Protecting your privacy is important to us. We therefore process your personal data (in short “data”) exclusively on the basis of the statutory provisions. With this data protection declaration, we would like to inform you comprehensively about the processing of your data in our company and the data protection claims and rights to which you are entitled in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
MMM Münchener Medizin Mechanik GmbH
Semmelweisstraße 6
82152 Planegg/Munich
Germany
Tel.:+49 89 899 18 -0
Email: info@mmmgroup.com
Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany
Tel.: +49 941-2986930
Email: anfragen@projekt29.de
We process data that we receive from you as part of the contract initiation and processing, based on consents or as part of your application with us, or in the context of your staff.
Your master/contact data; for customers this includes, for example, first and last name, address, contact details (email address, phone number, fax number), bank details.
For applicants and employees; this includes, for example, first and last name, address, contact details (email address, phone number, fax number), date of birth, data from CV and job references, bank details, religious affiliation, photographs.
For business partners; this includes, for example, the name of your legal representative, company, commercial register number, VAT ID number, company number, address, contact details for contacts (email address, phone number, fax number), bank details.
For trade fair visitors; this includes, for example, first and last name, address, contact details (email address, phone number, fax number).
For visitors to our company; this includes, for example, given name and surname and signature.
For journalists; this includes, for example, first and last name, email address.
In addition, we also process the following personal data:
We process your personal data in compliance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act 2018 in the currently applicable version:
a) To comply with (pre)contractual obligations (Art. 6(1)(b) GDPR):
For order processing, your data is processed online or at one of our branches. For the order processing of your staff, it occurs at our company. The data is processed in particular for the initiation of business and for the execution of contracts with you.
b) To comply with legal obligations (Art. 6(1)(c) GDPR):
A processing of your data is necessary for the purpose of complying with various legal obligations, for example, from the Commercial Code or the tax code.
c) To safeguard legitimate interests (Art. 6(1)(f) GDPR):
Based on a weighing of interests, data processing can occur beyond the actual contract fulfillment in order to safeguard legitimate interests of ourselves or of third parties. Data processing to safeguard legitimate interests occurs, for example, in the following cases:
d) In the context of your consent (Art. 6(1)(a) GDPR):
If you have given us your consent to process your data, for example, to process your application, for customer surveys.
You can object to the use of your personal data for the purposes of advertising at any time, wholly or for individual measures, without this resulting in any costs other than the base-rate transmission costs.
Under the legal requirements of Sect. 7(3) UWG [Law Against Unfair Competition], we are entitled to use the email address you specified to us upon contract conclusion for the direct advertising of our own similar goods or services (product recommendations).
If you would not like to receive any such recommendations from us by email, you can object to the use of your email address for this purpose at any time, without this resulting in any costs other than the base-rate transmission costs. A message in text form is sufficient for this purpose.
We still remain responsible for protecting your data when we employ a service provider in the sense of order processing. All contract processors are contractually required to treat your data with confidentiality and only to process it in the context of providing services. The contract processors we commission receive your data if they need this data to fulfill their respective service. These are, for example, IT service providers who we need for the operation and security of our IT system.
Your data are processed in our customer database. The customer database supports the improvement of the data quality of existing customer data (eliminating duplicates, address correction).
These data are provided to group companies if necessary for contract processing. Customer data is saved separately based on the company, whereby our parent group acts as the service provider for the individual participating companies.
Authorities and courts as well as external auditors may receive your data if there is a legal requirement as well as in the context of prosecution.
In addition, insurance companies, banks, credit inquiry agencies and service providers may receive your data for the purposes of contract initiation and fulfillment.
We process your data until the completion of the business relationship or until the applicable statutory terms for retention have expired (for example, from the Commercial Code, the tax code, Home Act or Working Time Act); in addition, until the termination of any legal disputes in which the data is required as evidence.
In general, we do not transmit any data to a third country. Transmission occurs in individual cases only based on a decision of appropriateness by the European Commission, standard contract clauses, suitable guarantees or your expressed approval.
You have the right to information, correction, deletion or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data portability and to a complaint in accordance with the requirements of data protection law.
Right to information:
You can ask us for information as to whether and to what extent we process your data.
Right to correction:
If we process your data and it is incomplete or incorrect, you may at any time ask for their correction or completion.
Right to deletion:
You may request deletion of your data from us if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons opposing an immediate deletion, i.e., in the case of legally regulated storage requirements.
Regardless of your right to cancellation, we will immediately and completely erase your data, unless there is a legal obligation to deal with or comply with the law.
Right to restriction of processing:
You may require us to restrict the processing of your data if:
– you deny the accuracy of the data for a period that allows us to verify the accuracy of the data.
– the processing of the data is unlawful, but you reject a deletion and instead require a restriction of data usage,
– we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
– you have objected to the processing of the data.
Right to data portability:
You may require us to provide you with the information you have provided to us in a structured, common and machine-readable format and that you may transfer that information to another person without hindrance, provided that:
– we process this data based on a consent given or revocable by you or for the performance of a contract between us, and
– this processing is done using automated procedures.
If technically feasible, you may require us to transfer your data directly to another person in charge.
Right to object:
If we process your data for legitimate interest, you can object to this data processing at any time; this would also apply to a profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. You can object to the processing of your data for the purpose of direct mail at any time without stating reasons.
Right of appeal:
If you believe that we violate German or European data protection laws when processing your data, we ask you to contact us to have your questions clarified. Of course, you also have the right to contact the supervisory authority responsible for you, the respective State Office for Data Protection Supervision.
If you want to assert one of the mentioned rights against us, please contact our data protection officer. If in doubt, we may request additional information to confirm your identity.
It is necessary to process your data to conclude or fulfill the contract you entered into with us. If you do not want to provide us with this data, we usually have to reject the conclusion of the contract or will not be able to continue an existing contract and as a result will have to terminate it. However, you are not obliged to give your consent to data processing with regards to data that is not relevant for the performance of the contract or that is not required by law.
Current as at: April 2023
MMM Group
Semmelweisstraße 6
82152 Planegg/Munich
Germany
Costumer Service
