Privacy Policy

1. Controller

MAVIG GmbH, Stahlgruberring 5, 81829 Munich, Germany, (hereinafter referred to as „MAVIG“ or „we“),  email address info@mavig.com acts as “controller” for the processing of your data.

2. Contact Details of our Data Protection Officer

You can contact our data protection officer by email as follows: privacy@mavig.com

3. Accessing the website

You can visit our website without providing any personal information. We temporarily store your access data, which is stored in a log file on our web servers. The access data includes the following information:

• IP address of the end device at hand,
• Date and time of access,
• Name and URL of the retrieved file,
• Amount of data transferred,
• Message as to whether the retrieval was successful,
• Identification data of the browser and operating system used,
• The website from which the file was accessed, and
• Name of your Internet access provider.

The abovementioned data is technically required for enabling your end device to access our website and use its services. The data is collected for pre-contractual purposes with respect to a possible business relationship between us or the purposes of our legitimate interests to display the content of this website to you (Art. 6 para. 1 s. 1 b), f) GDPR).

4. Cookies we use

We use cookies on our website to make your visit more attractive and to enable you to benefit from certain functions. Cookies are small text files that are sent from our web server to your browser and stored on your end device. Cookies which are technically required for running our website will be set automatically in our legitimate interest (Art. 6 para. 1 s. 1 f) GDPR). Other cookies are only set if you have explicitly agreed to this via the cookie banner on our website and your browser settings allow cookies to be issued (Art. 6 para. 1 s. 1 a) GDPR).

The cookies include the following data:

First-Party Requests and Cookies:

Third Party Requests and Cookies

5. Google Services relating to the Cookies and Third-Party Requests

The Google services listed here are provided by Google Ireland Limited (“Google”). You can set privacy settings for your Google Account here:
https://myaccount.google.com/intro/privacycheckup?utm_source=accounts&utm_medium=callout&utm_campaign=new_privacy_checkup

Google’s privacy policy can be found here: http://www.google.de/intl/de/policies/privacy

Google stores the data in Europe, but reserves the right to process the data on servers in the USA. The USA is currently considered a country with an adequate level of data protection (see adequacy decision of the EU Commission of 10.07.2023, C (2023) 4745 final), and Google LLC USA is certified: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

5.1. Google Analytics

We use Google Analytics, a web analytics service provided by Google, which enables evaluating your use of the website. The information generated by the cookie about your visit to this website will be transmitted to Google servers and stored there. Google uses this information to analyse your use of the website, to compile reports on website activity for us and to provide us with other services related to website activity and internet usage. We are jointly responsible with Google and have concluded a joint control agreement (https://support.google.com/analytics/answer/9012600) specified by Google via our account with Google. As we us Google Analytics 4, the IP numbers will be automatically anonymized.

Summary of the Joint Control Agreement with Google:

• Each party is responsible for ensuring that there is a legal basis for the respective data processing.
• The rights of data subjects are implemented by Google, insofar as we do not exclusively process the data. However, you can contact us and/or Google to assert your rights as a data subject.
• The reporting of data protection violations pursuant to Art. 33 GDPR is handled by Google. We are obliged to report immediately if there is a suspicion of a data protection violation.

You can prevent the storage of these cookies by selecting the appropriate settings in your browser. You can also prevent the collection of the data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent the collection and use of your data by Google by clicking on the following link:

Disable Google Universal

By clicking on this link, an opt-out cookie will be set, which prevents your data from being collected by Google.

You can find more information about Google’s terms of service and privacy policy for this service at the following links:

http://www.google.com/analytics/terms/de.html
http://www.google.com/intl/de/analytics/learn/privacy.html

Among others, data collected by Google is collected from users of a Gmail account, as Google is also the operator here. You can change your advertising preferences for this under https://adssettings.google.com/authenticated so that activities and information are no longer processed for personalized advertising.

5.2 Google Tag Manager

Google Tag Manager is a solution that allows us to manage website keywords, i.e. tags, through an interface and thus integrate other services into our website. Tags are pieces of code, such as HTML or JavaScript, that we use on the website for analysis or marketing purposes. Or it can be a social media plugin. For example, the Tag Manager itself (which implements the tags) does not create user profiles or store cookies. Rather, the tags and scripts set cookies that collect data from users in order to create statistics and marketing analyses, such as the aforementioned Google Analytics service. Google only collects the user’s IP address, which is necessary to provide the service.

5.3 Google Maps

This website contains maps from Google Maps to display geographic information. When the website is accessed, Google makes a request (so-called third-party request) and connects with its server by collecting the IP number. The procedure is as described in section 5. If you are logged in to Google when you use it, Google may be able to link this data to your account. We would like to point out that we, as the provider of the website, have no influence on the collection and use of data by Google. Google Maps and Google Earth (https://www.google.com/intl/de_US/help/terms_maps.html) additional terms apply. In addition, the Joint Control Agreement (Google Controller-Controller Data Protection Terms (safety.google)), which is described in more detail in Section 5.1 of this Privacy Policy, also applies.

5.4 Captcha-Service

We use Google reCAPTCHA to prevent misuse of our website’s services. reCAPTCHA is a cost-free captcha service from Google that protects websites from spam software and abuse by non-human visitors. In that context, Google collects the following information: Referrer URL, IP address, Information about the operating system, cookies (see above), mouse and keyboard actions (every activity of your mouse or keyboard is collected), date and language settings,  Javascript objects, Screen resolution.

With reCAPTCHA, you do not need to solve puzzles anymore. Instead, the tool uses modern risk techniques to distinguish humans from bots. Here you only have to tick the text field “I am not a robot” or with Invisible reCAPTCHA even that is no longer required. Based on a JavaScript element with the source code of the website, the tool analyzes your user behavior. From these user actions, the tool generates a so-called captcha score. Google uses this score for analysing the probability that you are a human even before you enter your captcha.

For more information about Google reCAPTCHA, please visit the following link:

https://cloud.google.com/security/products/recaptcha

Google reCAPTCHA is only used if you prio agree to this tool via our cookie banner. In the case of denial you may be banned from using services of our website, such as the contact form. The legal basis for using Googe reCAPTCHA is Art. 6 para. 1 s. 1 a) GDPR.

6. Borlabs Cookies

Borlabs Cookie’s cookie consent technology is activated by us for obtaining your consent to store certain cookies in your browser and to track them in compliance with data protection regulations. The provider of this service is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the withdrawal of these consents are stored. This data will not be passed on to the provider of Borlabs Cookie.

The collected data will be stored until you ask us to delete it or delete the Borlabs cookie yourself or the purpose for which the data is stored no longer applies. Mandatory statutory retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found under https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The legal basis for implementing this technology is Art. 6 para. 1 sentence 1 lit. c GDPR.

7. Contact form, Complaints, Repair request, Whistle-Blowing

When using our contact form, which can be accessed via the “Contact” link, you will be asked to provide certain data (such as title, surname, first name, e-mail address, telephone number, institute/company and message to us). You will also be directed to this contact form if you would like to make a complaint or have a repair request.

The information marked with an asterisk is mandatory. All information we collect is used to process your request. You also have the option of uploading a file that should not contain any personal data if possible.

We use the data provided by you to process your enquiry and thus for pre-contractual measures or in our legitimate interest to enable enquiries about our company and to respond to them (Art. 6 para. 1 sentence 1 b), f) GDPR).

Unfortunately, you will not receive an answer from us without providing the mandatory information. Failure to provide voluntary information has no effect.

The contact form can also be used for repair requests and complaints. If possible, send a photo of the affected product.

We will also provide you with an opportunity to notify us of possible legal breaches referring to MAVIG. The whistleblowing report can also be submitted anonymously. You can reach our reporting channel here:

mavig.schindhelm-wbsolution.com

For this reporting channel, the data privacy policy integrated in such channel will apply.

9. Career

You can use the “Careers” link to find out about current vacancies at MAVIG. An online application is not possible. However, you are welcome to send us your application documents to the email address bewerbung@mavig.com provided. Please ensure that there is sufficient data protection.

All data will be used to process your application and thus for pre-contractual purposes and for a possible employment relationship (Art. 6 para. 1 sentence 1 b) GDPR, § 26 BDSG). The email address is required to enable us immediately confirming the receipt of your application. Contact details will be used to get in touch with you, e.g. to arrange an interview.

Your applicant data will be stored for up to 6 months after the trainee place at hand or position has been awarded or, in the case of an unsolicited application, after rejection. Immediately after the apprenticeship or position has been awarded, the data of applicants (m/f/d) who have not been awarded the contract will be blocked for any use other than the clarification of applicant claims. In the case of unsolicited applications, the block will take place after rejection. Any further storage and use of applicant data will only take place if you have given us your express consent to the further storage of your applicant data or in the event of a legitimate interest on the part of MAVIG, e.g. in the event of a burden of proof in court proceedings. If an employment or training contract is concluded with an applicant, the data will be stored and processed for the purpose of carrying out and processing the employment relationship and thus for contractual purposes.

8. Newsletter

You also have the option of subscribing to our newsletter, which will be sent to you by email. This is done based on your prior explicit consent (Art. 6 para. 1 sentence 1 a) GDPR) or, if applicable, within the legally permissible framework if we inform you accordingly to advertise similar services and products like those you ordered (§ 7 para. 3 of the German Law against Unfair Competition).

To send the newsletter, we use the Rapidmail service, which is operated by rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany. For this purpose, we have entered into a data processing agreement by order with this company. You have the right to unsubscribe from our newsletter at any time.

9. No legal and contractual Duties to provide Data

The provision of any data to us as described in this Data Privacy Policy is neither contractually required nor prescribed by law. Without providing any applicant data to us we cannot process your application and without any contact data we are not able to answer your request.

10. Disclosure for Data to Third Parties

We will only disclose your data to third parties if we are entitled, or obliged, to so do based on your consent or under applicable law. The same will apply if we receive your data from third parties, i.e., neither from you nor from business enterprises instructed by us.

An entitlement will exist both in the case where third parties collect data for us on our behalf and in the case where we disclose data to other business enterprises which process the data on our behalf.

The latter will be the case, in particular, if we do not perform our business activities (e.g., operation of the Website, preparation and sending of newsletters) ourselves but, rather, have those business activities performed by other business enterprises, and those activities relate to the processing of your data. In those cases, we have contractually bound those business enterprises in advance to use the data only for the purposes legally permitted for us. We are authorised to monitor those business enterprises in that respect.

A statutory duty will exist, for example, in the case of the disclosure of data to prosecution authorities.

Data will be passed on to Google on the basis of joint data processing, insofar as you have given us your consent to use these services (see section 5 of this privacy policy).

The same applies to Facebook, insofar as you access our channel there.

11. Storage period and deletion of data

The contact details provided will be stored until we can assume that your request has been resolved, no later than three months after the last correspondence. If the data is required as evidence, it will be stored within the framework of the statutory statute of limitations or until the respective proceedings have been concluded. Log files will be deleted 7 days after collection. Deletion periods set out in the section “Careers” apply to applicant data, and the storage period of cookies is also stated above.

12. Your rights (objection, revocation, information, correction, blocking, deletion, transmission, complaint)

12.1 Objection

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data by us. To do this, you can use the contact options specified in sections 1 and 2 above. If you object, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

12.2 Revocation

In addition, you have the right to revoke any consent given with effect for the future. The lawfulness of the processing activities based on your consent will, however, not be affected up to the exercise of the right of revocation.

12.3. Other rights

You have the right, free of charge, to be provided with information regarding your personal data stored by us, to correct inaccurate data, and to have data blocked or deleted. You also have the right to be provided with your data in a structured, commonly used and machine-readable format and to have your data transmitted by us to another person. Finally, you have the right to lodge a complaint with a supervisory authority.

With the exception of your right to lodge a complaint with a supervisory authority, you may address your relevant request to the contact details specified in sections 1 and 2 above.

13. Data security

This website is SSL encrypted to protect your privacy. Furthermore, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the probability of occurrence and severity of the risk to the rights and freedoms of natural persons, MAVIG shall take appropriate technical and organisational measures within the meaning of Art. 32 GDPR. It also ensures the confidentiality, integrity, availability and resilience of the systems and services related to the processing, as well as ensuring the rapid restoration of the availability of personal data in the event of a physical or technical incident.

Please note that while we strive to provide a secure and reliable website for users, the absolute confidentiality of any communications or materials transmitted to or from our website cannot be guaranteed.