Privacy policy Minitec app

MiniTec GmbH

 

1. Aims of data protection

We are aiming to establish a long-term relationship with our employees and consistently high level of customer satisfaction. We place the individual relationship to the customer at the heart of what we do and align all other aims of our company to that. An important part of this relationship is based on trust. Therefore we completely advocate the protection of privacy and data protection. Our aim is to offer employees, customers and visitors a safe, risk-free service. To ensure that personal data is only processed in accordance with legal stipulations, we align our processes and technical design to the basic data protection laws and the Federal Data Protection Law  and other applicable laws. In particular, no further personal data is collected than is necessary and simple exercise of data subject rights is ensured. The following statement applies to data processing in the context of our web offer. Even though we have taken organisational and technical actions to ensure as comprehensive security of our offer as possible,  the occurrence of gaps in the security in electronic communications cannot be completely excluded due to their nature For this reason, visitors to our website also have other options for finding out about us, or passing information to us.

2. Terms

Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is regarded as a person who can be identified by allocation to an identifier such as a name, identification number, location data, an on-line identity or to one or more particular features that are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural person.

Processing

Processing is any procedure with or without the assistance of automated processes or any such sequence of processes connected with personal data such as the collection, recording, organisation, sorting, saving, adaptation or changing, reading, interrogation, use, revelation by transfer, propagation, or any other form of provision, comparison or linking, restriction, deletion or destruction.

Anonymization

Anonymization is the processing of personal data in a manner in which the personal data cannot be associated with a specific subject person without reference to further information if this additional information is separately stored and are subject to technical and organisational measures that ensure that personal data cannot be associated with an identified or identifiable natural person.

Responsible person, or person responsible for processing

The responsible person, or person responsible for processing is the natural or legal person, authority, establishment or other office who decides alone, or with others on the purpose and means of of the processing of personal data. If the purposes and means of this processing are determined by Union law or the law of the member states, the responsible person or the certain criteria s/he names can be determined according to union law or the law of the member states.

Contracted processor

A contracted processor is a natural or legal person, authority, institution or other office which processes information on behalf of the responsible person.

Recipient

The recipient is a natural or legal person, authority, institution or other office to who personal data is revealed, regardless of whether this is a third party or not. However, authorities who may receive personal data while carrying out a defined investigation contract under the law of the Union or the law of the member states are not considered recipients.

Third party

Third parties are natural or legal persons, authorities , institutions, or other offices other than the data subject, the person responsible, the contract processor and persons under the immediate responsibility of the responsible person or contract processor who are authorised to process the personal data.

Consent

Consent is the data subject’s informed agreement, given freely and unequivocally in the form of a declaration or other unequivocal confirmatory action, by which the data subject demonstrates agreement with his/her personal data being processed.

Health data

“Health data” are personal data relating to physical or mental health of a natural person, including the provision of health services, from which information about his/her health can be derived;

3.  General details

Responsible person

The responsible person in the meaning of the General Data Protection regulation is:
MiniTec GmbH 
MiniTec Allee 1
D-66901 Schönenberg-Kbg.
Tel.: +49 (0) 63 73 / 81 27 - 0
Fax.: +49 (0) 63 73 / 81 27 – 20

Data Protection Officer

You can contact our Data Protection Officer at:
datenschutz@minitec.de
Telephone: 06841 9816 0
Fax: 06841 9816 29
Our Data Protection Officer will help you quickly and without any complications if you have any questions or if you wish to exercise your data subject rights.

Type and scope of processed data and recipients

No personal data is collected or processed by us when the Minitec app is executed, in particular not the user's IP address. The Minitec app does not request any device authorizations that allow access to the user's device data or device functions. Personal data can be provided voluntarily by the user when this application is used. If the user refuses to provide the data, this may result in this application not being able to provide its services to the user. We cannot link the data provided to the user's person. We may only receive anonymized app download statistics from the app store providers.

Categories of data subject

Data subjects can generally be the users of the Minitec app offering.

Purpose of processing

Personal data about the user can generally be collected so that the provider can provide the Minitec app service and also comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), detect malicious or fraudulent activities.

Duration of storage

The criterion for the duration of the storage of personal data is the respective statutory retention period and the purpose of processing. After expiry of the period, the corresponding data is routinely deleted if it is no longer required to achieve the purpose of processing.

Legal basis

There are several legal bases under the GDPR: Firstly, Art. 6 para. 1 lit. a) GDPR serves as the basis for processing operations for which your consent is obtained for the processing operation. For such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our services, the processing is based on Art. 6 para. 1 lit. b) GDPR. In the case of the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR. In the case of this website, the processing of data is primarily based on Art. 6 para. 1 lit. f) GDPR. This basis for permission applies if the processing is necessary to safeguard a legitimate interest of the controller or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. The specific interests are stated in each case at the point of processing.

Technical security measures

We maintain up-to-date technical and organizational measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge of it. These are adapted to the current state of the art..

4. Disclosure to third parties and third-party service providers

If we allow third parties to participate in the processing, this is done exclusively on the basis of a legal permission standard and in compliance with the legal provisions. This permission standard may consist of your consent, a legal obligation or our legitimate interests. Beyond this, no personal data is passed on to third parties. We do not know whether, how and which personal data is collected and processed by the operators of the app stores Google and Apple in connection with the Minitec app when downloading etc.. You can find more information on this in the operators' privacy policies at  https://policies.google.com/privacy und https://www.apple.com/de/legal/privacy/.

 

5. Rights of data subjects

You have the right to receive information about your data stored by us, as well as the origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage, free of charge at any time without giving reasons. You can correct, delete or restrict the processing of your data collected by us at any time and make use of your right to data portability. You also have the option to object.

Rectification, erasure or restriction of processing: You have the right to obtain from Minitec without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to object: Insofar as the processing of personal data concerning you is based on Art. 6 para. 1 lit. f) GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless Minitec can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Right to withdraw consent: If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do so, you can contact us or our data protection officer at any time using the details provided above.

Right to erasure: You have the right to obtain from Minitec the erasure of personal data concerning you without undue delay and Minitec is obliged to erase personal data without undue delay where one of the following grounds applies: 

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject. This does not apply if the processing is necessary for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject.

Right to restriction of processing: You have the right to obtain from Minitec restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
  • Minitec no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or you have objected to processing pending the verification whether our legitimate grounds override yours.
  • Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction of processing, we will inform you before the restriction is lifted.

Right to lodge a complaint: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. You can also contact Minitec's data protection officer. You can reach him at:

datenschutz@hjp.de
Phone: +49 (0) 6841 9816-0
Fax: +49 (0) 6841 9816-29

We will be happy to answer any further questions you may have about our information, data protection and the processing of your personal data. Further information on the subject of data protection in the Federal Republic of Germany can also be found at www.bfdi.bund.de.