Data Protection

MASK Zentrum
Privacy Policy

Hochwertiger kugelschreiber, der auf einem Dokument liegt.

Section 1: General information

1.1 Responsible body

The controller within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is

AkadRe GmbH
legally represented by the managing director Sonja Roskar

Rothenburger Str. 245
90439 Nuremberg
Germany

Phone: +49 (0) 911 / 600 605 10
Email: info@maskzentrum.de
Contact form: maskzentrum.de/en/contact

Further details can be found in our imprint.

1.2 Data protection officer

You can reach and contact our data protection officer at the following address

AkadRe GmbH
e.g. Attn. of the data protection officer

Rothenburger Str. 245
90439 Nuremberg
Germany

Phone: +49 (0) 911 / 600 605 10
Email: datenschutz@maskzentrum.de

1.3 General information, principles of processing

With reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as: “General Data Protection Regulation” or “GDPR” for short), the term “personal data” means all data that can be related to you personally. This includes, for example, your name, address, email addresses and user behavior. With regard to the other terms, in particular the terms “processing”, “controller”, “processor” and “consent”, we refer to the statutory data protection definitions in Art. 4 GDPR.

We only process personal data to the extent necessary to provide our website and the content and services we offer. The processing of personal data only takes place regularly if you have given us your consent within the meaning of Art. 6 para. 1 lit. a) GDPR or if the processing is permitted by legal regulations, in particular by one of the legal bases mentioned in Art. 6 para. 1 lit. b) to lit. f) GDPR.
We explain the purposes on which the processing of personal data is based in the following sections for each of the aforementioned data processing operations. If we further process personal data for a different purpose that does not correspond to the purpose for which the personal data was originally collected, we will inform you of this again.

If we use contracted service providers or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes.

Please note that you are not legally obliged to provide personal data. However, we sometimes require your personal data in order to provide our website and the content and services we offer. We will inform you about this in detail below. Please also note that if you do not provide us with the required data, you may not be able to use our website and/or the content and services we offer. However, failure to provide voluntary information will not result in any disadvantages.
In some cases, we use external service providers who have been carefully selected and commissioned by us to process personal data. These service providers are bound by our instructions and are regularly monitored by us. You will find more detailed information in the following sections.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by national or European regulations to which we are subject; in these cases, the legal basis for further storage is Art. 6 para. 1 sentence 1 lit. c) GDPR in conjunction with the respective national or European regulation. In this case, the data will be blocked or erased when the storage period prescribed in the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract; in these cases, the legal basis for further storage is Art. 6 para. 1 sentence 1 lit. b) GDPR.

If third parties to whom we transfer data are based in a country outside the European Union (EU) and the European Economic Area (EEA), we will inform you separately in the following sections. We only process data in third countries if there is an adequate level of data protection within the meaning of Art. 44 to 49 GDPR.

1.4 Your rights

You have the following rights towards us with regard to personal data relating to you:

  • the right to information (Article 15 GDPR),
  • the right to rectification (Art. 16 GDPR),
  • the right to deletion (“right to be forgotten”) (Art. 17 GDPR),
  • the right to restriction of processing (Art. 18 GDPR),
  • the right to object to processing (Art. 21 para. 1 GDPR),
  • the right to data portability (Art. 20 GDPR).

You also have the right to complain to a data protection supervisory authority about our processing of your personal data (Article 77 GDPR).

1.5 Objection or revocation against the processing of your data

You can revoke any consent you have given us to process your personal data at any time. The revocation affects the permissibility of the processing of your personal data after its pronouncement to us.

With regard to the processing of your personal data, you can object to the processing insofar as this processing is based on a weighing of interests. In this context, we ask you to explain the reasons arising from your particular situation as to why you object to the processing of your personal data by us. In the event that your objection is justified, we will examine the situation. We will then either no longer process your personal data, adjust the further data processing if necessary or state compelling reasons worthy of protection as to why we continue to process your personal data.

You can also object to the processing of your personal data for the purposes of advertising and data analysis at any time.

You can send your revocation or objection to our contact details above.

Section 2: Processing of personal data when using our website

In the following, we inform you about the collection and processing of personal data when using our website https://www.maskzentrum.de (hereinafter referred to as “website”):

2.1 Processing of personal data when using our website for information purposes

If you access our website without registering or otherwise providing us with information (“informational use”), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

The aforementioned data is also stored in log files on our servers. This data is not stored together with your other personal data.

The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your end device. For this purpose, your IP address must be stored for the duration of your visit to our website. The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems. This data is not analyzed for marketing purposes. Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 para. 1 sentence 1 lit. f) GDPR.
We store the aforementioned data on servers of STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, a provider with server locations in Germany, with whom we have concluded an order processing contract in accordance with Art. 28 GDPR. This ensures that the standards and regulations of European data protection law are complied with. Further information can be found in the section “Third-party services”.

The aforementioned data for the provision of our website will be deleted when the respective session has ended. The data in log files is deleted after seven days at the latest. The collection of the above data for the provision of our website and the storage of this data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.

2.2 Cookies

In addition to the data mentioned above, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. Cookies are small text files that are stored on the storage medium of your end device, for example on a hard disk, and through which certain information flows to us as the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager (Borlabs). This website uses the following types of cookies, the scope and function of which are explained below.

Cookies that are stored in your web browser:

  • Transient cookies: these cookies are automatically deleted when you close your web browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This makes it possible to recognize your device when you return to our website. Session cookies are deleted as soon as you log out or close the web browser.
  • Persistent cookies: These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.
  • Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects or an analysis of your browser settings. Here, too, you can consent or object.

Details can be found in our Consent Manager and on our website on cookies.

The processing of personal data by the aforementioned cookies serves the following purposes:

  • Technically necessary cookies: The technical structure of our website requires us to use technologies, in particular cookies. Without these, our website cannot be displayed or used in full and/or without errors. For example, some functions of our website require that your web browser can be identified even after a page change. In these cases, these are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in our Consent Manager and on our cookies website. As far as technically necessary cookies are concerned, our legitimate interest in data processing lies in the aforementioned purposes. The legal basis in these cases is Art. 6 para. 1 sentence 1 lit. f) GDPR, § 25 para. 2 no. 2 TDDDG.
  • Optional cookies (with your consent): We only set various cookies after you have given your consent, which you can select on your first visit to our website via the so-called cookie consent tool. The functions are only activated if you give your consent. These cookies are used in particular to enable us to analyze visits to our website and thereby improve our website and/or individual functions as well as the overall user experience, e.g. to make it easier for you to use different browsers or devices, to recognize you when you visit us again or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TDDDG. You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal. The functions we use, which you can display and revoke via the Consent Manager, as well as the cookies used, the data processed and the purposes of processing are described in detail there and on our website on cookies.

The above cookies are stored on your end device and transmitted from it to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, through which you can, for example, reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to use all the functions of our website properly. If you wish to prevent the processing of data by Flash cookies, you must make the appropriate settings in your Flash Player or install an add-on, e.g. the “Adobe Flash Killer Cookie” add-on for the Google Chrome web browser or the “Better Privacy” add-on for the Firefox web browser. If you want to prevent the use of HTML5 storage objects, you must use your web browser in private mode - if available. Alternatively, you can also make the appropriate settings in our Consent Manager. Regardless of this, we recommend that you regularly delete cookies and your browser history manually.

2.3. Other functions and offers on our website

In addition to the informational use of our website described above, we offer various services that you can use if you are interested. For this purpose, it is usually necessary to provide further personal data. We need this data to provide the respective service. The above data processing principles apply.
To process this data, we sometimes rely on external service providers who have been carefully selected and commissioned by us. These service providers are bound to our instructions and are regularly checked by us.

If personal data is passed on to third parties as part of services that we offer together with partners, you can find further information in the following descriptions of the individual services.

If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

2.4. Contact us

If you contact us by email, the personal data you send to us in your email will be stored. We also have a contact form on our website that you can use to contact us. The data you enter into the input mask will be transmitted to us and stored. Mandatory information such as first name, last name or email address is marked accordingly. Further information is voluntary. The data will only be used to answer your questions. The data will not be passed on to third parties.

The processing of your personal data above serves solely to process your inquiries. Our legitimate interest in processing the data also lies in the above purposes. If you have given us your consent for this, the legal basis for the processing of this data is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. If you want to use your request to conclude a contract or the request serves to implement or process a contractual relationship existing between you and us, Art. 6 Para. 1 Sentence 1 Letter b) GDPR represents an additional legal basis. Otherwise The legal basis for the processing of this data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

Subject to different statutory retention periods, the data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when we have finally processed your request.

You can revoke the consent you gave us to process your personal data at any time. The legality of the data processing that has already taken place remains unaffected by the revocation. Details on how to revoke your consent can be found in Section 1 of our data protection declaration. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed further. You can also declare your revocation or objection by sending an email to our email address provided above.

Section 3: Third Party Services

We use the following third-party services to process personal data:

3.1. Hosting by Strato AG

In this data protection declaration we would like to inform you about the processing of your personal data in connection with the use of the hosting services of STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany (hereinafter “Strato”). Strato is a provider of hosting services and data center resources that we use to store and manage our website and the data on it. Strato processes and stores the data on servers in Germany. Strato processes your data to ensure the stability, security and performance of our online services. Data such as your IP address, access times and other technical information that is necessary for the provision and security of the service may be processed.

This data is processed for the purpose of providing our website as error-free and securely as possible and for its optimization. The legal basis for the processing of personal data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, as the processing is necessary to protect our legitimate interests.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Deletion always takes place under the proviso that deletion does not conflict with any statutory retention periods.

In order to oblige Strato to only process the transmitted data in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Strato (Article 28 GDPR).

Third party information: STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany.

Further information on Strato's use of data, setting and objection options as well as data protection can be found in Strato's data protection declaration: https://www.strato.de/datenschutz

4th Section: Note on our presence in social networks

We have appearances on the following social media platforms:

  • Facebook (operator in the EU: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; US parent company: Meta Platforms, Inc., 1601 Willow Road Menlo Park, California 94025, USA; data protection declaration: https://www.facebook.com/privacy/policy)
  • Instagram (operator in the EU: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland; US-Muttergesellschaft: Meta Platforms, Inc., 1601 Willow Road Menlo Park, California 94025, USA; data protection declaration: https://privacycenter.instagram.com/policy/)
  • YouTube: Our website uses plugins from the YouTube site operated by Google. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; Data protection declaration: https://www.google.de/intl/de/policies/privacy.
    When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR.

However, we do not use any social media plugins on our website, only links to the social network mentioned. Data is not transferred to social media platforms when you visit our website.

For these information services, we use the technical platform and services of the aforementioned third-party providers. We would like to point out that you use our presence on these social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our website, the provider of the social media platform can, among other things, collect your IP address and other information that is present on your device in the form of cookies.

The data collected about you in this context is processed by the provider's platform and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, the respective provider maintains an appropriate level of data protection that corresponds to that of the former EU-US Privacy Shield. To the extent that the respective provider adheres to the EU-U.S. agreement concluded between the European Union and the USA. Data Privacy Framework has been subject to and certified, any data transfers will take place on the basis of the EU Commission's adequacy decision of July 10, 2023 and therefore on the basis of Art. 45 GDPR. In other cases, as a precautionary measure, we have concluded standard data protection clauses with the provider's companies.

We do not know how the respective social media platform uses the data from your visit to our account and interaction with our posts for its own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as a non-registered and/or non-logged in user. When you access a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved on the internet. Using buttons integrated into websites, the provider's platform is able to record your visits to these websites and assign them to your respective profile. This data can be used to offer content or advertising tailored to you. If you want to avoid this, you should log out or disable the “stay logged in” feature, delete the cookies on your device and restart your browser.

We only process the data from your use of our service that you provide to us and require interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general data processing principles we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If you have given us your consent for this, the legal basis for the processing of this data is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. If you want to use your question to encourage the conclusion of a contract, Article 6 Paragraph 1 Sentence 1 Letter b) GDPR represents an additional legal basis.

To exercise your data subject rights, you can contact us or the provider of the social media platform. If one party is not responsible for answering or needs to receive the information from the other party, we or the provider will then forward your request to the respective partner. If you have any questions about creating a profile or processing your data when using the social media platform, please contact the provider and operator of the social media platform directly. If you have any questions about the processing of your interaction with us on our site, please write to the contact details provided above.

The provider of the respective social media platform describes what information the social media platform receives and how it is used in its data protection declaration listed above. There you will also find information about contact options and setting options for advertisements.

5th Section: Status and changes to our data protection declaration

We always keep our data protection declaration up to date. This data protection declaration is as of July 4, 2024.

As we further develop our website, services and offers, it may be necessary to adapt and change our data protection declaration. The same applies if legal or official requirements change.