Privacy Policy

Table of Contents

Controller

Markus Pech
Riederwaldsiedlung 58
86529 Schrobenhausen
Germany

Authorized Representative: Markus Pech

Email Address: markus.pech@mp.ag

Imprint: https://mp.ag/impressum.html

Overview of Processing

The following overview summarizes the types of data processed, the purposes of their processing, and the categories of affected individuals.

Types of Processed Data

  • Master data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.

Categories of Affected Individuals

  • Service recipients and clients.
  • Interested parties.
  • Communication partners.
  • Business and contractual partners.

Purposes of Processing

  • Provision of contractual services and fulfillment of contractual obligations.
  • Communication.
  • Office and organizational procedures.
  • Organizational and administrative processes.
  • Feedback.
  • Providing our online offering and user-friendliness.
  • Business processes and economic procedures.

Relevant Legal Bases

Relevant Legal Bases under the GDPR: The following is an overview of the legal bases of the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations in your or our country of residence or business location may apply. If specific legal bases are applicable in individual cases, we will inform you in this privacy policy.

  • Performance of a Contract and Pre-Contractual Inquiries (Art. 6(1)(b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or for the execution of pre-contractual measures taken at the request of the data subject.
  • Legal Obligation (Art. 6(1)(c) GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate Interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, provided that the interests, fundamental rights, and freedoms of the data subject, which require the protection of personal data, do not override them.

National Data Protection Regulations in Germany: In addition to the GDPR, national regulations on data protection apply in Germany. This includes, in particular, the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), which contains specific regulations on the right to information, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes, and data transfer, as well as automated decision-making in individual cases, including profiling. Additionally, state data protection laws of the individual federal states may apply.

Note on the Applicability of the GDPR and Swiss DPA: This privacy policy serves as information under both the Swiss DPA and the GDPR. Therefore, we use the terminology of the GDPR for clarity and broad application. Instead of the terms used in the Swiss DPA ("processing" of "personal data," "overriding interest," and "sensitive personal data"), we use the terms of the GDPR ("processing" of "personal data," "legitimate interest," and "special categories of data"). However, the legal meaning of these terms under the Swiss DPA remains applicable.

Business Services

We process data from our contractual and business partners, such as customers and interested parties (collectively referred to as "contractual partners"), within the framework of contractual and similar legal relationships, related measures, and communication with contractual partners (or pre-contractually), for example, to respond to inquiries.

We use this data to fulfill our contractual obligations. This includes, in particular, the obligation to provide the agreed services, any updating obligations, and remedies for warranty and other service disruptions. Additionally, we use the data to protect our rights and for administrative tasks associated with these obligations as well as business organization. Furthermore, we process the data based on our legitimate interests in the proper and economic business management as well as in security measures to protect our contractual partners and business operations from misuse and threats to their data, secrets, information, and rights (e.g., involving telecommunications, transport, and other auxiliary services, subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Where legally required, we only pass on the data of contractual partners to third parties to the extent necessary for the above purposes or to fulfill legal obligations. Contractual partners are informed about further types of processing, such as for marketing purposes, within this privacy policy.

We inform contractual partners about the required data before or during data collection, e.g., in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks), or personally.

We delete the data after the expiration of legal warranty and comparable obligations, i.e., generally after four years unless the data is stored in a customer account, e.g., as long as it must be retained for legal archiving reasons (usually ten years for tax purposes). Data disclosed to us by the contractual partner as part of an order is deleted according to the specified guidelines and generally after the completion of the order.

  • Processed Data Types: Master data (e.g., full name, address, contact details, customer number, etc.); Payment data (e.g., bank details, invoices, payment history); Contact data (e.g., postal and email addresses, telephone numbers); Contract data (e.g., contract subject, duration, customer category).
  • Affected Individuals: Service recipients and clients; Interested parties; Business and contractual partners.
  • Purposes of Processing: Provision of contractual services and fulfillment of contractual obligations; Communication; Office and organizational procedures; Business processes and economic procedures.
  • Retention and Deletion: Deletion as specified in the section "General Information on Data Storage and Deletion."
  • Legal Bases: Performance of a Contract and Pre-Contractual Inquiries (Art. 6(1)(b) GDPR); Legal Obligation (Art. 6(1)(c) GDPR); Legitimate Interests (Art. 6(1)(f) GDPR).

Generated with the free Privacy Policy Generator by Dr. Thomas Schwenke