Privacy Policy

As of December 2, 2019

Mühlbauer Privacy Policy

The protection of personal data is important to us. Therefore, the company named in the legal notice (hereinafter referred to as "Mühlbauer") and its affiliated group companies process personal data in accordance with the applicable legislation on the protection of personal data and data security.

1 Processing of your personal data when using our websites, applications and online platforms

Data categories, purpose of processing and legal basis

When you use Mühlbauer websites, applications or online tools (each a "Mühlbauer online service"), Mühlbauer processes the following personal data:

personal data that you voluntarily enter when using a Mühlbauer online service (e.g. at registration, in requests to contact us or when participating in surveys etc.), such as your first and last name, e-mail address, telephone number as well as any information provided during a support request or through comments or forum posts and
information that your web browser or device automatically sends us, such as your IP address, device type, browser type, the previously visited website, visited subpages or date and time of the respective visitor request.

We process your personal data for the following purposes:

to enable you to use the services and functions of the Mühlbauer online services,
to establish your identity and enable user authentication,
to process your request and
to enforce our Terms of Use, to assert or defend legal claims and to ward off and prevent fraudulent and similar activities, including attacks against our IT infrastructure.

The processing of personal data is necessary to achieve these purposes. Unless explicitly stated when collecting personal data, the legal basis for data processing is:

the conclusion and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
the fulfillment of legal obligations to which Mühlbauer is subject (Article 6 (1) (c) of the General Data Protection Regulation) or
the protection of legitimate interests of Mühlbauer (Article 6 (1) (f) of the General Data Protection Regulation). Mühlbauer's legitimate interest lies in the processing of your personal data in order to offer and operate the Mühlbauer online services.

In some cases, we explicitly request your consent to the processing of your personal data. In this case, the legal basis for the processing of personal data is your given consent (Article 6 (1) (a) of the General Data Protection Regulation).

Cookies

We use cookies in our Mühlbauer online services. Further information on the use of cookies by Mühlbauer can be found in our Cookie Policy. There you can also find a description of how you can object to the use of cookies and the processing of data collected via cookies.

Links to other websites

This privacy policy only applies to Mühlbauer online services and not to third-party websites and applications. Mühlbauer online services may contain links to third-party websites and applications that may be of interest to you. Mühlbauer is not responsible for the collection, processing and use of your data by websites or applications that are not operated by Mühlbauer, nor is Mühlbauer responsible for the content of those websites.

2 Processing of personal data of business partners

Data categories, purpose of processing and legal basis

In the context of cooperation with business partners, Mühlbauer processes personal data of contact persons at customers, potential customers, distribution partners, suppliers and partners (each a "business partner"):

contact information, e.g. first and last name, business address, telephone number, mobile phone number, fax number and e-mail address,
payment information, e.g. information required to process payment transactions or to prevent fraud, including credit card information and card verification numbers,
further information that needs to be processed in the context of a project or the execution of a contractual relationship with Mühlbauer or that is voluntarily provided by business partners, e.g. in orders, inquiries or project details,
personal data collected from publicly available sources, information databases or credit bureaus and
data that is collected as far as legally required in the context of compliance screening: date of birth, identity card and ID numbers, information on relevant legal proceedings and other legal disputes in which business partners are involved.

Mühlbauer processes personal data for the following purposes:

for communicating with business partners about products, services and projects, e.g. to process inquiries from a business partner or to provide technical information about products,
for planning, implementing and managing the (contractual) business relationship between Mühlbauer and the business partner, e.g. to handle orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries, maintenance or repair work,
for the conduction of customer surveys, marketing campaigns, market analyses, sweepstakes, competitions or similar promotions and events,
maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity, other criminal activities or activities with the intent to cause damage,
the compliance with (i) legal requirements (such as fiscal and commercial retention obligations), (ii) existing obligations to conduct compliance screenings (to prevent white-collar crime or money laundering) as well as (iii) Mühlbauer's policies and industry standards and
settling of litigations, enforcing existing contracts and asserting, exercising and defending legal claims.

The processing of personal data is necessary to achieve these purposes. Unless explicitly stated when collecting personal data, the legal basis for data processing is:

the conclusion and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
the fulfillment of legal obligations to which Mühlbauer is subject (Article 6 (1) (c) of the General Data Protection Regulation) or
the protection of legitimate interests of Mühlbauer (Article 6 (1) (f) of the General Data Protection Regulation). Mühlbauer's legitimate interest lies in the initiation, execution and completion of the business relationship.

If you have specifically given your consent to the processing of your personal data on a case-by-case basis, this consent is the legal basis for the processing of data (Article 6 (1) (a) of the General Data Protection Regulation).

3 Transmission and disclosure of personal data

Mühlbauer may submit your personal data to:

other Mühlbauer companies, if this is necessary in connection with the offer and operation of the Mühlbauer online services or the initiation (e.g. during the application process), execution or completion of the business relationship,
IT service providers who process data as part of their service provision (e.g. service providers for IT maintenance activities) or
courts, arbitration courts, authorities or legal advisers, if this is required to comply with applicable law or to assert, exercise or defend legal claims.

The recipients are partially located in countries whose privacy laws provide a level of protection that does not match the level of protection of the country in which you have your residence or registered office.

In this case, Mühlbauer will take measures to ensure otherwise appropriate and adequate safeguards for the protection of personal data.

Thus, we will only disclose your personal data to Mühlbauer companies in such countries if they comply with the legal requirements of the European General Data Protection Regulation.
We will only transmit personal data to non-Group recipients in such countries if these recipients (i) have entered into EU standard contractual clauses with Mühlbauer or (ii) have implemented Binding Corporate Rules or (iii) – in case of US resident recipients – are certified under the EU/US Privacy Shield. Further information is available at dsb.mbkg@Mühlbauer.de.

4 Retention periods

If no explicit retention period is specified at the time of collection (e.g. as part of a declaration of consent), your personal data will be deleted if it is no longer required to fulfill the purpose for which it was stored, unless legal retention obligations (e.g. commercial and fiscal retention obligations) prohibit a deletion.

5 Revocation of given consent

If you have given us consent to process your personal data, you have the right to revoke your consent at any time with future effect. The revocation does not affect the lawfulness of the processing that was carried out based on the consent prior to the revocation. After revocation, Mühlbauer may further process the personal data only to the extent that Mühlbauer can base the processing on another legal basis.

6 Your rights

Under applicable data protection law, you may have the right to:

request a confirmation as to whether Mühlbauer processes personal data about you and to receive information about the personal data processed by Mühlbauer as well as other information,
request the correction of incorrect personal data,
request the deletion of the personal data processed by Mühlbauer,
demand that Mühlbauer restrict the processing of personal data,
request the transfer of the data or
object to the processing of personal data by Mühlbauer.

You also have the right to file a complaint to a data protection authority if you believe that the processing of your personal data violates the GDPR. You can contact the data protection authority that is responsible for your place of residence or your state or the data protection authority that is responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany, phone: +49 981 53 1300, fax: +49 981 53 98 1300, e-mail: poststelle@lda.bayern.de.

7 Contact

The Mühlbauer data protection organization supports you with all questions concerning the topic of data protection. You can also file complaints to the Mühlbauer data protection organization and assert the rights stated in this privacy policy.

The Mühlbauer data protection organization can be contacted at dsb.mbkg@muehlbauer.de.

The Mühlbauer data protection organization always endeavors to address and remedy your inquiries and complaints. In addition to the possibility of contacting the Mühlbauer data protection organization, you can also contact the responsible data protection supervisory authority at any time.

An overview of the national and international data protection authorities is available here.

8 Mühlbauer newsletter

Subscription to our newsletter

On the Mühlbauer website, users are given the opportunity to subscribe to the newsletter of our company. The input mask used for this purpose shows which personal data is transmitted to the data controller when you subscribe to the newsletter.

Mühlbauer regularly informs its customers, business partners and interested parties about company offers by means of a newsletter. The newsletter of our company can generally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter. For legal reasons, when an e-mail address is entered by a data subject for the first time to receive newsletters, a confirmation e-mail for a double-opt-in procedure will be sent to that e-mail address. This confirmation e-mail serves to check whether the owner of the e-mail address is the data subject who has authorized the receipt of the newsletter.

During registration for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as assigned by the Internet Service Provider (ISP) as well as the date and time of registration. The collection of this data is necessary in order to be able to understand the (possible) misuse of the data subject's e-mail address at a later point in time and therefore serves as a legal safeguard for the data controller.

The personal data collected during a registration for the newsletter will exclusively be used to send our newsletter. In addition, subscribers to the newsletter may be notified via e-mail if this is necessary for the operation of the newsletter service or a related registration, as it might be the case in the event of changes to the newsletter service or technical changes. Personal data collected in the context of the newsletter service is not disclosed to any third parties. The data subject may cancel a subscription to our newsletter at any time. The consent to the storage of personal data that the data subject has given us for the newsletter distribution can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible at any time to unsubscribe from the newsletter directly on the data controller's website or to inform the data controller in a different way.

Newsletter tracking

The Mühlbauer newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic, which is embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Mühlbauer can detect if and when an e-mail was opened by a data subject and which links in the e-mail were called by the data subject.

Such personal data collected via tracking pixels included in the newsletters are stored and evaluated by the data controller in order to optimize the distribution of newsletters and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to any third parties. Data subjects are entitled to revoke the separate declaration of consent issued via the double-opt-in procedure at any time. After revocation, the data controller will delete this personal data. Mühlbauer automatically considers a cancellation of a newsletter subscription as a revocation.

9 Mühlbauer and social media

A social network is an Internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for sharing views and experiences or allows the Internet community to provide personal or business information.

Facebook
allows social network users to create private profiles, upload photos and socialize via friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the US or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is responsible for the processing of personal data.

Upon each call of one of the individual pages of this website, which is operated by the data controller and on which a Facebook component (Facebook plug-in) is integrated, the respective Facebook component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. In the framework of this technical process, Facebook is informed about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Facebook at the same time, Facebook recognizes during each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage of our website is visited by the data subject. This information is collected through the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and saves this personal data.

Facebook receives information via the Facebook component that the data subject has visited our website whenever the data subject is logged in to Facebook at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desired by the data subject, he or she can prevent this transmission by logging out of his or her Facebook account before calling our website.

The data policy published by Facebook, which is available at https://m.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the data subject. In addition, different applications are available that make it possible to suppress data transmission to Facebook. The data subject can use such applications in order to suppress data transmission to Facebook.

Instagram

The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos as well as to redistribute such data across other social networks.

The operating company of Instagram's services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Upon each call of one of the individual pages of this website, which is operated by the data controller and on which an Instagram component (Insta button) is integrated, the respective Instagram component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding component from Instagram. In the framework of this technical process, Instagram is informed about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Instagram at the same time, Instagram recognizes during each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage is visited by the data subject. This information is collected through the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, Instagram assigns the transmitted data and information to the personal Instagram user account of the data subject and saves and processes this personal data.

Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged in to Instagram at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Instagram component or not. If such a transmission of information to Instagram is not desired by the data subject, he or she can prevent this transmission by logging out of his or her Instagram account before calling our website.

Further information and Instagram's applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

YouTube

YouTube is integrated in our Mühlbauer online services. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment these videos also free of charge. YouTube allows the publication of all types of videos, which is why complete films and television broadcasts, but also music videos, trailers or user-made videos are available on this Internet portal.

YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Upon each call of one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) is integrated, the respective YouTube component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/en/. In the framework of this technical process, YouTube and Google are informed about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject visits as soon as the data subject calls a subpage that includes a YouTube video. This information is collected by YouTube and Google and assigned to the YouTube account of the data subject.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged in to YouTube at the same time as accessing our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If such a transmission of information to YouTube and Google is not desired by the data subject, he or she can prevent this transmission by logging out of his or her YouTube account before calling our website.

The privacy policy published by YouTube, which is available at https://www.google.com/intl/en/policies/privacy/, provide information on the collection, processing and use of personal data by YouTube and Google.

XING

We would like to inform you here about the processing of personal data via the function of the XING Share Button.

On this website, the "XING Share Button" is used. When you call this website, your browser will quickly establish a connection to servers of XING AG ("XING"), which are used to provide the "XING Share Button" functions (in particular the calculation and display of the counter value). XING does not store personal data about you when you visit this website. In particular, XING does not store any IP addresses. Your usage behavior is not evaluated via the use of cookies in connection with the "XING Share Button". The current data protection information on the "XING Share Button" and additional information can be found on this website:
https://privacy.xing.com/en/privacy-policy

LinkedIn

We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Upon each individual call to our website, which has such a component, this component causes your browser to download a corresponding representation of the component from LinkedIn.

Through this process, LinkedIn is informed about which specific page of our website is currently being visited. If you click on the LinkedIn "Recommend button" while you are logged in to your LinkedIn account, you can link the contents of our pages to your LinkedIn profile. As a result, LinkedIn is able to associate your visit to our pages with your LinkedIn user account.

We have no control over the information that LinkedIn collects this way nor over the extent of this information collected by LinkedIn. We also have no knowledge of the content of the data submitted to LinkedIn. For details about LinkedIn's data collection as well as your rights and settings options, see the LinkedIn privacy statement. This statement can be found at https://www.linkedin.com/legal/privacy-policy.

10 Mühlbauer Cookie Policy

As of December 2, 2019

This cookie policy applies to this website of the Mühlbauer corporation mentioned in the legal notice.

When you visit Mühlbauer websites, information is stored on your device in the form of a "cookie". Cookies are small files that are stored on your device and that store certain settings and data for exchange with our pages via your browser.

Cookies allow us, for example, to adapt a website to your interests or to save your password on your device so that you do not have to reenter it each time. Generally we do not collect any personal data through the use of cookies, unless you have given us corresponding consent.

If you do not want us to recognize your device, please adjust the settings of your web browser to delete cookies from your device, block all cookies or warn you before a cookie is stored. A brief guide on how to do this can be found below.

Please note that certain features of our web pages may no longer work or may no longer work properly without cookies.

Categorization of cookies

Depending on their function and purpose, cookies can be divided into four categories: Essential Cookies, Performance Cookies, Functional Cookies and Cookies for marketing purposes.

Essential Cookies
are required so that you can navigate on the Mühlbauer web pages and operate the basic features of the website, such as the assignment of anonymous session IDs to bundle several related queries to a server.

Performance Cookies
collect information about the usage of our websites, e.g. used web browser and operating system, domain name of the website you came from, number of visits, average time spent, pages viewed.

These cookies do not store any information that allows a personal identification of the user. The information collected with the help of these cookies is aggregated and therefore anonymous. Performance cookies are used to improve the usability of a website and thus the user experience. You can object to the use of such cookies by means of an opt-out cookie (see section "Managing cookies" below).

Functional Cookies
enable a website to store provided information (such as user name, language selection or your location) and offer enhanced, more personalized features to the user. Functional cookies are also used to enable requested features such as playing videos.

Cookies for marketing purposes
are used to offer more targeted content relevant to the users and adapted to their interests. They are also used to limit the frequency of appearance of an ad and to measure and control the effectiveness of advertising campaigns. They register whether you have visited a website or not as well as which content has been used. This information may be shared with third parties, e.g. advertisers. These cookies are often linked to third-party site functionalities. You can object to the use of such cookies by means of an opt-out cookie (see section "Managing cookies" below).

Managing cookies

Please note that not all of the cookies listed here may be used if you visit this website using a mobile device.

How can I disable cookies?

Below, we have compiled links that provide detailed information on how to disable cookies in popular browsers:

Mozilla Firefox
Internet Explorer
Google Chrome
Safari

Cookies
Google Analytics (with anonymization function)

In our Mühlbauer online services, Google Analytics (with anonymization function) is integrated. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about from which website a data subject has come to a website (so-called referrers), which subpages of the website have been accessed or how often and how long a subpage has been viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of online advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Mühlbauer uses the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject will be shortened and anonymized by Google if our web pages are accessed from a member state of the European Union or from another state that is a signatory to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the obtained data and information to evaluate the use of our website, to compile online reports for us, which show the activities on our web pages, and to provide other services related to the use of our website.

Google Analytics stores a cookie on the data subject's IT system. By storing this cookie, Google is enabled to analyze the usage of our website. Upon each call of one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component is integrated, the respective Google Analytics component automatically causes the web browser on the data subject's IT system to transmit data to Google for the purpose of online analysis. In the framework of this technical process, Google receives information about personal data, such as the data subject's IP address, which Google uses, among other things, to track the origin of visitors and clicks and subsequently enable commission settlements.

Via this cookie, personal information is stored, such as access time, the location from which the site was accessed and the frequency of visits to our website by the data subject. Each time our website is visited, this personal information, including the IP address of the data subject's Internet connection, is transmitted to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may disclose this personal data collected through the technical process to third parties.

The data subject can prevent the storage of cookies by our website at any time, as explained above, by means of a corresponding setting of the web browser used and thus permanently object to the storage of cookies. Such a setting of the web browser used would also prevent Google from storing a cookie on the data subject's IT system. In addition, a cookie stored by Google Analytics can be deleted at any time via the web browser or other software programs.

Furthermore, the data subject has the possibility to object to and prevent the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google. For this purpose, the data subject must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. Google considers the installation of the browser add-on as an objection. If the data subject’s IT system is deleted, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within his or her control, the browser add-on can be reinstalled or reenabled.

Additional information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en-US and https://marketingplatform.google.com/about/analytics/terms/de/. Google Analytics is explained in more detail at https://marketingplatform.google.com/about/analytics/.

This Privacy Policy, especially the Cookie Policy, will be updated from time to time. The date of the last update can be found at the beginning of this statement.