Privacy Policy

1.1 General Information

First, you will find general information on who at our organization is responsible for the processing of personal data and which rights you have as a data subject.

After that, you will find information on the various use cases in which we collect and process personal data. It states which of your data we process, to whom this data may be transferred, how long we store this data and whether we also use the data for other purposes.

1.1.1 Name and Contact Details of the Controller and Its Representative

Mobile Easykey GmbH
Max-Planck-Str. 11
61381 Friedrichsdorf
Germany
Contact:
Phone: +49 (0) 6172 9566-0
Email: info@mobileeasykey.de
Managing directors:
Jonas Ph. Müller, Jochen Müller

1.1.2 Contact Details of the Data Protection Officer

Marion Schröder, Attorney at Law
Dr.-Hermann-Neubauer-Ring 34
63500 Seligenstadt
Phone: +49 (0) 6182 / 7726-0
Fax: +49 (0) 6182/ 7726-295
Email: schroeder@rain-schroeder.de

1.1.3 Notice of the Rights of the Data Subject

As a data subject, you have the right to obtain from us, as the controller of the data processing, information about the personal data used.

You have a right to rectification or erasure or to restriction of processing. You also have the right to object to the processing as well as the right to data portability. This means that, upon request, we will provide you with a copy of the personal data we have stored about you, unless another legal provision prevents this.

You have the right to withdraw any consent given to us at any time.

You have the right to lodge a complaint with the supervisory authority. The competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit): https://datenschutz.hessen.de/

1.2 Personal Data

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes the name, email address or telephone number. However, data about preferences, hobbies, memberships or which websites someone has viewed also count as personal data.

Personal data is only collected, used and passed on by the provider if this is permitted by law or if the users consent to the data collection.

The following sections explain for which purpose which types and categories of personal data are collected and processed by this website. In addition, the legal basis and the duration of storage are stated. If the data is transferred to other bodies, to third countries or to international organizations, this is also stated.

1.2.1 Access Data/ Server Log Files

The provider (or its web space provider) collects data on every access to these web pages (so-called server log files). The access data includes:

• browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website (so-called referrer)
• the sub-pages that are accessed on our website via an accessing system
• the date and time of an access to the website
• an Internet protocol address (IP address)
• the Internet service provider of the accessing system

other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

Purpose of Processing

The provider uses the log data only for statistical evaluations for the purpose of operating, securing and optimizing the offering. However, the provider reserves the right to subsequently review the log data if there is a justified suspicion of unlawful use based on concrete indications.

Legal Basis

The legal basis for the use of Google Analytics is Article 6(1)(a) of the EU General Data Protection Regulation (consent of the data subject). When you first visit our website, a cookie banner is displayed. There you can consent to or reject the use of cookies. If the use of cookies is rejected, no data is collected by Google Analytics.

Transfer of Data

The data is not transferred – neither to third countries nor to international organizations.

Duration of Data Storage

The data is deleted after 14 days.

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The data is not used for other purposes.

1.2.2 Contact by Email or via Contact Form

When contacting the provider by email or via the contact form, the user's details are stored for the purpose of processing the inquiry and in case follow-up questions arise.

We point out that communication by email is unencrypted and therefore not confidential. If you wish to send us confidential information, we ask you to contact us by telephone so that we can arrange a secure means of communication.

If you use the contact form, your data is transmitted in encrypted form, as the entire website only permits encrypted access. The data entered is retrieved by us via an encrypted connection. Access is only possible after prior login.

Types and Categories of Personal Data

The personal data processed is that which is communicated in the email or the contact form, for example names, contact details and the content of the message.

Purpose of Processing

The processing serves to respond to inquiries and applications.

Legal Basis

The legal basis for responding to inquiries is Article 6(1)(b) EU GDPR (performance of a contract or in order to take steps prior to entering into a contract).

Transfer of Data

The data is not transferred – neither to third countries nor to international organizations.

Duration of Data Storage

The data is deleted as soon as the inquiry has been fully processed and no other legal provision requires retention. Other legal provisions include, for example, the retention requirements under Section 257 of the German Commercial Code (HGB) in conjunction with Section 147 of the German Fiscal Code (AO). Accounting-relevant data must be retained for 10 years, other tax-relevant data for six years. Applicant data is retained for 3 months (AGG, German General Equal Treatment Act).

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The data is not used for other purposes.

1.2.3 Cookies

If users consent to the use of cookies, one or more cookies are stored on their computer. A cookie is a small file that contains a specific string of characters and uniquely identifies your browser. With the help of cookies, the provider improves the convenience and quality of its service, for example by storing user settings. Cookies do not cause any damage to the user's computer and do not contain viruses.

It is also possible to use the offering without cookies. Users can deactivate the storage of cookies in their browser, restrict it to certain websites or set their browser to notify them before a cookie is stored. You can delete cookies from your computer's hard drive at any time using the privacy functions of your browser. In this case, the functions and user-friendliness of the offering may be limited.

Purpose of Processing

The provider uses cookies to optimize the offering.

Legal Basis

The legal basis for the use of cookies is Article 6(1)(f) of the EU General Data Protection Regulation (for the purposes of the legitimate interests pursued by the controller). The controller has an interest in optimizing the user-friendliness of its website.

However, you can reject the use of cookies using the cookie banner. When you first visit our website, a cookie banner is displayed. There you can consent to or reject the use of cookies. If the use of cookies is rejected, no data is collected by Google Analytics either.

Transfer of Data

The data is not transferred – neither to third countries nor to international organizations.

Duration of Data Storage

The cookies are automatically deleted after the following periods:

• A session cookie, which is deleted when the browser session ends
• One cookie: 1 day
• One cookie: 1 year
• One cookie: 2 years and 11 days

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The cookies are not used for other purposes.

1.2.4 Google Analytics

This offering uses Google Analytics, a web analytics service provided by Google Inc. ("Google").

Google Analytics uses so-called "cookies", text files that are stored on the users' computers and that enable an analysis of their use of the website. The information generated by the cookie about the users' use of this website is usually transmitted to a Google server in the USA and stored there.

The following data is transmitted:

• IP address (truncated)
• Origin (country and city)
• Language
• Operating system
• Type of device (PC, tablet PC or smartphone)
• Browser and all add-ons used
• Screen resolution
• Origin of the visitor (e.g. Facebook, search engine or referring website)
• Pages of our offering viewed
• Downloaded data
• Videos viewed
• Time spent on the site
• External website accessed after viewing our website

Since IP anonymization is activated on this website, the users' IP address is truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this offering, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services related to website use and Internet use to the website operator. The anonymized IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Users can prevent the storage of cookies by selecting the appropriate settings in their browser software; however, this offering points out to users that in this case they may not be able to use all functions of this website to their full extent. Users can also prevent the collection of the data generated by the cookie and relating to their use of the website (including their IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Users of mobile devices, please click on the following link to deactivate Google Analytics: "Deactivate Google Analytics"

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

Purpose of Processing

The provider uses Google Analytics with pseudonymous data in the form of usage statistics for the purposes of advertising, market research and the needs-based design of the offering.

Legal Basis

The legal basis for the use of Google Analytics is Article 6(1)(a) of the EU General Data Protection Regulation (consent of the data subject). When you first visit our website, a cookie banner is displayed. There you can consent to or reject the use of cookies. If the use of cookies is rejected, no data is collected by Google Analytics.

Transfer of Data

The data is transferred in pseudonymous form to the servers of Google Inc. in the USA.

Transfer to Third Countries or to International Organizations

The data is transferred in pseudonymous form to the USA.

Duration of Data Storage

The pseudonymous data collected as part of Google Analytics is stored permanently on Google's servers.

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The data collected with the help of Google Analytics is not used for other purposes.

1.2.5 Buttons for Facebook, Instagram, Xing and LinkedIn

Mobile Easykey maintains presences on Facebook, Instagram, Xing and LinkedIn. These presences are used to inform and communicate with customers, prospects, suppliers and partners.

Buttons are integrated on this website that only redirect to the Facebook or Xing presence after clicking on the button. Only then is your personal data transmitted to Facebook, Instagram, Xing or LinkedIn. If you do not click the buttons, no personal data is transmitted.

Further information can be found in the privacy notices of Facebook, Instagram, Xing or LinkedIn.

1.2.6 Newsletter Subscription

On the Mobile Easykey website, users are given the opportunity to subscribe to our company's newsletter.

For legal reasons, a confirmation email is sent using the double opt-in procedure to the email address first entered by a data subject for the newsletter mailing. This confirmation email serves to verify whether the owner of the email address, as the data subject, has authorized receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject's email address at a later date and therefore serves the legal protection of the controller.

The subscription to our newsletter can be canceled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the newsletter mailing can be withdrawn at any time. For the purpose of withdrawing consent, a corresponding link can be found in every newsletter. It is also possible to unsubscribe from the newsletter mailing at any time directly on the controller's website or to inform the controller of this in another way.

The newsletters of Mobile Easykey GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in HTML format in order to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, Mobile Easykey GmbH can recognize whether and when an email was opened by a data subject and which links contained in the email were accessed by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by the controller in order to optimize the newsletter mailing and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled at any time to withdraw the separate declaration of consent given in this regard via the double opt-in procedure. After a withdrawal, this personal data is deleted by the controller. Mobile Easykey GmbH automatically interprets an unsubscription from the newsletter as a withdrawal.

Types and Categories of Personal Data

Upon registration, the subscriber's email address, first name, last name, gender and title are collected. When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration.

Purpose of Processing

The processing serves to inform the data subjects. The processing of the additional data at the time of registration serves to protect against misuse of our offering.

Legal Basis

The legal basis for sending the newsletter is Article 6(1)(b) EU GDPR (performance of a contract or in order to take steps prior to entering into a contract).

The legal basis for the collection of the additional data at the time of registration is Article 6(1)(f) of the EU General Data Protection Regulation (for the purposes of the legitimate interests pursued by the controller). The controller has an interest in the smooth operation of its website.

The legal basis for the use of tracking pixels in the newsletters is Article 6(1)(f) of the EU General Data Protection Regulation (for the purposes of the legitimate interests pursued by the controller). The controller has an interest in optimizing its offering.

Transfer of Data

The data is not transferred – neither to third countries nor to international organizations.

Duration of Data Storage

The data is deleted as soon as an unsubscription from the newsletter takes place.

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The data is not used for other purposes.

1.2.7 YouTube Plug-ins

The controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and allows other users to view, rate and comment on them, also free of charge. YouTube permits the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The YouTube videos are embedded in a privacy-friendly manner. Your personal data is only transmitted to YouTube when you watch a video. Only then are cookies from YouTube also transferred to your computer. When you watch YouTube videos, YouTube and Google are informed of which specific sub-page of our website you are visiting.

If you are logged in to YouTube at the same time, YouTube recognizes which specific sub-page of our website you are visiting when you access a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

Types and Categories of Personal Data

The following personal data is transmitted to YouTube when viewing YouTube videos: browser identifier, your YouTube identity (only if you are logged in to YouTube), the video accessed and the specific sub-page of our website from which the video was accessed.

Purpose of Processing

The processing serves to provide information about our products.

Legal Basis

The legal basis for the use of cookies is Article 6(1)(f) of the EU General Data Protection Regulation (for the purposes of the legitimate interests pursued by the controller). The controller has an interest in optimizing the presentation of its products and improving the user-friendliness of its website.

Transfer of Data

The data generated when viewing a YouTube video is transferred to YouTube and Google in the USA.

Duration of Data Storage

The data is not deleted by YouTube and Google.

Profiling/ Automated Individual Decision-Making

No profiling and no automated individual decision-making is carried out.

Use of Data for Other Purposes

The data is not used for other purposes.

1.2.8 Leadinfo

We use the lead generation service of Leadinfo BV, Rotterdam, Netherlands. It recognizes visits by companies to our website based on IP addresses and shows us publicly available information in this regard, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and to improve the services. Further information can be found at www.leadinfo.com . On this page: www.leadinfo.com/de/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be collected by Leadinfo.

Information Obligations under Art. 13 GDPR

Depending on your relationship with us, we process different data. The information on the controller, the data protection officer and your rights in section 1.1 applies to all groups.

Information Obligation towards Employees

The processing of your personal data takes place in connection with the conclusion of a contract. If you do not wish to provide us with your personal data, this contract cannot be performed with you. Categories of data processedNames, contact details, bank account details, contract data, health data, religious affiliation and the contents of the personnel file Purpose of processingData processing in connection with human resources management Legal basis of processingArt. 9(2)(b) EU GDPR (special categories of personal data), Art. 88 EU GDPR ("processing in the context of employment") in conjunction with Section 22 DSAnpUG-EU ("processing of special categories of personal data") and Section 26 DSAnpUG-EU ("data processing for purposes of the employment relationship") Recipients of the dataHealth insurance funds, pension insurance institutions, employment agency, tax offices, banks, employers' liability insurance associations, insurance companies, processors (in the context of the provision and maintenance of our systems). Transfer to a third country or an international organizationNo transfer to a third country or an international organization takes place. Duration of data storageData is deleted when it is no longer required and no retention obligation exists any longer.
Accounting-relevant data is retained for 10 years (Section 257 HGB in conjunction with Section 147 AO).
Personnel files are retained for 6 years for tax-related data (Section 257 HGB in conjunction with Section 147 AO), otherwise 3 years (Section 195 BGB). Profiling/ automated individual decision-makingNo profiling or automated individual decision-making takes place. Use of data for other purposesThe personal data is not used for purposes other than those stated above.

Information Obligation towards Applicants

The processing of your personal data takes place in connection with a possible conclusion of a contract. If you do not wish to provide us with your personal data, this contract cannot be performed with you. Categories of data processedNames, contact details, health data if required, and information in the CV Purpose of processingData processing in connection with human resources management Legal basis of processingArt. 9(2)(b) EU GDPR (special categories of personal data), Art. 88 EU GDPR ("processing in the context of employment") in conjunction with Section 22 DSAnpUG-EU ("processing of special categories of personal data") and Section 26 DSAnpUG-EU ("data processing for purposes of the employment relationship") Recipients of the dataProcessors in the context of the provision and maintenance of our systems. Transfer to a third country or an international organizationNo transfer to a third country or an international organization takes place. Duration of data storageApplication documents are deleted after 3 months (AGG). Profiling/ automated individual decision-makingNo profiling or automated individual decision-making takes place. Use of data for other purposesThe personal data is not used for purposes other than those stated above.

Information Obligation towards Customers and Prospects

The processing of your personal data takes place in connection with the conclusion of a contract. If you do not wish to provide us with your personal data, this contract cannot be performed with you. Categories of data processedNames and contact details of those employees who are contacts in connection with the conclusion of the contract. Purpose of processingData processing in connection with the conclusion of a contract Legal basis of processingArticle 6(1)(b) EU GDPR ("for the performance of a contract to which the data subject is party") and alternatively Art. 49(1)(b) EU GDPR ("necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject's request"), Art. 6(1)(c) EU GDPR (necessary for compliance with a legal obligation to which the controller is subject), Art. 6(1)(f) EU GDPR (legitimate interests of the controller) in conjunction with Section 7(3) UWG (German Act against Unfair Competition). The controller has a legitimate interest in informing existing customers about changed products. Recipients of the dataTax offices, tax advisors, processors (in the context of the provision and maintenance of our systems). Transfer to a third country or an international organizationIn the context of the use of cloud storage, data may be transferred to the USA. Duration of data storageData is deleted when it is no longer required and no retention obligation exists any longer.
Accounting-relevant data is retained for 10 years (Section 257 HGB in conjunction with Section 147 AO).
Other data such as business correspondence is retained for 6 years for tax purposes (Section 257 HGB in conjunction with Section 147 AO), otherwise 3 years (Section 195 BGB). Profiling/ automated individual decision-makingNo profiling or automated individual decision-making takes place. Use of data for other purposesThe personal data is not used for purposes other than those stated above.

Information Obligation towards Service Providers

The processing of your personal data takes place in connection with the conclusion of a contract. If you do not wish to provide us with your personal data, this contract cannot be performed with you. Categories of data processedNames and contact details of those employees who are contacts in connection with the conclusion of the contract. Purpose of processingData processing in connection with the conclusion of a contract. Legal basis of processingArticle 6(1)(b) EU GDPR ("for the performance of a contract to which the data subject is party") and alternatively Art. 49(1)(b) EU GDPR ("necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject's request"), Art. 6(1)(c) EU GDPR (necessary for compliance with a legal obligation to which the controller is subject). Recipients of the dataTax offices, tax advisors, processors (in the context of the provision and maintenance of our systems). Transfer to a third country or an international organizationIn the context of the use of cloud storage, data may be transferred to the USA. Duration of data storageData is deleted when it is no longer required and no retention obligation exists any longer.
Accounting-relevant data is retained for 10 years (Section 257 HGB in conjunction with Section 147 AO).
Other data such as business correspondence is retained for 6 years for tax purposes (Section 257 HGB in conjunction with Section 147 AO), otherwise 3 years (Section 195 BGB). Profiling/ automated individual decision-makingNo profiling or automated individual decision-making takes place. Use of data for other purposesThe personal data is not used for purposes other than those stated above.