1. Introduction and contact details of the data controller

1.1 
We are delighted that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2 
The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Markus Kirchmayer, MKM-PMT – Markus Kirchmayer, Albrecht-Dürer-Straße 28, 85053 Ingolstadt, Germany, Tel.: +4915756279270, email: markus.kirchmayer@mkm-pmt.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Data collection when visiting our website

2.1 
When you use our website for information purposes only – i.e. if you do not register or otherwise provide us with information – we collect only the data that your browser transmits to the website server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/link from which you arrived at this page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymised form)

The processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete evidence of unlawful use.

2.2 
For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar and the padlock icon in your browser.

3. Hosting & Content-Delivery-Netzwerk

We use a provider to host our website and display its content; this provider delivers its services either directly or through selected subcontractors, exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have entered into a data processing agreement with the service provider, which ensures the protection of our website visitors’ data and prohibits its unauthorised disclosure to third parties.

4. Getting in touch

When you contact us (e.g. via the contact form or by email), personal data is collected. The specific data collected when using a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your enquiry, establishing contact, and carrying out the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

5. Rights of the data subject

5.1 
Under current data protection law, you have the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:

• Right of access under Article 15 of the GDPR;
• Right to rectification under Article 16 of the GDPR;
• Right to erasure under Article 17 of the GDPR;
• Right to restriction of processing under Article 18 of the GDPR;
• Right to information under Article 19 of the GDPR;
• Right to data portability under Article 20 of the GDPR;
• Right to withdraw consent in accordance with Article 7(3) of the GDPR;
• Right to lodge a complaint under Article 77 of the GDPR.

5.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. WE RESERVE THE RIGHT TO CONTINUE PROCESSING, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR WHERE THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEVENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

6. Retention period for personal data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR, the data in question will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations pursuant to Article 6(1)(b) of the GDPR, such data is routinely deleted upon expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

When processing personal data for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information contained in this statement regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.