Privacy policy (according to GDPR)

Status: May 2018

I. Name and address of the controller

The controller in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

MARINGO Computers GmbH
Stolberger Str. 114a
50933 Cologne
Germany

Phone:+49 (0) 221 - 94 90 58-0
E-mail:info@maringo.de
Website:  https://www.maringo.de/

II. Contact information for the data protection officer

The data protection officer at MARINGO Computers GmbH is available for questions concerning the topic of data protection. Please contact:

Data Protection Officer/Datenschutzbeauftragter
c/o MARINGO Computers GmbH
Stolberger Str. 114a
50933 Cologne
Germany

Phone:+49 (0) 221 - 94 90 58-0
Email:     datenschutzbeauftragter@maringo.de
Website:   https://www.maringo.de/

III. General information about data processing

1. Scope of personal data processing

We collect and use personal data for our users only to the extent that this is necessary in order to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where it is not possible to obtain consent in advance for practical reasons, and where data processing is permitted by the statutory provisions.

We collect and use personal data for our users only to the extent that this is necessary in order to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where it is not possible to obtain consent in advance for practical reasons, and where data processing is permitted by the statutory provisions.

Insofar as we obtain consent from the relevant persons to process their personal data, Art. 6 par. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data.

When processing personal data that is necessary in order to fulfill a contract with the relevant person, Art. 6 par. 1 lit. b of the GDPR serves as legal basis.  This also applies to processing steps required to perform pre-contractual measures.

Insofar as personal data processing is required to fulfill a legal obligation that is subject to our company, Art. 6 par. 1 lit. c of the GDPR serves as legal basis.

In the event that vital interests of the relevant persons or of another natural person necessitate the processing of personal data, Art. 6 par. 1 lit. d of the GDPR serves as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 par. 1 lit. f of the GDPR serves as legal basis for processing.

3. Data erasure and storage period

Personal data of the relevant persons will be deleted or blocked as soon as the purpose of the storage no longer applies.  In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject.  Blocking or erasure of data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion or fulfillment of a contract.

Learn more about principles of data processing at MARINGO

IV. Presentation of the website and creation of log files

1. Description and scope of data processing

Every time our website is accessed, our system automatically records information from the computer system which accesses it, logging the following data:

  • information about browser type and version used
  • the user’s operating system
  • the user’s operating system
  • the user’s IP address
  • date and time of the user’s access to the website
  • websites from which the user’s system accesses our website
  • websites that are accessed by the user’s system through our website

The data are also stored in the log files of our system. These data are not stored together with the user’s other personal data.

2. Legal basis for data processing

Art. 6 par. 1 lit. f of the GDPR is the legal basis for temporary storage of data.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do this, the user’s IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data are used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest lies in the processing of data according to Art. 6 par. 1 lit. f of the GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the log files, the IP addresses will be anonymized with an “x” after 7 days. The log files are kept available for no more than 9 weeks and then deleted automatically.

5. Right to objection and removal

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website.  There is consequently no contradiction on the part of the user.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

We use cookies in the Partner Portal and Support Portal (support.maringo.de), both restricted areas of our website which can only be accessed by business partners. Those cookies allow for a user-friendly handling as the relevant areas of our website require the visiting browser to be identified even after a page break.

In this cookie, only login data are stored and transmitted.

In addition, our website uses cookies that allow us to analyze the user’s surfing behavior.

This way, the following data can be transmitted:

  • Search terms entered
  • Frequency of page views
  • Use of website features

The data of the users collected in this way are pseudonymized by technical precautions. Therefore it is no longer possible to assign the data to the visiting user. The data will not be stored together with other personal data of the users.

2. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 par. 1 lit. f of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the transmission of login data.

User data collected via technically necessary cookies will not be utilized to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is being used, which allows us to continuously improve our offerings.

For these purposes, our legitimate interest lies in the processing of personal data according to Art. 6 par. 1 lit. f of the GDPR.

4. Duration of storage, objection and disposal options

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

VI. Newsletter

1. Description and scope of data processing

On our website you have the option to subscribe to a free newsletter. If you are interested in the newsletter, we require an email address as well as some information to make sure you are the owner of this email address. Any further disclosure of personal data is optional.

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for the processing of the data after the user has registered for the newsletter is the consent of the user as per Art. 6 par. 1 lit. a of the GDPR.

3. Purpose of data processing

The collection of the user’s email address serves to deliver the newsletter.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Therefore, the user’s email address and optional information are stored as long as the subscription to the newsletter is active and as long as they do not need to be provided mandatorily for another processing arising from a business relationship or initiation. The newsletter dispatch takes place on the basis of registration of the user on the website. Further personal data collected during the registration process will normally be deleted after a period of seven days.

5. Right to objection and removal

The subscription to the newsletter may be terminated at any time by the user. For this purpose, there is a corresponding link in each newsletter.

Unless there are no other contractual business relations, unsubscribing from the newsletter also enables the user to withdraw his consent to the storage of personal data collected during registration.

VII. Contact form and email contact

1. Description and scope of data processing

On our website, there is a contact form which can be used to contact us electronically. If a user uses this option, the data entered in the input screen shall be transferred to us and stored. This data includes first name and surname, street address, postal code, town, country, phone number, email address, nature of request.

For the processing of the data, your consent is obtained during dispatch and reference is made to this privacy policy.

Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted by email will be stored.

There will be no disclosure of the data to third parties. The data will be used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data is the consent of the user as per Art. 6 par. 1 lit. a of the GDPR.

The legal basis for the processing of the data that are transmitted during email delivery is Art. 6 par. 1 lit. f of the GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 par. 1 lit. b of the GDPR

3. Purpose of data processing

Personal data in the contact form serves only to administer the contact process. A legitimate interest in the processing of data may also be included when contact is via email.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Personal data contained in the contact form and those sent via email are deleted when the respective communication with the user has ended. The communication is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

5. Right to objection and removal

The user has the right to withdraw his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

To withdraw your consent, please send an email to info@maringo.de with the subject “Withdrawal of consent to personal data processing“ using the email address you provided in the contact form.

In this event, all personal data that has been stored in the course of the contact will be deleted.

VIII. Web analysis by Matomo (formerly PIWIK)

1. Scope of personal data processing

On our website we use the open source software tool Matomo (formerly PIWIK) to analyze the surfing behavior of our users. The software sets a cookie on the user’s computer (see above for use of cookies).  If individual pages of our website are accessed, the following data is stored:

  • two bytes of the IP address of the user’s visiting system
  • the called up web page
  • the website from which the user has accessed the accessed website (referrer)
  • the subpages that are accessed from the accessed website
  • the duration of stay on the website
  • the frequency of visiting the website

The software runs exclusively on the servers of our website. The personal data of users is only stored there. The data will not be passed on to third parties.

The software is set so that the IP addresses are not completely stored, but 2 bytes of the IP address are masked (e.g.:  192.168.xxx.xxx). This way it is no longer possible to assign the shortened IP address to the visiting computer.

2. Legal basis for the processing of personal data

Art. 6 par. 1 lit. f of the GDPR is the legal basis for the processing of personal user data.

3. Purpose of data processing

The processing of users’ personal data enables us to analyze the surfing behavior of our users.  We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest lies in the processing of data according to Art. 6 par. 1 lit. f of the GDPR. By anonymizing the IP address, the users’ interest in protecting their personal data is sufficiently taken into account.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for our recording purposes.

5. Right to objection and removal

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

More information about the privacy settings of the Matomo software can be found under the following link:  https://matomo.org/docs/privacy/.

IX. Inclusion of third party services and contents

It may happen that third-party contents or services are embedded in our website. This applies to YouTube videos in particular. Those videos have been embedded in an extended data protection mode. However, like most websites, YouTube also uses cookies to collect information on visitors to their website. They use them to track video statistics, avoid fraud and improve user-friendliness, amongst others. This also results in a connection being established with the Google DoubleClick network. This could initiate additional data processing operations when starting the video. We have no influence on that. Please refer to the YouTube privacy policy for further information on data protection:
http://www.youtube.com/t/privacy_at_youtube

X. External links

If you use external links provided on our web pages, those links are not covered by this privacy policy. For the links provided, we aim to ensure compliance with our data protection and safety standards. However, we cannot influence how other providers comply with the regulations. We recommend that you review the other providers’ privacy policies on their respective websites. The following external links are currently accessible from www.maringo.de:

The linked sites were checked for possible infringements at the time they were linked.  At this time, there were no illegal contents discernible. As soon as we become aware of such infringements, we will remove the respective links immediately.

XI. Rights of the data subject

If your personal data are processed, you are affected by the GDPR and you as the data subject are entitled to the following rights vis-à-vis the controller:

1. Right to access

You have the right to obtain confirmation from the controller as to whether or not personal data relating to you are being processed, and, where that is the case, access to the personal data and the following information:

  • the purposes of the processing of personal data;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of your personal data or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Art. 22, paragraphs 1 and 4 of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to be informed if the respective personal data shall be transferred to a third country or to an international organization. In this context, you can ask to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR relating to the transfer.

2. Right to rectification

You have a right to assert rectification and/or completion against the controller if the processed personal data relating to you are incorrect or incomplete.  The controller shall make the correction without delay.

3. Right to restriction of processing

You have the right to obtain from the controller restriction of processing of the personal data relating to you where one of the following applies:

  • If you contest the accuracy of the personal data for a period enabling the controller to verify the accuracy of the personal data;
  • If the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • If the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims;
  • If you have objected to processing pursuant to Art. 21 par. 1 of the GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

Where processing of the personal data relating to you has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If restriction of processing has been restricted under the conditions referred to above, you shall be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Obligation to erasure

You have the right to obtain from the controller the erasure of personal data relating to you without undue delay and the controller shall have the obligation to erase personal data without undue delay whenever one of the following grounds applies:

  • The personal data relating to you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing is based according to Art. 6 par. 1 lit. a or Art. 9 par. 2 lit. a of the GDPR, and where there is no other legal ground for the processing.
  • You object to the processing pursuant to Art. 21 par. 1 of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 par. 2 of the GDPR.
  • The personal data relating to you have been unlawfully processed.
  • The personal data relating to you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data relating to you have been collected in relation to the offer of information society services referred to in Art. 8. par. 1 of the GDPR.

b) Information to third parties 

Where the controller has made your personal data public and is obliged to erase them pursuant to Art. 17 par. 1 of the GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erase shall not apply, if the processing is necessary

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health in accordance with Art. 9 par. 2 lit. h and i as well as Art. 9 par. 3 of the GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 par. 1 of the GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defense of legal claims.

5. Right to be informed

If you have exercised your right to have the controller correct, erase or restrict the processing, he is obliged to inform all recipients to whom the personal data relating to you have been disclosed of this correction or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of such recipients by the controller.

6. Right to data portability

You have the right to receive the personal data relating to you, which you have provided to a controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  • the processing is based on consent pursuant to Art. 6 par. 1 lit. a of the GDPR or Art. 9 par. 2 lit. a of the GDPR or on a contract pursuant to Art. 6 par. 1 lit. b of the GDPR; and
  • the processing is carried out by automated means.

In exercising your right to data portability you shall furthermore have the right to have the personal data transmitted directly from one controller to another, where technically feasible. Rights and freedoms of others may not be adversely affected thereby.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data relating to you which is based on Art. 6 par. 1 lit. e or f of the GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 par. 1 of the GDPR, on grounds relating to your particular situation you shall have the right to object to processing of your personal data unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Your right to object can be restricted to the extent that it is likely to render the realization of research or statistical purposes impossible or to seriously impair them and restriction is necessary for fulfilling the purposes of research or statistics.

8. Right to withdraw data protection declaration of consent

You have the right to withdraw your declaration of consent any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.

9. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

  • is necessary to enter into or perform a contract between you and the controller;
  • is admissible under Union or Member State legislation to which the controller is subject and where such legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests or
  • is based on your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 par. 1 of the GDPR, unless Art. 9 par. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

In the cases referred to as point 1 and 3, the controller shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the controller, to state his own position and to challenge the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.

XII. Change of privacy policy

To ensure that this privacy policy is always compliant with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy needs to be changed due to new or revised services. The new privacy policy will then take effect on your next visit to our offer.

Contact

MARINGO Computers GmbH
Stolberger Straße 114 a
50933 Cologne
Germany

Phone: +49 (0) 221 - 94 90 58-0
Fax: +49 (0) 221 - 94 90 58-8
E-mail: info@maringo.de