The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you,

– When or during which actions we process data

– What data we process and for what reasons

– Who receives data

– What rights you have because of the data processing by us.

This privacy policy only governs the use of personal data, on our website www.mmmake.com including sub-pages. If you leave our website via a link, you also leave the scope of this privacy policy.

The transmission of information to or from this website is secured with TLS encryption.

You can access, print or download this privacy policy permanently and at any time at the address https://mmmake/de/datenschutzerklaerung/.

 

I. Contact information

 

The person responsible for data processing within the scope of this website within the meaning of the General Data Protection Regulation (DSGVO) is:

 

mmmake GmbH
Grossgartacher Str. 61
74080 Heilbronn
Phone: +49 7131 7999-0
E-mail: hello@mmmake.com

 

We have also appointed a data protection officer. You can reach this at: privacy@mmmake.com

 

Confidential contact is also possible at:

HK2 Comtection GmbH
Mr. Lukas Wagner LL.M.
Hausvogteiplatz 11 A
10117 Berlin
E-mail: wagner@comtection.com

 

 

II. General information on data processing

 

1. scope of the processing of personal data

 

The provision of the website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the website, for example, if you communicate with us via the contact form or consent to the processing of data.

You are not obliged to provide us with personal data. However, insofar as the provision of this data is technically mandatory for accessing our site, a refusal will result in you not being able to enter and use our website.

As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.

 

2. legal basis for the processing of personal data

 

The legal bases for the processing of personal data are presented below.

 

Processing reason	Legal basis in the GDPR	Explanation
Contract fulfillment or implementation of pre-contractual measures	Art. 6 par. 1 b)	Processing takes place only to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us is only carried out to this extent.
Legitimate interest	Art. 6 par. 1 f)	Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this privacy statement as part of the processing description.
Consent	Art. 6 par. 1 a)	Processing takes place insofar as you have expressly consented to the type and scope of data processing for this purpose. You can revoke your consent at any time with effect for the future. However, processing that has taken place up to that point will not be affected.
Legal duty	Art. 6 par. 1 c)	Processing takes place insofar as this is necessary for the fulfillment of German or European legal obligations.

 

3. data deletion and storage period

 

We delete your personal data as soon as the legal basis for their processing ceases to apply. In some cases, however, legal bases can also exist in parallel or, if one legal basis ceases to exist, a new one can take effect, for example. the obligation to store certain data for the fulfillment of a statutory retention obligation.

 

 

III. Data processing for provision of the website

 

In order for us to display the website to you, it is necessary to process certain information. This already takes place when you call up our website. In addition, we offer various functionalities on our website that require further data processing.

 

1. log files

 

When you visit our website, your browser sends various information, so-called server log files, to our server. We need this to establish and maintain the connection. Among the data is also your IP address, which we treat as personal data. The IP address is stored hashed (e.g. 0.0.0.0) in the database. In addition, the following data is collected:

– Date and time at the time of access

– Amount of data sent in bytes

– Source/reference from which you reached the page

– Browser used

– Operating system used

– Device type

– Screen resolution

– Country

– Browser language

– Language code

This data is not merged with other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website, analyzing its use and preventing its misuse. Stored log files are deleted after 30 days at the latest, unless longer storage is necessary, for example, to ward off or clarify an attack on our website.

 

2. contact form

 

You can send us a request at any time via the contact form on our website. The following information is requested: title, first name, last name, e-mail address, and your message. The information is marked as mandatory fields. All other data that you provide to us as part of the request, including via the free text field, is provided voluntarily.

We use this data exclusively for answering your inquiry and the related communication. The legal basis of this processing of your data depends on the content of your request. In principle, our legitimate interest here is in providing the contact functionality and responding to your inquiry transmitted via it. If your request is directed towards the conclusion of a contract with us, the processing is carried out in the context of this pre-contractual obligation.

Your data will be deleted as soon as your request has been processed. In the event of a contract being concluded, we may process the data further in order to fulfill the contract.

 

3. application procedure

 

You have the opportunity to apply for open positions with us via https://mmmake.com/de/jobs/. In the course of your application, we will collect and process all personal application data from you that you provide to us as part of your application. In detail, these are usually surname, first name, address, telephone number, e-mail address and the application documents (letter of application, CV, references, certificates, etc.). In addition, further information may be required depending on the position applied for. You are also free to provide additional personal data on a voluntary basis. Your personal application data is collected and processed exclusively for the purpose of filling positions within mmmake GmbH. As a matter of principle, your data will only be forwarded to the internal departments and specialist departments responsible for the specific application process. The legal basis for the processing of your application documents is the necessity for the establishment of the employment relationship pursuant to. § 26 para. 1 BDSG. Your personal application data will generally be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of evidence or if you have expressly consented to longer storage.

If we are unable to offer you a vacant position, you have the option of agreeing to your application data being stored for a maximum of two years so that it can be considered for a future job posting if the profile fits.

For applicant management, we use software from Talentry GmbH, Nymphenburger Str. 86, 80636 Munich, Germany, which we have appointed as a processor in accordance with German data protection law. Art. 28 DSGVO have integrated.

 

 

IV. Cookies

 

We use cookies on our website for various purposes. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. If the cookies mentioned below have their own option to delete or block them, this is shown in the respective description. Cookies may be necessary for establishing connection or improving the use of the website.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The use of technically necessary cookies and the associated data processing is based on our legitimate interest in providing our website. Technically necessary cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.

 

Borlabs cookies

 

To manage your cookie preferences and obtain consent for the use of cookies, we use the Borlabs Cookies tool. In doing so, your consent status is also stored in your browser in the “borlabs-cookie” cookie so that the website can automatically read and follow your consent in all subsequent page requests and future end-user sessions for up to 6 months.

 

1. technical cookies

 

Technical cookies are used to provide you with additional functionalities or a more convenient use of the website, e.g. to enable you to use the website more easily. by saving their country or language setting. The technically conditional cookies are also usually deleted automatically when you close your browser (session cookies), but in other cases only after a longer period of time (persistent cookies). The storage period can be viewed in your browser. The legal basis for data processing is your consent pursuant to. § Section 25 TTDSG in conjunction with Art. 6 para. 1 a) GDPR.

 

1.1. Google Tag Manager

 

This website uses Google Tag Manager, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to embed analytics and other tools into the website. The Google Tool Manager triggers other tools, which in turn may collect data. However, Google Tag Manager does not access this data. The following link will provide you with more information about Google’s privacy policy: http://www.google.de/policies/privacy/

 

1.2. YouTube

 

If you give us your consent, you will be shown content from YouTube. YouTube is a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The content is all integrated in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. By activating and playing the videos, YouTube receives your IP address and the information that you have accessed the corresponding subpage of our website. If you are logged in to Google, your data will be assigned directly to your account.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the Google privacy policy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. For this purpose, we have concluded the standard contractual clauses with Google.

 

2. usage analysis

 

Analysis and tracking cookies are used to record and evaluate your usage behavior when using our services or visiting our website. In doing so, we learn, for example, how often certain functionalities are used or content is read or whether you have come to us via an advertisement placed by us. We use this data to further improve the usability of this website and the attractiveness of its services.

The legal basis for data processing is your cookie consent, according to. § Section 25 TTDSG in conjunction with Art. 6 para. 1 a) GDPR. You can disable the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or disable them. This is then shown below in each case.

Data processing for usage analysis takes place during your visit to our website and only until the time of your effective objection.

 

2.1. Google (Universal) Analytics

 

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google collects information about your use of this website (including your IP address) in the USA via a cookie and stores the information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. For this purpose, we have concluded the standard contractual clauses with Google. Google analyzes the information collected and sends us reports on usage activity on our website. and provides further services to us for this purpose. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

In addition to blocking all cookies from your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future. For more information about Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=d.

 

3. marketing cookies

 

Marketing cookies are used to increase the success and accuracy of our advertising. For this purpose, we collect information on whether our advertising works, which users come to our website via an advertising medium we have placed, etc.

The legal basis for data processing is your consent pursuant to. § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 a) GDPR. You can disable the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or disable them.

 

3.1. LinkedIn Marketing Solutions

 

We used the LinkedIn Marketing Solutions service, which is operated by LinkedIn Corporation. 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”).

When visiting our website, an ID, in the form of a cookie, is stored on the user’s device. This ID allows us to recognize you when you use the site and to collect certain usage data. If you visit LinkedIn below, you will be shown advertisements based on the data collected. The data stored and processed in the USA does not make it possible to identify you as an individual.

If you do not want to participate in tracking, you can disable storage of LinkedIn cookies in your browser settings or via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

You can obtain more information about LinkedIn’s privacy policy at the following web address: https://www.linkedin.com/legal/privacy-policy?_l=de_DE.

 

3.2. Facebook Pixel/Facebook Custom Audiences

 

We use so-called Facebook pixels on our websites. This is the function of a web analysis service from Facebook. Facebook pixels are invisible graphic files that are integrated into our websites. When you visit our websites, information from the pixel is stored in your browser. This allows us to track which of our subpages you have accessed. We share this information with Facebook in order to better tailor our ads to your actual interests and to analyze the effectiveness of our ads on Facebook. Depending on your use of our websites, you will be assigned to certain interest groups on Facebook, so-called Custom Audiences. The information generated by the cookie is usually transferred to a Facebook server in the USA and stored there. Further information on data collection by Facebook tracking pixels can be found here https://de-de.facebook.com/about/privacy/ or here https://business.facebook.com/pixels/tos/.

We have no influence on Facebook’s data processing operations. Facebook uses the data for advertising and market research purposes and to optimize offers. Facebook’s data protection conditions apply in this regard. We would like to point out that the use of such a tracking procedure makes it possible to identify users via numerous websites. You can deactivate this function in the settings of your Facebook account for all end devices used: https://www.facebook.com/settings?tab=ads. For more information, please refer to Facebook’s privacy policy and terms of use.

Irrespective of this, you can generally object to the use of such cookies via various third-party sites, e.g:

• Network advertising initiative: http://optout.networkadvertising.org/
• aboutads: http://www.aboutads.info/choices
• Youronlinechoices: http://www.youronlinechoices.com/uk/your-ad-choices/

 

3.3. Bing Ads

This website uses the online advertising program “Bing Ads” and, as part of Bing Ads, Bing Ads Conversion Tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”).
Cookies are set on your computer if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page (conversion page). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion page. This tool enables us to determine the effectiveness of our advertisements. According to Microsoft, no personal information about the identity of the user is disclosed.
Cookies are stored for one year.
If you do not wish to participate in tracking, you can block this use by deactivating the Bing Ads tracking cookie via your Internet browser under user settings.
You can find more information about Microsoft’s privacy policy at the following Internet address: https://privacy.microsoft.com/de-de/privacy

 

3.4. Google Signals

On this website, we collect Google signals from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This is session data from this website that Google links to users who are logged into their Google account and have activated personalized advertising. By linking data with these logged-in users, cross-device reports, cross-device remarketing and the export of cross-device conversions to Google Ads are possible. For example, it is possible to track how users search for products on a website on a smartphone and later return to complete purchases on a tablet or laptop. The storage period for Google signals is up to 26 months. Google is certified in accordance with the EU-U.S. Data Privacy Framework.

 

 

V. Social media presences

 

We operate our own presences in the social networks Facebook, Instagram, LinkedIn, Twitter, Youtube (Google Ireland Limited) and Xing. These networks process your personal data, for example, to create usage profiles corresponding to your interests. Cookies may be stored on your device for this purpose. More detailed information on data processing by the individual networks can be found in the respective data protection information and, where applicable, in the cookie policies of the networks:

 

https://www.facebook.com/about/privacy/
https://help.instagram.com/519522125107875
https://twitter.com/de/privacy
https://policies.google.com/privacy?hl=de&gl=de
https://privacy.xing.com/de
https://de.linkedin.com/legal/privacy-policy?trk=%7Berror-page%7D-privacy-policy

 

This data protection information also contains information about the type and scope of data processing by the respective networks as well as about the possibilities to assert your data subject rights (right to information, confirmation, correction, deletion, restriction, data portability and complaint to the competent data protection supervisory authority).

We do not know what user data the social networks collect. We do not get full access to the collected user data or user profiles. We can only access public profile information. What information you choose to make public can be customized through your account settings.

If available, we use user data of the chat functions to answer your questions. The collected customer data is used to contact the user in order to provide the requested information and offers.

We may receive anonymous statistics from the social networks based on legitimate interest in the use of our site such as.

– Followers: Number of people who follow us – including growth and development over a defined period of time.

– Reach: Number of people who see a particular post. Number of interactions on a post. For example, you can deduce which content in the community is better than others.

– Advertising performance: How many people saw and interacted with an ad or article?

– Demographics: average age of visitors, gender, place of residence, language, industry.

These statistics are used to constantly improve our online content and better respond to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. You can use your account settings on social networks to decide in what form you want to display targeted ads.

 

Special notes on Facebook, Instagram and LinkedIn

 

For the operation of the Facebook fan page and our Instagram page as well as for the operation of our LinkedIn company page, we are jointly responsible with Facebook and LinkedIn, respectively, for data protection.

For Facebook and Instagram, the responsible party in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The joint responsibility is regulated in the Facebook Page Insights Supplement regarding the Facebook responsible party: https://www.facebook.com/legal/terms/page_controller_addendum
For more information on processing Page Insights data, visit https://www.facebook.com/legal/terms/information_about_page_insights_data.
Data processing outside of Europe by Facebook Inc, 1601 Willow Road, Menlo Park, CA 94025, USA is possible under certain circumstances.

For LinkedIn, the responsible entity in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Joint accountability is governed by the LinkedIn Page Insights Joint Controller Addendum: https://legal.linkedin.com/pages-joint-controller-addendum
Data processing outside of Europe by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is possible under certain circumstances.

The legal basis for the processing of your personal data on our Fanpage are the legitimate interests of us and Meta or LinkedIn pursuant to Art. 6 para. 1 f) GDPR to advertising, recommendations and measurements, as well as to offer interested parties an information and communication channel. You can object to the data processing at any time. Please contact Meta or LinkedIn for this purpose. Information on this can be found in the privacy policies of Meta(www.facebook.com/about/privacy/) and LinkedIn(https://de.linkedin.com/legal/privacy-policy). In your browser settings, you can also prevent the storage of cookies yourself at any time or delete existing cookies.

 

 

VI Newsletter

 

You have the option of subscribing to our newsletter on this website. We use the e-mail provider rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau (“rapidmail”) to send the newsletter.
If you register for our newsletter or give us your e-mail address as part of a registration, the data required for this (e-mail address, first name, surname) will be transmitted to rapidmail and stored there. After registration, rapidmail will send you an e-mail to confirm your registration (so-called “double opt-in”). In addition to the simple sending of e-mails, rapidmail offers various analysis options to enable us to find out whether, when and where the newsletters sent are opened, used or rejected. Among other things, rapidmail uses cookies and similar technologies for this purpose.
If you no longer wish to receive our e-mails and newsletters, you can unsubscribe at any time using the “Unsubscribe” button, which is available in every message. You can object to the use of cookies in your browser settings.

 

 

VII. Right of objection and removal

 

Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to revoke your granted consent at any time. Your objection or revocation will only have effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can contact datenschutz@mmmake.com at any time to exercise your right of objection or revocation or change the cookie settings via the corresponding link in the footer. If you object to processing based on our legitimate interest, we may still continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms.

 

 

VIII. Rights of data subjects

 

If data relating to your person is processed, you are the data subject within the meaning of Art. 4 Para. 1 GDPR. As a data subject, you have the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.

 

Right to information according to Art. 15 DSGVO

 

You have a right of access to your personal data processed by us. This includes the mandatory information outlined in Art. 15 GDPR.

 

Right to rectification according to Art. 16 DSGVO

 

You have the right to request the immediate correction of inaccurate personal data and the completion of inaccurate personal data.

 

Right to deletion according to Art. 17 DSGVO

 

You have the right to request the deletion of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

 

Right to restriction of processing according to Art. 18 DSGVO

 

You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 DSGVO applies, in particular at your request instead of deletion of the data.

 

Right to data portability according to Art. 20 DSGVO

 

In accordance with the provisions of Article 20 of the GDPR, you have the right to request the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.

 

Right to complain to the competent supervisory authority, Art. 77 DSGVO

 

You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 DSGVO.

 

 

IX. Recipients of data

 

 

The processing of your personal data within the framework of the website, is partly also carried out by order processors, in particular the use of analysis tools. These shall be performed exclusively on the basis of an agreement on order agreement in accordance with Art. 28 par. 3 GDPR included.

 

Status: July 2023