Privacy Policy – Non-binding Translation

This is a courtesy translation of our Privacy Policy.
Only the original German version is legally binding.
You can read the German version here: Datenschutz | Mowotas.

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

MOWOTAS GmbH
Haidenbucherstraße 1
86916 Kaufering
Germany

Tel.: +49 8191 915119-50
info@mowotas.com
www.mowotas.com | www.mowotas-kanaltechnik.com

Contacting the Data Protection Officer

The Data Protection Officer of the controller is:

DataCo GmbH
Sandstr. 33
80335 Munich
Germany

Tel.: +49 89 7400 45840
www.dataguard.de

General Information on Data Processing

On this page, we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. Please contact the Data Protection Officer using the contact details provided below.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps before entering into this contract.

Legal Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital Interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – Processing your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public Task (Art. 6 para. 1 sentence 1 lit. e GDPR) – Processing your data is necessary for the performance of a task carried out in the public interest or because it is covered by a legally defined task, e.g., for a statutory function.

Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – Processing your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not override.

Please note that we may not be able to provide you with our webshop if your data is processed as part of fulfilling a contract or a legal obligation and you do not provide the requested data.

Your Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of Access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the following information:

• Purposes of processing
• Categories of personal data
• Recipients or categories of recipients
• Planned storage period or the criteria for determining this period
• The existence of rights to rectification, erasure, restriction, or objection
• Right to lodge a complaint with the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope, and the expected effects
• If applicable, transfer of personal data to a third country or international organization

2. Right to Rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. Right to Restriction of Processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:

• You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
• In the context of unlawful processing, you refuse the erasure of personal data and instead request restriction of the use of personal data.
• We no longer need your personal data for processing purposes, but you require your personal data for the establishment, exercise, or defense of legal claims.
• After you have objected to processing, for the duration of the examination as to whether our legitimate grounds override your grounds.

4. Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to request immediate erasure of your personal data:

• Your data is no longer necessary for the processing purposes for which it was originally collected.
• You withdraw your consent and there is no other legal basis for processing.
• You object to processing and there are no overriding legitimate grounds for processing, or you object pursuant to Art. 21 para. 2 GDPR.
• Your personal data is processed unlawfully.
• Erasure is required to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data was collected in relation to services offered by the information society pursuant to Article 8 para. 1 GDPR.

Please note that the above reasons do not apply insofar as processing is necessary:

• For exercising the right to freedom of expression and information;
• For compliance with a legal obligation or for the performance of a task carried out in the public interest and to which we are subject;
• For reasons of public interest in the area of public health;
• For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
• For the establishment, exercise, or defense of legal claims.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

6. Right to Object to Certain Data Processing (Art. 21 GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to such direct marketing.

7. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority with which the complaint was lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the locally competent supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Data Sharing and International Transfer

As explained in this Privacy Policy, we use various service providers who help us deliver our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.

We have agreements in place with all service providers to whom we disclose your data, obligating them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” data protection standard according to the European Commission, or by applying another safeguard, such as an enhanced contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use U.S. service providers, we rely either on the SCCs or the EU-U.S. Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the address specified in this Privacy Policy.

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

• Information about the browser type and the version used
• The user’s operating system
• The user’s Internet service provider
• Date and time of access

This data is stored in the log files of our system.

The IP addresses of the user or other data that enable the assignment of the data to a user are not affected. Storage of this data together with other personal data of the user does not take place.

2. Purpose of Data Processing

Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

3. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session ends.

In the case of storage of data in log files, this is the case after no more than seven days. Longer storage is possible. In this case, the IP addresses of the users are deleted or anonymized so that assignment of the accessing client is no longer possible.

5. Possibility of Objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined within the framework of a balancing of interests

Use of Cookies

1. Description and Scope of Data Processing

When you visit our website, we use technical tools for various functions, in particular cookies, which can be stored on your device. When you access our website and at any time thereafter, you have the choice whether to allow the setting of cookies in general or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can be transmitted to the entity that sets the cookie. Below we describe what type of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or support functions are not possible.

The following data is stored and transmitted by technically necessary cookies:

• Language settings
• Log-in information
• Entered search terms
• Use of website functions

We use cookies on our website that are not technically necessary. Technically non-essential cookies are considered text files that do not solely serve the functionality of the website but also collect other data.

By setting technically non-essential cookies, the following data is processed:

• Date and time of accessing the website

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We need technically necessary cookies for the following applications:

• Remembering search terms
• Functionality of the website

The use of technically non-essential cookies is for the purpose of improving the quality of our website, its content, and thus our reach and profitability. By setting these cookies, we learn how the website is used and can continuously optimize our offering. In particular, these cookies serve the following purposes:

Google Ads Conversion Tracking enables us to track user activities such as purchases or registrations after an ad click.

3. Legal Basis for Data Processing

For storing information on the end user’s device and/or accessing information already stored on the end user’s device, the provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) apply. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage and access to cookies on your device is based on § 25 para. 2 no. 2 TDDDG. This storage and access to information on your device serves to facilitate your use of our website and to provide you with our services as requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g., logging out or closing the browser) or after the expiration of a specified period. Information about different storage periods for cookies can be found in the following sections of this Privacy Policy.

If cookies are used that are not technically necessary, this is based on your explicit consent, which you can give via the cookie banner. The basis for storage and access to information in this case is § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or grant it again later by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make always only apply to the browser you are using. If personal data is processed after storing and accessing information on your device, the provisions of the GDPR apply. You can find information about this in the following sections of this Privacy Policy.

4. Objection and Deletion

You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://mowotas.com or https://mowotas-kanaltechnik.com in the footer under “Cookie Settings”.

Registration

1. Description and Scope of Data Processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input form, transmitted to us, and stored. The data is not passed on to third parties.

The following data is collected during the registration process:

• Email address
• Last name
• First name
• Address
• Telephone/mobile number
• Date and time of registration
• Salutation, company, department, VAT ID

As part of the registration process, the user’s consent to the processing of this data is obtained.

2. Purpose of Data Processing

User registration is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures.

3. Legal Basis for Data Processing

The legal basis for processing the data is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given consent. If registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For data collected during the registration process to fulfill a contract or carry out pre-contractual measures, this is the case when the data is no longer required for the execution of the contract. Even after the contract has been completed, it may be necessary to store personal data of the contracting party to comply with contractual or legal obligations.

5. Possibility of Withdrawal in Case of Consent

As a user, you have the option at any time to cancel your registration. You can also have the data stored about you changed at any time. Specifically, you can request deletion in the following way: Send us an email to info@mowotas.com or by post to the following address: MOWOTAS GmbH, Haidenbucherstraße 1, 86916 Kaufering.

If the data is required to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

Webshop

We offer a webshop on our website. For this purpose, we use the following webshop software:

Shopware from the provider shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (hereinafter referred to as Shopware).

Further information can be found in the provider’s privacy policy: https://www.shopware.com/de/datenschutz/

The website and the webshop are hosted on external servers by a service provider commissioned by us. Our service provider is: Timme Hosting.

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:

• Information about the browser type and the version used
• The user’s operating system
• The user’s Internet service provider
• Date and time of access

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected. We have concluded a data processing agreement with the respective service provider, in which we oblige the service provider to protect user data and not to disclose it to third parties.

The servers are located in Germany to ensure that your data is processed within the EU and in compliance with applicable data protection

Payment Options

1. Description and Scope of Data Processing

We offer our customers various payment options to process their orders. For this purpose, we redirect customers to the platform of the respective payment service provider depending on the payment option. After completing the payment process, we receive the customers’ payment data from the payment service providers or our house bank and process this data in our systems for invoicing and accounting purposes.

Payment via Amazon Pay

It is possible to process the payment transaction with the payment service provider Amazon Pay. Amazon Pay enables online payments to third parties by using the payment and shipping information stored in your Amazon account.

The European operating company of Amazon Pay is Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you already have an Amazon.de customer account, you can pay immediately using the payment method stored there – either by direct debit or credit card. For this purpose, you must log in to your Amazon account.

Further information and your order overview for payment via Amazon Pay can be found at https://pay.amazon.de.

When paying via Amazon Pay, all personal data communicated to or collected by Amazon Pay is primarily processed by Amazon Payments s.c.a. and secondarily by Amazon EU SARL, Amazon Services Europe SARL, and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338, Luxembourg.

Further information on the processing of your data by Amazon in the context of Amazon Pay can be found in Amazon Pay’s privacy policy at: https://pay.amazon.de/help/201751600

Payment via PayPal

It is possible to process the payment transaction with the payment service provider PayPal. In addition to a direct payment method, PayPal also offers purchase on account, direct debit, credit card, and installment payment.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

If you choose PayPal as your payment method, your data required for the payment process will be automatically transmitted to PayPal. This includes, in particular, the following data:

• Name
• Address
• Email address
• Telephone/mobile number
• IP address
• Bank details
• Card number
• Expiry date and CVC code
• Number of items
• Item number
• Data on goods and services
• Transaction amount and tax charges
• Information on previous purchasing behavior

The data transmitted to PayPal may be forwarded by PayPal to credit agencies. This transmission is intended for identity and credit checks. PayPal may also pass on your data to third parties insofar as this is necessary to fulfill contractual obligations or the data is to be processed on behalf. When transferring your personal data within companies affiliated with PayPal, the Binding Corporate Rules approved by the competent supervisory authorities apply. You can find these here: https://www.paypal.com/de/webapps/mpp/ua/bcr

Other data transfers may be based on contractual safeguards. For further information, please contact PayPal. All PayPal transactions are subject to PayPal’s privacy policy. You can find this at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

Payment via Apple Pay

You may choose to make payment using Apple Pay, a service provided by Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA.

When payment is made via Apple Pay, the personal data required for processing the payment transaction is transmitted to Apple.

Further information on data processing in connection with payments made via Apple Pay can be found at: https://www.apple.com/au/legal/privacy/data/en/apple-pay/

Payment via Google Pay

You may choose to make payments via Google Pay. The European operating company of Google is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you use Google Payments to carry out a transaction, Google processes information relating to the transaction, including the date, time and amount of the transaction, the location and description of the merchant, a description of the purchased goods or services provided by the seller, a photo that you choose to associate with the transaction, the names and email addresses of the seller and the buyer (or the sender and the recipient), the type of payment method used, your description of the reason for the transaction, and the offer associated with the transaction, if applicable.

Further information on data processing by Google in connection with payments made via Google Pay can be found at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

Payment via Klarna (Pay now)

You may choose to process the payment transaction via the payment service provider Klarna. Klarna is a payment service provider that enables purchase on account or payment by instalments. The European operating company of Klarna is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

The personal data transmitted to Klarna includes, in particular:

• First name
• Last name
• Address
• Date of birth
• Gender
• Email address
• IP address
• Telephone/mobile phone number
• Bank details
• Credit card number, including expiry date and CVC code
• Number of items
• Item number
• Data relating to goods and/or services
• Transaction amount and applicable taxes

If you have chosen payment by advance, we do not process any data other than the data transmitted by your bank. This is used solely to verify receipt of payment.

Payment via iDEAL

You may choose to process the payment transaction via the payment service provider iDEAL. iDEAL is an online payment method that is processed via the user’s respective house bank in the Netherlands.

If you choose to pay using iDEAL, the personal data required for processing the payment transaction will be transmitted to iDEAL. The transmission is carried out exclusively for the purpose of payment processing.

Further information on the processing of your data by iDEAL can be found in the privacy policy at: https://www.mollie.com/de/legal/privacy

Payment via eps

We offer payment by eps bank transfer. The provider is PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria.

When using the eps payment method, personal data is transmitted to PSA Payment Services Austria as well as to the respective participating bank. The transmission is carried out exclusively for the purpose of payment processing.

Further information on the processing of your data by eps can be found in the privacy policy at:https://eps-ueberweisung.at/de/datenschutzhinweis

Payment via Przelewy24

We offer payment via Przelewy24. The provider is PayPro S.A., ul. Pastelowa 8, 60-198 Poznań, Poland.

If this payment method is selected, personal data will be transmitted to PayPro S.A. to the extent necessary for the processing of the payment transaction.

Further information on the processing of your data by Przelewy24 can be found in the privacy policy at:https://www.przelewy24.pl/en/information-obligation-gdpr-payer

Payment via KBC / CBC Payment Button

We offer payment via the KBC/CBC Payment Button. The providers are KBC Bank NV and CBC Banque SA, Havenlaan 2, 1080 Brussels, Belgium.

If this payment method is selected, personal data will be transmitted to KBC Bank NV and CBC Banque SA to the extent necessary for the processing of the payment transaction.

Further information on the processing of your data by KBC Bank NV can be found in the privacy policy at: https://www.kbc.be/privatkunden/de/rechtliche-informationen/datenschutz.html

Additional payment options

Furthermore, we offer payment using the following options:

• Credit card
• Purchase on account (B2B)
• Bank transfer (SEPA bank transfer)

2. Purpose of Data Processing

The transmission of payment data to payment service providers serves to process the payment, e.g., when you purchase a product and/or use a service.

3. Legal Basis for Data Processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of the data is necessary for the execution of the concluded purchase contract.

4. Duration of Storage

All payment data as well as data on any chargebacks are stored only as long as they are needed for payment processing and possible handling of chargebacks and debt collection as well as for combating abuse. Furthermore, payment data may be stored beyond this period if and as long as this is necessary to comply with statutory retention periods or to pursue a specific case of abuse. Your personal data will be deleted at the end of the statutory retention periods, i.e., after a maximum of 10 years.

5. Exercising Your Rights

If the data is required to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

Shipping Service Providers

1. Description and Scope of Data Processing

If you order products or services on our website that require delivery by a shipping service provider, you will receive your order and shipping confirmation via your email address and, depending on the respective shipping service provider, a notification that your shipment has arrived and/or a notification of parcel announcement and possible delivery options.

The data is transmitted to the following service providers:

• DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
• DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
• General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Str. 1-7, 36286 Neuenstein, Germany
• Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg, Germany
• UPS Europe SA, Ave Ariane 5, Brussels, B-1200, Belgium
• Schenker Deutschland AG, Thyssenstr. 43, 86368 Gersthofen, Germany

The transmitted data regularly includes:

• Name
• Address
• Email address

2. Purpose of Data Processing

The purpose of processing personal data is to enable shipping service providers to inform recipients about the shipment status via email and thus increase the likelihood of successful delivery.

3. Legal Basis for Data Processing

The legal basis for transmitting the email address to the respective shipping service provider and its use is your consent pursuant to Art. 6 para. 1 lit. a GDPR. The legal basis for transmitting your address data (first name, last name, address) to the respective shipping service provider is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of the data is necessary for the execution of the concluded purchase contract.

4. Duration of Storage

The transmitted data is deleted by the respective shipping service provider once the parcel has been successfully delivered.

5. Possibility of Objection

The notification service by the shipping service provider can be canceled by the affected user at any time. For this purpose, each email contains a corresponding opt-out link.

Email Contact

1. Description and Scope of Data Processing

It is possible to contact us via the email address provided on our website. In this case, the personal data transmitted with the email will be stored. The data is used exclusively for processing the conversation.

2. Purpose of Data Processing

In the case of contact via email, the necessary legitimate interest in processing the data also lies therein.

3. Legal Basis for Data Processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest consists in optimally responding to your inquiry sent by email. If the email contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data transmitted by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. The personal data additionally collected during the sending process will be deleted no later than seven days after.

5. Possibility of Objection

If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Contact Form

1. Description and Scope of Data Processing

Our website contains a contact form that can be used for electronic communication. If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored. At the time the message is sent, the following data is stored:

• Email address
• Last name
• First name
• Telephone/mobile number
• Salutation
• Date and time

2. Purpose of Data Processing

The processing of personal data from the input form of the contact form or via the provided email address serves solely to handle the contact request. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest consists in optimally responding to your inquiry submitted via the contact form. If the email contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the input form of the contact form and those transmitted by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. The personal data additionally collected during the sending process will be deleted no later than seven days after.

5. Possibility of Objection

If the user contacts us via the input form in the contact form, they can object to the storage of their personal data at any time.

Specifically, you can submit your objection in the following way: Send us an email to info@mowotas.com or by post to the following address: MOWOTAS GmbH, Haidenbucherstraße 1, 86916 Kaufering.

All personal data stored in the course of contacting us will be deleted in this case.

Application by Email

1. Description and Scope of Data Processing

You can send us your application by email. In doing so, we collect your email address and the data you provide in the email.

2. Purpose of Data Processing

The processing of personal data from your application email serves solely to handle your application.

3. Legal Basis for Data Processing

The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG.

4. Duration of Storage

After completion of the application process, the data will be stored for up to 6 months. At the latest after the expiry of 6 months, your data will be deleted. In the case of a legal obligation, the data will be stored in accordance with the applicable provisions.

Company Profiles

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate.

If you perform an action on our Instagram company profile (e.g., comments, posts, likes, etc.), you may thereby make personal data public (e.g., real name or photo of your user profile). However, since we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make binding statements about the purpose and scope of the processing of your data.

We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for: product information, advertising, information about services, customer contact.

The publications on the company profile may include the following content:

• Information about products
• Information about services
• Advertising
• Customer contact

Each user is free to publish personal data through activities.

Insofar as we process your personal data to analyze your online behavior, offer you competitions, or conduct lead campaigns, this is based on your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for processing personal data for the purpose of communication with customers and prospects is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or providing the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. The data generated through the company profile is not stored in our own systems.

You can object to the processing of your personal data that we collect in the course of your use of our company presence at any time and exercise your rights as a data subject as set out in the section "Your Rights" in this Privacy Policy. To do so, send us an informal email to info@mowotas.com.

For information on the processing of your personal data by Instagram and the corresponding options for objection, please refer to:

Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity to communicate. If you perform an action on our YouTube company profile (e.g., comments, posts, likes, etc.), you may thereby make personal data public (e.g., real name or photo of your user profile). However, since we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make binding statements about the purpose and scope of the processing of your data.

We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for: products, advertising, information about services, customer contact.

The publications on the company profile may include the following content:

• Information about products
• Information about services
• Advertising
• Customer contact

Each user is free to publish personal data through activities. Insofar as we process your personal data to analyze your online behavior, offer you competitions, or conduct lead campaigns, this is based on your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for processing personal data for the purpose of communication with customers and prospects is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or providing the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. The data generated through the company profile is not stored in our own systems.

You can object to the processing of your personal data that we collect in the course of your use of our company presence at any time and exercise your rights as a data subject as set out in the section "Your Rights" in this Privacy Policy. To do so, send us an informal email to info@mowotas.com.

For information on the processing of your personal data by YouTube and the corresponding options for objection, please refer to:

YouTube: https://policies.google.com/privacy?gl=DE&hl=en

Use of Company Profiles in Professional Networks

1. Scope of Data Processing

LinkedIn

On our page, we provide information and offer users the opportunity to communicate. The company profile is used for applications, information/PR, and active sourcing. We have no information regarding the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy

If you perform an action on our company profile (e.g., comments, posts, likes, etc.), you may thereby make personal data public (e.g., real name or photo of your user profile).

2. Legal Basis for Data Processing

The legal basis for processing personal data for the purpose of communication with customers and prospects is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or providing the requested information. If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of Data Processing

Our company profile serves to inform users about our services. Each user is free to publish personal data through activities.

4. Duration of Storage

The data generated through the company profile is not stored in our own systems.

5. Exercising Your Rights

You can object to the processing of your personal data that we collect in the course of your use of our company presence at any time and exercise your rights as a data subject as set out in the section "Your Rights" in this Privacy Policy. To do so, send us an informal email to the email address specified in this Privacy Policy. Further information on exercising your rights can be found here:LinkedIn: https://www.linkedin.com/legal/privacy-policy

Integrated Third-Party Services

We use various service providers to deliver the services offered on our website. If such services are required for additional features, extended functions, or additional purposes, your personal data will only be transferred to service providers if you give your consent.

You can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings here: https://www.mowotas.com or https://www.mowotas-kanaltechnik.com in the menu under “Cookie Settings”.

Use of Google Analytics 4 (GA 4)

1. Scope of Processing Personal Data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Analytics analyzes, among other things, how website visitors use our site. Google places cookies on your device. During the visit, user behavior is recorded in the form of “events.” This may result in personal data being stored and evaluated, including:

• First visit to the website
• Interaction with the website, usage path
• Clicks on external links
• Video usage
• File downloads
• Ad impressions and clicks
• Scroll behavior (if reaching the end of the page)
• Searches on the website
• Language selection
• Page visits, location (region)
• Your IP address (in shortened form)
• Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
• Your Internet provider
• Referrer URL

By default, IP anonymization is enabled in GA 4. This means that your IP address is shortened by Google within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in rare cases is the full IP address transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser will not be merged with other Google data within Google Analytics.

Further information on data processing by Google can be found here: https://policies.google.com/privacy

2. Purpose of Data Processing

The use of GA 4 helps us evaluate the use of our online presence and generate reports on activities on our website. These reports serve to analyze the performance of our website and to target advertising to individuals who have already shown initial interest by visiting our site.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal data will be deleted after 2 months. This deletion occurs automatically once per month.

5. Revocation, Objection, and Removal Options

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out based on consent before withdrawal. You can revoke your consent via our Cookie Consent Tool. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling script execution in your browser, or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com).

Further information on objection and removal options with Google can be found here: https://policies.google.com/technologies/partner-sites

You can also prevent Google from collecting data generated by the cookie and related to your use of the online presence (including your IP address) and from processing this data by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de

Use of YouTube

1. Scope of Processing Personal Data

We use the YouTube plugin operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and its representative in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use the YouTube plugin to embed videos from YouTube on our online presence. When visiting our online presence, your browser connects to YouTube’s servers. Personal data may be stored and evaluated, especially user activity (such as which pages were visited and which elements were clicked) and device and browser information (especially IP address and operating system). If you are logged into your YouTube account during the visit, YouTube can associate your visit to our online presence with this account. By interacting with this plugin, the corresponding information is transmitted directly to YouTube and stored there.

Further information on data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the YouTube plugin serves to improve user-friendliness and provide an appealing presentation of our online presence.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

5. Revocation and Removal Options

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out based on consent before withdrawal. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling script execution in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de

Further information on objection and removal options with Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager

1. Scope of Processing Personal Data

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the EU, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland.

Google Tag Manager allows tags from Google services and third-party providers to be managed and integrated on an online presence. Tags are small code elements that serve to measure visitor numbers and behavior, track the impact of online advertising and social channels, enable remarketing and audience targeting, and test and optimize online presences. Google Tag Manager triggers other tags, which may themselves collect data. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/faq.html and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing personal data lies in the consolidated and clear management as well as efficient integration of third-party services.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Advertising data in server logs is anonymized by Google by deleting parts of the IP address and cookie information after 9 or 18 months.

5. Revocation and Removal Options

You have the right to withdraw your data protection consent at any time. You can prevent the collection and processing of your personal data by Google by blocking third-party cookies, using the “Do Not Track” function, disabling script execution, or installing a script blocker such as NoScript or Ghostery.

You can also prevent Google from collecting data generated by the cookie and related to your use of the online presence by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google via the following link: https://adssettings.google.de

Further information on objection and removal options with Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Integration of Trusted Shops Trustbadge

To display our Trusted Shops quality seal and any collected reviews as well as to offer Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to safeguard our overriding legitimate interests in optimal marketing by enabling secure shopping pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the associated services are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. Further information on data protection by Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, transferred data volume, and the requesting provider (access data) and documents the access. Individual access data is stored in a security database for analyzing security anomalies. The log files are automatically deleted no later than 90 days after creation.

Further personal data is transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is checked based on a neutral parameter, the hashed email address using a cryptographic one-way function. After checking for a match, the parameter is automatically deleted.

This is necessary to fulfill our and Trusted Shops’ overriding legitimate interests in providing the buyer protection linked to the specific order and transactional review services pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including objection options, can be found in the Trusted Shops Privacy Policy linked above and in the Trustbadge.