Compliance with data protection laws is a matter of great concern to us.

To secure your personal data, we employ appropriate technical and organizational security measures to protect it against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

On our website, personal data that you are prompted to enter is transmitted over the Internet using SSL encryption. You can recognize an encrypted connection by the fact that "https" is prefixed to the address displayed in the Internet browser, and your Internet browser generates a corresponding notification (e.g., a padlock symbol).

1. Definitions

a) "Personal data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) "Data subject" is any identified or identifiable natural person whose personal data is processed by the controller.
c) "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) "Restriction of processing" is the marking of stored personal data with the aim of limiting their processing in the future.
e) "Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) "Pseudonymisation" is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
g) "Filing system" means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.
h) "Processor" is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) "Recipient" is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
j) "Third party" is a natural or legal person, public authority, agency or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
k) "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
l) "Cross-border processing" either
aa) processing of personal data which takes place in the context of the activities of establishments of a controller or a processor in the Union in more than one Member State where the controller or processor is established in more than one Member State, or
bb) processing of personal data which takes place in the context of the activities of a single establishment of a controller or a processor in the Union but which substantially affects or is likely to affect data subjects in more than one Member State.

2. Name and address of the responsible authority

The "responsible authority," i.e., the natural or legal person, authority, institution, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, is as follows:

MACCON GmbH & Co. KG
Aschauer Str. 21 D-81549 Munich
Tel. +49 89 651220-0
Fax +49 89 655217

3. Collection of General Data and Information; Server Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data are collected:

(1) Information about the browser type and version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system reaches our website
(7) Websites accessed by the user's system through our website

The collected information is needed to:

  • Deliver the contents of our website to your internet browser
  • Ensure the technical functionality of our website
  • Optimize the contents of our website
  • Optimize the advertising for our website
  • Detect and, if necessary, prevent manipulations and attacks on our systems
  • Provide necessary information for prosecution to law enforcement authorities within the scope defined by law.

The storage of the aforementioned information in server log files is done separately from any personal data provided by an affected person. The information is not associated with any specific individual.

Insofar as personal data is processed, the legal basis is Art. 6 (1) lit. a, lit. b, or lit. f GDPR.

4. Cookies

Our website uses cookies. Cookies are text files that are stored on the computer system being used by your internet browser. A cookie contains a unique string of characters that enables the unique identification of the internet browser when the website is accessed again. We use cookies as part of the login process on our websites. Additionally, our website uses cookies that allow for the analysis of users' behavior. The data collected in this manner from users is pseudonymized, so that assigning the data to the accessing user is not possible. The data is not stored together with other personal data of the users. The processing is based on Article 6(1) lit. f GDPR. You have the right to object at any time to processing of personal data concerning you, which is based on Art. 6(1) lit. f GDPR. As a user, you have control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to fully utilize all of the functions of the website.

Use the links below to find out how to make the settings in your Internet browser:

Internet Explorer:  https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

5. Marketing tools

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies" (see section 5). The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, your IP address will be truncated within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your internet browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link. The link is: http://tools.google.com/dlpage/gaoptout?hl=de.
We use Google Analytics with the extension "_anonymizeIp(), so that IP addresses are only processed further in abbreviated form in order to exclude any direct assignment to a specific person. Further information on terms of use and data protection can be found at www.google.com/analytics/terms/de.html resp. under https://www.google.de/intl/de/policies/. The processing is based on Article 6(1) lit. f GDPR from the legitimate interest in optimizing our website and targeted advertising. You have the right to object at any time to this processing of personal data concerning you based on Article 6(1) lit. f GDPR. You can prevent the storage of cookies by selecting the appropriate technical settings in your internet browser software (see section 5 "Cookies"). You can also prevent Google from processing the data collected by the cookie by downloading and installing the internet browser plugin available at the following link [https://tools.google.com/dlpage/gaoptout?hl=de]. To prevent the collection by Google Analytics, you can also set an opt-out cookie, which prevents the future collection of your data when visiting our website. If you click here, the opt-out cookie will be set on the device used: Disable Google Analytics [-> Link Javascript + integration].

6. Privacy Policy for the Use of the LinkedIn Share Button

Our website includes plugins of the social network LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereafter “LinkedIn”). The LinkedIn plugins can be recognized by the LinkedIn logo or the “Recommend-Button” (“Recommend”).

Please be aware that visiting our website establishes a direct connection between your internet browser and the LinkedIn server via the LinkedIn plugin. This connection informs LinkedIn that you have visited our website with your IP address. If you click the LinkedIn “Recommend-Button” while you are logged into your LinkedIn account, you can link content from our website to your LinkedIn profile. This allows LinkedIn to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or their use by LinkedIn.

This integration is intended to make the use of our website more convenient for you as a user and to increase the visibility of our web presence in social networks, which is considered a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Für weitere Informationen zur Datenerhebung, der Verarbeitung Ihrer Daten durch LinkedIn sowie Ihren diesbezüglichen Rechten und Einstellungsmöglichkeiten zum Schutz Ihrer Privatsphäre verweisen wir auf die Datenschutzrichtlinie von LinkedIn, die Sie unter https://www.linkedin.com/legal/privacy-policy einsehen können.

Please note that if you do not want LinkedIn to be able to associate your visit to our pages with your LinkedIn user account, you will need to log out of your LinkedIn account before visiting our website.

7. Necessary Data; Legal or Contractual Obligation to Provide Personal Data

The necessity for processing personal data and your obligation to provide it may arise from the law (e.g., tax laws) or from contractual regulations. Processing data necessary for the execution of a contract is required. Without this data, a contract cannot be concluded. The processing is based on Article 6(1) lit. f, lit. b, or lit. c GDPR. You have the right at any time to object to processing of personal data concerning you, which is based on Article 6(1) lit. f GDPR. Your data is only shared with our service partners involved in the execution of the contract (e.g., shipping, logistics, and payment service providers, web hosting companies, IT service providers, and shop system operators). Data transmitted as part of registration for a run may also be passed on to an event service provider, photo service, and engraving company. In any case, data is only shared to the extent necessary for the fulfillment of the respective contract.

8. Contact Form

When using the contact form, we collect your personal data to the extent provided by you. The purpose of processing this data is to facilitate contact. The message you send will be stored by us as business correspondence. By sending your message, you consent to the processing of the transmitted data. This personal data is not shared with third parties. Insofar as personal data is processed, the legal basis is Art. 6(1) lit. a, lit. b, or lit. c GDPR.

9. Duration of Storage, Restriction, and Deletion of Personal Data

We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as provided by the legal basis beyond that period. Otherwise, personal data is routinely blocked or deleted in accordance with legal requirements. This applies, for example, to data collected during the conclusion of a contract after the complete execution of the contract and the expiration of warranty periods as well as commercial and tax law retention periods.

10. Rights of the Data Subject

a) Every data subject has the right to request confirmation from the controller as to whether personal data concerning them is being processed; if so, they have a right to access this personal data and the information specified in Article 15(1) GDPR.
b) Every data subject affected by the processing of personal data has the right, according to Article 16 GDPR, to demand the immediate correction of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of providing a supplementary statement.
c) Every data subject affected by the processing of personal data has the right, under the conditions of Article 17(1) GDPR, to demand that the controller immediately deletes personal data concerning them, and the controller is obliged to delete personal data immediately.
d) Every data subject affected by the processing of personal data has the right, under the conditions of Article 18(1) GDPR, to request the restriction of processing from the controller.
e) Every data subject affected by the processing of personal data has the right, under the conditions of Article 20(1) GDPR, to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and they have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided.
f) Every data subject affected by the processing of personal data has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them which is based on Article 6(1) lit. e or f; this also applies to profiling based on these provisions. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
g) Every data subject affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
h) According to Article 77 GDPR, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes this regulation, notwithstanding any other administrative or judicial remedy.

11. Legal Bases for Processing

Unless otherwise specified in the preceding sections, the following provisions serve as the legal basis for processing:

For processing operations for which we have obtained consent for a specific processing purpose, the legal basis is Article 6(1) lit. a GDPR. If the processing of personal data is necessary for the performance of a contract with the data subject, the legal basis is Article 6(1) lit. b GDPR. This also applies to processing operations necessary for carrying out pre-contractual measures (inquiries, etc.). If the processing of personal data is based on a legal obligation, such as for compliance with commercial or tax law requirements, the legal basis is Article 6(1) lit. c GDPR. Article 6(1) lit. d GDPR serves as the legal basis for processing personal data when it is necessary to protect the vital interests of the data subject or another natural person. If the processing is necessary to safeguard our legitimate interests or those of a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override those interests, the legal basis is Article 6(1) lit. f GDPR.

 

This Privacy Policy was last updated on March 18, 2024. We reserve the right to amend this Privacy Policy to conform to changes in legal situations, or in the case of changes to the service and data processing. The most current version can be found on our website. In case of doubt, the German version of the Privacy Policy shall prevail.