Privacy Notice

Information on the collection of personal data

(1) In the following, we provide information in accordance with article 13 GDPR about the collection of personal data when using our website. Personal data means any information relating to you, e.g. name, address, e-mail addresses, user behaviour.

(2) Controller in accordance with article 4 (7) of the General Data Protection Regulation (EU) (GDPR) is

MIPA SE

Am Oberen Moos 1
84051 Essenbach
E-Mail: mipa[at]mipa-paints.com

You can reach our data protection officer at:

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH

Sedanstraße 7

93055 Regensburg

E-Mail: kontakt@buglundkollegen.de

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored in order to answer your questions. The lawful basis for the processing of the data is our legitimate interest in answering your request in accordance with article 6 (1) (f) of the GDPR. If your intention in contacting us is to conclude a contract, the additional lawful basis for processing your personal data is article 6 (1) (b) of the GDPR. We delete the data collected in this context once storage is no longer required, or restrict processing if there is a legal obligation to preserve data.

(4) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.

2. Your rights

(1) You have the following rights in relation to your personal data:

Right to access,
Right to rectification or erasure,
Right to restrict processing,
Right to object to processing,
Right to data portability.

(2) You also have the right to lodge a complaint about our processing of your personal data with an independent supervisory authority.

The responsible supervisory authority for data protection matters can be found under the following link.

https://ico.org.uk/

3. Collection of personal data when visiting our website

(1) In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you visit our website, we collect the following data, which are technically necessary for us to display our website and to ensure its stability and security (lawful basis is article 6 (1) (1) (f) GDPR):

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are placed on your computer when you visit our website. Cookies are small text files that are stored on your device by the browser you use. They thereby provide information to the owner of the website (in this case to us). Cookies are used to make the website more user-friendly and effective. Cookies cannot execute programs or transfer viruses to your computer.

(3) Use of cookies:

a) This website uses the following types of cookies, whose scope and functionality are explained below:

Transient cookies (see b)
Persistent cookies (see c)

b)Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can adjust your browser settings to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you will not be able to use all the features of this website.

4. Integration of YouTube videos

(1) We embed YouTube videos into our online service, which are stored at www.YouTube.com and can be played directly from our website.

(2) By visiting the website, YouTube receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under point 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment to your profile on YouTube, you have to log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. In this case you must contact YouTube to exercise this right. The lawful basis for use is article 6 ( 1) (1) (f) GDPR.

(3) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

For users based in the European Economic Area or Switzerland, the data controller responsible for your information is Google Ireland Limited, unless otherwise stated in a service-specific privacy notice. In other words, Google Ireland Limited is the Google affiliate that is responsible for processing your information and for complying with applicable privacy laws.

For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield. For more information about the purpose and extent of data collection and processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights and settings to protect your privacy: www.google.de/intl/en/policies/privacy.

5. Integration of Google Maps

(1) On this website we use the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function easily.

(2) By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under point 3 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want the assignment to your profile on Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. In this case you must contact Google to exercise this right. The lawful basis for use is article 6 (1) (1) (f) GDPR.

(3) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

6. Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) For the registration to our newsletter, we use the so-called double-opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within one week, your personal data will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) Your email address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation we will store your email address for the purpose of sending the newsletter. The lawful basis is article 6 (1) (1) (a) of the GDPR.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. If at any point you want to withdraw your consent please send an email to newsletter@mipa-paints.com or a message to the contact details mentioned in the imprint.

(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluation we link the data mentioned in point 3 and the web beacons with your email address and an individual ID.

You may object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we will store the data anonymised and for statistical purposes.

7. Google Analytics

a) The nature and purpose of the processing this website uses Google Analytics, a web analytics service of Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies", i.e. text files that are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, comcompile reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. The purposes of data processing are the evaluation of the use of the website and the compilation of reports on activities on the website. On the basis of the use of the website and the Internet, further related services will then be provided.

b) Legal basis of processing
The processing of the entered data is based on the consent of the user (Art. 6 sec. 1 lit. a GDPR).

c) Data categories
IP address (truncated/anonymized)

d) Recipient
Employees of the IT and marketing department of the company
Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland

e) Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. They will then be deleted unless there are any legal retention obligations. To contact us in this connection, please use the contact details provided at the beginning of this privacy policy.

f) Legal /contractual requirement
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional limitations on the website.

g) Transfer of third countries
Processing is also carried out outside the European Union (EU) or the European Economic Area (EEA). In order to ensure the level of data protection in this third country, we have concluded the standard data protection clauses with Google (Analytics).

h) Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the available browser plug-in: "Browser Add On for disabling Google Analytics".

i) Automatic decision-making and profiling
With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and the interests analyzed. For this purpose, we create a pseudonymous user profile.

8. Processing your data in the context of automated decision-making/profiling

(1) Generally, you have the right not to be subject to a decision that is based solely on automated processing, including profiling, if the decision affects your legal rights or other equally important matters. In particular, these decisions may not regularly be based on special categories of personal data pursuant to article 9 (1) of the GDPR We do not use corresponding decision-making processes within the framework of our website and the related data processing.