text.skipToContent text.skipToNavigation

Privacy Notice

- Information according to Article 13 GDPR -

We are pleased that you have visited our web shop and would like to inform you below about the processing of your personal data in connection with our web shop.

1. Who is the controller and who is the data protection officer?

 The data controller is:
 
 Master Builders Solutions Deutschland GmbH
 Glücksteinallee 43-4568163 Mannheim, Germany;
 Phone Number: +49 8621 86 2561
 

You may lodge a complaint with our data protection officer or with a supervisory authority, in particular in the country or federal state of your habitual residence, place of work or place of the alleged infringement. Alternatively, you can contact the supervisory authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart

2. What personal data do we collect when you visit our web shop, for what purpose, and what is the legal basis for this?

2.1 Collection of personal data when you visit our web shop

If you just visit our web shop without placing an order or contacting us, your browser automatically transfers the following personal data from you:

  • IP address,
  • name of your Internet service provider,
  • the website from which you are visiting us,
  • the websites you visit with us,
  • date and time of query,
  • time difference from Greenwich Mean Time (GMT),
  • access status/HTTP status code,
  • volume of data transferred in each case,
  • browser,
  • operating system and interface, and
  • browser software language and version.

We process the data for the following purposes:

  • to send the requested content to your browser. In doing so, we only store the full IP address if this is necessary to send you the requested content.
  • to send your IP address to a service provider in order to link your public IP address with company and industry-related information.
  • to secure the operation, stability and security of our web shop.

The legal basis for the processing of this data is Art. 6(1)(f) GDPR. Our legitimate interests arise from the above-mentioned purposes of data processing and include providing and ensuring the technical functionality of our website as well as the defence against and analysis of cyber attacks. The data processed temporarily to provide our website will be deleted at the end of your visit to our website. The data processed for the defence and analysis of attacks are stored .

Furthermore, we process your log-in details (email address and password) which are necessary to enter our web shop. If you forgot your password, we use your email address to reset it. The legal basis for the processing of such data is our legitimate interest (Art. 6(1)(f) GDPR) to provide a secured and personalised web shop and to reset your password in case you forgot it. Your log-in details will be deleted if you no longer actively use our web shop for more than three years.

2.2 Placement of an order

If you place an order in our web shop, we will process the information you provide in order to process your order, e.g your name, your contact, payment, shipping and order details and the log data regarding the order. The legal basis for this processing is Article 6(1)(b) GDPR. Due to provisions of commercial and tax law, we are obligated to store your name, address, payment, and order information for a period of ten years. However, we restrict the processing of these data after two years, meaning that your data are only used to comply with the statutory obligations. To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted via TLS technology.

2.3 Customer Account

To enter our web shop, our internal customer service will set up a customer account, through which your data is saved for any purchase you make. Next to your address details, we might also process your order details and your favourite list if you use this feature. The legal basis for setting up you user account and processing the respective data is Art. 6(1)(b) GDPR. The legal basis for processing your data on your favourite list is our legitimate interest to provide you with a good user/shopping experience in accordance with Art. 6(1)(f) GDPR. Without prejudice to section 2.2, we store your data provided in connection with your customer account for a maximum of three years after your last visit of our web shop. Alternatively, you can always request the erase of your user account by sending an email to the contact details listed under section 1.

2.4 Contact

When you contact us by email, post or telephone, we process your email address or telephone number and the information provided by you in the message or telephone call.

We process such data to talk to you or respond to your message and reply to you. The legal basis for the processing of this data is Article 6(1)(b) and (f) GDPR. Our legitimate interests arise from the above-mentioned purposes and include, in particular, responding to your enquiries, ensuring our general responsiveness and providing evidence when questions or disputes arise.

The data will be stored until the processing of your enquiry has been completed and, if applicable, relevant retention periods under commercial and tax law have expired.

You can also contact us via the contact form which is available under “contact”. Please note that you will be redirected to the general MBCC website if you click on this link. So, with regards to the contact form the privacy policy of the MBCC website needs to be considered, which is available under: https://www.mbcc-group.com/en/data-protection/

2.5 Downloads

We provide safety data sheets on our website, which you might download. When downloading the information, we process your IP address and the time of download

The legal basis for the processing of this data is Art. 6(1)(b) and (f) GDPR. Our legitimate interest is to provide you with the relevant information..

2.6 Social Media

We have implemented links to our profile on Twitter, Facebook, LinkedIn and Instagram on our website. Should you decide to click on these links, you are referred to such third parties which might process further personal data from you. These third parties are separate controllers for whose data processing we are not responsible. Please consider their privacy notices for further details on their data protection measures.

2.7 Other Purposes

We might also process your data for the following purposes:

  • To comply with our legal retention obligations or obligations under data protection law. This processing is based on the legal basis of Art. 6(1)(c) GDPR.
  • To exercise any legal rights or defend ourselves against claims. This processing is based on the legal basis of Art. 6(1)(f) GDPR
  • To respond to and comply with official requests. This processing is based on the legal basis of Art. 6(1)(c) GDPR.

3. How do we use cookies on our website?

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, attributed to the browser you use, and that provide certain information to the site that places the cookie. Cookies cannot execute any programs or transmit viruses to your computer.

For Cookies, which are required to carry out the electronic communication process or to provide certain functions requested on your behalf the legal basis for accessing your user device is Section 25(2) no. 2 of the German Data Protection and Privacy in Telecommunications and Telemedia Act (TTDSG). The legal basis for the processing of the personal data collected by such cookies is our legitimate interest in a functional website in accordance with Art. 6(1)(f) GDPR. You are therefore not asked to give your consent to the activation of these cookies.

3.1 The following cookies are strictly necessary for the operation and functionality of our website:

COOKIE

PURPOSE

Data Retention Period

JSESSIONID

Session Cookie for tracking session

Session

ROUTE

Session Cookie used internally for load balancing

Session

__utma

Internal System Tracking in Commerce Cloud

2 years

__utmb

Internal System Tracking in Commerce Cloud

1 day

__utmc

Internal System Tracking in Commerce Cloud

Session

__utmt

Internal System Tracking in Commerce Cloud

Session

__utmz

Internal System Tracking in Commerce Cloud

6 months

utag_main

Internal System Tracking in Commerce Cloud

1 year

_fbp

Internal System Tracking in Commerce Cloud

3 months

acceleratorSecureGUID

Session Cookie

Session

ebstorefrontRememberMe

Accelerator storefronts support Remember Me Authentication (Soft Login), which automatically logs a customer into the storefront based on this cookie

2 weeks

anonymous-consents

Commerce Cloud consent manager

1 year

CONSENTMGR

Commerce Cloud consent manager

1 year

atidvisitor

This cookie by the analytics tool AT Internet enables the tracking of the list of sites encountered by the visitor and the storage of identified visitor information. If the cookie is deleted, a new visitor is counted for visitors returning to the website as there is a lack of identified visitor information.

6 months

5. To what recipients do we transfer your data?

Within our company, only those departments receive your personal data that are involved in the operation of the web shop.

We use external service providers in the provision of our services who process your data on our behalf. These include companies in the following categories:

  • Technical service providers, particularly Accenture Plc.

In addition, we also share your data with third parties who process your data under their own responsibility. These include companies/organisations in the following categories:

  • Banks if necessary for the execution of the order.
  • Delivery services if necessary for the execution of the order.
  • Authorities if they request the data.

6. Do we transfer your data outside the EU?

Insofar as this is necessary for the purposes mentioned under section 2, we also transfer your data to recipients outside the European Economic Area (EEA). We ensure that data is only transferred to third countries if there is a legal basis for doing so. This means that we only transfer your data if a decision of the EU Commission on an adequate level of data protection exists for the respective third country (Art. 45 GDPR), suitable guarantees are provided for the protection of your personal data (Art. 46 GDPR) or a legal permission exists (Art. 49 GDPR).

You can obtain a copy of the specifically agreed regulations for ensuring the appropriate level of data protection from us (see section 1 of this privacy notice).

7. Do we use your data for automated decision making?

In connection with the provision and use of our web shop, no automated decision is made in individual cases, including profiling within the meaning of Art. 22 GDPR.

8. What rights do you have?

According to the GDPR you have the following rights regarding the processing of your personal data:

Right of access: You have the right to receive information about your personal data processed by us.

Right to rectification: If your personal data is inaccurate or incomplete, you have the right to have your personal information rectified.

Right to erasure: You may request the erasure of your personal data processed by us unless the processing is necessary for exercising of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Right to restriction of processing: You may request the restriction of the processing of your personal data, insofar as (a) the accuracy of the data is contested by you for a period enabling us to verify the accuracy of your personal data, (b) the processing is unlawful, but you oppose to its erasure, (c) we no longer need the data, but you need them for the establishment, exercise or defence of legal claims, or (d) you have objected to the processing in accordance with Art. 21 GDPR pending the verification of the objection. If processing is restricted, we may still store the data but not use it.

Right to data portability:You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

Right to withdraw consent: If the processing of your personal data is based on your consent, you may withdraw your consent at any time. In this case, we will no longer be allowed to process the data based on this consent in the future. Any such withdrawal of consent does not affect the legality of processing carried out based on the granting of consent until the point of withdrawal.

Right to object: You have the right to object to the processing of your personal data, provided that your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1)(f) GDPR and provided that there are grounds for doing so which arise from your particular situation. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. In individual cases, your data will be processed for the purpose of direct marketing. You have the right to object at any time to the processing of your personal data for the purpose of such direct marketing. This also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

To exercise your rights above, to lodge a complaint or to submit any other request, please contact us by email or write to us or our data protection officer. You can find the contact details under section 1 of this Privacy Notice.

Should you consider that the processing of your personal data relating is in breach of the GDPR, you may lodge a complaint with the competent data protection authority. You can find the contact details under section 1 of this Privacy Notice.