­form, which is the most effec­ti­ve way. This is due to the fact that only the pro­vi­der has the direct infor­ma­ti­on and the data­ba­se from which the trans­mit­ted sta­tis­tics are created. Should our support be requi­red, you can contact us at any time.

You have the right to request con­fir­ma­ti­on as to whether per­so­nal data rela­ting to you is being pro­ces­sed by us. If this is the case, we will gladly provide you with infor­ma­ti­on about this per­so­nal data and the infor­ma­ti­on listed in Art. 15 DSGVO. In addi­ti­on, you have the right to rec­ti­fi­ca­ti­on (Art. 16 GDPR), the right to rest­ric­tion of pro­ces­sing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data por­ta­bi­li­ty (Art. 20 GDPR) under the respec­ti­ve legal conditions.

Right of objection

Pur­su­ant to Art. 21 (1) DSGVO, you have the right to object to the pro­ces­sing of your per­so­nal data at any time, unless it serves the ful­fill­ment of a con­tract, a legal obli­ga­ti­on or the pro­tec­tion of vital interests.

Without pre­ju­di­ce to these rights and the pos­si­bi­li­ty of seeking any other admi­nis­tra­ti­ve or judi­cial remedy, you may at any time exer­cise your right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Member State of your resi­dence, place of work or the place of the alleged inf­rin­ge­ment, if you con­sider that the pro­ces­sing of per­so­nal data rela­ting to you inf­rin­ges data pro­tec­tion law (Article 77 GDPR).

Data Protection Officer

We have appoin­ted a data pro­tec­tion officer. He can be cont­ac­ted for all ques­ti­ons regar­ding the pro­tec­tion of per­so­nal data via the fol­lo­wing contact details:

Magne­sia GmbH
Max-Jenne-Straße 2–4
21337 Lüne­burg
E‑Mail: datenschutz@magnesia.de

Privacy policy of Magnesia GmbH

1. Privacy

For us at Magne­sia GmbH, being com­pli­ant with the laws of data pro­tec­tion is very important. We keep full obe­dience of the appli­ca­ble direc­ti­ves stated by the Euro­pean Com­mis­si­on and the DSGVO for the Federal Repu­blic of Germany. The pro­ces­sing of your per­so­nal data is carried out strict­ly on the basis of the law on data pro­tec­tion and is neces­sa­ry for the purpose stated below under No. 4. The data are treated strict­ly under the terms of this privacy state­ment only.

2. Responsible Instance

The recor­ding of your per­so­nal data is done on behalf of:

Magne­sia GmbH
Max-Jenne-Str. 2–4
21337 Lüne­burg

Ph. +49 4131 87100
E‑Mail: info@magnesia.de

Mana­ging Direc­tors: Markus Cording, Johann Studtmann

3. Data Collection

For our cus­to­mer survey we collect, file and process data in the fol­lo­wing categories:

  • your name, email address and posi­ti­on in your company
  • your company name
  • your jud­ge­ment regar­ding several aspects of our service levels and product offer
  • your open feed­back about our general performance

4. What are the purposes we use your data for?

We process the data men­tio­ned under No. 3 “to ensure our legi­ti­ma­te inte­rest, in par­ti­cu­lar to monitor cus­to­mer satis­fac­tion as one of the key quality manage­ment objec­ti­ves (Art. 6 Abs. 1 lit f) EU-DSGVO).”

5. Data transmission

For this survey, we use the ser­vices of our con­trac­tu­al partner:

Netzkunst24 Design and Inter­net Agency GmbH
August-Wel­len­kamp 20
21337 Lüne­burg

These ser­vices are bound by a data pro­ces­sing agreement.

6. Data transmission outside EU territory

To trans­mit the ques­ti­on­n­aire by email and manage unsub­scri­bes we use the Mailchimp soft­ware pro­vi­ded by

Rocket Science Group LLC
675 Ponce De Leon Avenue
NE#5000 Atlanta, GA 30308
USA

7. Deletion term

The results from the satis­fac­tion survey will be stored in an anony­mi­zed manner upon receipt. Your per­so­nal data will be deleted appro­xi­m­ate­ly 4 weeks after recei­ving the questionnaire.

8. Your rights in relation to this privacy notice

At any time you can obtain free of charge infor­ma­ti­on (Art. 15 EU-DSGVO) about your per­so­nal data recor­ded by us, as well as their source, their reci­pi­ents and the purpose of the data coll­ec­tion. You also have the right to demand cor­rec­tion (Art. 16 EU-DSGVO), blo­cking (Art 18 EU-DSGVO) or dele­ti­on (Art. 17 EU-DSGVO) of your data. Excluded from this are data, that need to be stored due to legal obli­ga­ti­ons or to main­tain our proper busi­ness process. You have the right to deny the pro­ces­sing of your data (Art. 21 EU-DSGVO) and the right of data trans­fe­rence (Art. 20 EU-DSGVO).

9. Right of objection

As per Art. 21. Abs. 1 DSGVO you have the right to object to the pro­ces­sing of your per­so­nal data as long as this is not neces­sa­ry for the ful­film­ent of our con­trac­tu­al com­mit­ments, legal obli­ga­ti­ons or the pro­tec­tion of crucial public interest.

At any time, you have the right to with­draw your consent to the pro­ces­sing of per­so­nal data with effect to the future. Pro­ces­sing before the date of objec­tion is not effected.

To claim your rights (also related to No. 8) you can send an e‑mail to:

Magne­sia GmbH
Max-Jenne-Straße 2–4
21337 Lüne­burg
E‑Mail: info@magnesia.de

If you feel your rights regar­ding our hand­ling for your per­so­nal data are not fully respec­ted, you have the right to file a claim at our super­vi­so­ry authority.

10. Representative for data protection

We have assi­gned a data pro­tec­tion officer. For all your ques­ti­ons related to your privacy data you can contact:

Bernard van den Berg
Magne­sia GmbH
Max-Jenne-Straße 2–4
21337 Lüne­burg
E‑Mail: datenschutz@magnesia.de