m3connect GmbH Privacy Policy

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes, for example, the civil name, address, telephone number and date of birth, but also all other data that can be related to an identifiable person.

As personal data enjoys special legal protection, we only collect it to the extent necessary for the provision of our website and the provision of our services. Our data protection practices comply with the statutory regulations, in particular those of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other national data protection regulations. Below we inform you about how we collect your personal data and how we use it.

General Information

Responsible Party

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

m3connect GmbH
Pascalstraße 18
52076 Aachen

Phone: +49 241 980986 0
Email: info@m3connect.de

Managing Director: Emilijo Dragas

If you have any questions about data protection, please contact our data protection officer at dsb@m3connect.de.

Your Rights as a Data Subject

Under the GDPR, you have the following rights in relation to your personal data, as outlined in Articles 15-21:

  • Right of access to your stored personal data (Article 15 GDPR)
  • Right to rectification if the stored data concerning you is inaccurate, outdated, or otherwise incorrect (Article 16 GDPR)
  • Right to erasure if the storage is unlawful, the purpose of the processing has been fulfilled, the storage is no longer necessary, or you have withdrawn your consent to the processing of certain personal data (Article 17 GDPR)
  • Right to restriction of processing if one of the conditions listed in Article 18(1)(a-d) GDPR is met (Article 18 GDPR)
  • Right to data portability, allowing you to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format (Article 20 GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller. The following supervisory authority is responsible for data protection at our company headquarters:
State Commissioner for Data Protection and Information Security, North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Phone: 0211-38424-0, Fax: 0211-38424-10, Email poststelle@ldi.nrw.de.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Object to and Withdraw Consent

Right to Object (Article 21 GDPR)
If the processing of your personal data is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR) or if your personal data is processed to safeguard legitimate interests (Article 6(1)(f) GDPR), you have the right to object to this processing for reasons arising from your particular situation (Article 21(1) GDPR). This also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

You can object to processing for direct marketing purposes at any time with effect for the future without providing reasons (Article 21(2) GDPR).

Withdrawal of Consent

If the processing of your personal data is based on consent, you can withdraw this consent at any time with effect for the future. No disadvantages arise from the withdrawal. You can change your consent independently at any time in relation to the cookie selection made in the consent banner under “Cookie settings” (in the footer).

To exercise both your right to object and to withdraw your consent, simply send a message to dsb@m3connect.de stating which data processing you wish to object to, or which consent you wish to withdraw. You also have the option of exercising your rights in writing to the above address.

Legal Basis for the Processing

The personal data concerning you will be processed for the following purposes on the following legal bases:

  • Article 6(1)(a) GDPR for data processing based on your consent; consent is obtained separately in these cases
  • Article 6(1)(b) GDPR for the fulfillment of an underlying contract or for pre-contractual measures
  • Article 6(1)(c) GDPR for the fulfillment of legal obligations to which we are subject
  • Article 6(1)(f) GDPR for data processing based on our legitimate interest

Data processing based on legitimate interests in accordance with Article 6(1)(f) GDPR may only take place if it is necessary to safeguard our legitimate interests or those of third parties and does not outweigh your interests or fundamental rights and freedoms that require the protection of personal data.

SSL or TLS encryption

We use SSL or TLS encryption for our website for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

General Information Collection When Visiting Our Website

Server Log Files

Our web server automatically collects and stores information in server log files, which your browser automatically transmits to us.
These include:
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • The IP address of the accessing device
  • Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use. The storage period for server log files is 3 months.

This data is processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our IT systems. The basis for data processing is our legitimate interest in improving the stability and functionality of our website in accordance with Article 6(1)(f) GDPR.

Special Functions of our Website

Our website offers you various functions that collect, process and store your personal data when you use them. Below is an explanation of what happens to your data:

Contact Form:

You have the option of contacting us using the contact form provided. We collect your surname, first name, email address and your message. If you contact us through the contact form, your details will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of your data entered in the contact form is based on your consent in accordance with Article 6(1)(a) GDPR and on our legitimate interest in accordance with Article 6(1)(f) GDPR in order to process your request and to be able to contact you at a later date. You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. If your request is aimed at an offer or the conclusion of a contract, we will process your data in accordance with Article 6(1)(b) GDPR, as part of pre-contractual measures.

The data processed by us will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Applications/Online Applications

If you are interested in applying to our company, please click on the “Careers” button to access our career portal. Here you have the option of applying online.

If you decide to apply online, we will collect the following personal data:

  • Surname, first name
  • Contact details (phone and email)
  • Documents (CV, certificates, cover letter)
  • Other information provided to us via the documents

The above is mandatory information so that we can assign and process the application documents.

  • Availability
  • Salary expectations

This is optional information that does not have to be provided.

In the course of the online application process, we process your data in accordance with Article 6(1)(b) GDPR. This involves processing data that is necessary to establish, implement, and terminate an employment relationship. If the processing of your personal data pursuant to Article 6(1)(a) GDPR is based on consent, we will obtain this separately, e.g., via our “Send application” button. We only process your personal data for the purpose of employment. If you apply to us or provide us with your contact details for the purpose of contacting you, we will use this data for internal review or to contact you.

We only store your data for as long as required for the above-mentioned purposes. If one or more purposes cease to apply, your data will be deleted, unless statutory retention periods prevent deletion (6 months). Once these periods have expired, your data will be deleted.

For our online application process, we use the special recruiting site of Personio SE & Co. KG (‘Personio’) for our online application process. Personio acts as a processor for us. Corresponding contractual arrangements have been made in this regard. You can find more information about the processing of your personal data by Personio under “Processing of personal data on the recruiting site by Personio SE & Co. KG.”

Information on the Use of Cookies

We use cookies on our website to enable the use of certain functions of our website. Cookies are small text files that are stored on the device you are using. Among other things, they can enable us to make your visit to our website more convenient or more secure. Cookies can also be used to make the website more user-friendly and better tailored to visitors.

We use two types of functional cookies on this website: Adobe Typekit, so that our texts are displayed to you in the correct font, and Matomo, in order to be able to generate analyses of visitor behavior.

  • Adobe Typekit
  • Matomo, formerly Piwik

In principle, you can also visit our website without cookies. However, Internet browsers are usually set to accept cookies. You can change your cookie settings for our website at any time here:

Change Cookie Settings

Consent with Consent Banner

We use a consent banner on our website so that we can obtain your consent to the storage of cookies on your end device or to the use of certain technologies and to document this in accordance with data protection regulations.

When you visit our website, a connection is established to our server in order to obtain your consent to the use of cookies and to be able to assign the consents given or their revocation. Among other things, information about your IP address (masked), the time, and a consent key are processed. The data collected in this way is stored until the purpose for data storage no longer applies. The consent banner is used to obtain the legally required consent for the use of cookies. This is done in accordance with Article 6(1)(c) GDPR.

Use of Adobe Typekit

We use Adobe Typekit for the visual design of our website, as this is where we obtain our font. We use Typekit to integrate our font. Typekit is a service provided by Adobe Systems Software Ireland Ltd, 4-6 Riverwalk Citywest Business Campus Dublin 24, which gives us access to a font library.

Adobe Typekit is a web font service that allows us to use our company’s own font. As part of our corporate design and for the purpose of recognition value, we also use this font on our website.
The following data, among others, is collected:
  • IP address
  • Service for providing the fonts
  • Time required by the browser to download fonts
  • Browser version
  • Server that provides the fonts
  • Version of the operating system
  • Whether an ad blocker is installed
  • Application requesting the fonts
  • Fonts made available
  • Host name of the page on which the fonts are loaded
  • Referrer URL

Pixels is used to embed the font. We process this data on the basis of your consent in accordance with Article 49(1)(a) GDPR in conjunction with § 25(1) TTDSG. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. Adobe then receives the information that our website has been accessed from your IP address. Please note that this service may transfer data outside the European Union and the European Economic Area. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. In addition, recipients of the data are technical service providers who ensure the maintenance and operation of our website. They act as contractors for us, and corresponding contractual arrangements have been concluded. If you do not agree to the cookie settings, you will be shown a standardized font. Your data required to display our font will be deleted as soon as the purpose no longer applies.

You can decide for yourself whether the browser you are using allows cookies or not. Please note that the functionality of websites may be restricted or services may not be usable if cookies are deactivated. You can set your browser yourself according to your wishes so that you generally prevent the setting of cookies, are only informed about them, decide on a case-by-case basis whether to accept cookies or accept cookies in principle. You can adjust the cookie settings on our website at any time. To do this, you will find the “Change cookie settings” button in the introduction.
Further information about Adobe Typekit can be found in Adobe’s privacy policy, which you can access here:  www.adobe.com/privacy/typekit.html
In addition, the company is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list

Use of Matomo

This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. Matomo uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is stored on a server in Germany. We have configured Matomo in such a way that no profiling takes place and we use Matomo for the statistical analysis of visitor access in order to adapt and improve the content on our website.
The following data, among others, is collected:
  • IP address
  • Date and time of the call
  • Actions per visit
  • Bounce rate
  • Average visit time
  • Country
  • Browser

The legal basis for the processing is based in each case on your consent pursuant to Article 49(1)(a) GDPR in conjunction with § 25(1) TTDSG.Auch, wenn die

Despite the fact that the information is stored on a server in Germany, we cannot rule out the possibility that this service may transfer the collected data to another country. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The recipients of the data are technical service providers who ensure the maintenance and operation of our website. They act as contractors for us, and corresponding contractual arrangements have been concluded. The data is deleted as soon as it is no longer required for our recording purposes. In our case, this happens automatically after 90 days. The IP address is anonymized immediately after processing and before it is stored by truncating the last 2 bytes. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website.

You can object to the processing of data by Matomo in two different ways: Firstly, you can completely prevent the storage of cookies in your browser. However, this may mean that you will no longer be able to use some functions of our website that require identification. On the other hand, you can activate the “Do-not-track” setting in your browser. You can adjust the cookie settings on our website at any time. To do this, you will find the “Change cookie settings” button in the introduction.

You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy-how-to/

Use of Google Maps

This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. We have no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. The processing is based on your consent pursuant to Article 49(1)(a) GDPR in conjunction with § 25(1) TTDDG. You have the option of consenting to the processing via the consent banner used.

You can find more information on the handling of user data in Google’s Privacy Policy. In addition, the use of Google Maps and the information obtained via Google Maps is subject to Google Terms of Use and the Terms and Conditions Google Maps.
Google also offers further information at adssettings.google.com/authenticated and policies.google.com/privacy.
The company is also certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/list

Note on Data Transfer to the USA and Other Third Countries

Among other things, we use services from companies based in the USA or other third countries that are not secure under data protection law. If these services are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

You can find more information about Google’s privacy policy at:
https://policies.google.com/privacy?hl=en-US.

Deactivate Cookies

You can decide for yourself whether the browser you are using allows cookies or not. Please note that the functionality of websites may be restricted or services may not be usable if cookies are deactivated.

You can set your browser yourself according to your wishes so that you generally prevent the setting of cookies, are only informed about them, decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for different purposes, e.g. to recognize that your PC has already had a connection to our website (persistent cookies) or to save recently viewed offers (session cookies). We use cookies to offer you an enhanced user experience. In order to use our convenience functions, we recommend that you allow the acceptance of cookies for our website.

Below you will find information on the respective browser if you wish to delete or deactivate cookies:

Data Security and Data Protection, Communication by Email

Your personal data is protected by technical and organizational measures during collection, storage, and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Updating the Privacy Policy

We reserve the right to adapt this privacy policy so that it complies with the current and latest legal requirements or to change it if, for example, new services are introduced.

Status: July 2024