How we deal with your personal data

Data protection law is part of our personal rights. Especially in our constantly developing and networked world, the importance of these rights must not be underestimated. COMPANY attaches great importance to data protection law in all its manifestations and requirements, which is why we take the protection of your data very seriously and always endeavour to provide an appropriate level of protection on our website www.m3one.de.

You are free to use our website without disclosing your personal data. However, if you wish to make use of one of our services, in particular, contact us via our website, it may be necessary to collect and process your data. If this is the case and there is no legal basis for this processing, we will always obtain your consent for the respective process.

As the data controller, we have implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Since, despite all technical precautions, absolute protection cannot be completely guaranteed during data transmission, you are also free to transmit your personal data by other means, for example by telephone.

Data protection Details

The data protection declaration of this website is based on the terms used by the European directive and regulation giver in the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for you as a customer and business partner. In order to guarantee this, we would like to explain the terms used in advance.

We use the following terms, among others, in this data protection declaration:

1. Definitions according to GDPR

   The data protection declaration of this website is based on the terms used by the European directive and regulation giver in the adoption of the data protection basic regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for you as a customer and business partner. In order to guarantee this, we would like to explain the terms used in advance.

   We use the following terms, among others, in this data protection declaration:

   1. Personal data

      Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person shall be considered identifiable if he can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

   2. Data subject

      Data subject is any identified or identifiable natural person whose personal data are processed by the data controller. In case of doubt, you are therefore a data subject.

   3. Processing

      Processing shall mean any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.

   4. Limitation of processing

      Limitation of processing is the marking of stored personal data with the aim of limiting their future processing.

   5. Profiling

      Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movement of that natural person.

      To preotect your personal data, we don’t use profiling on our website.

   6. Pseudonymisation

      Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.

   7. Controller

      The controller or controllers shall be the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or controllers may be designated in accordance with Union law or with the law of the Member States on the basis of specific criteria.

   8. Processor

      Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

   9. Recipient

      The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients.

   10. Third parties

       Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or processor, are empowered to process the personal data.

   11. Consent

       Consent shall mean any voluntary, informed and unambiguous expression by the data subject of his or her will in the particular case, in the form of a statement or other unequivocal confirmatory act, indicating that he or she consents to the processing of his or her personal data.

   12. Tracking

       In online marketing, tracking refers to the recording of the user behaviour of a website visitor. With the help of tracking, it can be traced via which websites a visitor has reached his own website, how long the visitor has been on the website, which pages have been called up and which IP address the visitor has. To access this data, cookies are used and evaluated with tools such as Google Analytics. From this, the success of marketing campaigns can be determined and measures for their optimization and adjustments derived. With these measures, the website can be made more user-friendly and better adapted to the customers.

   13. Range measurement

       The range measurement primarily serves to statistically determine the usage intensity, the number of visitors or users of a website and their surfing behavior – based on a uniform standard procedure. Using various tools, website operators can see exactly how many people can be reached with a contribution. It is also possible that it can be determined exactly how often a person e.g. an advertisement clicks from which websites, advertisements or articles people get to their own website. The data required for this is collected and processed in accordance with the GDPR and German data protection law. Technical and organizational measures ensure that individual users can never be identified. Data that may be related to a specific, identifiable person will be anonymized as soon as possible.

2. Who we are

   The responsible for this website in the sense of the basic data protection regulation is:

   m3one GmbH
   represented by its managing directors

   Martin Voigt, Bernd Wolters, Sven Messerschmid and Stefan Mattiske

   Edmund-Bertrams-Strasse 43

   40489 Düsseldorf
   GERMANY

   Phone: +49 211 / 36 87 870

   E-mail: hallo@m3one.de

   Website: www.m3one.de

3. Why we collect data and other information

   Our website collects a series of general data and information from you with every visit to our website. This general data and information are stored in the log files of the server. The following data can be recorded

   (1) used browser types and versions,
   (2) the operating system used by the accessing system,
   (3) the website from which an accessing system reaches our website (so-called referrer),
   (4) the sub-websites, which are accessed via an accessing system on our website,
   (5) the date and time of access to the website,
   (6) an Internet Protocol (IP) address,
   (7) the Internet service provider of the accessing system, and
   (8) other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

   Our company does not draw any conclusions about your person when using this general data and information. Rather, this information is required to display the contents of our website correctly and to optimise the contents and advertising of the contents.

   Furthermore, we need the above-mentioned information for the permanent functionality of our IT infrastructure and technology of the website. Last but not least, we may need the information in order to provide law enforcement agencies with the necessary data in case of prosecution.

   These anonymously collected data and information are therefore evaluated by us for statistical purposes on the one hand, but also for the optimization of data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all your personal data.

   The concrete purpose of data processing on our website is, among other things

   – Provision of our online offer with associated user-friendliness
   – Office and organisational procedures
   – the execution of contractual services and performances
   – Management and response to requests
   – Processing of payment transactions
   – generate feedback
   – Direct marketing
   – Range measurement
   – Tracking
   – Security measures

4. What rights do you have?

   The European legislator has given you a number of possibilities under the basic data protection regulation to assert your rights – also against us. In order to comply with our duty to inform you, these rights are set out below:

   1. Right to confirmation

      You have the right to ask us to confirm whether your personal data is being processed.

   2. Right to information

      You have the right to receive information about your stored personal data (e.g. the purpose of processing or the categories of data processed) and a copy of this information free of charge.

   3. Right of rectification

      You have the right to ask us to correct any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

   4. Right of cancellation (right to be forgotten)

      You have the right to demand from us that your personal data concerning you be deleted immediately. We are also obliged to delete personal data immediately if there is a reason that does not justify processing the data

   5. Right to limit processing

      You have the right to demand that we limit the processing of your data,

   6. Right to data portability

      You have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format. You also have the right to have this data communicated to another person in charge, without hindrance from us, to whom the personal data has been provided.

   7. Right of opposition

      You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data on the basis of Article 6(1)(e) or (f) of the DPA.

      We will no longer process personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

   8. Right to information and complaint to a supervisory authority

      You have the right to contact a supervisory authority at any time with questions regarding data protection.

      If you believe that the processing of personal data concerning you is in breach of data protection law, you also have the right to lodge a complaint with a competent supervisory authority.

      However, in order to prevent this from happening in the first place, we would be grateful if we could find a solution together in the event of any discrepancies.

   9. Right to revoke a data protection consent

      You have the right to revoke your consent to the processing of personal data at any time.

      If you wish to revoke your consent, you can contact the following office at any time:

      m3one GmbH
      represented by its managing directors

      Martin Voigt, Bernd Wolters, Sven Messerschmid and Stefan Mattiske

      Edmund-Bertrams-Strasse 43

      40489 Düsseldorf
      GERMANY

      Phone: +49 211 / 36 87 870

      E-mail: hallo@m3one.de

      Website: www.m3one.de

5. Provision of the online offer and web hosting

   In order to provide our website securely and efficiently, we use the services of one or more web hosting providers, from whose servers (or servers managed by them) the online content can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, and security and technical maintenance services.

   The data processed on our website may include information that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to display the contents of our online offer, and all entries made within our online offer or from websites.

   E-mail dispatch and hosting: We use web hosting services, which include the dispatch, receipt and storage of e-mails. For this purpose, the addresses of the recipients and senders as well as further information concerning the e-mail dispatch (e.g. the providers involved) and the contents of the respective e-mails are processed.

   Please note that e-mails on the Internet are generally not sent in encrypted form. In most cases, e-mails are encrypted in transit, but (unless an end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore not take responsibility for the transmission path of the e-mails between the sender and the reception on our server.

   Collection of access data and log files: We collect data on every access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. In short, server log files record all processes that happen on a website.

   Among other things, server log files are used for security purposes by detecting and fending off attacks, or to ensure the load of the servers and their stability.

   – Processed data types: Content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

   – Affected persons: Users (e.g. website visitors, users of online services).

   – Legal basis: legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

6. Deletion and blocking of personal data

   We process and store your personal data only for the period of time necessary to achieve the purpose of storage or if this has been provided for by the European Directives and Regulations or any other legislation in laws or regulations to which we are subject. The criterion for the duration of the storage of personal data is therefore the respective legal retention period.

   If the purpose of storage ceases to apply or if a storage period prescribed by the European Directives and Regulations or any other competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions, provided that they are no longer required for the performance of the contract or the initiation of a contract.

7. Protection of minors

   Consent to the processing of personal data can only be given by a person of full age. For information society services, the consent of a child is permissible from the age of sixteen years in accordance with Art. 8 GDPR.

8. Our handling of cookies

   Our website is operated using, among other things, cookies. Cookies are text files that are placed and stored on your computer system via your internet browser.

   Several internet sites and servers use cookies. Simply said, cookies serve to give the website a “memory”. They are an essential means for many website operators to provide you, the website visitor, with a smooth and technically flawless experience.

   Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to distinguish your individual browser from other Internet browsers that contain other cookies. A specific internet browser can be recognized and identified via the unique cookie ID.

   Through the use of cookies, our website can provide you with more user-friendly services that would not be possible without the cookie setting. The following cookie types and functions are distinguished:

   Cookies, which are differentiated according to their storage period

   – Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after you leave an online offer and you have closed the browser.

   – Permanent cookies: Permanent cookies remain stored even after you close the browser. These are used, for example, to save your login status or to display content that you have viewed frequently or liked.

   Cookies that differ according to their origin

   – First-party cookies: First-party cookies are set by us.

   – Third-party cookies (also: third-party cookies): Third-party cookies are mainly placed by advertisers (so-called third parties) to process user information.

   Cookies that differ according to their purpose

   – Necessary (required) cookies: on the one hand, cookies may be necessary for the operation of a website (e.g. to store logins or other user input or for security reasons).

   – Statistical, marketing and personalization cookies: cookies may be used in the context of range measurement (web analysis), namely when your interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as “tracking”, i.e., tracking the potential interests of users. Insofar as we use such cookies or other “tracking” technologies, we will inform you separately in our privacy policy or in the context of obtaining consent directly when you open our website (cookie banner).

   Storage period: If we do not tell you specifically how long permanent cookies are stored, please allow for a storage period of up to 2 years.

   You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies that have already been set can be deleted at any time via your Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions, e.g. the display of map material, of the Internet pages visited by you may be fully usable.

   Which cookies do we use? We use cookies on our website to store language settings and to store a session ID.

   Cookie Consent Manager: We use the consent technology of “Borlabs Cookie” to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection.

   The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.

   When you visit our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the Borlabs cookie provider.

   The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected.

   Details on Borlabs Cookie data processing can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

   Website: https://de.borlabs.io/borlabs-cookie/

   Legal basis for the use of the Borlabs cookie: Art. 6 para. 1 lit. c GDPR

What you can expect on our website

We offer a wide variety of content on our website to provide you, the user, with an interesting browsing experience so that you receive a lasting and, above all, positive impression of us and our company. For this purpose we use various programs, tools and many other contents. In the following, we would like to explain what these are in detail.

9. Contact possibility via the website

   Due to legal requirements, our website contains information that enables a quick electronic contact to our company as well as an immediate communication with us, which also includes a general address of the so-called electronic mail (e-mail address).

   If you contact us by e-mail, the personal data you provide will be stored automatically. Such personal data transmitted by you to us on a voluntary basis will be stored for the purpose of processing or contacting you. There is no disclosure of this personal data to third parties.

   Specific data processing:

   Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text input, photographs, videos).

   Data subjects: Communication partners.

   Purposes of processing: contact requests and communication.

   Legal grounds: contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. GDPR), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).

10. Legal permission for data processing

    The legal basis for the above processing operations may be m3One ltd. may use the following standards:

    – Art. 6 I lit. a GDPR, where we obtain your consent for a specific processing purpose.

    – If the processing of personal data is necessary, for example, due to the performance of a contract between you and us, this processing is justified by Art. 6 I lit. b GDPR.

    – The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our products or services.

    – If our company is subject to a legal obligation by which a processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.

    – It may happen that the processing of personal data becomes necessary in order to protect your vital interests or the interests of another natural person, Art. 6 I lit. d GDPR.

    – Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that your interests, fundamental rights and freedoms are not overridden. Our legitimate interest within the meaning of Article 6 I lit. f GDPR is in particular the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.

11. Obligation to provide the personal data

    We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In addition, it may be necessary for the conclusion of a contract that you provide us with personal data, which must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you. Failure to provide the personal data would mean that the contract could not be concluded.

    Before providing your personal data, you should contact one of our employees. Our employee will explain to you on a case-by-case basis whether the provision of your personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

12. Your contact person in our company

    If you have any questions about data protection and the handling of your data on our website and our company, please feel free to contact us at any time

    m3one GmbH
    represented by its managing director: Martin Voigt

    Edmund-Bertrams-Strasse 43

    40489 Düsseldorf
    GERMANY

    Phone: +49 211 / 36 87 870

    E-mail: hallo@m3one.de

    Website: www.m3one.de