Privacy Policy
1. Data Controller and Contact Details
The controller responsible for the processing of personal data in connection with this website within the meaning of the General Data Protection Regulation (GDPR) is:
Metzner Maschinenbau GmbH
Messerschmittstr. 30
89231 Neu-Ulm
Germany
Telephone: +49 (0) 731 401990
Email: info@metzner.com
Website: www.metzner.com
Represented by its Managing Directors: Gerhard Rauch and Christoph Rauch.
2. General Information on Data Processing
We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications-Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person.
We process personal data in particular to make this website technically available, handle enquiries, provide support services, ensure the security of our systems and display external content following the appropriate consent.
Depending on the circumstances, processing is based on Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract or steps taken prior to entering into a contract), Article 6(1)(c) GDPR (compliance with a legal obligation) or Article 6(1)(f) GDPR (legitimate interests).
Where processing is based on consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
3. Website Availability and Server Log Files
When you access our website, the web server processes information that is technically necessary for its operation. This may include, in particular:
- IP address of the device making the request
- Date and time of access
- Pages and files accessed
- Previously visited page, if transmitted by the browser
- Browser type, operating system and other technical information
- Status messages and data transfer volumes
This processing serves to make the website technically available, maintain the stability and security of our IT systems, and detect and prevent attacks.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in operating a secure and functional website.
The data are stored only for as long as necessary to fulfil the purposes described above. The specific retention period depends on the web server configuration, security requirements and any investigations into security incidents that may be necessary.
4. Hosting and Technical Service Providers
We use technical services to operate this website. In this context, personal data, particularly IP addresses, connection data and technical log data, may be processed.
Hosting provider:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Website: www.hetzner.com
Where service providers process personal data on our behalf, such processing is governed by a data processing agreement pursuant to Article 28 GDPR, where the statutory requirements apply.
The processing is carried out for the purposes of providing, maintaining and securing the website.
5. Cookies and Similar Technologies
Our website may use cookies and similar technologies. These involve information that may be stored on or accessed from your device.
Technically necessary technologies are used where required to provide a digital service expressly requested by you or to enable electronic communications.
Other technologies, particularly those used for analytics, marketing or similar purposes, are used only where the applicable legal requirements have been met.
Where consent is required to store information on your device or access information already stored on it, such activities are based on Section 25(1) TDDDG. Where personal data are subsequently processed, an additional legal basis under Article 6 GDPR is required.
You may change or withdraw any consent you have given, with effect for the future, through the privacy settings on our website. Refusing non-essential technologies must not be made unnecessarily difficult through technical disadvantages.
The specific cookies used, their providers, purposes and storage periods depend on the services actually activated. Details are provided in the privacy settings or in the cookie overview available there.
6. Contact Form and General Enquiries
You can contact us through a contact form on our website.
Depending on the fields provided in the form, we may process the following information in particular:
- Name and, where applicable, company name
- Postal address, postcode, town or city, and country
- Email address and telephone number
- Website address, if provided
- Article number and nature of the enquiry, if provided
- Subject and content of your message
- Any additional information you voluntarily provide
We process this data to handle your enquiry, contact you and, where applicable, take steps prior to entering into a contract.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns entering into a contract or taking steps prior to entering into a contract. For other enquiries, processing is based on our legitimate interest in properly handling enquiries addressed to us, pursuant to Article 6(1)(f) GDPR. Where consent is required and obtained in an individual case, the legal basis is Article 6(1)(a) GDPR.
Providing the information marked as mandatory is necessary for us to process your enquiry. Without this information, we may be unable to handle your enquiry.
We use the information submitted through the contact form to handle your enquiry. We do not disclose the contents of your enquiry to other third parties for their own purposes. Technical service providers supporting us with hosting, form processing or email communications may process data as necessary to perform their respective tasks.
The data are deleted once your enquiry has been fully dealt with, unless statutory retention obligations or other legitimate grounds require further storage.
7. Support and Fault Reporting Form
Customers can use our support form to report technical problems and request assistance with their machines.
The following data may be processed in particular:
- Customer or company details and contact person
- Machine type and machine serial number
- Email address and telephone number
- Project or order number
- Description of the fault and error messages
- Details of measures already taken
- Information about the machine’s condition, remote connection and requested remote maintenance
- Images, videos and other files uploaded, where applicable
We process this data to analyse the reported fault, provide technical support, organise service activities and, where applicable, fulfil contractual or legal obligations.
The legal basis is Article 6(1)(b) GDPR insofar as processing is necessary for the performance of an existing contract or for taking steps prior to entering into a contract. Where processing is necessary to establish, exercise or defend legal claims or to handle other support requests appropriately, the legal basis may be Article 6(1)(f) GDPR. Where data must be retained by law, the legal basis may be Article 6(1)(c) GDPR.
Please submit only information and files necessary to resolve the reported fault. In particular, do not upload passwords, access credentials or personal data relating to third parties that are not required for the support request.
Support data are accessible only to those persons within our company who need them to handle the relevant case. We do not disclose the contents of support requests to other third parties for their own purposes. Where technical service providers are involved in hosting, email communications or form processing, the information on technical service providers set out in this Privacy Policy applies.
The data are deleted once the support case has been completed, unless statutory retention obligations, contractual documentation requirements or other legitimate grounds require further storage.
8. Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide, particularly your contact details and the content of your enquiry, in order to handle your request.
The legal basis is Article 6(1)(b) GDPR where the contact relates to the initiation or performance of a contract. For other enquiries, processing is based on Article 6(1)(f) GDPR.
We retain the data only for as long as necessary to handle your enquiry, unless statutory retention obligations or other legitimate grounds require longer storage.
9. Google Maps
On our contact page, you have the option of accessing a map provided by Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Services provided by Google LLC in the United States may also be involved when Google Maps is used.
Google Maps is initially displayed on our website as a placeholder. The map is loaded only after you actively consent to the display of the external content.
The actual map content is not loaded before consent is given. After consent, your IP address, technical browser and device information, and information about access to the map may be transmitted to Google. Google may also store information on or access information from your device.
The map is embedded only after you have given your consent. Where the storage of or access to information on your device is involved, Section 25(1) TDDDG applies. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.
Alternatively, you can access the map directly through the Google Maps website. If you use the external website, Google’s privacy policy applies.
For further information about how Google processes personal data, please visit:
https://policies.google.com/privacy
You may withdraw your consent at any time, with effect for the future, through the privacy settings on our website.
10. Recipients and Disclosure of Personal Data
As a general rule, we do not disclose personal data to other third parties for their own purposes.
Processing by technical service providers may be necessary to operate the website, process forms, send emails or ensure IT security. Where such providers process personal data on our behalf, the necessary data protection agreements are put in place.
Personal data may be transmitted to external providers such as Google where you actively consent to the display of the relevant external content after being informed accordingly, or where another lawful basis for the transfer applies.
Data may also be disclosed where we are legally required to do so or where disclosure is necessary to establish, exercise or defend legal claims.
11. Transfers to Third Countries
When certain external services are used, particularly Google Maps, personal data may be processed outside the European Union or the European Economic Area.
Any such transfer takes place only where the requirements of Articles 44 et seq. GDPR are met. Depending on the service and recipient, this may involve, in particular, an adequacy decision adopted by the European Commission or appropriate safeguards.
The transfer mechanism applicable in a specific case depends on the service actually used and the recipient concerned.
12. Data Retention
We retain personal data only for as long as necessary for the relevant purpose.
Once the relevant purpose has been fulfilled, the data are deleted unless statutory retention obligations or other legitimate grounds require further storage. The specific retention period depends on the type of data and the relevant processing activity.
13. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration and unlawful disclosure.
These security measures are implemented and, where necessary, updated taking into account the state of the art, the nature of the data processed, the risks involved and operational requirements.
14. Your Rights as a Data Subject
Subject to the applicable legal requirements, you have the following rights:
- Right of access to your personal data pursuant to Article 15 GDPR
- Right to rectification of inaccurate or incomplete data pursuant to Article 16 GDPR
- Right to erasure of your data pursuant to Article 17 GDPR
- Right to restriction of processing pursuant to Article 18 GDPR
- Right to data portability pursuant to Article 20 GDPR, where the statutory requirements are met
- Right to withdraw consent at any time, with effect for the future, pursuant to Article 7(3) GDPR
- Right to object to certain processing activities pursuant to Article 21 GDPR, where the statutory requirements are met
- Right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR
To exercise your rights, you may contact us using the contact details provided in Section 1.
15. Right to Object Pursuant to Article 21 GDPR
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Following an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes.
16. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. In particular, you may contact the supervisory authority in the place of your habitual residence, your place of work or the place of the alleged infringement.
17. Obligation to Provide Data
As a general rule, providing personal data is voluntary. Certain fields in our forms are marked as mandatory. We require this information to process your enquiry or support request. Without the necessary information, we may be unable to process your request.
18. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if there are changes to the applicable law, the technical implementation of our website or the services we use.
The version published on this website at the relevant time shall apply.