Privacy Policy
Thank you very much for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you, as a user of the website, about the nature, scope and purpose of the processing of personal data, and about your rights, insofar as you are a data subject within the meaning of Article 4(1) of the General Data Protection Regulation (GDPR). The following privacy policy already takes into account the changes introduced by the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, regarding the integration of data into services and content. At the same time, this policy also complies with the requirements of the Telecommunications and Telemedia Data Protection Act that were in force up to that point.
Data controller
MRK Media AG
Herzog-Rudolf-Straße 1
80539 München
Deutschland
Phone: +49 89 21 66 67-0
E-Mail: info@mrk-media.de
Website: www.mrk.de
Chairwoman of the Board: Dr. Imke Germann
We have appointed a data protection officer.
www.hub24.de
Herr Philipp Herold
Hafenstraße 1a
23568 Lübeck
E-Mail: datenschutz@mrk-media.de
1. GENERAL INFORMATION
We have designed the website to collect as little data from you as possible. In principle, you can visit our website without providing any personal data. It is only when you decide to make use of certain services (e.g. using a contact form) that the processing of personal data becomes necessary. In doing so, we always ensure that we process your personal data only in accordance with a legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the relevant national regulations, such as the Federal Data Protection Act, the Telecommunications and Telemedia Data Protection Act or other more specific data protection laws.
MRK Media AG will require its employees and business partners to comply with data protection regulations.
The following statement provides an overview of how MRK Media AG ensures this protection and what types of data are collected and for what purposes.
For any enquiries or communications regarding data protection, please contact the Data Protection Officer at MRK Media AG by email at datenschutz@mrk-media.de or by post at the above-mentioned address of MRK Media AG.
2. DEFINITION
The terms used in this privacy policy have the following meanings in accordance with the GDPR.
a) personal data
Any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); a natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Processing
Any operation or set of operations, whether or not carried out by automated means, relating to personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of disclosure, the matching or linking, the restriction, erasure or destruction.
c) Restriction of processing
The marking of stored personal data with a view to restricting its future processing.
d) Pseudonymisation
The processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure the personal data is not attributed to an identified or identifiable natural person.
e) Data controller
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.
f) Data processor
A natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
g) Recipient
A natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that body is a third party. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in line with the purposes of the processing.
h) Third
A natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.
i) Consent
Any freely given, specific, informed and unambiguous indication of the data subject’s wishes, in the form of a statement or other clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.
3. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We always process your personal data for specific purposes.
In summary, we process your personal data for the following purposes:
- So that we can process your enquiry when you contact us (e.g. email address, first name, surname);
- For the technical implementation of our website and to enable us to provide you with the information on this website (e.g. IP address, cookies, browser information)
- To enable us to receive and process your application for one of our vacancies.
- On drawing up a cooperation agreement
With regard to the legal basis for the processing of your personal data, the following applies:
We process personal data required for the establishment, performance or fulfilment of our services (contract fulfilment) on the legal basis of Article 6(1)(b) of the GDPR. Where we obtain your consent to the processing of your personal data, that consent, in accordance with Article 6(1)(a) of the GDPR, forms the legal basis for the data processing. Data processing is also permitted where we process your data to safeguard our legitimate interests, provided that your interests or fundamental rights and freedoms with regard to the processing of personal data do not override those interests. (Article 6(1)(f) of the GDPR) Where we engage external service providers in the context of data processing on our behalf, the processing is carried out on the legal basis of Article 28 of the GDPR.
4. PERSONAL DATA COLLECTED AND PROCESSED
We collect and process your personal data only if you voluntarily provide it with your knowledge, for example by filling in our forms or sending us emails.
In the context of the forms or messages provided, this initially includes the following data:
Through the use of cookies, MRK Media AG is able to provide users of this website with more user-friendly services, which would not be possible without the use of cookies.
Data from individuals interested in our services:
- Title*
- Full name*
- Full address*
- Company name*
- Email address*
- Industry
- Number of employees*
- Number of branches*
- Website*
- Full telephone number*
- Consent to the privacy policy*
- Message*
- Source of contact
- Consent*
Data on prospective partners:
- Title*
- Full name*
- Company*
- Email address*
- Full telephone number*
- Website
- Certificates already purchased*
- Consent*
Please mark compulsory fields with an *.
The personal data you provide and its contents will remain exclusively with us and our affiliated companies. We will store and process your data solely for the purposes set out in clause 5. Any use beyond the stated purpose requires your express consent.
Our partners’ data protection policies apply to the processing of data by them.
Personal data will be deleted immediately in the event that you withdraw your consent or if the purpose for which the data is used no longer applies.
MRK Media AG will immediately inform its cooperation partners of any withdrawal of consent declared to MRK Media AG. MRK Media AG has obliged its cooperation partners to delete the personal data immediately upon becoming aware of the withdrawal.
MRK Media AG has also obliged its cooperation partners to inform MRK Media AG immediately of any withdrawal of consent declared to the cooperation partner. Upon becoming aware of the declaration of withdrawal, MRK Media AG will immediately arrange for the deletion of the data from its own systems and, where applicable, from those of other cooperation partners.
5. APPLICATION PROCESS
We publish job vacancies on our website, for which you can apply by email. If you decide to apply for a vacancy, we will process the personal data you provide there and send to us solely for the purpose of conducting the application process.
The legal basis for the processing of your personal data as part of the application process is Section 26(1) in conjunction with Section 26(2) of the German Federal Data Protection Act (BDSG).
In the event of a rejection, we will delete your data as soon as the six-month retention period required under employment law has expired. This period begins when the rejection notice is sent. If you have expressly consented to the continued use of your data so that we may contact you at a later date regarding vacancies that may be of interest to you, we will continue to retain your data in accordance with your consent.
If an employment relationship is established following the application process, the data will initially continue to be stored to the extent necessary and permissible, and will subsequently be transferred to your personnel file.
Your personal data may be processed on our behalf on the basis of data processing agreements in accordance with Article 28 of the GDPR. In such cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation. We use the HR software provided by Personio SE & Co. KG to process data as part of the recruitment process. We do not intend to transfer data to a third country.
Otherwise, personal data will only be disclosed to recipients outside the company insofar as this is permitted or required by law, where such disclosure is necessary to fulfil legal obligations, or where you have given your consent. There are no plans to transfer data to a third country.
The provision of personal data as part of the application process is not required by law or contract. You are therefore under no obligation to provide personal data. However, the provision of personal data is necessary for us to make a decision on your application or to enter into an employment contract with us. When applying, you should, however, only provide such personal data as is necessary for the processing and completion of your application. If you do not provide us with any personal data when applying, we will be unable to make a decision regarding the establishment of an employment relationship.
Please note that applications sent to us by email are transmitted unencrypted. As such, there is a risk that unauthorised persons may intercept and use this data.
6. COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE
When you use the website purely for information purposes – that is, if you do not register or otherwise provide us with information – we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Article 6(1), first sentence, point (f) of the GDPR):
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each instance
- Website from which the request originates
- Browser
- Operating system and its user interface
- Language and version of the browser software.
This website is hosted by an external service provider (hosting provider). The personal data collected on this website is stored on the hosting provider’s servers.
We use the following hosting provider:
Mittwald CM Service GmbH & Co.KG
Königsberger Straße 4-6
32339 Espelkamp
Data Processing
We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
In addition to the data mentioned above, cookies are stored on your computer when you use our website. Further information on this can be found under the ‘Cookies’ section in this privacy policy and in the consent management tool used.
7. COOKIES
Cookies are small text files that are stored on your storage device and record certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the cookie’s age and an alphanumeric identifier.
Cookies enable our systems to recognise the user’s device and make any pre-set preferences immediately available. As soon as a user accesses the platform, a cookie is sent to the hard drive of that user’s computer. Cookies help us to improve our website and to offer you a better and even more personalised service. They enable us to recognise your computer or your (mobile) device when you return to our website, thereby:
- To store information about your preferred activities on the website and thus tailor our website to your individual interests.
- To speed up the processing of your enquiries.
We work with third-party services that help us make our online offering and website more interesting for you. Consequently, when you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically deleted after a specified period of time.
For further information on the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices contained therein. We use the Consent Tool provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, which is integrated locally on our servers. Further information can be found in the provider’s privacy notice at https://de.borlabs.io/datenschutz/.
If you do not wish to use browser cookies, you can configure your browser so that it does not accept the storage of cookies. Please note that, in this case, you may only be able to use our website to a limited extent, or not at all. If you only wish to accept our own cookies, but not those of our service providers and partners, you can select the ‘Block third-party cookies’ setting in your browser.
8. INTEGRATION OF THIRD-PARTY SERVICES AND CONTENT
Our website uses content, services and features provided by other providers. These include, for example, services for the statistical analysis of usage and visits to our website. In order for this data to be accessed and displayed in the user’s browser, it is necessary to transmit the user’s IP address to the third-party providers used.
Although we endeavour to use only third-party providers who require the IP address solely to deliver content, or who work with anonymised IP addresses, we have no control over whether the IP address may be stored. Information on the third-party providers used can be found later in this privacy policy.
Youtube NoCookie
Nature and scope of processing
We have integrated YouTube NoCookie into our website. YouTube NoCookie is a component of the video platform operated by YouTube, LLC, which allows users to upload content, share it via the internet and receive detailed statistics.
YouTube NoCookie enables us to integrate content from the platform into our website. YouTube NoCookie uses browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, amongst other things, to analyse the activity of the content viewed and to generate reports. If a user is registered with YouTube, LLC, YouTube NoCookie can associate the videos played with that user’s profile.
When you access this content, you establish a connection to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, where applicable, browser data such as your user agent are transmitted.
Purpose and legal basis
Use of the service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA takes place in accordance with Article 45(1) of the GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US sub-processors are certified under the EU-US Data Privacy Framework (EU-US DPF).
Retention period
We have no influence over the specific retention period of the processed data; this is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube NoCookie:
https://policies.google.com/privacy.
Google Fonts
Nature and scope of processing
We use Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service for supplying fonts for our online offering. To access these fonts, a connection is established with servers operated by Google Ireland Limited, during which your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfers to the USA are carried out in accordance with Article 45(1) of the GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US sub-processors are certified under the EU-US Data Privacy Framework (EU-US DPF).
Retention period
We have no control over the specific retention period for the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
9. DATA SECURITY
We protect our website against the loss, destruction, unauthorised access, alteration or disclosure of your data by unauthorised persons through technical and organisational measures. In particular, your personal data is transmitted in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system for this purpose. Our security measures are continuously improved in line with technological developments.
10. RIGHTS OF THE DATA SUBJECT
Insofar as you are considered a data subject within the meaning of Article 4(1) of the GDPR, you have the following rights under the GDPR regarding the processing of your personal data. The legal text relating to the rights listed below can be found at:
a) Right to confirmation and access to information
Subject to the conditions set out in Article 15 of the GDPR, you have the right to request confirmation as to whether personal data concerning you is being processed and to receive, at any time and free of charge, information from the data controller regarding the personal data held about you, together with a copy of that information.
b) Right to rectification
Subject to the conditions set out in Article 16 of the GDPR, you have the right to request the immediate rectification of any inaccurate personal data concerning you. You also have the right, taking into account the purposes of the processing, to request that incomplete personal data be completed — including by means of a supplementary statement
c) Right to erasure
Subject to the conditions set out in Article 17 of the GDPR, you have the right to request that personal data relating to you be erased without delay, provided that one of the grounds set out in Article 17 of the GDPR applies and insofar as the processing is not necessary.
d) Right to restriction of processing
Subject to the conditions set out in Article 18 of the GDPR, you have the right to request that processing be restricted if any of the conditions specified in Article 18 of the GDPR apply.
e) Right to data portability
Subject to the conditions set out in Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, provided that the further conditions set out in Article 20 of the GDPR are met.
f) Right to withdraw consent
You have the right to withdraw any consent you have given us to process your personal data at any time, with effect for the future. Please send your withdrawal to the contact details provided above.
g) Right to object
Subject to the conditions set out in Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data. If the conditions for a valid objection are met, we may no longer process your data.
h) Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.
11. DISCLOSURE OF YOUR PERSONAL DATA
Your personal data will be disclosed as described below.
Data will also be disclosed if we are entitled or obliged to do so on the basis of statutory provisions and/or orders from public authorities or courts. This may, in particular, involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
Where your data is disclosed to service providers to the extent necessary, they shall only have access to your personal data to the extent required to fulfil their tasks. These service providers are obliged to process your personal data in accordance with applicable data protection laws, in particular the GDPR. Where your personal data is processed on our behalf on the basis of data processing agreements pursuant to Article 28 of the GDPR, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation.
We are committed to processing your data within the EU / EEA. However, there may be instances where we use service providers who process data outside the EU / EEA. In such cases, we ensure that, prior to the transfer of your personal data, an adequate level of data protection, comparable to the standards within the EU, is established at the recipient’s end. This can be achieved, for example, through EU standard contractual clauses, Binding Corporate Rules or specific agreements to which the company may be subject.
12. RETENTION PERIOD FOR PERSONAL DATA
With regard to the retention period, we delete personal data as soon as its storage is no longer necessary for the fulfilment of the original purpose and there are no longer any statutory retention periods in force. The statutory retention periods ultimately determine the final duration of the storage of personal data. Once the retention period has expired, the relevant data is routinely deleted. Where retention periods apply, processing is restricted by blocking the data.
13. REFERENCES AND LINKS
When accessing websites linked to from our website, you may be asked again to provide details such as your name, address, email address, browser characteristics, etc. This privacy policy does not govern the collection, disclosure or handling of personal data by third parties.
Third-party service providers may have different or separate policies regarding the collection, processing and use of personal data. It is therefore advisable to familiarise yourself with their data protection practices on their websites before entering any personal data.
14. CHANGES TO THE PRIVACY POLICY
We are constantly developing our website to provide you with an ever-improving service. We will keep this privacy policy up to date and amend it as necessary.
