Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide such data will have no consequences. This applies only insofar as no other information is provided in relation to the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Data Controller/Data Protection Officer
Please contact us if you wish. The data controller is: max2-consulting GmbH, Fichtenstr. 45, 82110 Germering Germany, +49 (0)89 23 515 690, info@max2-consulting.de
You can contact our Data Protection Officer directly at: max2-consulting GmbH
Fichtenstr. 45
82110 Germering
Telephone: +49 (0)89 23 515 690
Email: info@max2-consulting.de
Unsolicited contact from the customer via email
If you contact us on your own initiative by email, we will only collect your personal data (name, email address, message text) to the extent that you provide it. The data is processed for the purpose of handling and responding to your enquiry.
If the contact serves the purpose of carrying out pre-contractual measures (e.g. providing advice in the event of an interest in purchasing, preparing a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Orders
Use of PayPal
On our website, we use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Data subjects’ rights and retention period
Retention period
Once the contract has been fully processed, the data will initially be stored for the duration of the warranty period, thereafter in accordance with statutory retention periods, in particular those under tax and commercial law, and then deleted once this period has expired, provided you have not consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You may, amongst other things, lodge a complaint with the supervisory authority responsible for us, which you can contact using the following details:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
Where the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time, with effect for the future, on grounds relating to your particular situation.
Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.
Last updated: 22 October 2024
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide such data will have no consequences. This applies only insofar as no other information is provided in relation to the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
ContactProcessing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
Data Controller/Data Protection Officer
Please contact us if you wish. The data controller is: max2-consulting GmbH, Fichtenstr. 45, 82110 Germering Germany, +49 (0)89 23 515 690, info@max2-consulting.de
You can contact our Data Protection Officer directly at: max2-consulting GmbH
Fichtenstr. 45
82110 Germering
Telephone: +49 (0)89 23 515 690
Email: info@max2-consulting.de
Unsolicited contact from the customer via email
If you contact us on your own initiative by email, we will only collect your personal data (name, email address, message text) to the extent that you provide it. The data is processed for the purpose of handling and responding to your enquiry.
If the contact serves the purpose of carrying out pre-contractual measures (e.g. providing advice in the event of an interest in purchasing, preparing a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Orders
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is carried out on the basis of Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.
Your data may be passed on, for example, to delivery companies, dropshipping or fulfilment providers, payment service providers, order processing service providers and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is kept to a minimum.
Payment service providers Use of PayPal
On our website, we use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Plus
On our website, we use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check, where necessary, based on mathematical and statistical methods using credit reference agencies. To this end, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, implementationor termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical and statistical methods and which incorporate, amongst other things, address data. Your legitimate interests will be taken into account in accordance with the statutory provisions. The purpose of data processing is to carry out a credit assessment for the purpose of entering into a contract. Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against non-payment where PayPal makes an advance payment.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will mean that the contract cannot be concluded using your chosen payment method.
Retention period
Once the contract has been fully processed, the data will initially be stored for the duration of the warranty period, thereafter in accordance with statutory retention periods, in particular those under tax and commercial law, and then deleted once this period has expired, provided you have not consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You may, amongst other things, lodge a complaint with the supervisory authority responsible for us, which you can contact using the following details:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
Where the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time, with effect for the future, on grounds relating to your particular situation.
Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.
Last updated: 22 October 2024