Privacy Policy
Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally.
Detailed information on the processing of your personal data can be found in the Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection?
The processing of personal data on this website is carried out by the website operator. Contact details can be found under "Information on the Data Controller" in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us voluntarily, for example by completing a contact form.
Other data is collected automatically or with your consent when you visit this website through our IT systems. This primarily includes technical information such as your internet browser, operating system and the time of your visit. This information is collected automatically as soon as you access the website.
How do we use your data?
Some of the data is processed to ensure the proper functioning and secure provision of this website.
Other data may be used to analyse user behaviour. Where contracts can be concluded or initiated via this website, the transmitted data may also be processed for quotations, orders or other business enquiries.
What are your rights?
You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data.
You also have the right to request the correction or deletion of your personal data.
Where you have given your consent to data processing, you may withdraw that consent at any time with effect for the future.
Under certain circumstances, you also have the right to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
If you have any questions regarding data protection or your personal data, you are welcome to contact us at any time.
Analytics Tools and Third-Party Services
When visiting this website, your browsing behaviour may be analysed statistically. This is primarily carried out using analytics tools.
Further information about these analytics services can be found in this Privacy Policy.
2. Hosting
Wix
This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv Street, Tel Aviv 6350671, Israel ("Wix").
Wix provides the platform on which this website is built and hosted. When you visit this website, Wix may process information relating to visitor behaviour, traffic sources, geographical location and visitor statistics.
Wix stores cookies that are necessary for the operation, security and proper display of this website.
Data collected through Wix may be stored on servers located in various countries, including the United States.
For further information, please refer to Wix's Privacy Policy:
https://www.wix.com/about/privacy
Transfers of personal data to the United States and other third countries are carried out by Wix on the basis of the European Commission's Standard Contractual Clauses or other appropriate safeguards in accordance with Article 46 GDPR.
The use of Wix is based on Article 6(1)(f) GDPR, as we have a legitimate interest in the reliable and secure presentation of our website.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as consent relates to the storage of cookies or access to information on the user's device.
Consent may be withdrawn at any time.
Wix is certified under the EU–US Data Privacy Framework (DPF).
We have concluded a Data Processing Agreement (DPA) with Wix to ensure that personal data is processed solely in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection legislation and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is any information relating to an identified or identifiable natural person.
This Privacy Policy explains what data we collect, how we use it and for what purposes. It also explains how and why this processing takes place.
Please note that data transmission over the Internet (for example, communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.
Information on the Data Controller
The controller responsible for processing personal data on this website is:
MAB Innenarchitektur
Margarita Becker
Motzacherweg 72
88131 Lindau
Germany
Telephone: +49 (0) 151 67781647
Email: info@mab-ia.de
The Data Controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
Data Retention
Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us only for as long as necessary to fulfil the purposes for which it was collected.
If you exercise your right to erasure or withdraw your consent to processing, your personal data will be deleted unless we are legally entitled or obliged to retain it (for example under tax or commercial law). In such cases, the data will be deleted once the relevant legal retention periods have expired.
Legal Basis for Processing
Where you have given your consent, your personal data is processed on the basis of Article 6(1)(a) GDPR or, where special categories of personal data are involved, Article 9(2)(a) GDPR.
Where you have expressly consented to the transfer of personal data to third countries, processing is also carried out on the basis of Article 49(1)(a) GDPR.
Where you consent to the storage of cookies or access to information stored on your device (for example through device fingerprinting), processing is additionally based on Section 25(1) TDDDG.
Consent may be withdrawn at any time.
Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is carried out in accordance with Article 6(1)(b) GDPR.
Where processing is required to comply with a legal obligation, it is carried out under Article 6(1)(c) GDPR.
Processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
The applicable legal basis for each processing activity is explained in the relevant sections of this Privacy Policy.
Transfers of Personal Data to Third Countries
Some of the services used on this website are provided by companies located in countries outside the European Economic Area or by US companies that may process personal data outside the EU.
Where personal data is transferred to countries that do not provide an adequate level of data protection under European law, appropriate safeguards are implemented in accordance with the GDPR.
Where recipients are certified under the EU–US Data Privacy Framework (DPF) or provide equivalent safeguards, transfers are carried out in accordance with the applicable legal requirements.
Further information regarding international data transfers and recipients can be found in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with external service providers where necessary.
Personal data is only disclosed where this is required for the performance of a contract, where we are legally obliged to do so, where disclosure is based on our legitimate interests under Article 6(1)(f) GDPR, or where another legal basis permits such disclosure.
Where processors are engaged, personal data is processed solely on the basis of a valid Data Processing Agreement (DPA).
Where joint processing takes place, a Joint Controller Agreement is concluded where required.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time.
The withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal took effect.
Right to Object
Where personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. If you exercise this right, your personal data will no longer be used for direct marketing purposes.
Your Rights
You have the following rights under the GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to restriction of processing
-
Right to data portability
-
Right to withdraw consent
-
Right to object to processing
-
Right to lodge a complaint with the competent supervisory authority
If you wish to exercise any of these rights, please contact us using the contact details provided above.
4. Data Collection on This Website
Cookies
This website uses cookies. Cookies are small text files that are stored on your device and do not cause any harm.
Some cookies are essential for the operation of the website and are deleted automatically at the end of your browsing session (session cookies). Others remain on your device until they are deleted manually or automatically by your browser (persistent cookies).
Cookies may be placed by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies enable the integration of certain external services, such as payment services or embedded content.
Cookies serve different purposes. Many are technically necessary to ensure the proper operation of the website, while others are used to analyse visitor behaviour or provide additional functionality.
Essential cookies are processed on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in ensuring the secure and reliable operation of our website.
Where consent is required for the storage of cookies or access to information stored on your device, processing is based exclusively on your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time.
You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to reject cookies altogether or to delete cookies automatically when closing your browser.
Please note that disabling cookies may affect the functionality of this website.
5. Social Media
This website includes features provided by Instagram, operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When Instagram content is activated, a direct connection is established between your device and Instagram's servers. Instagram receives information that you have visited this website.
If you are logged into your Instagram account, clicking the Instagram button allows you to link content from this website to your Instagram profile. This enables Instagram to associate your visit with your user account.
We have no knowledge of the content of the data transmitted to Instagram or how Instagram uses this information.
Processing takes place only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where personal data is collected on this website and transmitted to Instagram or Facebook, we and Meta Platforms Ireland Limited act as joint controllers solely with regard to the collection and transmission of that data in accordance with Article 26 GDPR.
Further processing carried out by Meta is the sole responsibility of Meta.
Further information is available at:
Meta is certified under the EU–US Data Privacy Framework (DPF).
This website also integrates services provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When pages containing Pinterest elements are accessed, your browser establishes a direct connection with Pinterest's servers. In doing so, technical information such as your IP address, browser settings, visited pages and cookies may be transmitted to Pinterest.
Processing takes place only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Further information can be found in Pinterest's Privacy Policy:
https://policy.pinterest.com/privacy-policy
6. Plugins and Tools
Google Maps
This website uses Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In order to display interactive maps, your IP address must be processed. This information is generally transmitted to Google's servers, which may be located in the United States.
When Google Maps is loaded, Google may also load Google Fonts to ensure consistent display of fonts.
The use of Google Maps is based on our legitimate interest in providing an attractive website and making our location easy to find, in accordance with Article 6(1)(f) GDPR.
Where consent is required, processing is carried out solely on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Google is certified under the EU–US Data Privacy Framework (DPF).
Further information is available at:
https://policies.google.com/privacy
7. Own Services
OneDrive
This website uses Microsoft OneDrive, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
OneDrive enables us to provide a secure upload area through which files and documents can be submitted.
When you upload files, they are stored on Microsoft's servers. A connection to OneDrive is also established when you visit this website in order to provide the upload functionality.
Processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in providing a reliable and secure document upload service.
Where consent is required, processing takes place exclusively on the basis of Article 6(1)(a) GDPR.
Microsoft is certified under the EU–US Data Privacy Framework (DPF).
We have entered into a Data Processing Agreement (DPA) with Microsoft to ensure that personal data is processed only in accordance with our instructions and in compliance with the GDPR.