Privacy Policy

Please note: This Privacy Policy was translated from the German for your convenience. The German version is binding.

THIS DATA PROTECTION DECLARATION INFORMS YOU ABOUT THE COLLECTION OF PERSONAL DATA WHEN USING THIS WEBSITE.

  1. Name and contact details of the responsible person 
  2. Which data is processed by your visit to our website and for what purpose? 
    1. Access data when visiting our website 
    2. Chat
    3. Contact form
    4. Direct Marketing/Newsletter
    5. Company profiles in social networks
    6. Cookies and Tracking Technologies
      1. Cookie management
      2. Google Analytics
      3. Google Tag Manager
      4. Google Ads
      5. Hotjar
  3. Viewing content from external platforms
  4. Content displayed on external platforms
  5. Your rights as a person concerned
  6. Data security
  7. Amendment of the privacy policy

PRIVACY POLICY FOR OUR WEBSITE

Thank you for visiting the website of M3i GmbH. The protection of your data is particularly important to us, which is why we always comply with the applicable legal regulations for the protection of personal data and data security. Our employees have also been extensively trained and are committed to confidentiality and compliance with all data protection regulations. The following data protection declaration explains exactly how your data is collected and for what purpose it is processed by us.

I. NAME AND CONTACT DETAILS OF THE RESPONSIBLE PERSON

The following company is exclusively responsible for data processing within the meaning of Art. 4 DS-GVO: 

M3i GmbH
Schillerstr. 53
80336 Munich
Germany

If you have any questions regarding data protection or would like information about the collection, processing or use of your personal data, or if you wish to correct or delete your personal data, please contact the above-mentioned contact address or the following email address: info@m3i-muenchen.de 

You can contact our data protection officer, Dr. Jens Elsner via email at: jel@m3i-muenchen.de.

II. WHICH DATA IS PROCESSED BY YOUR VISIT TO OUR WEBSITE AND FOR WHAT PURPOSE?

Personal data within the meaning of GDPR is all information with which a natural person can be or becomes identifiable. This includes in particular your name and e-mail address which you voluntarily provide to us on our website (e.g. when contacting us via our form or requesting a demo version). 

Personal data also includes information about the use of our website. We collect information about how you visit our website. This includes, for example, information about the scope of data and from where you visit our website, as well as which pages you call up. We process this information through so-called LogFiles and cookies. We use your personal data for the following purposes:

A. ACCESS DATA WHEN VISITING OUR WEBSITE

We process so-called access data (in particular the IP address) on our website for statistical evaluations for the purpose of operating, security and technical optimisation of our website. This enables us to present our website more effectively and in a more interesting way. 

We collect and store this access data when you access our website in a log file (so-called log file). This includes the name of the web page called up, the file called up, the date and time of the call, the amount of data transferred and notification of the successful call up, the browser type together with version, the operating system, the so-called referrer URL (the previously visited page) as well as the requesting provider and your IP address. In principle, you can also visit and call up our website without providing personal data – with the exception of IP addresses, which we make anonymous. From the data in this log file, including the IP address, no personal reference can be established for us, unless you yourself have provided more detailed information about your person in one of the embedded forms. Log data is deleted regularly, but after two months at the latest.

The legal basis for this data processing is our legitimate interest in the sense of Art. 6 para. 1 letter f) GDPR.

B. CHAT

If you send us enquiries via the M3i GmbH chat function, your details from the form, including the contact details provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. For the chat function we use the chat service “Messages” of the provider HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. We have a data processing agreement with HubSpot Inc. incorporating the standard contractual clauses (SCC) of the EU Commission. Nevertheless, it cannot be ruled out that US authorities and services may be able to gain access to personal data. When you use the chat function, the following data is transmitted to HubSpot:

  • the content of chat messages sent and received;
  • the website from which the chat function is accessed;
  • your IP address;
  • other personal information you provide in the chat.

The legal basis for the use of Hubspot is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR. 

C. CONTACT FORM

If you contact us – e.g. via contact form or e-mail – your personal data will be stored and processed by us. If you contact us by e-mail, we will process your name, your contact data including your e-mail address, as well as any other information you have provided. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration and are not passed on to third parties without your consent.

The legal basis for this data processing is Art. 6 Para. 1 Sentence 1 lit. b) GDPR, insofar as it is carried out to fulfil a contract or pre-contractual measures, as well as Art. 6 Para. 1 Sentence 1 lit. f) GDPR, as the processing of these enquiries is in the interests of both parties. Your data will only be stored for as long as necessary for the above-mentioned purpose and will be deleted after the processing purpose has ceased (and taking into account the statutory retention periods). 

If you use our contact form, your details from the form, including the contact data provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. For the contact form we use the contact form service of the provider HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. We have a data processing agreement with HubSpot Inc. incorporating the standard contractual clauses (SCC) of the EU Commission. Nevertheless, it cannot be ruled out that US authorities and services may be able to gain access to personal data. When you use the contact form function, the following data is transmitted to HubSpot:

  • the content of messages sent and received;
  • your IP address;
  • other personal data you provide in the message.
    The legal basis for the use of Hubspot is your consent under Art. 6 para. 1 sentence 1 lit. a) DS-GVO. 

D. DIRECT MARKETING / NEWSLETTER

If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for these purposes at any time. This includes profiling, insofar as it relates to direct marketing. You can unsubscribe from our newsletters at any time in your e-mails by clicking on the link (“Unsubscribe”) at the end of each newsletter. We use the provider AWeber. The AWeber privacy policy can be found here: https://www.aweber.com/privacy.htm .

We use Gmail as our e-mail provider. We use it to receive and send all e-mails in the course of communicating with customers and conducting business. All data that you provide to us, as well as your email and IP address and other data that is absolutely necessary for sending and receiving mail, reaches us via Gmail and is stored on Google’s servers in the European Economic Area. The address of Google is:

Google Ireland Limited 
Gordon House
Barrow Street 
Dublin 4.

The privacy policy for Google products such as Gmail can be found here: https://policies.google.com/technologies/retention?hl=en

E. COMPANY PROFILES IN SOCIAL NETWORKS

We operate a company profile on the LinkedIn portal, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We use the LinkedIn profile to introduce our company and get in touch with potential employees.

You have the opportunity to contact us via our LinkedIn profile. The available profile data (e.g. job title, company name, industry, education, work experience, skills, contact information, photo) and the content of the message will be processed by us to process your request. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR, provided that the communication serves the purpose of fulfilling the contract or implementing pre-contractual measures. In other cases the data processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. We have a legitimate interest in contacting our users via our LinkedIn profile and answering enquiries. 

You can also share our contributions, add a “Like” or comment on them. The information about the interaction as well as the profile data will be processed by us. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have a legitimate interest in understanding the response to our contributions and communicating with users.

In addition, we contact LinkedIn users directly if the information in their profile has aroused our interest. In doing so, we process the available profile data. The legal basis is Art. 6 para.1 p. 1 lit. f) GDPR. We have a legitimate interest in contacting other users via LinkedIn. When visiting our LinkedIn profile, personal data may be processed by LinkedIn. We have no influence on this data processing. The purpose and scope of LinkedIn’s data processing, as well as the relevant rights and settings to protect the privacy of users, can be found in the LinkedIn privacy policy (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy).

F. COOKIES AND TRACKING TECHNOLOGIES

Furthermore, when you visit our website, so-called “cookies” are stored in the cache of your browser on various pages in order to make visiting our website attractive and to enable the use of certain functions. The so-called “cookies” are small text files which your browser can store on your computer. We use both “session cookies” and so-called persistent cookies. We also use various tracking technologies to collect and store information when you visit our website. Below you will find information on how we use cookies and such tracking tools, and how they can be deactivated.Cookie Management

You can set your browser according to your wishes so that you are informed about the setting of cookies, decide from case to case whether to accept them, or accept or reject cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your PC has already been connected to a website before (permanent cookies) or to save last viewed offers (session cookies). You also have the option of setting the browser so that it does not save cookies in the first place or so that the cookies are deleted (automatically or manually) at the end of the Internet session. We would like to point out, however, that some areas of the website may then not function or no longer function properly. In addition, we would like to point out the websites, available at http://www.youronlinechoices.com/de/ or http://meine-cookies.org/cookies_verwalten/praeferenzmanager-beta.html, where further information about the technologies we use can be obtained and where tracking services can be individually issued and deactivated.

1. Managing cookies

You can set your browser according to your wishes so that you are informed about the setting of cookies, decide from case to case whether to accept them, or accept or reject cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your PC has already been connected to a website before (permanent cookies) or to save last viewed offers (session cookies). You also have the option of setting the browser so that it does not save cookies in the first place or so that the cookies are deleted (automatically or manually) at the end of the Internet session. For details, please refer to the instructions for your browser or use the following (external) links: Mozilla Firefox; Internet Explorer; Google Chrome, Opera, Safari or Adobe (Flash Cookies). We would like to point out, however, that some areas of the website may then not function or no longer function properly. In addition, we would like to point out the websites, available at http://www.youronlinechoices.com/de/ or http://meine-cookies.org/cookies_verwalten/praeferenzmanager-beta.html, where further information about the technologies we use can be obtained and where tracking services can be individually issued and deactivated.

2. Google Analytics

We use on our website Google Analytics, a web analysis service of Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4. Ireland), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View CA 94043, USA), hereinafter “Google”. By using Google Analytics, so-called “cookies” are set, which enable us to analyse the use of our website and our offers in order to provide you with an optimised version of our content. Because the protection of your data is particularly important to us, we have used Google Analytics with the help of the configuration parameter “anonymizelp” – so your IP address is only recorded anonymously. This means that at no time is it possible for us to draw any conclusions about your person.

Furthermore, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. 

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) GDPR.

3. Google Tag Manager

The “Google Tag Manager” service is used on this website. The Tag Manager is a tool for managing so-called tags, which are used for tracking in online marketing. The Tag Manager itself does not process any personal data, as it is purely used to manage other services – such as Google Analytics. The legal basis for this data processing is your consent within the meaning of Article 6 (1) clause 1 lit. a) GDPR.

You can find more information about the Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html

4. Google Ads

The “Google Ads” service is used on this website. The operator of the service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The service has the purpose of so-called “conversion tracking”, i.e. you can see what happened after you clicked on one of our ads. Cookies are set for this purpose, which have a limited validity.

With the help of Google Ads, the following data is collected and processed:

  • Cookie ID;
  • Visited pages;
  • IP address;
  • Duration of the website visit;
  • Website usage data;
  • Content in which the user is interested;
  • Clicked advertisements;
  • Web requests;
  • Cookie information;
  • Referrer URL;
  • Browser language;
  • Browser type

The legal basis for the processing is your consent pursuant to Art. 6 (1) lit.a GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

Personal data will be kept for as long as it is necessary to fulfill the purpose of processing. Data will be deleted as soon as they are no longer required to achieve the purpose.

Data may be transferred to the following recipients in addition to Google Ireland Limited as part of the processing:

  • Google LLC.
  • Alphabet Inc.

In the context of processing by Google Ads, data may be transmitted to the United States of America. The security of the transmission is secured by so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to the level of the GDPR.

5. Hotjar

We use Hotjar software (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe) to enhance the user experience on our website. Hotjar enables us to measure and evaluate user behavior (mouse movements, clicks, scroll height, etc.) on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. The following information is collected by the Tracking Code:

Device-dependent data

  • IP address of your device (collected and stored in anonymous form)
  • Screen size of your device
  • Device type and browser information
  • Your location (country)

Log Data

  • Referring domain
  • Visited pages
  • Geographic location (only country)
  • Preferred website language
  • Time and date of website access

Hotjar will use this information to evaluate your use of our website. Hotjar also uses the services of third party companies, such as Google Analytics and Optimizely, to provide services. These third parties may store information that your browser sends during your visit to the website (for example cookies or IP requests). For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy policies. If you continue to use this website, you consent to the processing of data by Hotjar and its third party providers as described above in their privacy policies.

Hotjar uses cookies with different durations.

You can prevent Hotjar from collecting the data by clicking on this link and following the instructions: https://www.hotjar.com/policies/do-not-track/.

III. VIEWING CONTENT FROM EXTERNAL PLATFORMS

This type of service allows users to view and interact with content hosted on external platforms directly through this application.

This type of service may still collect web traffic data for the pages on which the service is provided. The legal basis for the use of these services is Art. 6 para. 1 clause 1 lit. f) GDPR (our legitimate interest in the technically optimized, graphically appealing provision of web content).

Google Fonts (Google Ireland Ltd)

Google Fonts is a font visualization service provided by Google Ireland Limited, which allows this application to embed corresponding content on its pages.

Personal data processed: Usage data; various types of data as described in the privacy policy of the service.

Processing Location: Ireland – Privacy Policy.

Font Awesome

Font Awesome is a font visualization service provided by Fonticons, Inc. that allows this application to embed corresponding content on its pages.

Personal data processed: Usage Data.

Processing location: United States – Privacy Policy.

YouTube-Video-Widget (Google Ireland Limited)

YouTube is a video content visualization service provided by Google Ireland Limited, which allows this application to embed corresponding content on its pages.

Personal data processed: Usage data; trackers.

Processing location: Ireland – Privacy Policy.

IV. YOUR RIGHTS AS A CONCERNED PERSON

You, as the person concerned by the processing of personal data, are entitled to the rights listed below. These rights result from the provisions of the basic data protection regulation and are reproduced here, sometimes in simplified form. 

a. Right of access to information

In accordance with Art. 15 DS-GVO, you have the right to request confirmation from us as to whether personal data relating to you is being processed. If this is the case, you have the right to be informed about this personal data and the information mentioned in Art. 15 Paragraph 1 Hs. 2 DS-GVO. This includes, in particular, the purpose of the processing, the categories of data processed, the recipients to whom data have been or will be disclosed, as far as possible the planned duration of storage or the criteria for the duration of storage.

b. Right to rectification

In accordance with Art. 16 GDPR, you have the right to demand that we immediately correct any incorrect personal data relating to you. Taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration.

c. Right to deletion

In accordance with Art. 17 GDPR, you have the right to demand from us that personal data relating to you be deleted immediately. We are obliged to delete personal data immediately if one of the reasons in Art. 17 Para. 1 GDPR applies. These include, for example, that the data are no longer necessary for the purposes for which they were collected or otherwise processed.

d. Right to limit processing

In accordance with GDPR Art. 18, you have the right to demand that we restrict processing if one of the conditions specified in GDPR Art. 18 applies. This includes, for example, that you dispute the accuracy of the personal data. In this case we may only process the data to a limited extent for as long as it takes to check the accuracy of the personal data.

e. Right to data transferability

In accordance with GDPR Art. 20, you have the right to receive the personal data relating to you that you have provided us with in a structured, common and machine-readable format. You have the right to transfer this data to another responsible party, i.e. another body which processes data, without hindrance, provided that the original processing was based on consent or was necessary for the performance of a contract.

f. Right of objection

Under Article 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you if such data is processed on the basis of Article 6 paragraph 1 letter e) or f) GDPR and there are reasons arising from your personal situation. An objection to the processing of data for the purpose of direct marketing may be lodged at any time. Personal data will then no longer be processed for this purpose. The right of objection can be exercised by means of an informal declaration. A written declaration or, alternatively, an e-mail to the above-mentioned contact address is sufficient.

g. Right to withdraw consent

In accordance with GDPR Art. 7 Para. 3, you have the right to revoke your consent to processing at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected. The right of revocation can be exercised by means of an informal declaration. A written declaration or, alternatively, an e-mail to the above-mentioned contact address is sufficient.

h. Automated decision in individual cases including profiling

According to GDPR Art. 22, you have the right not to be subjected to a decision based exclusively on automated processing – including profiling – which has legal effect vis-à-vis you or significantly affects you in a similar way. GDPR Art. 22(1) provides for exceptions to this, although GDPR Art. 22(4) again provides for partial exceptions.

i. Right of appeal to a supervisory authority

Under Article 77 of GDPR, and without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is contrary to this Regulation.

In this case, the competent supervisory authority is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18
Postfach 1349 
91522 Ansbach 

Telefon: +49 (0) 981 180093-0

Telefax: +49 (0) 981 180093-800

IV. Data security

In order to offer you a particularly high level of data security, M3i GmbH has implemented technical and organisational measures to protect your personal data during data transmission and when third parties gain knowledge of it. These measures are checked and updated at regular intervals. However, we would like to point out that absolute data security cannot be achieved on the Internet, even with extensive technical precautions. In order to increase the security of the transmission of your data, we use state-of-the-art technology and appropriate encryption procedures (e.g. SSL) via HTTPS.

V. CHANGES IN PRIVACY POLICY

M3i GmbH reserves the right to make changes to the privacy policy at any time with effect for the future. When such an update is made, the date of the last modification, as indicated below, will also be updated. Any changes made to our privacy policy will always be available here, so that M3i GmbH’s users will always be aware of the information we collect and our possible use and disclosure of that information. We therefore recommend that you regularly check the current privacy policy.

Version 2.0 | Updated: May 6, 2022