Privacy Policy
As of January 2025
Mühlbauer Privacy Policy
The protection of personal data is important to us. Therefore, the company named in the legal notice (hereinafter referred to as „Mühlbauer“) and its affiliated group companies process personal data in accordance with the applicable legislation on the protection of personal data and data security.
1 Processing of your personal data when using our websites, applications and online platforms
Data categories, purpose of processing and legal basis
When you use Mühlbauer websites, applications or online tools (each a "Mühlbauer online service"), Mühlbauer processes the following personal data:
personal data that you voluntarily enter when using a Mühlbauer online service (e.g. at registration, in requests to contact us or when participating in surveys etc.), such as your first and last name, e-mail address, telephone number as well as any information provided during a support request or through comments or forum posts and
information that your web browser or device automatically sends us, such as your IP address, device type, browser type, the previously visited website, visited subpages or date and time of the respective visitor request.
We process your personal data for the following purposes:
to enable you to use the services and functions of the Mühlbauer online services,
to establish your identity and enable user authentication,
to process your request and
to enforce our Terms of Use, to assert or defend legal claims and to ward off and prevent fraudulent and similar activities, including attacks against our IT infrastructure.
The processing of personal data is necessary to achieve these purposes. Unless explicitly stated when collecting personal data, the legal basis for data processing is:
the conclusion and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
the fulfillment of legal obligations to which Mühlbauer is subject (Article 6 (1) (c) of the General Data Protection Regulation) or
the protection of legitimate interests of Mühlbauer (Article 6 (1) (f) of the General Data Protection Regulation). Mühlbauer's legitimate interest lies in the processing of your personal data in order to offer and operate the Mühlbauer online services.
In some cases, we explicitly request your consent to the processing of your personal data. In this case, the legal basis for the processing of personal data is your given consent (Article 6 (1) (a) of the General Data Protection Regulation).
Cookies
We use cookies in our Mühlbauer online services. Further information on the use of cookies by Mühlbauer can be found in our Cookie Policy. There you can also find a description of how you can object to the use of cookies and the processing of data collected via cookies.
Links to other websites
This privacy policy only applies to Mühlbauer online services and not to third-party websites and applications. Mühlbauer online services may contain links to third-party websites and applications that may be of interest to you. Mühlbauer is not responsible for the collection, processing and use of your data by websites or applications that are not operated by Mühlbauer, nor is Mühlbauer responsible for the content of those websites.
2 Processing of personal data of business partners
Data categories, purpose of processing and legal basis
In the context of cooperation with business partners, Mühlbauer processes personal data of contact persons at customers, potential customers, distribution partners, suppliers and partners (each a "business partner"):
contact information, e.g. first and last name, business address, telephone number, mobile phone number, fax number and e-mail address,
payment information, e.g. information required to process payment transactions or to prevent fraud, including credit card information and card verification numbers,
further information that needs to be processed in the context of a project or the execution of a contractual relationship with Mühlbauer or that is voluntarily provided by business partners, e.g. in orders, inquiries or project details,
personal data collected from publicly available sources, information databases or credit bureaus and
data that is collected as far as legally required in the context of compliance screening: date of birth, identity card and ID numbers, information on relevant legal proceedings and other legal disputes in which business partners are involved.
Mühlbauer processes personal data for the following purposes:
for communicating with business partners about products, services and projects, e.g. to process inquiries from a business partner or to provide technical information about products,
for planning, implementing and managing the (contractual) business relationship between Mühlbauer and the business partner, e.g. to handle orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries, maintenance or repair work,
for the conduction of customer surveys, marketing campaigns, market analyses, sweepstakes, competitions or similar promotions and events,
maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity, other criminal activities or activities with the intent to cause damage,
the compliance with (i) legal requirements (such as fiscal and commercial retention obligations), (ii) existing obligations to conduct compliance screenings (to prevent white-collar crime or money laundering) as well as (iii) Mühlbauer's policies and industry standards and
settling of litigations, enforcing existing contracts and asserting, exercising and defending legal claims.
The processing of personal data is necessary to achieve these purposes. Unless explicitly stated when collecting personal data, the legal basis for data processing is:
the conclusion and fulfillment of a contract with you (Article 6 (1) (b) of the General Data Protection Regulation),
the fulfillment of legal obligations to which Mühlbauer is subject (Article 6 (1) (c) of the General Data Protection Regulation) or
the protection of legitimate interests of Mühlbauer (Article 6 (1) (f) of the General Data Protection Regulation). Mühlbauer's legitimate interest lies in the initiation, execution and completion of the business relationship.
If you have specifically given your consent to the processing of your personal data on a case-by-case basis, this consent is the legal basis for the processing of data (Article 6 (1) (a) of the General Data Protection Regulation).
3 Transmission and disclosure of personal data
Mühlbauer may submit your personal data to:
other Mühlbauer companies, if this is necessary in connection with the offer and operation of the Mühlbauer online services or the initiation (e.g. during the application process), execution or completion of the business relationship,
IT service providers who process data as part of their service provision (e.g. service providers for IT maintenance activities) or
courts, arbitration courts, authorities or legal advisers, if this is required to comply with applicable law or to assert, exercise or defend legal claims.
The recipients are partially located in countries whose privacy laws provide a level of protection that does not match the level of protection of the country in which you have your residence or registered office.
In this case, Mühlbauer will take measures to ensure otherwise appropriate and adequate safeguards for the protection of personal data.
Thus, we will only disclose your personal data to Mühlbauer companies in such countries if they comply with the legal requirements of the European General Data Protection Regulation.
We will only transmit personal data to non-Group recipients in such countries if these recipients (i) have entered into EU standard contractual clauses with Mühlbauer or (ii) have implemented Binding Corporate Rules or (iii) – in case of US resident recipients – are certified under the EU/US Privacy Shield. Further information is available at dsb.mbkg@Mühlbauer.de.
4 Retention periods
If no explicit retention period is specified at the time of collection (e.g. as part of a declaration of consent), your personal data will be deleted if it is no longer required to fulfill the purpose for which it was stored, unless legal retention obligations (e.g. commercial and fiscal retention obligations) prohibit a deletion.
5 Revocation of given consent
If you have given us consent to process your personal data, you have the right to revoke your consent at any time with future effect. The revocation does not affect the lawfulness of the processing that was carried out based on the consent prior to the revocation. After revocation, Mühlbauer may further process the personal data only to the extent that Mühlbauer can base the processing on another legal basis.
6 Your rights
Under applicable data protection law, you may have the right to:
request a confirmation as to whether Mühlbauer processes personal data about you and to receive information about the personal data processed by Mühlbauer as well as other information,
request the correction of incorrect personal data,
request the deletion of the personal data processed by Mühlbauer,
demand that Mühlbauer restrict the processing of personal data,
request the transfer of the data or
object to the processing of personal data by Mühlbauer.
You also have the right to file a complaint to a data protection authority if you believe that the processing of your personal data violates the GDPR. You can contact the data protection authority that is responsible for your place of residence or your state or the data protection authority that is responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany, phone: +49 981 53 1300, fax: +49 981 53 98 1300, e-mail: poststelle@lda.bayern.de.
7 Contact
The Mühlbauer data protection organization supports you with all questions concerning the topic of data protection. You can also file complaints to the Mühlbauer data protection organization and assert the rights stated in this privacy policy.
The Mühlbauer data protection organization can be contacted at dsb.mbkg@muehlbauer.de.
The Mühlbauer data protection organization always endeavors to address and remedy your inquiries and complaints. In addition to the possibility of contacting the Mühlbauer data protection organization, you can also contact the responsible data protection supervisory authority at any time.
An overview of the national and international data protection authorities is available here.
8 Mühlbauer newsletter
Subscription to our newsletter
On the Mühlbauer website, users are given the opportunity to subscribe to the newsletter of our company. The input mask used for this purpose shows which personal data is transmitted to the data controller when you subscribe to the newsletter.
Mühlbauer regularly informs its customers, business partners and interested parties about company offers by means of a newsletter. The newsletter of our company can generally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter. For legal reasons, when an e-mail address is entered by a data subject for the first time to receive newsletters, a confirmation e-mail for a double-opt-in procedure will be sent to that e-mail address. This confirmation e-mail serves to check whether the owner of the e-mail address is the data subject who has authorized the receipt of the newsletter.
During registration for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as assigned by the Internet Service Provider (ISP) as well as the date and time of registration. The collection of this data is necessary in order to be able to understand the (possible) misuse of the data subject's e-mail address at a later point in time and therefore serves as a legal safeguard for the data controller.
The personal data collected during a registration for the newsletter will exclusively be used to send our newsletter. In addition, subscribers to the newsletter may be notified via e-mail if this is necessary for the operation of the newsletter service or a related registration, as it might be the case in the event of changes to the newsletter service or technical changes. Personal data collected in the context of the newsletter service is not disclosed to any third parties. The data subject may cancel a subscription to our newsletter at any time. The consent to the storage of personal data that the data subject has given us for the newsletter distribution can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible at any time to unsubscribe from the newsletter directly on the data controller's website or to inform the data controller in a different way.
Newsletter tracking
The Mühlbauer newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic, which is embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Mühlbauer can detect if and when an e-mail was opened by a data subject and which links in the e-mail were called by the data subject.
Such personal data collected via tracking pixels included in the newsletters are stored and evaluated by the data controller in order to optimize the distribution of newsletters and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to any third parties. Data subjects are entitled to revoke the separate declaration of consent issued via the double-opt-in procedure at any time. After revocation, the data controller will delete this personal data. Mühlbauer automatically considers a cancellation of a newsletter subscription as a revocation.
9 Mühlbauer and social media
A social network is an Internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for sharing views and experiences or allows the Internet community to provide personal or business information.
Facebook allows social network users to create private profiles, upload photos and socialize via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the US or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is responsible for the processing of personal data.
Upon each call of one of the individual pages of this website, which is operated by the data controller and on which a Facebook component (Facebook plug-in) is integrated, the respective Facebook component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. In the framework of this technical process, Facebook is informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Facebook at the same time, Facebook recognizes during each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage of our website is visited by the data subject. This information is collected through the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and saves this personal data.
Facebook receives information via the Facebook component that the data subject has visited our website whenever the data subject is logged in to Facebook at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desired by the data subject, he or she can prevent this transmission by logging out of his or her Facebook account before calling our website.
The data policy published by Facebook, which is available at https://m.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the data subject. In addition, different applications are available that make it possible to suppress data transmission to Facebook. The data subject can use such applications in order to suppress data transmission to Facebook.
The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos as well as to redistribute such data across other social networks.
The operating company of Instagram's services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Upon each call of one of the individual pages of this website, which is operated by the data controller and on which an Instagram component (Insta button) is integrated, the respective Instagram component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding component from Instagram. In the framework of this technical process, Instagram is informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram recognizes during each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage is visited by the data subject. This information is collected through the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, Instagram assigns the transmitted data and information to the personal Instagram user account of the data subject and saves and processes this personal data.
Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged in to Instagram at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Instagram component or not. If such a transmission of information to Instagram is not desired by the data subject, he or she can prevent this transmission by logging out of his or her Instagram account before calling our website.
Further information and Instagram's applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
YouTube
YouTube is integrated in our Mühlbauer online services. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment these videos also free of charge. YouTube allows the publication of all types of videos, which is why complete films and television broadcasts, but also music videos, trailers or user-made videos are available on this Internet portal.
YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Upon each call of one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) is integrated, the respective YouTube component automatically causes the Internet browser on the data subject's IT system to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/en/. In the framework of this technical process, YouTube and Google are informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject visits as soon as the data subject calls a subpage that includes a YouTube video. This information is collected by YouTube and Google and assigned to the YouTube account of the data subject.
YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged in to YouTube at the same time as accessing our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If such a transmission of information to YouTube and Google is not desired by the data subject, he or she can prevent this transmission by logging out of his or her YouTube account before calling our website.
The privacy policy published by YouTube, which is available at https://www.google.com/intl/en/policies/privacy/, provide information on the collection, processing and use of personal data by YouTube and Google.
We would like to inform you here about the processing of personal data via the function of the XING Share Button.
On this website, the "XING Share Button" is used. When you call this website, your browser will quickly establish a connection to servers of XING AG ("XING"), which are used to provide the "XING Share Button" functions (in particular the calculation and display of the counter value). XING does not store personal data about you when you visit this website. In particular, XING does not store any IP addresses. Your usage behavior is not evaluated via the use of cookies in connection with the "XING Share Button". The current data protection information on the "XING Share Button" and additional information can be found on this website:
https://privacy.xing.com/en/privacy-policy
We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Upon each individual call to our website, which has such a component, this component causes your browser to download a corresponding representation of the component from LinkedIn.
Through this process, LinkedIn is informed about which specific page of our website is currently being visited. If you click on the LinkedIn "Recommend button" while you are logged in to your LinkedIn account, you can link the contents of our pages to your LinkedIn profile. As a result, LinkedIn is able to associate your visit to our pages with your LinkedIn user account.
We have no control over the information that LinkedIn collects this way nor over the extent of this information collected by LinkedIn. We also have no knowledge of the content of the data submitted to LinkedIn. For details about LinkedIn's data collection as well as your rights and settings options, see the LinkedIn privacy statement. This statement can be found at https://www.linkedin.com/legal/privacy-policy.
This Privacy Policy will be updated from time to time. The date of the last update can be found at the beginning of the statement.