Privacy policy according to the GDPR

Data Protection Information: Privacy Policy of mack AUTOMATION GmbH

The high standards you set for us, our services and our customer support guide how we handle your data. Our aim is to build and keep a relationship of trust with our partners and prospective customers. The confidentiality and integrity of your personal data matter a great deal to us. We will therefore process and use your data carefully, only for the stated purpose or as you have consented, and in line with the statutory data protection provisions.

The following sections describe how we, mack AUTOMATION GmbH, process your personal data. They inform you about this processing in accordance with Articles 12 and 13 of the General Data Protection Regulation (GDPR).

1. Scope
This data protection information applies to the website of mack AUTOMATION GmbH (https://mack-AUTOMATION.de/) and to the personal data collected through it. It does not apply to external websites that can be reached, for example, via links.

2. Controller
The controller responsible for data processing is mack AUTOMATION GmbH, represented by its Managing Directors, Mr. Thomas Mack and Mr. Wolfgang Keßler.
mack AUTOMATION GmbH
Kiesgrubenstraße 18
88255 Baindt, Germany
Phone: +49 7502-9401-0
Email: info@mack-AUTOMATION.de

3. General Information on Data Processing
As the operator of this website, we take data protection very seriously and treat your personal data confidentially and only in accordance with the statutory provisions. We recommend that you read this data protection information regularly, as it may change as we keep developing our website or services, or because of legal or regulatory requirements. This information uses terms such as “personal data” and “processing,” which are defined in Art. 4(1) and (2) GDPR.

a. Scope of the Processing of Personal Data
As a rule, we process personal data only where this is needed to provide a functioning website and our content and services. We generally process our users’ personal data only with their consent. The exception is where it is not possible in practice to obtain prior consent and the processing is permitted by law.

b. Legal Basis for the Processing of Personal Data
Where we obtain the data subject’s consent for processing personal data, the legal basis is Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR). Where we process personal data to perform a contract to which the data subject is a party, the legal basis is Art. 6(1)(b) GDPR. This also applies to processing needed to take steps before entering into a contract. Where processing is needed to comply with a legal obligation to which mack AUTOMATION GmbH is subject, the legal basis is Art. 6(1)(c) GDPR. Where processing is needed to protect the vital interests of the data subject or of another natural person, the legal basis is Art. 6(1)(d) GDPR. Where processing is needed to perform a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6(1)(e) GDPR. Where processing is needed for the legitimate interests of mack AUTOMATION GmbH (outside any tasks assigned to us by law, etc.) or of a third party, and those interests are not overridden by the interests, fundamental rights and freedoms of the data subject, the legal basis is Art. 6(1)(f) GDPR. This includes the use of the website. Each time a user accesses our website, data about this access is collected and used for the duration of the visit to deliver the website’s content.

c. Erasure of Data and Storage Period
The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored for longer where this is required by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by those provisions expires, unless further storage is needed to conclude or perform a contract.

d. Data Processing on Our Behalf
We have concluded a data processing agreement with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, https://www.ionos.de/, and fully implement the strict requirements of the German data protection authorities.

e. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential data, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock icon in the address bar. When encryption is active, the data you send us via the website cannot be read by third parties.

f. Recipients/Categories of Data
As a rule, the data listed above is processed only by mack AUTOMATION GmbH and its processors IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, https://www.ionos.de/, kartinka GmbH & Co. KG, Schlachthofstraße 83, 99085 Erfurt, https://www.kartinka.de/, and Google Ireland Limited.

g. Provision of Personal Data
Processing your data is strictly necessary to provide our website and to create log files. Without it, the website cannot run smoothly. If your data were not provided, you would not be able to access our website, content and services properly.

4. Provision of the Website and Creation of Log Files

a. Description and Scope of Data Processing
Each time our website is accessed, the hosting provider automatically collects data and information from the accessing computer system and stores it in server log files. The following data is collected and sent to us:

Name of the file accessed
Date and time of access
Amount of data transferred, if applicable
Notification of whether the access was successful
Type of web browser used
Operating system used
Host name of the accessing computer
Domain requests
Anonymized IP address of the accessing host system

As a rule, server logs are not combined with other data sources and are only reviewed if there are indications of unlawful use. Our employees are bound to confidentiality regarding personal data. All data on our servers, i.e., “hosted” there, is protected against unauthorized access by multiple layers of security systems. All servers on which personal data of mack AUTOMATION GmbH customers is processed or collected are located in the Federal Republic of Germany. Where mack AUTOMATION GmbH engages partner companies to perform certain services, the contracts with those partners pass on the data protection provisions and oblige the partners to comply with data protection law.

b. Purpose of Data Processing
The system has to store the IP address temporarily so that the website can be delivered to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session. We process this data for the following purposes:

Ensuring a smooth connection to the website
Ensuring convenient use of our website
Determining the amount of data transferred
Evaluating system security and stability
Other administrative purposes

Data is stored in log files partly for security reasons, e.g., to investigate cases of misuse, and partly to keep the website working. We also use the data to optimize the website and to keep our IT systems secure. The data is not analyzed for marketing purposes in this context. These purposes are also our legitimate interest in processing the data under Art. 6(1)(f) GDPR.

c. Legal Basis for Data Processing
The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

d. Storage Period
The data is erased as soon as it is no longer needed for the purpose for which it was collected. For data collected to provide the website, this is the case when the session ends. For data stored in log files, this is the case after seven days at the latest. Longer storage is possible. In that case, users’ IP addresses are deleted or altered so that the accessing client can no longer be identified. If data has to be kept as evidence, it is exempt from erasure until the incident has been fully resolved. This data is not stored together with any other personal data of the user.

e. Right to Object and Remedy
Collecting data to provide the website and storing data in log files is essential for operating the website. The user therefore has no right to object.

f. Provision of Personal Data
Processing your data is strictly necessary to provide our website and to create log files. Without it, the website cannot run smoothly. If your data were not provided, you would not be able to access our website, content and services properly.

5. Contact by Email

a. Description and Scope of Data Processing
You can contact us via the email addresses provided on our website. In this case, the personal data sent with the email is stored. This data is not passed on to third parties. It is used solely to handle the conversation.

b. Purpose of Data Processing
We process personal data sent by email solely to deal with your inquiry. This is also the necessary legitimate interest in processing the data.

c. Legal Basis for Processing
If you contact us via the email addresses provided, the personal data sent with your email is stored. This data is not passed on to third parties. It is used solely to handle the conversation.
The legal basis for processing data sent with an email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. We need to process the personal data you send us in order to deal with your request.

d. Storage Period
Your personal data will be erased as soon as it is no longer needed for the purpose for which it was collected. For personal data sent by email, this is the case when the conversation with the user has ended. A conversation has ended when the circumstances show that the matter has been fully resolved.

e. Right to Object and Remedy
If you contact us by email, you can object to the storage of your personal data at any time. In that case, the conversation cannot continue. Withdrawal of consent and objection to storage must be made in writing by email. All personal data stored in connection with the contact will then be erased.

f. Recipients/Categories of Data
As a rule, personal data sent with an email inquiry is processed exclusively by mack AUTOMATION GmbH.

g. Provision of Personal Data
If you contact us by email with an inquiry, request, etc., providing your details is voluntary. If you do not provide them, however, we cannot send you a response. Not providing personal data may mean that we cannot handle your request because the facts are incomplete and we have no way to follow up with you. Not providing the data may also have legal disadvantages for you, such as your request not being processed or a service not being provided.

6. Contact Outside the Website (Mail/Phone)

a. Description and Scope of Data Processing
You can also contact us outside the website, by mail or by phone.
If you contact us by mail, we process in particular the following personal data:

Your contact details
Last name
First name
Street and house number
ZIP code and city
Any other data provided when contacting us

If you contact us by phone, we process in particular the following personal data:

Last name
First name
Phone number
Time of the call
Any other data provided when contacting us

b. Purpose of Data Processing
We process the personal data solely to deal with your inquiry and to be able to talk with you about your request.

c. Legal Basis for Data Processing
The legal basis for processing your personal data is Art. 6(1)(a) GDPR (consent of the data subject) and Art. 6(1)(f) GDPR (our legitimate interest as controller). Our legitimate interest is to offer you several ways to contact us at any time and to answer your inquiries. If your inquiry is aimed at concluding a contract, the legal basis for processing your personal data is Art. 6(1)(b) GDPR.

d. Storage Period
Your personal data will be erased as soon as it is no longer needed for the purpose for which it was stored. For personal data sent by mail or provided by phone, this is the case when the conversation has ended. A conversation has ended when the circumstances show that the matter has been fully resolved.

e. Right to Object and Remedy
If you contact us by mail or phone, you can object to the storage of your personal data at any time. In that case, the conversation cannot continue. Objections to storage must be made in writing by email or by mail. All personal data stored in connection with the contact will then be erased.

f. Recipients/Categories of Data
As a rule, personal data provided in a mail or phone inquiry is processed exclusively by mack AUTOMATION GmbH.

g. Provision of Personal Data
If you contact us by mail or phone with an inquiry, request, etc., providing your details is voluntary. If you do not provide them, however, we cannot send you a response. Not providing personal data may mean that we cannot handle your request because the facts are incomplete and we have no way to follow up with you. Not providing the data may also have legal disadvantages for you, such as your request not being processed or a service not being provided.

7. Google Analytics 4 Web Analytics

a. Description and Scope of Data Processing
Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 lets us analyze how our website is used. We use it for quality assurance and to optimize the website.
Google Analytics 4 uses cookies and similar technologies, which store information on your device and read it from there. In particular, the following data is processed:

Pages and subpages visited, with date and time of access
The website from which you came to our site (referrer)
Time spent on the site and interactions (e.g., clicks, scrolling, downloads)
Information on device, browser, operating system and screen resolution
Approximate location (country, region, city), derived from the IP address
A randomly generated identifier (client ID) used to recognize returning visitors

IP anonymization is active by default in Google Analytics 4. Google does not store or log full IP addresses. For access from the European Union, the IP address is used only briefly to determine the approximate location and is then discarded.
We do not use server-side tagging. The analytics data is not linked to other Google services such as Google Ads.
Google Analytics 4 only loads once you have given consent via our cookie consent tool. Until then, the tool blocks the Google Analytics script and other embedded third-party scripts. Without your consent, no data is sent to Google.

b. Purpose of Data Processing
Processing users’ personal data with Google Analytics lets us analyze how our users browse. By evaluating this data, we can compile information on how the individual parts of our website are used. This helps us keep improving our website, its usability and our services.

c. Legal Basis for Data Processing
The legal basis for processing your personal data is your consent within the meaning of Art. 6(1)(a) in conjunction with Art. 7 GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). With anonymized settings (IP anonymization, global deactivation of cookies), consent may not be required. In this so-called Log Analytics mode, the processing is based on legitimate interest within the meaning of Art. 6(1)(f) GDPR.

d. Storage Period
Data stored through Google Analytics is erased as soon as we no longer need it for our recording and analysis purposes. In our case, this is after 14 months.

e. Right to Object and Remedy
You can withdraw your consent at any time, free of charge. This does not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn, i.e., the withdrawal applies to future processing.

f. Recipients/Categories of Data
As a rule, your personal data is processed exclusively by mack AUTOMATION GmbH. Your data is not processed by recipients outside the European Economic Area (EEA).

g. Provision of Personal Data
When you visit our website and allow tracking by Google Analytics, providing your data is voluntary. We use Google Analytics for quality assurance and to optimize the website. Not providing the data may make it harder to improve the website, especially its usability.

8. Meta (Facebook, Instagram)

a. Description and Scope of Data Processing
We have publicly accessible profiles on various social networks. Visiting these profiles triggers a large number of data processing operations. Below we give you an overview of which of your personal data we collect, use and store when you visit our profiles. Personal data is any information that can be linked to you as an identifiable person (e.g., name, age, address, photos, email addresses and in some cases IP addresses). We also tell you which rights you have with regard to our processing of your personal data. You are not obliged to give us your personal data. However, some features of our social media profiles may require it. If you do not provide your personal data, these features will be unavailable or only partly available. Our website contains a plugin that takes you to our Facebook and Instagram profiles when you actively click on it.

b. Purpose of Data Processing
We process your personal data to display, present and provide information via social media.

c. Legal Basis for Processing
By actively clicking the “Facebook plugin” or “Instagram plugin” and thereby agreeing to the content, you consent under Art. 6(1)(a) GDPR to your data being sent to Facebook/Instagram. If you use our social media profiles to contact us (e.g., by creating your own posts, reacting to one of our posts or sending us private messages), we process the data you provide solely so that we can communicate with you. The legal basis for this data collection is therefore also Art. 6(1)(f) GDPR. For processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein and Norway, i.e., in particular the USA), or for transfers to such recipients, Standard Contractual Clauses (Art. 46(2) and (3) GDPR) are used. Standard Contractual Clauses (SCCs) are templates provided by the European Commission. They are intended to ensure that your data meets European data protection standards even when it is transferred to and stored in third countries such as the USA. The clauses are based on an implementing decision of the European Commission. You can find the decision and the Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

d. Storage Period
Facebook and Instagram do not state conclusively and clearly, and we do not know, how they use data from visits to Facebook/Instagram pages for their own purposes, to what extent activities on these pages are linked to individual users, how long they store this data, or whether data from a visit is passed on to third parties.

e. Right to Object and Remedy
If you wish to object to our processing of your data on Facebook/Instagram as a whole or for specific measures, you can do so using the contact details given above. You can also object to the processing of Insights data directly with Facebook/Instagram. You can also object to processing by Facebook/Instagram by contacting us, and we will forward your objection without delay. Please note that if you object, use of the Facebook or Instagram page and access to the services and information offered there may be restricted or impossible.

f. Recipients/Categories of Data
When you access a Facebook or Instagram page, the IP address assigned to your device is sent to Facebook/Instagram. According to Facebook/Instagram, this IP address is anonymized (for “German” IP addresses). Facebook/Instagram also stores information about its users’ devices (e.g., as part of the “login notification” feature), which may allow it to link IP addresses to individual users. If you are currently logged in to Facebook/Instagram, a cookie with your Facebook/Instagram ID is stored on your device. This lets Facebook/Instagram track that you visited this page and how you used it. The same applies to all other Facebook/Instagram pages. Facebook buttons embedded in websites allow Facebook to record your visits to those websites and link them to your Facebook profile. This data can be used to show you tailored content or advertising.

g. Provision of Personal Data
When you visit our profiles, your personal data is collected, used and stored not only by us but also by the operator of the social network concerned. This happens even if you do not have a profile on that network yourself. The individual processing operations and their scope vary by operator and are not necessarily transparent to us. For details on how the operator of each social network collects and stores your personal data, and on the nature, scope and purpose of its use, please see the operator’s privacy policy:
The privacy policy of the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is available at https://www.facebook.com/about/privacy/update?ref=old_policy.
The privacy policy of the social network Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, is available at https://help.instagram.com/155833707900388.

9. Embedded YouTube Videos

a. Description and Scope of Data Processing
The mack AUTOMATION GmbH website uses plugins from the video platform YouTube to embed YouTube videos. The videos are stored on YouTube’s servers and played on our website via embedding. They are embedded with the enhanced privacy mode enabled. This means that no data is passed on when you open a mack AUTOMATION GmbH page with an embedded video from our YouTube channel. Only when you actively agree to the data processing by clicking the “Load video” button does the video start playing and a connection to YouTube’s servers get established. User-specific data is then stored in the form of YouTube and DoubleClick cookies, or similar recognition technologies (e.g., device fingerprinting) are used, and data may be sent automatically to YouTube or Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged in to your YouTube account, YouTube can link your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Since YouTube is a service of Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), this data is sent regardless of whether the user is logged in to a Google account or has no account at all. If the user is logged in to a Google account, Google may link this data directly to that account. Users who do not want this must log out before playing the video.

b. Purpose of Data Processing
Using YouTube is not necessary to obtain information from our website and is therefore voluntary for you. We embed YouTube videos to present our website attractively and for advertising and information purposes.

c. Legal Basis for Data Processing
By actively clicking the “Load video” button, you expressly consent to the use of YouTube and the related processing of your personal data. The legal basis is therefore your consent within the meaning of Art. 6(1)(a) GDPR.
For processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein and Norway, i.e., in particular the USA), or for transfers to such recipients, Google uses Standard Contractual Clauses (Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the European Commission. They are intended to ensure that your data meets European data protection standards even when it is transferred to and stored in third countries such as the USA. Under these clauses, Google undertakes to maintain the European level of data protection when processing your data, even if the data is stored, processed and managed in the USA. The clauses are based on an implementing decision of the European Commission. You can find the decision and the Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

d. Storage Period
We do not process any additional personal data on our website in connection with the use of YouTube videos. We have no influence on the nature, scope and duration of the data processed by YouTube, how it is processed and used, or whether it is passed on to third parties. We also have no effective means of controlling this. Furthermore, your consent to the display of YouTube content is not stored. Your consent is deleted when your browser session ends. When you next visit pages with embedded YouTube content, they will again show a “Load video” button, and you must consent again if you want to view the content.

e. Right to Object and Remedy
Consent to video playback is valid until you leave the page in which the video is embedded. This does not affect the lawfulness of processing carried out on the basis of consent before withdrawal. To exercise your right to object to the creation of user profiles, you must contact Google/YouTube directly. If you do not agree to your personal data being sent to Google/YouTube, do not click the “Load video” button in the grayed-out area. No data will then be sent to Google, but no video will be played either.
You can also change your personal settings in Google’s privacy center (https://www.google.com/policies/privacy/).

f. Recipients/Categories of Data
As a rule, the data listed above (see Section 9a) is processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

g. Provision of Personal Data
You are not obliged by law or contract to use YouTube, so using it and providing your data is voluntary. If you do not, however, YouTube and video playback cannot be made available to you. This is the only disadvantage to you.

10. LinkedIn

a. Description and Scope of Data Processing
Our website uses social plugins from the social network LinkedIn, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. These social plugins may be feeds, content sharing or links to our LinkedIn page. They are clearly marked with the familiar LinkedIn logo and let you, for example, share interesting content directly from our website. For the European Economic Area and Switzerland, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, is responsible for data processing.
Visiting the profile triggers a large number of data processing operations. Below we give you an overview of which of your personal data we collect, use and store when you visit our profiles. Personal data is any information that can be linked to you as an identifiable person (e.g., name, age, address, photos, email addresses and in some cases IP addresses). We also tell you which rights you have with regard to our processing of your personal data. You are not obliged to give us your personal data. However, some features of our social media profile may require it. If you do not provide your personal data, these features will be unavailable or only partly available. Our website contains a plugin that takes you to our LinkedIn profile when you actively click on it.

b. Purpose of Data Processing
We process your personal data to display, present and provide information via social media, in particular to give you a convenient, smart way to find job openings and respond to them. We regularly post interesting job openings, news and reports. That is why our website lets you share interesting content directly on LinkedIn or go straight to our LinkedIn page. We see the integrated social plugins as an additional service on our website.

c. Legal Basis for Processing
By actively clicking the “LinkedIn plugin” and thereby agreeing to the content, you consent under Art. 6(1)(a) GDPR to your data being sent to LinkedIn.
If you use our social media profiles to contact us (e.g., by creating your own posts, reacting to one of our posts or sending us private messages), we process the data you provide solely so that we can communicate with you. The legal basis for this data collection is therefore also Art. 6(1)(f) GDPR. For processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein and Norway, i.e., in particular the USA), or for transfers to such recipients, Standard Contractual Clauses (Art. 46(2) and (3) GDPR) are used. Standard Contractual Clauses (SCCs) are templates provided by the European Commission. They are intended to ensure that your data meets European data protection standards even when it is transferred to and stored in third countries such as the USA. The clauses are based on an implementing decision of the European Commission. You can find the decision and the Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

d. Storage Period
In principle, LinkedIn keeps your personal data for as long as it considers necessary to provide its services. However, LinkedIn deletes your personal data when you delete your account. In some exceptional cases, LinkedIn keeps some data in aggregated and anonymized form even after your account has been deleted. Once you delete your account, other people can no longer see your data within one day. LinkedIn generally deletes the data within 30 days. However, LinkedIn keeps data where it is legally required to do so. Data that can no longer be linked to any person remains stored even after the account is closed. The data is stored on various servers in America and probably also in Europe.
LinkedIn does not state conclusively and clearly, and we do not know, how it uses data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are linked to individual users, how long it stores this data, or whether data from a visit is passed on to third parties.

e. Right to Object and Remedy
If you wish to object to our processing of your data on LinkedIn as a whole or for specific measures, you can do so using the contact details given above. You can also object to the processing of Insights data directly with LinkedIn. You can also object to processing by LinkedIn by contacting us, and we will forward your objection without delay. Please note that if you object, use of the LinkedIn page and access to the services and information offered there may be restricted or impossible.

f. Recipients/Categories of Data
When you access a LinkedIn page, the IP address assigned to your device is sent to LinkedIn. LinkedIn may also store information about its users’ devices, which may allow it to link IP addresses to individual users. If you are currently logged in to LinkedIn, a cookie with your LinkedIn ID is stored on your device. This lets LinkedIn track that you visited this page and how you used it. The same applies to all other LinkedIn pages. LinkedIn buttons embedded in websites allow LinkedIn to record your visits to those websites and link them to your LinkedIn profile. This data can be used to show you tailored content or advertising.

g. Provision of Personal Data
LinkedIn does not store any personal data merely because the social plugins are embedded. LinkedIn calls the data generated by plugins “passive impressions.” If you click on a social plugin, for example to share our content, the platform stores personal data as “active impressions,” regardless of whether you have a LinkedIn account. If you are logged in, the data collected is linked to your account.
When you visit our profiles, your personal data is collected, used and stored not only by us but also by the operator of the social network concerned. This happens even if you do not have a profile on that network yourself. The individual processing operations and their scope vary by operator and are not necessarily transparent to us. For details on how the operator of each social network collects and stores your personal data, and on the nature, scope and purpose of its use, please see the operator’s privacy policy:
The privacy policy of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is available at https://de.linkedin.com/legal/privacy-policy.

11. Communication via TeamViewer

a. Description and Scope of Data Processing
We use the tool “TeamViewer” on our website to hold conference calls, online meetings, video conferences and/or other online services such as webinars. TeamViewer is a tool of TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen, Germany. For details of the data processing, please see TeamViewer’s privacy policy: https://www.teamviewer.com/de/datenschutzerklaerung/.
For users who create a TeamViewer account, TeamViewer combines the data collected and uses profiling to build a detailed user profile. This is intended to help it offer customers the most suitable products. TeamViewer states that it relies on pseudonymized data as far as possible. TeamViewer also processes data generated during audio and video conferences. For example, it stores data such as user names, email addresses and IP addresses, and possibly preferred language and meeting metadata such as date, time, meeting ID, phone numbers, location, and text, audio and video data. You may also be able to use the chat function in an online meeting. In that case, your text entries are processed so that they can be displayed in the meeting. To display video and play audio, data from your device’s microphone and any video camera is processed for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time in the respective applications.

b. Purpose of Data Processing
We collect your data to process your inquiries and to hold conference calls, online meetings and video conferences.

e. Right to Object and Remedy
You can object to the storage of your personal data in video and phone conferences at any time. In that case, the video conference, etc. cannot continue. The objection must be made in writing by email. All personal data stored in connection with the conference will then be erased.

f. Recipients/Categories of Data
Only those departments that need your personal data to perform their tasks have access to it. Your data is passed on only to the provider/processor of the conference software used, TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen, Germany.

g. Provision of Personal Data
When you use conferences via TeamViewer Germany GmbH, providing your data is voluntary. Without it, however, no conference or support can be provided. Not providing personal data may mean that your request cannot be handled, or only in part. This may also have legal disadvantages for you, in particular that no conference can be provided.

12. Microsoft Teams

a. Description and Scope of Data Processing
On our website, you can use Microsoft Teams to hold conference calls, online meetings, video conferences and/or other online services such as webinars. Among other things, Microsoft Teams stores the company name, company address, email address and phone number. The application also records stored files, conversation histories and information entered in Planner. When companies hold meetings in Microsoft Teams, the software stores, for example, the participants’ IP addresses. Some of this data is personal data. Microsoft states that it does not use the data collected for advertising purposes.

b. Purpose of Data Processing
We collect your data to process your inquiries and to hold conference calls, online meetings and video conferences.

c. Legal Basis for Processing
The legal basis for processing your personal data is your consent within the meaning of Art. 6(1)(a) in conjunction with Art. 7 GDPR and Section 25(1) TDDDG, and/or Art. 6(1)(b) GDPR where processing is needed to perform a contract or to take steps at the data subject’s request before entering into a contract. For processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein and Norway, i.e., in particular the USA), or for transfers to such recipients, Standard Contractual Clauses (Art. 46(2) and (3) GDPR) are used. Standard Contractual Clauses (SCCs) are templates provided by the European Commission. They are intended to ensure that your data meets European data protection standards even when it is transferred to and stored in third countries such as the USA. The clauses are based on an implementing decision of the European Commission. You can find the decision and the Standard Contractual Clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en

d. Storage Period
Your personal data will be erased as soon as it is no longer needed for the purpose. It is stored only until the service has been fully provided. Once the session ends, the connection data is deleted. Online sessions are not recorded. Messages, group titles, images, files shared in chat, calendar items, user profile, contacts, user join code, group join code and presence status messages remain available until they are deleted, the user leaves the conversation or the permission is updated. Call histories are kept for 30 days. Diagnostic data is kept for up to 13 months and can be managed by the user in the privacy settings on the “Microsoft account” page. Meeting recordings are generally deleted automatically after 60 days.

f. Recipients/Categories of Data
Only those departments that need your personal data to perform their tasks have access to it. Your data is passed on only to the provider/processor of the conference software used, Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

g. Provision of Personal Data
When you use conferences via Microsoft Teams, providing your data is voluntary. Without it, however, no conference or support can be provided. Not providing personal data may mean that your request cannot be handled, or only in part. This may also have legal disadvantages for you, in particular that no conference can be provided.
The privacy statement of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, is available at https://www.microsoft.com/en-us/privacy/privacystatement.

13. Rights of Data Subjects
Because we process your personal data, you have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to object* (Art. 21 GDPR). You also have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller (Art. 20 GDPR). You can also complain to the data protection officer if you believe that mack AUTOMATION GmbH has not complied with data protection law when processing your personal data. You also have the right to lodge a complaint with a data protection supervisory authority.

*Note: You have the right to object to the processing of your personal data by mack AUTOMATION GmbH (the controller) on grounds relating to your particular situation.