Privacy Policy
As the operator of the websites ‘www.markenmehrwert.com’ and 'mmw.ag', marken mehrwert - brand added value AG, Schildkrötstraße 15, 68199 Mannheim, Germany, e-mail: kontakt@mmw.ag (see also Imprint) is the controller of the personal data of users of the website in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR). You can reach our data protection officer by e-mail at ‘datenschutz@mmw.ag’ or at our postal address with the addition ‘Data Protection Officer’.
We protect your privacy and your private data. We collect, process and use your personal data in accordance with the content of this privacy policy and the applicable European and German data protection regulations.
This privacy policy regulates the extent to which we collect, process and use personal data about you. We therefore ask you to read the following information carefully.
This data protection declaration applies exclusively to our own website. The Internet pages on this website may contain links to third-party websites. Our privacy policy does not extend to these websites. When you leave our website, we recommend that you carefully read the privacy policy of each website that collects personal data.
By agreeing to the following privacy policy, you consent to the collection, processing and use of your personal data in accordance with the applicable data protection regulations and the following provisions.
1. Collection of Data
1.1 Informational Use of the Website
Each time you access a page of our website and each time a file is retrieved, access data about this process is stored in a log file on the server.
This includes the following information:
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software
- IP address
Your computer’s IP address is only stored for the duration of your use of the website and is promptly deleted or anonymized by truncation afterward.
We collect the aforementioned data as it is technically necessary for us to display our website to you and to ensure the stability and security of the website. The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR.
1.2 Provision of Personal Data
If you use our website not just for informational purposes, you will generally need to provide additional personal data, such as name, date of birth, address, postal address, or phone number, which we use to provide the respective services. We only collect the relevant personal data if this is legally permissible (e.g., for the performance of a contract, Art. 6 (1) sentence 1 lit. b) GDPR, or for a legitimate interest, Art. 6 (1) sentence 1 lit. f) GDPR) or if you consent to the data collection, Art. 6 (1) sentence 1 lit. a) GDPR.
You can withdraw your consent to the processing of your personal data at any time. Such a withdrawal will immediately affect the legality of the processing of your personal data as soon as you have communicated it to us.
If the processing of your personal data is based on a balancing of interests, you may object to the processing. When exercising your right to object, we ask you to provide reasons why we should not process your personal data. If your objection is justified, we will review the situation and either cease or adjust the data processing or inform you of compelling legitimate reasons for continuing the processing.
We delete your personal data as soon as it is no longer necessary for the purposes for which it was collected. It may occur that personal data is retained for the duration during which claims can be asserted against us (e.g., statutory limitation periods of three or thirty years). Additionally, due to proof and retention obligations under, among other things, the Commercial Code, the Fiscal Code, or the Money Laundering Act, we are legally obligated to retain certain data. The retention periods are up to ten years.
1.2.1 Data for the Newsletter Service
With the newsletter service, you are informed about our own offers via email or post. Additionally, you may receive information about offers from certain manufacturers via email or post. Your consent is required for this.
For sending newsletters, we use the so-called double opt-in procedure, meaning that you will only receive a newsletter after you have explicitly confirmed that you wish to activate the newsletter service. A confirmation email will then be sent to you, and you will be asked to confirm that you want to receive newsletters by clicking on a link contained in that email.
If you do not confirm your subscription within 24 hours, we will immediately block your information and delete it automatically after one month. We also only store your IP address and the times of registration and confirmation to prove your registration and to be able to investigate any misuse of your data.
To send newsletters, you only need to provide your email address. Providing additional data is voluntary.
We only store your email address for the purpose of sending our newsletter. The legal basis for this is Art. 6 (1) sentence 1 lit. a) GDPR.
If you later no longer wish to receive newsletters, you can withdraw your consent at any time and unsubscribe from the newsletter. A notification in text form to the contact details provided (e.g., email, letter) is sufficient. Of course, each email newsletter also contains an unsubscribe link.
1.2.2 User Account
When setting up an account to use our services, such as participating in promotions from manufacturers affiliated with us, your data will be stored in the user database either permanently or for the duration of the promotion, depending on the service. If you wish to use the services, you must provide personal data for contract processing. The mandatory details required to use the services (e.g., name, email address, date of birth, phone number) are marked accordingly and processed for this purpose. The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR.
You are obligated to treat your personal access data confidentially and not to make it accessible to unauthorized third parties. We cannot be held liable for misuse of passwords unless we are responsible for the misuse. You should inform us immediately if you have reason to believe that a third party has gained knowledge of your password or that the password is being used without authorization or is likely to be. You are responsible for ensuring that your information provided to us is accurate and complete and that you inform us of any changes to the information you provided. You can view and update the information you have provided to us as well as your account settings in the "My User Account" section of the website. After ending communication with MMW-Services, you should log out and close the browser window, especially if you share the computer with others.
To prevent violations of participation conditions in promotions or to detect fraud, we use various algorithms (mathematical-statistical procedures). The results of the evaluations are reviewed by us again and then assessed accordingly. Personal data will not be passed on to third parties in this context.
If you participate in a marketing survey of the respective manufacturers during registration, this data will not be stored in a personally identifiable manner.
Data provided during registration can be withdrawn at any time. The provided data and your entire user account can be deleted at any time in the customer area.
Due to commercial and tax law requirements, we are obligated to store your address, payment, and order data for at least 10 years. However, after 3 years from an order, we will restrict the use of the relevant data so that it can only be used to meet legal obligations.
1.2.3 Data Transfer by Business Partners
If we receive personal data from third parties (e.g., business partners) for the processing of promotions, this data will also be used only in compliance with data protection laws and this privacy policy.
1.2.4 Upload
Consumers and merchants have the option to upload documents (e.g., receipts, invoices, etc.) to us. Personal data contained therein will also be used only in compliance with data protection laws and this privacy policy.
1.2.5 Chat
In our chat, you have the opportunity to contact us directly if you have questions about our offer. Your IP address will be anonymized according to legal requirements. The chat history is stored and evaluated anonymously. To participate, you must provide your email address and additionally either your name or a pseudonym.
We reserve the right to end chats where insults are expressed or which are offensive, racist, or otherwise legally or illicitly objectionable or violate our terms and conditions. In cases of particularly serious violations, we may block users.
Legal bases are Art. 6 (1) sentence 1 lit. b) and lit. f) GDPR.
1.2.6 Contact Form or Contact by Email or Fax
If you contact us via the contact form on our website or by email or fax, the information you provide will be stored and processed for the purpose of handling the inquiry and in case follow-up questions arise. We will delete the relevant data once storage is no longer necessary or restrict processing if legal retention periods exist. The legal basis is Art. 6 (1) sentence 1 lit. a), lit. b), and lit. f) GDPR.
2. Transfer of Data
We do not pass on your personal data to third parties unless you have consented to the data transfer, it is necessary for the performance of the contract, or we are legally entitled or obligated to transfer data due to statutory provisions and/or governmental or judicial orders.
We sometimes use external service providers for processing your personal data. These have been carefully selected and commissioned by us. They are bound by our instructions and are regularly monitored.
The data transferred to our service providers may only be used by them to fulfill their tasks.
No personal data is transferred to third parties outside the European Economic Area (EEA).
2.1 Transfer for Promotion Processing
The data we collect is passed on to the transport companies responsible for delivery as part of the promotion processing, as far as necessary for the delivery of the goods. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.
2.2 Transfer to Promotion Organizers
For the fulfillment of the contractual purpose, it may be necessary to transfer personal data of customers or merchants to the organizers of the promotions. Otherwise, data related to contract or promotion processing is forwarded in anonymized reports to the promotion organizers and used by them primarily for statistical purposes. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.
2.3 Transfer for Payment Processing
We pass on your payment data to the credit card institution or PayPal or the respective payment service provider for processing payments. If you have registered as a customer with your customer account, you can also save a specific type of payment for future purchases. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR.
2.4 Transfer for Sending Newsletters
By consenting to the sending of newsletters (Section 1.2.1), you also agree that your email address or postal address may be shared with certain manufacturers whose newsletters you will then receive. A corresponding notice is also included in the confirmation email. The legal basis is Article 6(1) Sentence 1 lit. a) GDPR.
3. Cookies
In addition to the aforementioned usage data, cookies are stored on your device when you use our website. These are small text files placed on your device that provide us with certain information. Cookies cannot execute programs or transmit viruses to your computer. We use cookies to make our website more attractive to visit and to enable certain functions.
We use both transient and persistent cookies on our website. Transient cookies are automatically deleted when you close your browser. These include session cookies, which allow us to recognize your computer when you return to our website. Session cookies are deleted once you close your browser or log out.
Persistent cookies are automatically deleted after a specified period. You can delete these cookies at any time through your browser's security settings.
In general, you can configure your browser settings according to your preferences and, for example, refuse all cookies. However, if you do not accept cookies, the functionality of our website may be limited.
We also use Flash cookies, which are not captured by your browser but by your Flash plug-in. Additionally, we use HTML5 storage objects that are stored on your device. Data is stored independently of your browser and does not have an automatic expiration date. If you do not wish to process Flash cookies, you must install an appropriate add-on, such as "Better Privacy" (Mozilla Firefox) or "Adobe-Flash-Killer-Cookie" (Google Chrome). If you wish to prevent the use of HTML5 storage objects, you must use private browsing mode in your browser. Additionally, we recommend regularly deleting your cookies and browser history.
4. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. In the event that IP anonymization is activated on this website, Google will, however, shorten your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and then shortened. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activities, and provide other services related to website usage and internet usage to the website operator.
The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.
You can prevent the storage of cookies by adjusting the settings of your browser software; however, we point out that in this case you might not be able to use all features of this website to their full extent. You can additionally prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of these data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Analytics with the "_anonymizeIp()" extension. This ensures that IP addresses are shortened and processed in a way that excludes personal identification. Thus, any personal reference to the data collected about you is immediately excluded, and the personal data is immediately deleted.
We use Google Analytics to analyze and continuously improve the use of our website. By evaluating the collected data, we can improve our offerings and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6(1) Sentence 1 lit. f GDPR.
Information from the third party: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/en.html, Privacy Overview: http://www.google.com/intl/en/analytics/learn/privacy.html, and Privacy Policy: http://www.google.com/intl/en/policies/privacy.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data," "Personal Data."
5. Matomo
This website uses the web analysis service Matomo to analyze and regularly improve the use of our website. By evaluating the collected data, we can improve our offerings and make them more interesting for you as a user. The legal basis for the use of Matomo is Article 6(1) Sentence 1 lit. f GDPR.
For this analysis, cookies (see Section 3) are stored on your computer. The information collected in this way is stored exclusively on the controller's server in Germany. You can adjust the settings to prevent the storage of cookies. If you prevent the storage of cookies, please note that you may not be able to use this website to its full extent. Prevention of the use of cookies is possible by adjusting the settings in your browser. You can opt-out of Matomo by removing the following checkbox and activating the opt-out plug-in: [Matomo iFrame].
This website uses Matomo with the "AnonymizeIP" extension. This ensures that IP addresses are shortened and processed in a way that excludes personal identification. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
Matomo is an open-source project. Information from the third party regarding privacy can be found at http://piwik.org/privacy/policy.
6. Data Security
We implement all appropriate technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access by third parties. Our systems are protected against unauthorized access. In particular, your personal data is encrypted during transmission. We use the SSL (Secure Socket Layer) encoding system.
We explicitly point out that absolute data security on the Internet cannot be guaranteed despite all technical precautions. We are not liable for actions by third parties.
7. Changes to the Privacy Policy
We reserve the right to change this privacy policy at any time with future effect. An updated version is available on the website. Please check the website regularly and inform yourself about the applicable privacy policy.
8. Rights
You have rights regarding your personal data, including the right to access, correction or deletion, restriction of processing, objection to processing, and data portability.
For corresponding requests or communications from users, please contact us at the provided address.
Please also note that the deletion of user data is only possible if no legal provisions are opposed.
Information is generally provided electronically (by email). If you choose to receive information via email, the provided email address (both sender and recipient) will be used solely for the purpose of providing the information and documentation.
You also have the right to file a complaint with a data protection authority regarding the processing of your personal data by us.
If we are legally obligated to disclose data to local, state, national, or international authorities, we will comply with this obligation.
Furthermore, we may disclose information to third parties if applicable laws and regulations require it.
We may also disclose information to investigate, prevent, or address illegal activities or suspected fraud, or to enforce or apply our contracts and license rights.
9. Contact
If you have any questions, comments, or inquiries regarding the collection, processing, and use of your personal data by us, please contact us at the provided contact details.
marken mehrwert – brand added value AG Data Protection Officer Schildkrötstraße 15 68199 Mannheim
Email: datenschutz@mmw.ag Fax: 0621 37701-807
marken mehrwert AG, as of 05/2018