Mirrorinox
Home

Privacy Policy

Privacy Policy

Privacy Policy

Privacy Policy and Information on Data Processing

1. Contact details of the controller and Data Protection Officer

1.1 Data Controller

mirrorINOX GmbH & Co. KG
Daimlerstraße 19
74389 Cleebronn

Phone: +49 7135 93430
Email: info@mirrorinox.de

1.2 Data Protection Officer

The Data Protection Officer can be contacted at the above address or at info@mirrorinox.de.

2. Purposes of Processing

2.1 Consent (Art. 6(1)(a) GDPR)

Personal data is processed for specific purposes (e.g. sending our newsletter by email after you click the confirmation link sent to you, disclosure to other third parties, production of images and videos with sound, publication of participant lists in connection with events, data processing when using voluntary services, conducting surveys and prize draws, and analysing data for marketing purposes) if you have given us your consent.

2.2 Contractual or Pre-contractual Obligations (Art. 6(1)(b) GDPR)

We process personal data that must be provided in order to perform a contract to which you are a party or to take pre-contractual steps at your request, e.g. via the contact form on our website. The purposes of the data processing depend on the specific contract (e.g. purchase, supply or employment contract) and may include, among other things, evaluations, consultation and the implementation of further measures. If we offer events, we process your data for the planning, organisation and delivery of the events, including event-related communication, accommodation (e.g. in conference hotels), catering for participants and, where applicable, the reimbursement of travel expenses. We process employees’ personal data for purposes relating to the employment relationship where this is necessary for deciding whether to establish an employment relationship or, once an employment relationship has been established, for its performance or termination, or for exercising or fulfilling rights and obligations arising from the law.

2.3 Legal Requirements (Art. 6(1)(c) GDPR)

Data is processed on the basis of legal obligations, e.g. for the purposes of preventing fraud and money laundering, complying with tax-related monitoring and reporting obligations, and providing information to authorities.

2.4 Balancing of Interests (Art. 6(1)(f) GDPR)

Furthermore, to safeguard our legitimate interests or those of third parties, data is processed for specific purposes following a prior balancing of interests, e.g. to enforce our rights as the owner or occupier of premises, protect legal claims, investigate criminal offences, assess default risks, optimise product development, optimise customer targeting for advertising purposes, such as contacting other companies by telephone, conduct surveys and prize draws, send advertising information by post (e.g. invitations to events, presentations of new products and services), make image and audio recordings at events for promotional publication, display and publish lists of participants, optimise demand planning or ensure data security.

3. Further Data Processing in Connection with Website Use

3.1 Pseudonymized Use of the Website

You can generally visit our websites without providing us with any personal data. Pseudonymised usage data is not combined with data relating to the holder of the pseudonym. Pseudonymised user profiles are not created.

3.3 Contact Form

We will use the email address collected via our contact form solely to process enquiries submitted through the contact form. Further information may be provided voluntarily; this data will be processed with your consent. The data will be stored for as long as necessary to provide the “Formspree” service. Once the enquiry has been processed, the collected data will be deleted.

We use the “Formspree” service, provided by Formspree Inc., 2093 Philadelphia Pike #3654, Claymont, DE 19703, USA, to provide and process our contact forms. When you use our contact form, the data you enter is transmitted to Formspree’s servers. This includes, in particular, the following personal data:

  • Name
  • Email address
  • Subject and message text
  • IP address (anonymized or truncated)
  • Time of transmission
  • Technical metadata (e.g. browser information)

Personal data is transferred to third countries (in particular the USA) on the basis of the European Commission’s Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Further information on data protection at Formspree can be found here: https://formspree.io/legal/privacy-policy

3.2 Newsletter

When you subscribe to the newsletter, your email address will be used for our own advertising purposes until you unsubscribe. We use the third-party provider Brevo, operated by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, to send our newsletter. Brevo provides extensive analytics on how newsletters are opened and used. These analyses are group-based and are not used by us to evaluate individual newsletter recipients. You may unsubscribe at any time, either by sending a message using the contact details provided below or by clicking the designated link in the newsletter. Further information on data protection at Campaign Monitor can be found at: https://www.brevo.com/de/legal/privacypolicy/

3.3 Cookies

We use cookies on various pages to make your visit to our website more appealing and to enable the use of certain functions. So-called 'cookies' are small text files that your browser can store on your computer. Some cookies are necessary for the operation of the website (category: Necessary Cookies); we only use other cookies if you have given us your prior consent (category: YouTube, Vimeo and Statistics Cookies). The process of storing a cookie file is also referred to as 'setting a cookie'. You can configure your browser according to your preferences so that you are notified when cookies are set, decide on a case-by-case basis whether to accept non-essential cookies, or generally accept or reject non-essential cookies.

You can customize the cookie settings for this website by clicking the “Cookie Settings” link in the footer.

3.3.1 Essential Cookies

We use strictly necessary cookies to carry out or facilitate the transmission of a communication over an electronic communications network. We also use strictly necessary cookies to provide an information society service that you have expressly requested.

  • CookieConsent (Cookiebot) – Stores the user's cookie consent status for the current domain. (maximum storage duration: 1 year)
  • rc::a (Google) – This cookie is used to distinguish between humans and bots. This helps the website generate valid reports on the use of your website. (Maximum storage duration: Persistent)
  • rc::c (Google) – This cookie is used to distinguish between humans and bots. (Maximum storage duration: Session)

3.3.2 YouTube Cookie

We offer you the option of watching videos on our website. To display videos, we use the “YouTube” video platform provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. YouTube content is embedded only in “privacy-enhanced mode”. This mode is provided by YouTube itself and ensures that YouTube does not initially store any cookies on your device. However, if you have previously consented to the use of preference cookies or access a YouTube video in question, your IP address and the other data specified in the web log will be transmitted, informing Google, for example, which of our web pages you have visited. However, this information cannot be attributed to you unless you logged in to YouTube or another Google service (e.g. Google+) before accessing the page or remain permanently logged in. If you click or tap a video and are redirected to another website or app, your user behaviour may be analysed there in accordance with that website’s or app’s policies and terms of use. We have no control over this. You can prevent the use of cookies by configuring the appropriate browser settings and extensions. Further information about data protection at YouTube and Google is available at: https://policies.google.com/privacy?hl=de

3.3.3 Statistics cookies: Google Analytics in consent mode

If you select statistics cookies, you consent to our use of Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. The controller responsible for users in the EU/EEA/Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

In Google Analytics 4, IP address anonymization is enabled by default. As a result of IP anonymization, Google truncates your IP address within the EU/EEA/Switzerland. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data. During your visit to the website, your user behavior is recorded in the form of “events” such as:

  • Page views
  • First visit to the websiteStart of the session
  • Web pages visited
  • Your “click path”, interaction with the
  • Website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • ads viewed / clicked
  • Language setting

The following is also recorded:

  • Your approximate location (region)
  • Date and time of the visit
  • Your IP address (in truncated form)
  • echnical information about your browser and the devices you use (e.g. language settings, screen resolution)
  • Your internet service provider
  • the referrer URL (the website or advertising medium through which you reached this website)

Google LLC is certified under the EU-US Data Privacy Framework, and we have entered into the EU Standard Contractual Clauses with Google. Google Analytics uses so-called 'cookies'. These are text files stored on your computer that enable an analysis of your use of the website, for example, to evaluate your pseudonymous use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

You can prevent cookies from being stored by adjusting the settings in your browser software; however, please note that if you do so, you may not be able to use all the features of this website. You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected by Google and processed by Google. To do so, download and install the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout. Further information on data protection at Google can be found at: https://policies.google.com/privacy?hl=de

  • _ga (Google) – Registers a unique ID that is used to generate statistical data on how the visitor uses the website. (Maximum storage period: 2 years)
  • _ga_# (Google) – Collects data on how many times a user has visited a website, as well as data on the first and most recent visit. Used by Google Analytics. (Maximum storage duration: 2 years)

3.4 Social Networks: Facebook, Instagram, LinkedIn

On our website, we offer you the option of accessing our social media profiles via so-called “social media buttons”. To protect your data, these buttons are embedded on the website solely as a graphic or link that directs you to the relevant website of the button provider. By clicking on the graphic or link, you will be redirected to the services of the respective provider. Only then will your data be transmitted to the respective provider. If you do not click on the graphic or link, no information will be exchanged between you and the platform providers. Information on the collection and use of your data on social networks can be found in the respective terms of use of the relevant providers:

  • Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): https://www.facebook.com/about/privacy
  • Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): https://help.instagram.com/519522125107875?helpref=page_content
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland): https://www.linkedin.com/legal/privacy-policy?_l=de_DE

This Privacy Policy also applies to our social media profiles:

  • Facebook
  • Instagram
  • LinkedIn

3.5 Statistical analysis of visits to this website

Our website is hosted by Netlify Inc. (hereinafter referred to as “Netlify”), Inc.101 2nd Street, Suite 575San Francisco, CA 94105, USA. In the process, Netlify processes the following personal data:

  • Browser type and version
  • operating system used
  • Referrer URL
  • IP address (anonymized or truncated)
  • Date and time of the server request
  • Pages and files accessed

This data is processed to maintain technical operations and prevent attacks. Personal data is transferred to third countries (in particular the USA) on the basis of standard contractual clauses. We have concluded a data processing agreement (DPA) with Netligy pursuant to Art. 28 GDPR: https://www.netlify.com/privacy/

3.6 Content Management

We use the headless CMS “Sanity” from Sanity.io, 351 California St., Suite 900, San Francisco, CA 94104, USA, to manage our content. The following personal data is processed:

  • IP address (anonymized or truncated)
  • Referrer URL
  • User-Agent
  • Browser and device information
  • geographic data

Personal data is not transferred to third countries. Further information on data protection at Prismic can be found here: https://www.sanity.io/legal/privacy

4. Categories of Recipients

To fulfil the intended purposes, the relevant data may be accessed across departments within our company. Processors engaged by us may also receive data for specific purposes, e.g. for IT services, document destruction and marketing. Other recipients of personal data may also include, for example, public authorities, credit and financial services institutions, lawyers and tax advisers, or credit agencies.

5. Transfer to a Third Country or an International Organisation

Personal data is transferred to third countries only where this is necessary, for example, for the performance of a contract, required by law, or where you have given us your consent. Furthermore, in connection with the maintenance of IT components, it cannot be ruled out that, in rare cases, an IT service provider from a third country (e.g. USA) may gain access to personal data. Otherwise, no personal data is transferred to third countries or to an international organisation.

6. Data Retention Period

We store personal data for the duration of the contractual relationship; in addition, statutory limitation periods are generally three years. Once an applicant selection process has been completed, we will generally delete your data within 6 months if you are not employed by our company. Various retention and documentation obligations also apply, for example under the German Commercial Code (HGB) and the German Fiscal Code (AO), with retention periods of up to ten years.

7. Right of Access, Rectification, Erasure, Restriction and Data Portability

You have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, and the right to data portability pursuant to Art. 20 GDPR. To exercise these rights, please contact us.

8. Withdrawal of Consent

You may withdraw your consent at any time. You may also unsubscribe from our newsletter by clicking the unsubscribe link in the newsletter. Please note that your withdrawal will only take effect for the future.

9. Right to Lodge a Complaint

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

10. Obligation to Provide Data

You are only required to provide the personal data necessary for entering into, performing and terminating a contract, or which we are legally obliged to collect. If you do not provide us with the necessary information and documents, we may not enter into or continue the business relationship you have requested.

11. Automated decision-making in individual cases

As a general rule, we do not use fully automated decision-making to establish and conduct the business relationship. Should we use such procedures in individual cases, we will inform you separately where required by law.

12. Profiling

In some cases, we process your data automatically in order to evaluate certain personal aspects (profiling), e.g. for targeted customer communications, tailored advertising including market and opinion research, and scoring or rating. The evaluation may include, for example, data on payment behaviour (e.g. account transactions, balances), as well as criteria such as industry affiliation and experience gained from the existing business relationship.

13. Categories of Personal Data

For example, we process the following categories of personal data: personal master data, contract master data, contract performance and termination data, order data, data required to fulfil legal obligations, creditworthiness data, scoring/rating data, advertising and sales data, data relating to your use of the telemedia services we offer (e.g. the time at which you access our websites, apps or newsletters, pages or entries you click on), as well as other data comparable to the categories listed above.

14. Data Sources

We process data that we have received from you in the course of our business relationship, as well as data lawfully transmitted to us by other third parties. We also collect data from publicly accessible sources (e.g. industry directories and debtor registers, commercial registers, the press).

Information on your right to object under Art. 21 of the General Data Protection Regulation (GDPR)

Right to object on grounds relating to your particular situation

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you pursuant to Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to object to the processing of data for direct marketing purposes

We process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection may be made in any form and should preferably be addressed to:

mirrorINOX GmbH & Co. KG
Daimlerstraße 19
74389 Cleebronn

Phone: +49 7135 93430
Email: info@mirrorinox.de