Data protection information for visitors to the website

We, MFPA Leipzig GmbH, Hans-Weigel-Straße 2B, 04319 Leipzig, Telephone Number: +49 (0) 34202 30986-70, E-Mail: leitung@mfpa-leipzig.de, set out below how we process your data on this website. Should you have any questions relating to data protection, our data protection officer would be happy to respond at mfpa-leipzig@dsb-moers.de.

Purpose and legal bases of the data processing

The purpose of data processing on this website is to provide information about the products and services of our company, in addition to enabling users to contact us.

In providing our website, we comply with the requirements of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA), the Telemedia Act (TMA) and the Telecommunications Telemedia Data Protection Act (TTDPA). We process personal data in particular in accordance with the following legal bases:

  • 6 (1) (a) GDPR for the processing of personal data with the consent of the data subject.
  • 6 (1) (b) GDPR for the processing of personal data necessary for the performance of a contract with the data subject, as well as for taking appropriate steps prior to entering into a contract.
  • 6 (1) (c) GDPR for the processing of personal data necessary for compliance with a legal obligation to which we are subject in accordance with the applicable EU law or in accordance with the applicable law of a country in which the GDPR is applicable in whole or in part.
  • 6 (1) (f) GDPR for the processing of personal data necessary to protect the legitimate interests pursued by us or by a third party,  unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests are, in particular, our commercial interest to be able to provide our website, the security of information, the enforcement of our own legal claims and the compliance with further legislation.

To this end, in the context of service provision, we use service providers that have been bound to confidentiality and  data protection. This category of recipients includes: IT service providers, data destruction service providers and external consultants. Data is only transferred to authorities in the event of overriding legal requirements. A transfer of data to third countries only takes place if the requirements from the provisions in Art. 44 et seq. GDPR are fulfilled.

When you visit the website, a connection is established with your browser. The following information is collected and stored temporarily in system files: IP address of your device, data and time of access, name and URL of accessed files, website from which access was made or from which you were directed to our site (referrer URL), browser used and, if applicable, the operating system of your device, as well as the name of your provider.

The aforementioned data is processed by us for the purpose of ensuring a trouble-free connection as well as system security. The generated connection data is automatically deleted and is not retained for longer than seven days. If the website is improperly used, log data whose further storage is necessary for evidentiary purposes will be retained until the incident has been clarified.

Use of storage technologies on your device

This website uses storage technologies (“cookies” and/or your browser’s memory) to enable storage of your use of the website. The information generated by cookies about your usage behaviour on this website is used to evaluate visitor behaviour on the website and to improve how we provide information.

If the use of storage technologies on your end device is necessary for the functionality of the website, we use this technology on the basis of our legitimate interests. The legal basis for data processing is then Art. 6 (1) (f) and Section 25 (2) no. 2 TTDPA.

If the use of cookies on your end device is not necessary for the functionality of the website, we ask for your consent in advance. The legal basis for data processing is Art. 6 (1) (a) GDPR and Section 25 (1) TTDPA.

The cookies will be deleted after 14 months at least. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The data collection is anonymized; the collected data cannot be related to your person.

Cloudflare

To optimise the security and speed of our website, based on Art. 6 (1) (c) together with Art. 32 GDPR, we use Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. In addition, increasing the security of our website is in our legitimate interest (Art. 6 (1 ) (f) GDPR). Cloudflare is a Content Delivery Network (CDN), a network of connected servers that determine the fastest way to transmit our content to you when you visit our website. In this regard, Cloudflare processes your data; the data processing may also take place in so-called unsafe third countries, such as the USA. We have concluded a data processing agreement with Cloudflare in accordance with Art. 28 GDPR, which you can access here: https://www.cloudflare.com/cloudflare-customer-dpa/. Data is only transferred to third countries if the requirements of Art. 44 et seq. GDPR are fulfilled. The transfer to third countries takes place on the basis of an EU standard contract. More information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/.

Google Tag Manager

This website uses Google Tag Manager. This is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“”Google””). It is used to manage the Google services on our website. The legal basis for this processing is consent in accordance with Art. 6 (1) (a) GDPR.

As part of this processing, it cannot be ruled out that this information will be transferred to a Google server in the USA. Data will only be transferred to the USA if the requirements of Art. 44 et seq. GDPR are fulfilled. The transfer of personal data to the USA has been declared permissible by the EU-U.S. Data Privacy Framework.

The terms of use of Google https://policies.google.com/terms,

https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ and the privacy policy of Google https://policies.google.com/privacy apply.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The legal basis for this processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 (1) TTDSG.

With your consent, “cookies” (text files) are stored on your terminal device to enable an analysis of the use of the website. It is not excluded that the information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. A data transfer to the USA only takes place if the requirements of Art. 44 et seq. GDPR are fulfilled. The transfer of personal data to the USA has been declared permissible by the EU-U.S. Data Privacy Framework. Google Inc. participates in this framework. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The user data will be deleted after 14 months at the latest.

You can revoke your consent at any time with effect for the future, and prevent the use of data by Google by downloading and activating the available browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data protection at Google can be found at https://policies.google.com/privacy.

Microsoft Clarity

We work with Microsoft Clarity to understand how you use and interact with our website. We use behavioural metrics, heatmaps and session replays to improve and market our products/services. Website usage data is collected using tracking technologies to determine the popularity of products/services and online activities. We also use this information to optimise the website. The legal basis for the processing is your consent in accordance with Art. 6 para. 1 a GDPR.

When interacting with our website and on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, your data will be transmitted to the independent controller Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. As part of this processing, it cannot be ruled out that your data will be transferred to a server in the USA. Data will only be transferred to the USA if the requirements of Art. 44 et seq. GDPR are fulfilled. For more information on how Microsoft collects and uses your data, please refer to the Microsoft Privacy Policy.

You can revoke your consent at any time with effect for the future via the Privacy-Settings. You can also use your internet browser to control the use of cookies and withdraw your consent by deleting or blocking cookies. Further you can adjust your settings for adverts by Microsoft here.

Contact form

If you contact us via our contact form, your data from the form will be processed for your request. The legal basis for the data transfer to us is your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The data will then be deleted. If no further retention obligation arises from your request (e.g. when placing an order), the data will be deleted after three years. Your data will be forwarded internally to the responsible contact person for processing your request. Your data will not be transferred to third parties without your explicit consent.

Your right to information, rectification, deletion, object and data portability

You may avail yourself of your right to information, rectification and deletion of data at any time. Simply contact us using one of the methods described above. Should you require data to be deleted, which we are still legally obligated to retain, access to your data will be restricted (blocked). The same applies to an appeal. You may avail yourself of your right to data portability if the recipient and ourselves have the technical means.

Right of appeal

You have the option at any time to lodge an appeal with a data protection supervisory authority.

Data security / encryption

This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.

Currentness and amendment of this data protection notice

We reserve the right to amend the content of this data protection notice at any time. This usually occurs due to further development or adjustment of the services used. You can view the current data protection information on our website.

Date of this statement: 25 March 2024