data protection-declaration
The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you,
– When or during which actions we process data
– What data we process and for what reasons
– Who receives data
– What rights you have because of the data processing by us.
This privacy policy only governs the use of personal data, on our website www.mmmake.com including sub-pages. If you leave our website via a link, you also leave the scope of this privacy policy.
The transmission of information to or from this website is secured with TLS encryption.
You can access, print or download this privacy policy permanently and at any time at the address https://mmmake/de/datenschutzerklaerung/.
I. Contact information
The person responsible for data processing within the scope of this website within the meaning of the General Data Protection Regulation (DSGVO) is:
mmmake GmbH
Grossgartacher Str. 61
74080 Heilbronn
Phone: +49 7131 7999-0
E-mail: hello@mmmake.com
We have also appointed a data protection officer. You can reach this at: privacy@mmmake.com
Confidential contact is also possible at:
HK2 Comtection GmbH
Mr. Lukas Wagner LL.M.
Hausvogteiplatz 11 A
10117 Berlin
E-mail: wagner@comtection.com
II. General information on data processing
1. scope of the processing of personal data
The provision of the website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the website, for example, if you communicate with us via the contact form or consent to the processing of data.
You are not obliged to provide us with personal data. However, insofar as the provision of this data is technically mandatory for accessing our site, a refusal will result in you not being able to enter and use our website.
As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.
2. legal basis for the processing of personal data
The legal bases for the processing of personal data are presented below.
| Processing reason | Legal basis in the GDPR | Explanation |
| Contract fulfillment or implementation of pre-contractual measures | Art. 6 par. 1 b) | Processing takes place only to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us is only carried out to this extent. |
| Legitimate interest | Art. 6 par. 1 f) | Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this privacy statement as part of the processing description. |
| Consent | Art. 6 par. 1 a) | Processing takes place insofar as you have expressly consented to the type and scope of data processing for this purpose. You can revoke your consent at any time with effect for the future. However, processing that has taken place up to that point will not be affected. |
| Legal duty | Art. 6 par. 1 c) | Processing takes place insofar as this is necessary for the fulfillment of German or European legal obligations. |
3. data deletion and storage period
We delete your personal data as soon as the legal basis for their processing ceases to apply. In some cases, however, legal bases can also exist in parallel or, if one legal basis ceases to exist, a new one can take effect, for example. the obligation to store certain data for the fulfillment of a statutory retention obligation.
III. Data processing for provision of the website
In order for us to display the website to you, it is necessary to process certain information. This already takes place when you call up our website. In addition, we offer various functionalities on our website that require further data processing.
1. log files
When you visit our website, your browser sends various information, so-called server log files, to our server. We need this to establish and maintain the connection. Among the data is also your IP address, which we treat as personal data. The IP address is stored hashed (e.g. 0.0.0.0) in the database. In addition, the following data is collected:
– Date and time at the time of access
– Amount of data sent in bytes
– Source/reference from which you reached the page
– Browser used
– Operating system used
– Device type
– Screen resolution
– Country
– Browser language
– Language code
This data is not merged with other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website, analyzing its use and preventing its misuse. Stored log files are deleted after 30 days at the latest, unless longer storage is necessary, for example, to ward off or clarify an attack on our website.
2. contact form
You can send us a request at any time via the contact form on our website. The following information is requested: title, first name, last name, e-mail address, and your message. The information is marked as mandatory fields. All other data that you provide to us as part of the request, including via the free text field, is provided voluntarily.
We use this data exclusively for answering your inquiry and the related communication. The legal basis of this processing of your data depends on the content of your request. In principle, our legitimate interest here is in providing the contact functionality and responding to your inquiry transmitted via it. If your request is directed towards the conclusion of a contract with us, the processing is carried out in the context of this pre-contractual obligation.
Your data will be deleted as soon as your request has been processed. In the event of a contract being concluded, we may process the data further in order to fulfill the contract.
3. application procedure
You have the opportunity to apply for open positions with us via https://mmmake.com/de/jobs/. In the course of your application, we will collect and process all personal application data from you that you provide to us as part of your application. In detail, these are usually surname, first name, address, telephone number, e-mail address and the application documents (letter of application, CV, references, certificates, etc.). In addition, further information may be required depending on the position applied for. You are also free to provide additional personal data on a voluntary basis. Your personal application data is collected and processed exclusively for the purpose of filling positions within mmmake GmbH. As a matter of principle, your data will only be forwarded to the internal departments and specialist departments responsible for the specific application process. The legal basis for the processing of your application documents is the necessity for the establishment of the employment relationship pursuant to. § 26 para. 1 BDSG. Your personal application data will generally be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of evidence or if you have expressly consented to longer storage.
If we are unable to offer you a vacant position, you have the option of agreeing to your application data being stored for a maximum of two years so that it can be considered for a future job posting if the profile fits.
For applicant management, we use software from Talentry GmbH, Nymphenburger Str. 86, 80636 Munich, Germany, which we have appointed as a processor in accordance with German data protection law. Art. 28 DSGVO have integrated.
IV. Cookies
We use cookies on our website for various purposes. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. If the cookies mentioned below have their own option to delete or block them, this is shown in the respective description. Cookies may be necessary for establishing connection or improving the use of the website.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The use of technically necessary cookies and the associated data processing is based on our legitimate interest in providing our website. Technically necessary cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.
Borlabs cookies
To manage your cookie preferences and obtain consent for the use of cookies, we use the Borlabs Cookies tool. In doing so, your consent status is also stored in your browser in the “borlabs-cookie” cookie so that the website can automatically read and follow your consent in all subsequent page requests and future end-user sessions for up to 6 months.
1. technical cookies
Technical cookies are used to provide you with additional functionalities or a more convenient use of the website, e.g. to enable you to use the website more easily. by saving their country or language setting. The technically conditional cookies are also usually deleted automatically when you close your browser (session cookies), but in other cases only after a longer period of time (persistent cookies). The storage period can be viewed in your browser. The legal basis for data processing is your consent pursuant to. § Section 25 TTDSG in conjunction with Art. 6 para. 1 a) GDPR.
1.1. Google Tag Manager
This website uses Google Tag Manager, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to embed analytics and other tools into the website. The Google Tool Manager triggers other tools, which in turn may collect data. However, Google Tag Manager does not access this data. The following link will provide you with more information about Google’s privacy policy: http://www.google.de/policies/privacy/
1.2. YouTube
If you give us your consent, you will be shown content from YouTube. YouTube is a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The content is all integrated in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. By activating and playing the videos, YouTube receives your IP address and the information that you have accessed the corresponding subpage of our website. If you are logged in to Google, your data will be assigned directly to your account.
For more information on the purpose and scope of data collection and processing by YouTube, please refer to the Google privacy policy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. For this purpose, we have concluded the standard contractual clauses with Google.
2. usage analysis
Analysis and tracking cookies are used to record and evaluate your usage behavior when using our services or visiting our website. In doing so, we learn, for example, how often certain functionalities are used or content is read or whether you have come to us via an advertisement placed by us. We use this data to further improve the usability of this website and the attractiveness of its services.
The legal basis for data processing is your cookie consent, according to. § Section 25 TTDSG in conjunction with Art. 6 para. 1 a) GDPR. You can disable the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or disable them. This is then shown below in each case.
Data processing for usage analysis takes place during your visit to our website and only until the time of your effective objection.
2.1. Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google collects information about your use of this website (including your IP address) in the USA via a cookie and stores the information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. For this purpose, we have concluded the standard contractual clauses with Google. Google analyzes the information collected and sends us reports on usage activity on our website. and provides further services to us for this purpose. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
In addition to blocking all cookies from your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future. For more information about Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=d.
3. marketing cookies
Marketing cookies are used to increase the success and accuracy of our advertising. For this purpose, we collect information on whether our advertising works, which users come to our website via an advertising medium we have placed, etc.
The legal basis for data processing is your consent pursuant to. § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 a) GDPR. You can disable the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or disable them.
3.1. LeadRebel
We analyze our visitor data with the help of an external service provider. For this purpose, we share the data obtained from the use of IP research with Pulserio AG, Wassergrabe 3, 6210 Sursee, Switzerland, https://leadrebel.io/imprint. Categories of data subjects are website visitors and users of our web services.
The purpose of the processing is the evaluation of the data obtained from IP research for lead generation. On this page: https://leadrebel.io/optout you have an opt-out option. In the event of an opt-out, your data will no longer be collected by LeadRebel.
3.2. LinkedIn Marketing Solutions
We used the LinkedIn Marketing Solutions service, which is operated by LinkedIn Corporation. 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”).
When visiting our website, an ID, in the form of a cookie, is stored on the user’s device. This ID allows us to recognize you when you use the site and to collect certain usage data. If you visit LinkedIn below, you will be shown advertisements based on the data collected. The data stored and processed in the USA does not make it possible to identify you as an individual.
If you do not want to participate in tracking, you can disable storage of LinkedIn cookies in your browser settings or via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
You can obtain more information about LinkedIn’s privacy policy at the following web address: https://www.linkedin.com/legal/privacy-policy?_l=de_DE.
V. Social media presences
We operate our own presences in the social networks Facebook, Instagram, LinkedIn, Twitter, Youtube (Google Ireland Limited) and Xing. These networks process your personal data, for example, to create usage profiles corresponding to your interests. Cookies may be stored on your device for this purpose. More detailed information on data processing by the individual networks can be found in the respective data protection information and, where applicable, in the cookie policies of the networks:
https://www.facebook.com/about/privacy/
https://help.instagram.com/519522125107875
https://twitter.com/de/privacy
https://policies.google.com/privacy?hl=de&gl=de
https://privacy.xing.com/de
https://de.linkedin.com/legal/privacy-policy?trk=%7Berror-page%7D-privacy-policy
This data protection information also contains information about the type and scope of data processing by the respective networks as well as about the possibilities to assert your data subject rights (right to information, confirmation, correction, deletion, restriction, data portability and complaint to the competent data protection supervisory authority).
We do not know what user data the social networks collect. We do not get full access to the collected user data or user profiles. We can only access public profile information. What information you choose to make public can be customized through your account settings.
If available, we use user data of the chat functions to answer your questions. The collected customer data is used to contact the user in order to provide the requested information and offers.
We may receive anonymous statistics from the social networks based on legitimate interest in the use of our site such as.
– Followers: Number of people who follow us – including growth and development over a defined period of time.
– Reach: Number of people who see a particular post. Number of interactions on a post. For example, you can deduce which content in the community is better than others.
– Advertising performance: How many people saw and interacted with an ad or article?
– Demographics: average age of visitors, gender, place of residence, language, industry.
These statistics are used to constantly improve our online content and better respond to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. You can use your account settings on social networks to decide in what form you want to display targeted ads.
Special notes on Facebook, Instagram and LinkedIn
For the operation of the Facebook fan page and our Instagram page as well as for the operation of our LinkedIn company page, we are jointly responsible with Facebook and LinkedIn, respectively, for data protection.
For Facebook and Instagram, the responsible party in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The joint responsibility is regulated in the Facebook Page Insights Supplement regarding the Facebook responsible party: https://www.facebook.com/legal/terms/page_controller_addendum
For more information on processing Page Insights data, visit https://www.facebook.com/legal/terms/information_about_page_insights_data.
Data processing outside of Europe by Facebook Inc, 1601 Willow Road, Menlo Park, CA 94025, USA is possible under certain circumstances.
For LinkedIn, the responsible entity in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Joint accountability is governed by the LinkedIn Page Insights Joint Controller Addendum: https://legal.linkedin.com/pages-joint-controller-addendum
Data processing outside of Europe by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is possible under certain circumstances.
The legal basis for the processing of your personal data on our Fanpage are the legitimate interests of us and Meta or LinkedIn pursuant to Art. 6 para. 1 f) GDPR to advertising, recommendations and measurements, as well as to offer interested parties an information and communication channel. You can object to the data processing at any time. Please contact Meta or LinkedIn for this purpose. Information on this can be found in the privacy policies of Meta(www.facebook.com/about/privacy/) and LinkedIn(https://de.linkedin.com/legal/privacy-policy). In your browser settings, you can also prevent the storage of cookies yourself at any time or delete existing cookies.
VI. Possibility of objection and removal
Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to revoke your granted consent at any time. Your objection or revocation will only have effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can contact datenschutz@mmmake.com at any time to exercise your right of objection or revocation or change the cookie settings via the corresponding link in the footer. If you object to processing based on our legitimate interest, we may still continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms.
VII. data subject rights
If data relating to your person is processed, you are the data subject within the meaning of Art. 4 Para. 1 GDPR. As a data subject, you have the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.
Right to information according to Art. 15 DSGVO
You have a right of access to your personal data processed by us. This includes the mandatory information outlined in Art. 15 GDPR.
Right to rectification according to Art. 16 DSGVO
You have the right to request the immediate correction of inaccurate personal data and the completion of inaccurate personal data.
Right to deletion according to Art. 17 DSGVO
You have the right to request the deletion of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 DSGVO
You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 DSGVO applies, in particular at your request instead of deletion of the data.
Right to data portability according to Art. 20 DSGVO
In accordance with the provisions of Article 20 of the GDPR, you have the right to request the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
Right to complain to the competent supervisory authority, Art. 77 DSGVO
You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 DSGVO.
VIII. recipients of data
The processing of your personal data within the framework of the website, is partly also carried out by order processors, in particular the use of analysis tools. These shall be performed exclusively on the basis of an agreement on order agreement in accordance with Art. 28 par. 3 GDPR included.
Status: July 2023