MAC IT-Solutions GmbH is responsible for the data processing on this website as stipulated by the European Data Protection Statutes (DSGVO). We respect your personal rights. We are aware of the importance of the personal data we receive from you as a user of our website. We take the protection of your personal data very seriously and will capture, store and process the entirety of this data solely for the purposes of our business objectives and in strict compliance with the data protection act.
Personal data refers to all information relating to a specific or identifiable natural or legal person. Any person shall be deemed identifiable if this person can be identified by means of attributing specific identifiers such as a name, an identification number, a location, an on-line identification, or individual features or characteristics which reveal their specific physical, physiological, genetic, psychological, economical, cultural or social identity.
1.2 Legal basis of data processing
Wherever we obtain your consent for processing your personal data, the relevant section (Art. 6, §1, Sec. 1, lit. a) of the DSGVO (European Data Protection Act) shall serve as the legal framework.
Processing personal data required to fulfill a contract we have with you also relies on the relevant part of article 6 (Art. 6, §1, Sec. 1, lit. b) of the DSGVO. This also applies to processing tasks required at the pre-contract / set-up stage.
Wherever the processing of personal data is required for the fulfilment of a legal obligation to which our organisation is subject, this will be governed by the provisions of Art. 6, § 1, Sec. 1, lit. c of the DSGVO.
Where the processing is deemed necessary for protecting a justified interest on our part or that of a third party, and where your interests and fundamental rights do not outweigh the legitimate interest in question, Art. 6 §. 1 Sec. 1, lit. f of the DSGVO is the applicable legal basis. Legitimate interests of our organisation usually take the form of delivering performance owed to us and/or the ongoing optimisation of of our services and representations.
1.3 Data deletion and duration of retention / storage
Your personal data will be deleted or blocked as soon as the reason for its capture is no longer valid. Data storage beyond this point may occur if the European or national law makers stipulate such storage in EU regulations, laws or other provisions. Data will also be blocked and deleted when a stipulated storage period expires, unless there is a requirement to continue storing the data for the set-up or fulfilment of a contract.
2. Capture of personal data
In principle, we do not capture any personal data during visits to our website. This only happens where we need to do so in order to safeguard the functionality of the site, and our contents and services. Regular capture and use of personal data only occurs if prior consent has been given by the user. Exceptions are cases where it is not possible to obtain this consent for actual reasons and the processing of this data is permitted by legal provisions.
The following information explains the type, scope and purpose of the way we handle user data as part of this website:
2.1 Server log files
Every time our website is called up, the user data required to access, use and account for the usage of the site will automatically be transferred by your browser to our server and stored in a protocol file (log).
- Browser type / browser version
- Operating system
- Host name of the accessing computer
- Date and time of the server request
- IP address of the computer requesting the website
- Website from which the access originates (referring URL)
- Requested files
- Transferred data volume
The purposes of storing the log file are:
- Evaluation of the requested data for statistical purposes
- System security and website stability
- Checking for any usage that is in breach of contract or of other applicable rules and regulations, in cases where there are actual indications of such undesirable usage
The legal basis for this data processing procedure is Art. 6, § 1, Sec. 1, lit. f of the DSGVO. Our legitimate interest arises from the data processing purposes described above. In no case will the data be used to derive information about your person. There will be no consolidation with other data sources.
2.2 Usage data
We capture and use your personal data on the basis of Art. 6, § 1, Sec. 1, b) of the DSGVO, in order to enable the usage of our internet-based offering (usage data).
We are permitted to create usage profiles for the purposes of marketing and the improvement of our internet offering so this can meet user needs more effectively, as long as pseudonyms are being used.
You have the right to object to this usage of your data at any time. The usage profiles may not be consolidated with any information about the user from whom the pseudonym originated.
2.3 Data related to your contact request
If you are sending us a request via the contact form, the information provided in the form and/or via the e-mail address specified for responding to your query, including any contact data you provide, will be captured and stored for the sole purpose of handling your request and any follow-up queries that may arise. This data will never be made available to any third parties without your prior consent. The usage of this data for responding to your request is based on the DSGVO, Art. 6, § 1, Sec. 1, b).
When the user has logged into our website, his/her computer will store so-called "cookies".
A cookie is a small text file within a designated directory of the computer. This file identifies the specific computer during the session. Cookies cannot change anything on the user's device and can be deleted manually at any time, most easily directly in the browser.
You can set the way your computer handles this to reject all cookies or to seek permission every time a site wants to utilise them. These cookies ("session cookies") serve to expand the functionality of our internet-based offering and are designed to make your use of the site as convenient as possible. Please note that some of our applications will not work properly if cookies are rejected.
Using cookies to process this data is required to safeguard our legitimate interests and those of third parties, where applicable, in line with Art. 6, § 1, Sec. 1, lit. f of the DSGVO.
Tracking tools are deployed on the basis of Art. 6, §. 1, Sec. 1 lit. f of the DSGVO for the purpose of safeguarding our legitimate interest in optimising the user friendliness and functionality of our website (by means of statistical analysis).
4.1 Google Analytics
Our website uses Google Analytics, a web analysis service provided by Google LLC ("Google"), registered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies" (text files stored on your computer) to enable the analysis of your usage of our website. The relevant information generated by these cookies is usually transferred to a US Google server and stored there. If IP address anonymization has been activated on the site, your IP address will be shortened (masked) within an EU country or a contract partner state within the Eurozone (EFTA) prior to the transfer to a US server. The full IP address will only be transferred to a US Google server in exceptional cases, to be masked there. Google will use this information to evaluate your usage of the website, create reports on the activities on the website, and to provide further services linked to the usage of the website and the internet on behalf of the operators of this website.
The IP address transferred by your browser as part of the Google Analytics activity will not be consolidated with any other Google data.
You can prevent the storage of cookies by changing the settings in your browser software. Please note that in this case, some functionality of the site will no longer be available to you. You can also prevent the transfer to and processing of the data captured by means of cookies (including your IP address) by Google, by downloading the plug-in available through the following link. This installs an opt-out cookie which prevents any further data capture when you visit the website.
Please note that Google Analytics on this site has been extended to include the code "anonymizeIp" in order to ensure the anonymized capture of IP addresses (through masking). We use Google Analytics for the sole purpose of analyzing data from double-click cookies and AdWords for statistical purposes. If you wish, you can deactivate this through your ad preferences settings.
As the operator of this website, we do not have any knowledge of the content of the transferred data or its usage by Google. You can find further information in the data protection declaration and the Google terms & conditions for usage at http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/
Tracking tools are used on the basis of Art. 6, § 1, S. 1 lit. f of the DSGVO, for the sole purpose of creating and continuously optimizing the functionality and user friendliness of our website (by means of statistical analysis) as part of our legitimate business interests.
Out website makes use of the functionalities of the XING network, provided by the XING AG, registered at Dammtorstraße 29-32, 20354 Hamburg, Deutschland.
Every time our website is reqested, a link to the XING servers is being created. To the best of our knowledge, there is no subsequent storage of any personal data, in particular regarding IP addresses and usage activity.
You can find further information in XING's data protection declaration at https://www.xing.com/app/share?op=data_protection
Our website uses the plug-in functionality of the YouTube platform provided by Google LLC („Google“), of San Bruno/California, USA.
A link to the YouTube server is created with every call-up of our website. This sends a notification of your visit to the YouTube server. To the best of our knowledge, no personal data is stored subsequently. Should you be logged into your YouTube account, you will enable YouTube to attribute your browser history to your personal profile. You can deactivate this attribution if you log out of your account beforehand.
You can find further information in the YouTube data protection declaration at https://www.youtube.de/t/privacy
Our website uses plug-ins of the social network Facebook, Facebook Inc., registered at 1 Hacker Way, Menlo Park, California 94025, USA.
You can identify the Facebook plug-in by the Facebook logo on our website. To see an overview of the Facebook plug-ins go here:
When you visit our website, the plug-in creates a direct link between your browser and the Facebook server. This gives Facebook the information that you have visited our website, including your IP address. If you are logged into Facebook and click "Like" whilst visiting our site, you can link our website to your Facebook profile. Doing so enables Facebook to attribute your website visit to your user account.
As the owner of this website, we have no access to the content of the transferred data or its usage by Facebook. If you do not wish Facebook to attribute the visit to our site to your Facebook account, please log out of Facebook in advance.
Further information is available from Facebook's data protection declaration at:
Please note that the current view of the European Court of Justice is that MAC IT-Solutions GmbH, Lise-Meitner-Str. 14, 24941 Flensburg shares with Facebook Ireland Ltd. ("Facebook") the responsibility for the processing of data on this Facebook Fanpage under the European Data Protection Act. As a result, Facebook has entered an additional agreement with the Fanpage operator to clarify the responsibilities of each party. This agreement, made in accordance with article 26 of German data protection law (DSGVO), can be seen here:
According to this agreement, the main processing of personal data on this Fanpage is undertaken by Facebook as the provider responsible for the infrastructure of the Fanpage and in particular of the data analysis service 'Insights'. The data processing in conjunction with this service is not carried out on our behalf. We cannot influence this process and the primary responsibility for processing "Insights" data lies with Facebook, which is also the only party entitled to make and implement decisions regarding the processing of Insights data.
The fulfilment of Facebook Ireland's obligations with regard to processing Insights data, set out in the shared responsibility agreement between us and Facebook, lies entirely at their discretion.
Further information on the way Facebook uses data and about your data protection rights can be found in Facebook's data protection declaration at:
As with any other Fanpage, the "Insights" service is deployed on our Fanpage for the statistical analysis of Fanpage usage data within the remit of Facebook's legitimate interests. The legal basis for this is Article 6, § 1, S. 1, lit. f of the DSGVO.
2. Your rights:
You can demand confirmation from us whether we are processing any of your personal data. Should this be the case, you can demand the following information:
- the purpose of processing your personal data;
- the categories of personal data being processed;
- the recipient/s or type/s of recipient to whom your personal data has been or shall be disclosed;
- the intended duration of storing your personal data or, if there is no specific information rearding this, the criteria for determining this duration;
- all available information on the origin of the data if it was not obtained from you directly;
- the existence of automated decision making including profiling as per Article 22, § 1 and 4 of the DSGVO and – at least in these cases – meaningful information on the logic involved, and the scope and intended effects on you of any such processing activity.
Furthermore you have the right to demand information on any transfer of your personal data to a third country or an international organisation. As part of this, you may also demand clarification of the relevant guarantees as per Article 46 of the DSGVO regarding data transfers.
You have the right to demand recitification or completion of your personal data if this is incorrect or incomplete. Should either prove to be the case, we will immediately undertake the necessary revisions.
c) Restrictions on data processing:
You have the right to demand restricted processing of your data if any of the following apply:
- you contest the accuracy of your personal data for a duration that enables us to check the correctness of this data;
- the processing of your personal data is unlawful and you reject the deletion of your personal data, demandinf restricted usage of this data instead;
- we no longer need your personal data for processing purposes but you require it for validating, pursuing or defending a legal claim, or
- you have registered objections to your data being processed in accordance with Article 21, § 1 of the DSGVO and it has not yet been determined whether the legitimate reasons for doing so outweigh your objections.
If you have demanded restricted processing of your personal data, this data may only be processed - above and beyond pure storage - with your express consent or for the validation, pursuit or defence of a legal claim, or for the protection of the rights of another natural or legal person, or for reasons of significant public interest of the European Union or one of its member states. You will be informed in advance of any restriction being lifted.
You can demand the immediate deletion of your personal data. We are obliged to delete this data without delay, if one of the following apply:
- Your personal data is no longer required for the purposes, for which it was captured or processed in some other way.
- You revoke an existing agreement on which the processing of your data (in accordance with Article 6, § 1, S. 1 lit. a or Article 9, § 2, lit. a of the DSGVO) was based, and there is no other legal basis for the continued processing of your data.
- You object to the processing of your data as per Article 21, § 1 of the DSGVO and there are no overriding legitimate reasons for processing it.
- You object to the processing of your data as per Article 21, § 2 of the DSGVO by way of direct marketing.
- Your personal data has been processed unlawfully.
- The deletion of your data is part of a legal obligation applicable to us under European Union law or under the law of one of the member states.
- Your personal data was captured with regard to services offered as part of the Information Society, according to Article 8, § 1 of the DSGVO.
If we have made your personal data public and are obliged to delete it under Article 17, § 1 of the DSGVO, we will take resonable measures ('reasonable' referring to the available technology and acceptable implementation costs) to inform those responsible for processing your data that you have demanded the deletion of all links to this personal data as well as any copies or replicas.
Your right of deletion does not apply when processing your personal data is required for
- the exercise of freedom of speech and the right to information;
- the discharge of a legal duty in compliance with the law of the European Union and its member states (as relevant in each case) demanding the processing of this data, or for serving the public interest or exercising public force when transferred to us;
- serving public interest in the area of public health, in line with Article 9, § 2, lit. h and i, as well as Article 9, § 3, of the DSGVO;
- for archival purposes serving the public interest, for scientific or historic research purposes, or for statistical purposes as per Article 89, § 1 of the DSGVO, insofar as the right specified in § 1 is not foreseeably preventing or unduly hampering the attainment of the goals of the data processing organisation, or
- for the validation, pursuit or defence of a legal claim.
If you have asserted your right to the correction, deletion of restricted processing of your data towards us, we are obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of your data, or of the restriction on its processing, unless this proves impossible or requires an unreasonable effort. You have the right to be informed about these recipients.
f) Right to complain:
Irrespective of all other rights of complaint, you retain the right to complain to a regulatory authority, especially in the member state of your place of residence, your place of work or the place of the alleged misdemeanour, if you are of the opinion that the processing of your personal data is in breach of the DSGVO.
Insofar as we carry out data processing for the purpose of safeguarding valid, legitimate interests, you may issue an informal complaint against this for reasons arising from your specific personal situation at any time. Should you choose to do so, we will no longer process your personal data unless we can prove compelling legitimate reasons for doing so which outweigh your interests, rights and civil liberties, or where the processing serves the validation, pursuit or defence of a legal claim or claims. Objections to the automatic deployment of the "Insights" service on Facebook should be taken up directly with Facebook who bears the primary responsbility in accordance with the contract under Article 26 of the DSGVO (see above).
We may use links on our webpage to connect with websites and Fanpages of other providers. This data protection declaration does not apply to these links or the pages they link into. Should any personal data be captured, processed or used by these other sites or pages, please refer to that provider's data protection policy, as we are not responsible for the handling and usage of data on those sites.
4. Data protection officer:
Should you have any further questions regarding the processing of your personal data, please contact our data protection officer at: compolicy GmbH, An den Eichen 15, 24248 Mönkeberg, firstname.lastname@example.org.
4.5 CleverReach Services (Newsletter)
Our customers receive our free newsletter only if they expressly give their consent. The subscription to the newsletter can be cancelled at any time by the user. Every newsletter contains a link for this purpose.
For registration for our newsletter and its despatch we use e-mail marketing software provided by CleverReach. The e-mail addresses of registering users for the newsletter are transferred to CleverReach via our homepage. To ensure genuine consent to receiving the newsletter, we use double opt-in, which means that the user's e-mail address is only added to the mailing list once he/she has confirmed that they wish to register.
This data is used solely for sending out our newsletter and is not made available to any third parties.
Hotjar stores this information in a pseudonymous user profile. The information will not be used by Hotjar or by us to identify you or to identify you with any other
You may opt out of Hotjar storing a user profile and information about your visit to our website and Hotjar setting tracking cookies on other websites via this link: https://www.hotjar.com/legal/compliance/opt-out
5. Your rights
Insofar as we process your personal data on our website, you are the "person concerned" as per the DSGVO and as such you have the following rights:
5.1 Right to information
You can demand clarification from us regarding the processing of your personal data. Should such a process have taken place, you can demand that we make the following information available to you:
- the purpose of processing this personal data
- the type of personal data which is being processed
- the specific recipient/s, or types of recipient, to whom your personal data has been or will be revealed
- the planned duration of storing you personal data or, if we cannot tell you, the criteria for determining this duration
- your right to complain to an independent regulating authority
- all available information regarding the source of the data, if it was not obtained from you directly
- the existence of an automated decision process including a profiling functionality in line with Art. 22, §§ 1 and 4 of the DSGVO and – at least in these cases – meaningful information regarding the logic involved, and the scope and intended effects of such data processing for you.
Furthermore, you have the right to demand information about any transfer of your personal data to a third party country or an international organisation. In this context, you can also demand to be informed about the applicable guarantees in line with Art. 46 of the DSGVO relating to any transfer of your data.
5.2 Right to correction
You are entitled to demand from us the correction and/or completion of your personal data wherever this has been processed and is incorrect or incomplete. Whenever this is the case, we will immediately rectify the relevant mistake/omission.
5.3 Right to limiting the processing of your data
You have the right to demand the restricted processing of your data if the following applies:
- you contest the accuracy of your data for a duration enabling us to check these for correctness
- the processing of your data is not legitimate, you reject the deletion of your data and demand restricted usage of your data instead
- we do not need to retain your personal data any further, but you require this data to be available to prove and contest a legal case or
- you have registered objections to your data being processed in line with Art. 21, § 1 of the DSGVO and it has not yet been decided whether our legitimate interests outweigh yours.
Your demand to restrict the processing of your personal data means that this data - beyond its storage - may only be processed with your express consent or where it is required to enforce a justified claim, or exercise or defend legitimate legal interests, or for protecting the rights of another natural or legal person, or if it is in the public interest of the European Union or an EU member state.You will be informed in advance of the restriction being lifted.
5.4 Right to deletion
You can demand the immediate deletion of your personal data. We are obliged to delete this data immediately when one of the following applies:
- Your personal data is no longer required for the purpose of its original capture or processing.
- You revoke an existing agreement made in accord with the guidelines for processing your data in line with Art. 6, § 1, Sec. 1 lit. a or Art. 9, § 2, lit. a of the DSGVO, and there is no other legal basis for the continued processing of your data.
- You object to the processing of your personal data with reference to Art. 21, § 1 of the DSGVO, and there are no overriding legitimate reasons for doing so.
- You object to your personal data being processed for direct marketing as per Art. 21, § 2 of the DSGVO.
- Your personal data was processed unlawfully.
- The deletion of your personal data is required to fulfil a legal obligation applicable to us under Union law or the legal provisions of an EU member state.
- Your personal data was captured as part of services offered by the information society as per Art. 8, § 1 of the DSGVO.
Where we have published your personal data and are obliged to delete it under Art. 17, § 1 of the DSGVO, we will take reasonable measures to inform those responsible for processing this data that you demand the deletion of all links to this data and any of its copies or replications. Reasonable measures will take into account the available technology and required cost investment for implementing your request.
Your right to deletion does not hold in cases where the processing of your data is necessary for
- exercising the right to information and free speech
- fulfilling a legal obligation which requires the processing of your data under applicable European Union law or the legal provisions of a member state, or for the performance of an obligation to serve the public interest or the exercise of public authority where this responsibility has been transferred to us.
- for reasons of public interest in the area of public health under Art. 9, § 2, lit. h and i, as well as Art. 9, § 3 of the DSGVO
- for archive purposes serving the public interest, scientific or historic research or for statistic purposes as per Art. 89, § 1 of the DSGVO, insofar as the rights provisioned in § 1 are likely to make the realisation of the goals of the intended processing impossible or seriously restrict them or
- for the assertion, exercise or defence of legal claims.
5.5 Right to notification
In cases where you have notified us that you wish to exercise your right to demand correction, deletion or restricted processing of your personal data, we are obliged to notify all recipients to whom your personal data was revealed of this demand, unless this is impossible or would require unreasonable effort.
You have the right to receive a list of these recipients.
5.6 Right to a compatible data transfer
You have the right to receive a copy of all personal data you have given us in a structured, common and machine readable format. In addition, you have the right to transfer this data to another responsible party with no hindrance from our side, if
- the processing of this data is based on consent given in accordance with Art. 6, § 1, Sec. 1 lit. a of the DSGVO or Art. 9, § 2, lit. a of the DSGVO, or on a contract based on Art. 6, § 1, Sec. 1, lit. b of the DSGVO, and
- the processing is undertaken by an automated system.
Furthermore, you have the right to request the direct transfer of your data from us to such a responsible party where this is technically feasible. The rights and civil liberties of other persons must not be infringed by this request.
The right to a compatible data transfer does not apply to processing personal data required for the performance of an obligation to serve the public interest or the exercise of public authority where this responsibility has been transferred to us
We do not expect any data to which the right to compatible data transfer may apply to be processed within the current scope of our website.
5.7 Right of objection
You have the right to object to the processing of your personal data for personal reasons at any time, where this is carried out in line with Art. 6, § 1, Sec. 1, lit. e or f of the DSGVO. This also applies to any profiling based on these provisions.
We will then cease processing your personal data, unless we can prove compelling reasons worthy of protection, which outweigh your interests, rights and civil liberties, or where this is required for the assertion, exercise or defence of legal claims.
Where you personal data is being processed for the purposes of direct marketing, you have the right to object at any time to this processing and usage of your personal data. This also applies to any profiling that may be connected to this purpose.
If you object to your data being processed for direct marketing, your personal data will no longer be processed for this purpose.
You have the opportunity to exercise your right to object via automated processes, using technical specifications, as part of using information society services – independently of guideline 2002/58/EG.
5.8 Right to revoke declarations of consent relating to data protection law
You have the right to revoke your legal data protection consent at any time. Withdrawing your consent has no effect on data processing that took place beforehand, for which you had given your consent previously.
5.9 Automated decision making in individual cases, including profiling
You have the right not to be subject to an automated decision process - including any profiling - which has legal implications for you or impacts you significantly in any way. We do not undertake any such processes.
5.10 Right to complain to a regulatory authority
You have the right, without prejudice, to register a complaint with a regulatory authority at any time, especially in the EU member state of your current residence, your place of work or the place of the alleged offence, if you are of the opinion that the processing or usage of your personal data is in breach of the DSGVO.
6. Responsibility for linked content
We may use links to the websites of other providers on our own website. This data protection declaration does not cover these. Where any capture, processing or usage of personal data occurs as a result of using those third party websites, this falls entirely under the responsibility of the site providers. For information on any such potential data processing, please refer to the data protection declaration of the relevant provider. We have no responsbility for their data protection management.
7. Passing on personal data to third parties
Your personal data will be stored only on our own servers or on servers used on our behalf. Access to and usage of this data is only permitted to an authorised group of staff and service providers, and is restricted to the data required to complete a given task.
None of your personal data shall be transferred to a third party without your prior consent. A transfer of data into third party states (countries outside of the EU Trade Zone covered by EFTA) will not take place beyond that specified in this data protection declaration, and there is no future intention of doing so.
8. Data security
We have taken technical and organisational measures to protect your personal data from random or planned attack, manipulation and destruction, as well as access by unauthorized persons. Our protection measures are monitored regularly and brought in line with technology developments as required.
9. Access, Rectification, Deletion
Should you have any additional questions regarding the handling of your personal data, please contact our data protection officer:
Mr. Kai Zaddach
MAC IT-Solutions GmbH
Tel.: 0461 - 43 055 304
10. Changes to our data protection declaration
Status: May 2018