Pri­va­cy Policy

Notes on data processing

1. Name and con­tact details of the con­troller and the com­pa­ny data pro­tec­tion officer

This data pro­tec­tion infor­ma­tion applies to data pro­cess­ing by

Con­troller

mdi Europa GmbH, rep­re­sent­ed by the man­ag­ing direc­tor Wern­er Sander, Lan­gen­hagen­er Str. 71, D-30855 Lan­gen­hagen, phone: +49 511 39089530, e-mail: info@mdi-europa.com.

We are cur­rent­ly not oblig­ed to appoint a data pro­tec­tion officer.

2. Col­lec­tion and stor­age of per­son­al data as well as type and pur­pose and their use

When you con­clude a con­tract with us, we col­lect the fol­low­ing infor­ma­tion from you:

• Title, first name, surname, 
• valid e-mail address(es),
• address(es),
• tele­phone number(s) (land­line and/or mobile),
• oth­er infor­ma­tion nec­es­sary for pro­cess­ing your order.

This data is col­lect­ed to process our con­trac­tu­al rela­tion­ship, in particular

• to be able to iden­ti­fy you as our customer,
• for cor­re­spon­dence with you,
• for invoic­ing purposes.

The data pro­cess­ing is car­ried out at your request and is required in accor­dance with Art. 6 para. 1 sen­tence 1 lit. b GDPR for the pur­pos­es men­tioned for the appro­pri­ate exe­cu­tion of the con­trac­tu­al rela­tion­ship and for the mutu­al ful­fil­ment of oblig­a­tions aris­ing from the con­trac­tu­al relationship.

The per­son­al data col­lect­ed by us for order pro­cess­ing will be stored until the expiry of the applic­a­ble statu­to­ry peri­ods (includ­ing lim­i­ta­tion peri­ods) and then delet­ed, unless we are oblig­ed to store it for a longer peri­od of time in accor­dance with Arti­cle 6 (1) sen­tence 1 lit. c GDPR due to tax and com­mer­cial law or oth­er statu­to­ry stor­age and doc­u­men­ta­tion oblig­a­tions or you have con­sent­ed to fur­ther stor­age in accor­dance with Arti­cle 6 (1) sen­tence 1 lit. a GDPR.

3. Dis­clo­sure of data to third parties

Your data will not be passed on to third par­ties unless we express­ly state this in this infor­ma­tion sheet.

Your data will be passed on to third par­ties for the ful­fil­ment of the con­tract to which you are a par­ty. This is there­fore law­ful under Art. 6 para. 1 sen­tence 1 lit. b GDPR.

In addi­tion, our sys­tem admin­is­tra­tor and the devel­op­er of our data­base have access to your data. We have a legit­i­mate inter­est in main­tain­ing your data in our data­base and ensur­ing the secu­ri­ty and con­fi­den­tial­i­ty of your data with the help of our sys­tem admin­is­tra­tor and IT devel­op­er. There­fore, the trans­fer is jus­ti­fied in accor­dance with Art. 6 para. 1 sen­tence 1 lit. f GDPR. We have also con­clud­ed order pro­cess­ing agreements. 

Oth­er­wise, your per­son­al data will not be trans­ferred to third parties.

4. rights of data subjects

You have the right to

• request infor­ma­tion about your per­son­al data processed by us in accor­dance with Art. 15 GDPR. In par­tic­u­lar, you can request infor­ma­tion about the pur­pos­es of pro­cess­ing, the cat­e­go­ry of per­son­al data, the cat­e­gories of recip­i­ents to whom your data has been or will be dis­closed, the planned stor­age peri­od, the exis­tence of a right to rec­ti­fi­ca­tion, era­sure, restric­tion of pro­cess­ing or objec­tion, the exis­tence of a right of appeal, the ori­gin of your data if it was not col­lect­ed by us, as well as the exis­tence of auto­mat­ed deci­sion-mak­ing includ­ing pro­fil­ing and, if applic­a­ble, mean­ing­ful infor­ma­tion on its details;
• in accor­dance with Art. 16 GDPR to imme­di­ate­ly request the cor­rec­tion of incor­rect or incom­plete per­son­al data stored by us;
• to demand the era­sure of your per­son­al data stored by us in accor­dance with Art. 17 GDPR, unless the pro­cess­ing is nec­es­sary for exer­cis­ing the right of free­dom of expres­sion and infor­ma­tion, for com­pli­ance with a legal oblig­a­tion, for rea­sons of pub­lic inter­est or for the estab­lish­ment, exer­cise or defence of legal claims;
• in accor­dance with Art. 18 GDPR, to demand the restric­tion of the pro­cess­ing of your per­son­al data if the accu­ra­cy of the data is dis­put­ed by you, the pro­cess­ing is unlaw­ful but you refuse to delete it and we no longer need the data, but you need it for the asser­tion, exer­cise or defence of legal claims or you have lodged an objec­tion to the pro­cess­ing in accor­dance with Art. 21 GDPR;
• in accor­dance with Art. 20 GDPR, to receive your per­son­al data that you have pro­vid­ed to us in a struc­tured, com­mon­ly used and machine-read­able for­mat or to request that it be trans­mit­ted to anoth­er controller;
• in accor­dance with Art. 7 para. 3 GDPR, to revoke your con­sent once giv­en to us at any time. The con­se­quence of this is that we may no longer con­tin­ue the data pro­cess­ing that was based on this con­sent in the future, and
• to lodge a com­plaint with a super­vi­so­ry author­i­ty in accor­dance with Art. 77 GDPR. As a rule, you can con­tact the super­vi­so­ry author­i­ty of your usu­al place of res­i­dence or work­place or our com­pa­ny headquarters.

5. Right of objection

If your per­son­al data is processed on the basis of legit­i­mate inter­ests in accor­dance with Art. 6 para. 1 sen­tence 1 lit. f GDPR, you have the right to object to the pro­cess­ing of your per­son­al data in accor­dance with Art. 21 GDPR, pro­vid­ed that there are rea­sons for this aris­ing from your par­tic­u­lar sit­u­a­tion or the objec­tion is direct­ed against direct adver­tis­ing. In the lat­ter case, you have a gen­er­al right to object, which will be imple­ment­ed by us with­out spec­i­fy­ing a par­tic­u­lar situation.

If you wish to exer­cise your right of can­cel­la­tion or objec­tion, sim­ply send an e-mail to info@mdi-europa.com.

By sign­ing the ser­vice agree­ment, you con­firm that you have read and accept­ed this pri­va­cy policy.