Thank you for visiting our website. With this document, we would like to inform you how we process your personal data in connection with the use of our services.

1 Name and contact details of the controller and the company data protection officer

1.1 Controller
Mundt GmbH Hannover
Davenstedter Straße 138
30453 Hannover
Phone: 0511 - 21 99 00

1.2 Contact details of the data protection officer
You can reach our external company data protection officer, Mr. Klaus Mönikes, as follows: klaus.moenikes@privsec.de ordatenschutz@mundt.de.

Your opinions on data protection are important to us. Tell us what you think. If you have any comments or questions, please send us an e-mail to datenschutz@mundt.de.

 

2 General information on data processing

2.1 When do we collect and process personal data
We collect and process your personal data on the basis of the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and other legal bases relevant to data protection law.

We only process your personal data insofar as this is necessary to provide a functional website and its content and services and you actively transmit it to us through your entries.

Your personal data may therefore be processed in various cases, e.g. when you visit our website, submit an application, contact us, provide remote maintenance, etc.

Personal data may be collected for various purposes, e.g. processing and fulfillment of your orders or their justification, management of your account, improvement of the design, structure and functionality of the website and continuous improvement of our services, provision of information on products and services.

The legal basis for processing is Art. 6 para. 1 a), b), c) and f) GDPR, §26 BDSG, §§ 25, 26 TDDDG

For the legal basis and details, please also refer to the following explanations.

2.2 Visiting our website
When you visit our website, our system automatically collects data and information from the computer system of the accessing computer. The legal basis for processing is Art. 6 para. 1 lit. f GDPR.

The following information is collected without any action on your part and stored until it is automatically deleted. The server log files are stored for 7 days and then deleted.

  • Each time our website is accessed, the IP address of the requesting computer is stored / anonymized. (The last three digits are removed for this purpose),
  • Date and time of access,
  • Name and URL of the accessed file,
  • Website from which the access is made (referrer URL),
  • browser used and
  • the operating system of your computer and
  • the name of your access provider.

2.3 Consent management (cookie consent manager from cookiebot.com)

Cookiebot
We use the consent management service Cookiebot, of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). This enables us to obtain and manage the website user's consent to data processing. The processing is necessary to fulfill a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 sentence 1 lit. c GDPR). For this purpose, the following data is processed with the help of cookies

Your IP address (the last three digits are set to '0'). Date and time of consent. Browser information URL from which the consent was sent. An anonymous, random and encrypted key Your consent status of the end user, as proof of consent

The key and consent status are stored in the browser for 12 months using the "CookieConsent" cookie. This retains your cookie preference for subsequent page requests. With the help of the key, your consent can be verified and tracked.

If you activate the "collective consent" service function to enable consent for multiple websites through a single end-user consent, the service also stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in the third-party cookie "CookieConsentBulkTicket" in your browser in encrypted form: You activate the bulk consent function in the service configuration. You allow third-party cookies via browser settings. You have deactivated "Do not track" via the browser settings. You accept all or at least certain types of cookies when you give your consent.

The functionality of the website is not guaranteed without the processing.

Usercentrics is the recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: www.cookiebot.com/de/privacy-policy/

Your personal data will be deleted on an ongoing basis after 12 months or immediately after termination of the contract between us and Usercentrics.

Please refer to our general information on the deletion and deactivation of cookies above.

2.4 Applications
If you apply for one of the positions we offer or send us an unsolicited application, we will process your data for the purpose of carrying out the application process and deciding whether to establish an employment relationship.

This includes personal data such as first and last name, personal contact details, private data, CV and qualifications. We may also collect information voluntarily provided by you on special categories of personal data, such as health data.

Applications may also be exchanged within the Mundt group of companies.

The legal basis for processing is Art. 6 para. 1 lit. b) GDPR and § 26 BDSG.

If your application is currently not considered, we will delete your application together with the submitted documents three months after our decision in accordance with our legitimate interest in complying with our legal obligations, e.g. under the General Equal Treatment Act (AGG).

With an additional declaration of consent for storage in the "applicant pool", we can store your application for one year beyond the deadline for the current job advertisement in order to be able to consider you for further job advertisements. If you have not already consented to longer storage at the time of application, we will obtain this consent from you separately if necessary.

The legal basis for processing is then also Art. 6 para. 1 lit. a) GDPR.

By using our contact form or applying by email, you agree to our privacy policy.

You can object to the further processing of your data at any time by withdrawing your application. However, this will end the application process and we will no longer be able to consider your application.

If we establish an employment relationship with you, you will be informed separately about the processing of your data and the rights to which you are entitled.

2.5 Contact requests
If you send us a message via one of the contact options offered (contact form, e-mail address provided), personal data will be transmitted and stored. We use the data you provide us with to process your request and no data is passed on to third parties in this context.

The legal basis for this processing is Art. 6 para. 1 a) GDPR.

If your request serves to conclude a contract with us, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, e.g. the matter in question has been conclusively clarified. If we are legally obliged to store the data for a longer period, it will be deleted after the relevant period has expired.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected, e.g. the matter in question has been conclusively clarified.

2.6 Newsletter
If you make use of the option to receive our newsletter, you will be guided through a registration process by email (name, login data, registration data). The legal basis for our offer is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter. The subscription to our newsletter can be canceled by the data subject at any time.

The newsletters contain so-called tracking pixels, which are recorded, analyzed and statistically evaluated in order to evaluate online marketing campaigns.

2.7 Customer registration (portal)
If you register on the customer portal, personal data relating to your person (registration data, transaction data) will be stored for the existing contractual relationship. The legal basis for this is our contractual relationship pursuant to Art. 6 para. 1 lit. b) GDPR. The data will be deleted after statutory retention periods.

2.8 Website analysis
Our website uses web analysis services. Each time one of our pages containing functions of a web analysis service is accessed, a connection to the servers of this network is established. We would like to point out that we collect and store this data for marketing and optimization purposes. The legal basis for processing is Art. 6 para. 1 lit. f) GDPR. This data can be used to create user profiles under a pseudonym. The cookies make it possible to recognize the Internet browser. You can object to the collection and storage of data at any time with effect for the future by submitting your objection to the service provider.

2.8.1 Google Analytics

Google Analytics ,tools.google.com/privacy
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- https://www.google.com/account/about/privacy-tools

You can object to the collection and storage of data here at any time with effect for the future by submitting your objection to the service provider.
Google analytics, http://tools.google.com/dlpage/gaoptout?hl=de

2.8.2 Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The "Tag Manager" tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

2.8.3 Google AdServices
This website uses Google Adservices, which are used to measure the success of advertisements. It is possible to analyze what happens after clicking on an advertisement, e.g. whether the user has purchased the product or whether the user has accessed the advertisement from a cell phone. Google uses cookies for this purpose, which you can reject by changing the settings in your browser.

The legal basis for the use of Google Adservices is Art. 6 para. 1 sentence 1 lit. a) GDPR. When you access the website, you give your consent to Google AdServices by confirming the corresponding function in the cookie notice. If you do not consent, this tool will not be executed.

Further information and the applicable data protection provisions of Google Adservices can be found at policies.google.com

2.8.4 DoubleClick

This website uses DoubleClick from Google Inc - 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA - to record conversions. This allows Google to track whether users have reached our website via a Google advertisement.

When you visit our website, a DoubleClick cookie is set on the device you are using, which does not contain any personal data. However, it may contain a campaign identifier that is used to identify the campaigns with which the user has already been in contact.
By accessing subpages of our website, Google receives data for the purpose of online advertising and billing of commissions. Among other things, this allows Google to track which links the user has clicked on our website.

The legal basis for the use of DoubleClick is Art. 6 para. 1 sentence 1 lit. a) GDPR. When you access the website, you give us your consent to use Google DoubleClick by confirming the corresponding function in the Cookie Consent Manager. If you do not consent to the use of the tool, it will not be executed.

Further information and the applicable data protection provisions of DoubleClick by Google can be found at policies.google.com/privacy.

2.8.5 Microsoft Advertising (formerly Bing Ads)

This website uses Microsoft Advertising (formerly Bing Ads) from Microsoft Corporation - One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Advertising stores a cookie on the device you are using if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then forwarded to the conversion page. No personal information about the identity of the user is disclosed.

If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this - for example, by setting your browser to generally deactivate the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link: choice.microsoft.com/de-DE/opt-out to declare your objection. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at privacy.microsoft.com/de-de/privacystatement

2.8.6 Microsoft Clarity

This website uses the Microsoft Clarity service from Microsoft Corporation - One Microsoft Way, Redmond, WA 98052-6399 USA, which is used to collect and store various user information for statistical analysis of user behavior and for optimization and marketing purposes. This information includes the time zone setting, operating system and platform, the geographical origin of the page view, the redirect origin if the user is redirected to our site, the duration of visits to certain pages and information about website interaction (e.g. scrolling, clicks and mouse-overs). A direct personal reference is always excluded. Pseudonymized user profiles can be created and evaluated from this data for the same purpose. Cookies are used for collection and analysis. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Among other things, cookies make it possible to recognize the Internet browser. The data collected using Microsoft technologies will not be used to personally identify the visitor to this website without the separate consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

Information collected may be transmitted to Microsoft servers in the USA and stored there.

All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Microsoft Clarity will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

Further information on the data protection provisions of Microsoft Clarity can be found at clarity.microsoft.com/terms

2.8.7 matelso Snippet Tool
Our website uses a service provided by matelso GmbH, Stuttgart. If you call a telephone number that matelso has connected for us, information about the telephone call is transferred to a web analysis service that we use (currently Google Analytics). matelso also reads cookies set by our analysis service or other parameters of the website you have visited, for example referrer, document path, remote user agent. The corresponding information is processed by matelso in accordance with our instructions and stored on servers in the EU. You can find more information at: https: //www.matelso.com/privacy. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

2.8.8 Use of Facebook Pixel and Facebook Custom Audience
We use the Facebook Pixel and Facebook Custom Audience analysis tool to analyze, optimize and economically operate our online offering so that we can display advertising that is of interest to you and make our website more attractive. Data processing is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR.

With Facebook Pixel, we can evaluate the effectiveness of the advertisements we place on Facebook (so-called "Facebook ads") and address target groups for our advertisements.

You can find details on how Facebook Pixel works here: https://www.facebook.com/business/help/651294705016616

We also use the "Custom Audiences from File" process and the "advanced matching" function. If you are a customer of ours, your personal customer data will be transmitted to Facebook in encrypted form. This helps us to determine the recipient of our Facebook ads and to ensure that the ads are only displayed to customers who are interested in you.

For the respective opt-out options, please refer to the following linked information from the providers.
You can deactivate Facebook Custom Audiences in your Facebook account by logging in and setting this under the following link https://www.facebook.com/settings/?tab=ads

2.8.9 Use of TikTok Pixel
We use the TikTok pixel of the social media platform TikTok. This is operated under the joint responsibility of TikTok Technology Limited, 10 Earlsfort Terrace, D02 T380, Co. Dublin, Dublin, D02t380, Ireland, and TikTok Information Technologies UK Limited, 1 London Wall, London, EC2Y 5EB, England. The legal basis for processing is your consent in accordance with Art. 6 para. 1 subpara. 1 lit. a) GDPR.

When you visit our website, the pixel sets cookies and transmits hashed information to TikTok. Specifically, this means If you visit our website, have given us your consent and are a TikTok user, the pixel transmits the information that you have visited our website and whether you have performed certain actions there (so-called events, such as searching for a tariff) together with a hashed version of your TikTok ID. We use the pixels exclusively for this website and do not link them to other websites, nor do we transmit any other information about you to TikTok.

We also use conversion information using the TikTok pixel: We receive statistical information from TikTok about how many visitors to TikTok have visited our website via our advertisements placed there, so that we can better target our campaigns on TikTok to people who are actually interested in our products.

You have the right to withdraw your consent at any time with effect for the future. If you withdraw your consent, you will no longer be able to access the data. The legality of the data processing carried out until the revocation remains unaffected.

2.9 Use of social media networks

2.9.1 Integrated social media networks
Our website uses functions of social media networks. Each time one of our pages containing functions of a social media network is accessed, a connection to the servers of this network is established. The legal basis for processing is Art. 6 para. 1 lit. f) GDPR.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by the network operator. Personal data may be stored by the network operator. If you are logged into a social media network with your personal account, it is possible for this network to assign your visit and surfing behavior on our website to you and your user account. You can prevent this by logging out of your account.

2.9.2 Links to social media networks
Only when you actively use the social network buttons provided by us will your personal data (e.g. website information that you have accessed within our online offering) be transmitted to the respective social network and processed there (for US providers in the USA).

We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing and the storage periods of the social networks. We also have no information on the deletion of the data collected by the respective provider.

The providers process your data as user profiles and use them for the purposes of advertising, market research and/or the needs-based design of their website. Such an evaluation is also carried out in particular for users who are not actively logged in (LOGIN) to display needs-based advertising and to inform other users of the social network about your activities on our website.

2.9.3. use of landing pages
We use various social media networks. We give you the opportunity to communicate directly with the respective providers and other users of these social media networks, e.g. the opportunity to leave individual comments on blog posts, so that we can improve our website and make it more interesting for you as a user.
The legal basis for processing is Art. 6 para. 1 lit. f) GDPR.

User name and information on the time of comment entry are stored, the IP address is also logged. This collected personal data will not be passed on to third parties unless such a transfer is required by law.

2.9.4. Further information on social media networks

Further information on data protection for the listed data protection declarations can be found at:

We offer users the opportunity to leave individual comments on blog posts on social media networks. The legal basis for processing is Art. 6 para. 1 lit. f) GDPR. The user name and details of the time the comment was entered are saved and the IP address is also logged. This collected personal data will not be passed on to third parties unless such a transfer is required by law.

2.10. Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which is collected and processed in Europe by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

You can find more information on the handling of user data in Google's privacy policy: https: //www.google.de/intl/de/policies/privacy/

3. rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller.

3.1 Right to information
According to Art. 15 GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have a right of access to this personal data and to further information as specified in Art. 15 GDPR.

3.2 Right to rectification
In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3.3 Right to erasure
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to delete personal data immediately if the corresponding requirements of Art. 17 GDPR are met.

3.4 Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right, under certain conditions, to demand that we restrict the processing of your personal data.

3.5 Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing is carried out by automated means.

3.6 Right to object
According to Art. 21 GDPR, you have the right to object to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

If you wish to exercise any of your rights, please contact us as the controller using the contact details provided above or use one of the other methods offered by us and send us this notification. If you wish to withdraw your consent to the processing of personal data, please send us an e-mail with the subject "Withdrawal of consent under data protection law".

If you have any questions in this regard, please contact us at
. All personal data stored in the course of contacting us will be deleted in this case.

3.7 Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR. This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Our competent supervisory authority is:
The State Commissioner for Data Protection of Lower Saxony
Internet link: www.lfd.niedersachsen.de.

4. security measures to protect your data

4.1 Protection of privacy
We are committed to protecting your privacy and treating your personal data confidentially. To this end, we have taken extensive technical and organizational precautions to prevent the manipulation, loss or misuse of your data stored by us. These are regularly reviewed and adapted to technological progress.

If we collect data, we (or our processors) process your data on specially protected servers in the EU. Through authorization management, access is only possible for a few authorized persons who are involved in technical, commercial or editorial support.

4.2 Encryption of website communication
This includes the use of recognized encryption methods (SSL or TLS).

However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility.

4.3 Unencrypted communication
Data disclosed in unencrypted form - e.g. by unencrypted e-mail - can be read by third parties. We have no technical influence over this. It is your responsibility to protect the data provided by encryption or in any other way against misuse.

5 Changes to this policy

We may update this privacy policy from time to time by publishing a new version on our website. We may also inform you of the changes by e-mail.

Under the following link you will find the privacy policy of Mundt GmbH Hannover for video surveillance: Privacy policy for video surveillance