Privacy Policy

The entity responsible for data processing is:

Mühlen Sohn GmbH & Co. KG
Lindenstrasse 16/1
89134 Blaustein
GERMANY

Phone:   +49 7304 801 0
Fax:        +49 7304 801 23
Mail:       info@muehlen-sohn.de

If you have any questions about the collection, processing or use of your personal data, or if you would like to request information, correction, blocking or deletion of data, please contact our data protection officer:

Mrs. Dr. Anke Thiedemann
c/o RWT Anwaltskanzlei GmbH
Charlottenstrasse 49
72764 Reutlingen
Germany
Mail: datenschutz@muehlen-sohn.de

When you visit our website, our web server makes a temporary record of each access and stores it in a log file. The following data is recorded and stored until an automatic deletion:

• IP-address of the requesting processor
• date and time of access
• name and URL of the downloaded file
• volume of data transmitted
• indication whether download was successful
• data identifying the browser software and operating system.

We record the data for the purpose to enable you to visit the website (connection setup), for reasons of system security, technical administration of the network infrastructure and in order to optimize the internet service. This data is not used for identifying a particular person. A combination of this data with other data sources is not carried out, the data will furthermore be deleted after a statistical evaluation.

The legal basis for data processing is Article 6 paragraph (1) sentence 1 lit. f) GDPR. Our legitimate interest consists in presenting you a functional user-friendly and secure website.

When processing data, your legitimate interests are always taken into account in accordance with the statutory provisions. Personal data is only collected if you voluntarily provide it to us when contacting us (such as your name, e-mail address or postal address). We use the data you provide without your separate consent exclusively to answer your questions.

The legal basis for data processing is Article 6 paragraph (1) sentence 1 lit. b) GDPR.

We use cookies to make your visit to our website more convenient and to enable the use of certain functions. Cookies are small text files that are used as identifiers. We transfer these to your computer’s hard drive via your web browser and can read them during your current visit (so-called ‘session cookies’). Please note that certain cookies are already set as soon as you access our website. Our cookies are protected against being read by third parties with the help of your browser’s security standards. You have the option of preventing the storage of cookies on your computer by making the appropriate settings in your browser. However, this may restrict the functionality of our websites for you.

The legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25 paragraph (2) TDDDG is Art. 6 paragraph (1) sentence 1 lit. f) GDPR. Our legitimate interest is to present you with a functional and user-friendly website with the help of the necessary cookies.

When using the online contac form, we collect personal data (such as your name and e-mail address) only to the extent you have made available to us. Your e-mail adress will only be used to process your request. Your data will then be deleted, unless this is contrary to tax or commercial law retention periods or you have not agreed to further processing and use.

The legal basis für the processing of personal data is Art. 6 paragraph (1) sentence 1 lit. b) GDPR.

You have the option of applying for a position with us directly via the application form.

We collect your first and last name, your contact details, your address, your application documents as well as your IP address and the time of your application. You also have the option of uploading additional documents to our online application form. The provision of further personal data is voluntary.

We process your personal data only for the purpose of carrying out the application process, insofar as this is necessary. Data processing is carried out on the legal basis of Art. 6 paragraph (1) sentence 1 lit. b) GDPR.

We generally store your personal data for the duration of the application process and for a further six months thereafter.

After completion of the application process, we process your personal data on the basis of our legitimate interest in order to defend ourselves against possible legal claims. The legal basis for data processing in this respect is Art. 6 paragraph (1) sentence 1 lit. b) GDPR. We will then delete your personal data.

We maintain a publicly accessible profile on YouTube. Your visit to our profile triggers a variety of data processing operations.

Below we provide you with an overview of which of your personal data we collect, use and store when you visit our profile.

Personal data is information that can be assigned to you as a specific person (e.g. name, age, address, photos, email address and IP address).

We also inform you about your rights with regard to the processing of your personal data. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our YouTube profile. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data.

When you visit our profile, your personal data is not only collected, used and stored by us, but also by YouTube. This happens even if you do not have a profile on the respective social network. The individual data processing operations and their scope are not necessarily transparent to us. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by YouTube, please refer to YouTube’s privacy policy.

The privacy policy for the social network YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be viewed at https://policies.google.com/privacy?hl=de;

As the operator of a YouTube company page, we can only view the information stored in your public YouTube profile, and only if you have such a profile and are logged in when you visit our site.

In addition, YouTube provides us with anonymous usage statistics that we use to improve the user experience when visiting our site.

We do not have access to the usage data that YouTube collects to compile these statistics. YouTube has undertaken to us to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data and to make the essentials of this obligation available to those affected.

This data processing serves our legitimate interest in improving the user experience when visiting our website in line with our target group. The legal basis for data processing is therefore Art. 6 paragraph (1) sentence 1 lit. f) GDPR. YouTube also uses cookies, which are stored on your device when you visit our website, even if you do not have your own YouTube profile or are not logged into it during your visit to our website. These cookies allow YouTube to create user profiles based on your preferences and interests and to show you customised advertising (inside and outside YouTube). Cookies remain on your device until you delete them. You can find details on this in YouTube’s privacy policy.

If you use our YouTube profile to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide will be processed exclusively for the purpose of contacting you.

The legal basis for data collection is therefore Art. 6 paragraph (1) sentence 1 lit. a) and lit. b) GDPR. We delete stored data as soon as its storage is no longer required or you request us to delete it; in the case of statutory retention obligations, we restrict the processing of the stored data accordingly.

We operate a company website on the Xing social media platform.

The data controller has integrated Xing components on this website. Xing is an Internet-based social network that enables users to connect with existing business contacts and to make new business contacts. Individual users can create a personal profile for themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing.

The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing.

If the data subject is logged in to Xing at the same time, Xing recognises which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of their stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the data subject. If the data subject clicks on one of the Xing buttons integrated on our website, for example the ‘Share’ button, Xing assigns this information to the personal Xing user account of the data subject and stores this personal data.

Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged in to Xing at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject does not want this information to be transmitted to Xing, they can prevent the transmission by logging out of their Xing account before accessing our website.

The data protection provisions published by Xing, which can be accessed at www.xing.com/privacy, provide information about the collection, processing and use of personal data by Xing.

We have a legitimate interest in the collection and processing of this information. In addition, we have a legitimate interest in utilising as many communication options as possible and thus reaching as many interested parties as possible.

In this respect, the legal basis for the operation of the company website is Art. 6 paragraph (1) sentence 1 lit. f) GDPR.

We maintain a publicly accessible profile on Facebook and Instagram. Your visit triggers a variety of data processing operations.

Below we provide you with an overview of which of your personal data is collected, used and stored by us when you visit our profile.

You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data.

When you visit our profiles, your personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This happens even if you do not have a Facebook or Instagram profile yourself.

The individual data processing operations and their scope do not necessarily differ and are not comprehensible to us.

For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network, please refer to the Instagram and Facebook privacy policies.

The privacy policy for the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be viewed at https://www.facebook.com/about/privacy/update?ref=old_policy;

The privacy policy for the social network Instagram, which is operated by Meta Platforms Ireland Limited, can be found at https://help.instagram.com/155833707900388;

As the operator of the company pages, we can only view the information stored in your public profile, and only if you have such a profile and are logged into it while you visit our company page. In addition, Facebook and Instagram provide us with anonymous usage statistics that we use to improve the user experience when visiting our company pages.

We do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta Platforms has made a commitment to us to fulfil the primary responsibility under the GDPR with regard to this data and to provide the data subjects with the essentials of this commitment.

This data processing serves our legitimate interest in improving the user experience when visiting our company pages in line with our target group. The legal basis for data processing is therefore Art. 6 paragraph (1) sentence 1 lit. f) GDPR. Meta Platforms also uses cookies, which are stored on your device when you visit our company page, even if you do not have your own Facebook or Instagram profile or are not logged into it during your visit to our company page. These cookies allow Meta Platforms to create user profiles based on your preferences and interests and to show you customised advertising (inside and outside Facebook and Instagram). The cookies remain on your end device until you delete them. Details can be found in the Facebook and Instagram privacy policies.

If you use our profiles in the social networks to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide us with will be processed by us exclusively for the purpose of being able to contact you.

The legal basis for data collection is therefore Art. 6 (1) sentence 1 lit. a) and b) GDPR. We delete stored data as soon as its storage is no longer required or you request us to delete it; in the case of statutory retention obligations, we restrict the processing of the stored data accordingly.

Your personal data is transmitted over the Internet on our website using the so-called SSL security system (Secure Socket Layer). This technology offers a high level of security and is therefore also used by banks for data protection in online banking, for example. We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

Under the terms of the GDPR, you are entitled to the following legal data subjects if their requirements are met:

• Right to gain access to the personal data stored with us in accordance with Art. 15 GDPR,
• Right to rectification incorrect data in accordance with Art. 16 GDPR,
• Right to erasure of the data stored by us according to Art. 17 GDPR,
• Right to restriction of processing of the data stored with us according to Art. 18 GDPR,
• Right to data portability according to Art. 20 GDPR,
• Right to object to the processing of personal data pursuant to Article 21 paragraph (1) of the GDPR,
• Right to withdrawel of consent given to us at any time pursuant to Art. 7 paragraph (3) GDPR; this has the consequence that we may no longer continue the data processing based on this consent for the future,
• Right to lodge a complain to a competent supervisory authority in accordance with Art. 77 GDPR, if you believe that the processing of your personal data violates provisions of the GDPR.

Your personal data will not be used for automated decision-making or profiling.