Data protection

We appreciate your visit on our website and your interest in our offer. We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. This Privacy Notice is meant to help you understand our privacy practices, including which Personal Data we collect, why we collect it, what we do with it, and how we protect it, as well as knowing your individual rights. This information will enable you to always be in full control of your personal data.

Controller legally responsible for data processing:
Mahlo GmbH + Co. KG
Donaustraße 12
D-93342 Saal / Donau
Germany
info@mahlo.com

It´s possible to visit our website without disclosing any personal data besides the technical data provided for the operation of the website itself. For transparency reasons, our privacy notice can be found on every page.

Personal data is data about an identified or identifiable person. This means any information about you, information that could be used to identify you or that is directly associated with you. We use personal data like your IP address or technical data of your device (e.g. service provider and operating system), only to run and improve our website. We never save this data beyond the fulfilling of its purpose or legal retention periods.

We need this data to run our website. If you object to processing, you won´t be able to use our online offer. We evaluate this kind of information statistically in order to make using our website ever more comfortable. We don´t connect this information to any other data we have collected previously. It´s only meant to improve the performance and attractiveness of our website and its content. Data collected when using our website will be deleted at the latest after 14 months. In some cases, we might be allowed to save data in order to enforce or defend any legal claims.

In any data processing we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR). This includes collecting, saving and using your personal data. We will never use your data for marketing purposes, and we will never sell, rent or leave your personal data to third parties.

Art. 6. 1 b and 1 f are legal basis for processing data in order to take care of information and network security. According to these articles processing of personal data is legal if necessary for the performance of a contract or for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

According to Art. 13 2 e GDPR you are not obliged to provide us with your personal data when using our website. Nevertheless it´s just not possible to run a website without this kind of data.

Your data will not be disclosed to any other third parties, except if there is a legal obligation to transfer the data. Art. 6 (1) c GDPR in connection with the respective instructions or the legal obligation we are subject to in the individual case, is the legal basis for processing data. Categories of recipients of the data are public authorities in case of a legal obligation and processors that process the data collected online on our behalf. Processors involved are:

• https://www.heroldmedien.de/
• https://www.internetx.com/
• https://www.google.com/
• https://www.leadinfo.com/

We process information that you enter on our Website or communicate to us in some other way so that we can advise and supervise you following your request. This includes data you fill in a contact form or send us via e-mail. We will use this information only for your particular claims or requests. In order to protect your data, the transmission/transfer is coded by a common encryption method.

Data that you give us using our contact form, service form and form for ordering spare parts will stay encrypted until we have received the double opt-in confirmation. In case we don’t receive the confirmation, the data will be deleted after 30 days.

Your personal data will be deleted after we have answered your request or clarified your claim. Art. 6 1 a GDPR is legal basis for processing your data that you transmit by using the contact form, the service form and the application form. By transmitting your data, you give your consent to data processing for the described purposes. You may withdraw your consent with effect for the future in case you don’t want your data to be processed any more.

Art. 6 1b GDPR is legal basis for processing your data that you transmit by using the form for ordering remote maintenance, spare parts and repair and return.

Our sales staff will collect conversation and contact information during your visit to one of our booths. These are used to initiate a business relationship and on the basis of our legitimate interest in accordance with Art. 6 Para. 1 S. 1 lit. b and f GDPR. The trade fair protocols are digitized and stored in our ERP system. If no business relationship is established, the logs and your contact information will be deleted after 5 years.  Subject to your consent, we will send you the information you have requested to the contact address provided, also by e-mail, or contact you by telephone. The legal basis for this is Art. 6 Para. 1 S. 1 lit a GDPR. Information on revocation can be found in the corresponding paragraph of this data protection notice.

We use session cookies on our website. In the following, we would like to briefly explain the purpose of these cookies. Cookies are short snippets of text that we store on your computer. Cookies do not execute commands on your computer, so they do not pose a security risk. Session cookies store certain information while you browse our website and are not stored permanently, but are deleted when you leave our website. The use of session cookies is based on Article 6 (1) (f). The operation of the website is in the legitimate interest of the controller. You can control the handling of cookies in your browser, you can even reject cookies altogether or configure your browser so that cookies are deleted regularly. You will find sufficient information on this on the Internet.

This Website uses Google Analytics, a web analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called “Cookies” – small text files that are placed on your computer and which allow an analysis of the use of our website by you.

Among other things, the following data is collected from you: IP address, time spent on the website, language, location, and the browser you are using. The analysis is carried out by means of an algorithm (machine learning) that measures and analyzes your user behavior based on the collected data and can recognize it on other devices you use. By default, your IP address is anonymized by shortening it before it is transmitted to Google.

We have disabled Google Signals.

You can find more detailed information about how Google uses those data here: https://policies.google.com/privacy/partners?hl=de

The transfer of data to the USA is based on the Data Privacy Framework. Google Analytics will only be used if you have given your consent.  The legal basis is Art. 6 Para. 1 S. 1 lit a GDPR and § 25 TTDSG.

You can revoke this consent at any time by clicking on the "Cookie settings" button under "Cookies" and saving a new selection.

The data collected with Google Analytics is passed on internally to our marketing department.

This Website uses the remarketing function of Google Inc. This function is used to present users within the Google advertising network interest-based advertisement. It is placed a so-called “Cookie” on the browser of the website visitor which allows recognizing the visitor in case he calls up a webpage that belongs to the Google advertising network. On those pages, users can be presented advertisements that relate to content on websites that have been called up by the visitor before and which use the Google remarketing function. We only place the Google remarketing cookie with your prior consent to cookies. Legal basis is Art. 6(1) a GDPR.

According to Google’s own statement, Google does not collect personal data during this process. In case you still don’t want the Google Remarketing to be active, you can deactivate it by modifying the settings here: http://www.google.com/settings/ads

As an alternative you can deactivate the use of cookies for interested-based advertisement by following these instructions: https://optout.networkadvertising.org/?c=1