Privacy Proctection

Privacy Policy

Thank you for visiting our website. Protecting your privacy is of the utmost importance to us; therefore, we collect, process, and use your personal data collected when you visit our website only to the extent that you have consented to such processing or there is a corresponding legal basis for doing so. We will neither publish your data nor unlawfully disclose it to third parties. This Privacy Policy applies to all data collection and other data processing activities conducted by MEKRAtronics GmbH in connection with the operation of the company’s website.

We reserve the right to amend this Privacy Policy at any time with future effect. The current version of the Privacy Policy can be accessed, saved, and printed from our website at any time. Below, we provide detailed information about what data is collected during your visit to our website, to what extent and for what purposes it is used, and we inform you of the rights to which you are entitled as a data subject.

Contact Information for the Data Controller

The data controller is:

MEKRAtronics GmbH

Buchheimer Str. 4

91465 Ergersheim

Managing Directors: Susanne Lang, Bernd Dehner, Thomas Kolodziej

Contact:

Phone: +49 9847 989-8076 Fax: +49 9847 989 8160

Email: info@mekratronics.de

Data Protection Contact:

Email: datenschutz@mekra.de

Purposes and Legal Bases for Data Processing

When processing your personal data, we comply with the provisions of the EU GDPR and all other applicable data protection regulations. The legal bases for data processing are derived in particular from Article 6 of the EU GDPR.

We use your data to initiate business relationships, to fulfill contractual and legal obligations, to carry out the contractual relationship, to offer products and services, and to strengthen our customer relationships, which may also include analyses for marketing purposes and direct marketing.

Your consent to data processing may also constitute a legal basis for data protection. Before you give your consent, we will inform you of the purpose of the data processing and your right to withdraw your consent.

If your consent also pertains to the processing of special categories of personal data, we will expressly point this out to you in the consent form. Processing of special categories of personal data pursuant to Article 9 of the EU GDPR will only take place if required by law and there is no reason to believe that your legitimate interest in excluding such processing outweighs this requirement.

Disclosure to Third Parties

We will only disclose your data to third parties in accordance with legal provisions or with your consent. Otherwise, we will not disclose your data to third parties unless we are required to do so by mandatory legal provisions (e.g., disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of the Data / Categories of Recipients

Within our company, we ensure that only those individuals who need your data to fulfill contractual and legal obligations receive it.

In certain cases, service providers assist our departments in performing their tasks. The necessary data protection agreements have been concluded with all service providers.

Transfers to Third Countries / Intention to Transfer to Third Countries

Data will only be transferred to third countries (outside the European Union or the European Economic Area) to the extent that this is necessary to fulfill the contractual relationship, is required by law, or you have given us your consent to do so.

Data Retention Period

We store your data for as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g., the German Commercial Code, the German Fiscal Code, etc.). Unless further retention obligations apply, the data will be routinely deleted once the purpose has been fulfilled.

In addition, we may retain data if you have given us your consent to do so or if legal disputes arise and we need to use evidence within the statutory limitation periods, which can be up to thirty years; the standard limitation period is three years.

Obligation to Provide Data

Various types of personal data are necessary for the establishment, performance, and termination of the contractual relationship and for the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the section mentioned above. In certain cases, data must also be collected or provided due to legal requirements. Please note that processing your inquiry or fulfilling the underlying contractual relationship is not possible without the provision of this data.

Categories, Sources, and Origin of the Data

The specific context determines which data we process: This depends on whether, for example, you place an order online or submit an inquiry via our contact form, or whether you send us a job application or file a complaint.

Please note that we may also provide information regarding specific processing situations separately in the appropriate place, e.g., when uploading application documents or submitting a contact request.

Storage of Access Data

You can visit our website without providing any personal information. We only automatically store access data in so-called server log files each time our website is accessed. At the time of access, the following data is collected and stored:

• IP address

• Browser type and version

• Date and time of the request

• Name of the requested file

• Name of the file from which the request was made

• the amount of data transferred and access status

• a description of the web browser and operating system used

• and the name of your Internet service provider.

This data is collected solely to ensure the smooth operation of the website and to improve our services. It is analyzed exclusively for statistical purposes and does not allow us to identify you personally. The temporary storage of your IP address is necessary to enable the website to be delivered to your device.

The legal basis for the temporary storage of access data is Article 6(1)(f) of the GDPR. This data is analyzed solely to ensure the continuous and uninterrupted operation of the website, to improve the content of our website, and to be transmitted to law enforcement authorities in the event of a cyberattack; it does not allow us to identify you personally. The anonymous data from the server log files is stored separately from any other personal data you may have provided. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR. We analyze this anonymously collected data and information statistically with the aim of enhancing our data protection and data security.

Cookies

Our website uses cookies. They serve to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your device and saved (locally) by your browser. Cookies contain only pseudonymous data. Some cookies remain active for the duration of a browser session (so-called session cookies), while others are stored for a longer period (so-called persistent cookies, e.g., consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies controlled by third-party providers. These third parties use the information contained in the cookies, for example, to display content to you or to track the pages you visit.

Based on our legitimate interest (Art. 6(1)(f) of the EU GDPR), we use technically necessary cookies that are essential for the operation of the website and to ensure its functionality. Furthermore, we use cookies without your consent to the extent that their sole purpose is to store or access information stored on your device for the transmission of messages, or to the extent that they are absolutely necessary to provide the service you have expressly requested, § 25(2) TTDSG.

Provided you have given your consent, additional cookies are used that enable us or third parties, for example, to analyze how our services are used. This allows us to tailor content to users’ needs. In addition, cookies enable us to measure the effectiveness of a specific advertisement and to place it, for example, based on users’ interests in certain topics. The legal basis for this is your explicit consent (Art. 6(1)(a) of the EU GDPR, § 25(1) of the TTDSG).

You can revoke your consent at any time via our consent banner, effective for the future, and change your cookie settings. Please note that changes must be made separately for each device.

If you have accounts with the third-party providers we use and are logged in to those accounts, your data may be linked to the respective account. You can prevent such a link by not granting or by revoking your consent to the relevant cookies, or by logging out of the respective third-party providers beforehand.

Most browsers automatically accept cookies. You can also manually disable, restrict, or delete cookies on your device via your browser settings or using software tools. If you disable cookies, you may not be able to use our website to its full extent, or your use may be limited.

Matomo

To analyze our website—subject to your consent—we use the open-source web analytics service Matomo (formerly PIWIK). The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR.

Matomo uses methods that enable an analysis of your use of our website, in particular which website you came from (known as a “referrer”), which subpages you access, and how often and for how long you view a subpage. Matomo uses cookies for this purpose (see above for information on cookies). The information generated by the cookie regarding your use of this website is stored on our server. The IP address is anonymized before storage.

Processing this personal data enables us to analyze our users’ browsing behavior. By evaluating this data, we are able to continuously improve our website and its user-friendliness. Anonymizing the IP address sufficiently safeguards users’ interests regarding the protection of their personal data.

When individual pages of our website are accessed, the following data is stored:

1. Two bytes of the IP address of the user’s system

2. The webpage accessed

3. The website from which the user accessed the webpage (referrer)

4. The subpages accessed from the webpage

5. The duration of the visit to the website

6. The frequency with which the website is visited

The software runs exclusively on our website’s servers. Users’ personal data is stored only there. The data is not shared with third parties.

You can revoke your previously given consent to data collection by Matomo at the end of this privacy policy.

Google Maps

On our website, we use Google Maps (API) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). To ensure data protection, Google Maps is disabled when you first visit this website. A direct connection to Google’s servers is not established until you activate Google Maps yourself (consent pursuant to Art. 6(1)(a) of the GDPR). You may revoke your consent at any time at the end of this privacy policy. This prevents your data from being transmitted to Google the first time you visit the site. Once activated, Google Maps will store your IP address. This is then typically transmitted to a Google server in the United States and stored there.

This involves a transfer to a third country, so in this case there is a risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes without you necessarily having any legal recourse. However, we take the necessary measures required under data protection law in accordance with Art. 44 et seq. of the EU GDPR to ensure an adequate level of data protection in the third country.

For more information on how user data is handled, please see Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

YouTube Platform (Embeds)

On our website, we use so-called embeds or embedded content. These embeds may come from platforms such as YouTube. A classic example of an embed is a video on the YouTube platform. This always involves a data transfer to the server of the respective platform. These processing operations are carried out based on your consent, which you may revoke at any time at the end of this Privacy Policy.

Embedding on YouTube is achieved through a technical process known as “framing.” With framing, simply inserting an HTML link provided by YouTube into a website’s code creates a playback frame on the third-party site, thereby enabling the video stored on YouTube’s servers to be played.

We use the framing codes generated by YouTube in what is known as “enhanced privacy mode.” According to information provided by the YouTube platform, cookie activity and the resulting data collection are only linked to the actual use of the video’s playback function. Against this background, data collection resulting from the mere use of the website with framed content is prevented.

In order to play YouTube content, we need your consent (Art. 6(1)(a) of the EU GDPR). To protect your data, we use a so-called “two-click” solution. All YouTube content is disabled by default and is only loaded from the YouTube servers and displayed after you click the “Enable Content” button. By clicking this button, you consent to your IP address being transmitted to YouTube (YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) and to the provider setting cookies in your browser. For your convenience, we store your consent for 30 days using a so-called local storage object that we save in your browser. Once given, your consent may be revoked at any time.

Social Media Links

On our website, you will find links to the social media services YouTube and Instagram. You can recognize links to the websites of these social media services by the fact that they are labeled with the respective company name. If you follow these links, you will be directed to MEKRAtronics GmbH’s profile on the respective social media service. When you click a link to a social media service, a connection is established with the servers of that social media service. This notifies the social media service’s servers that you have visited our website. In addition, other data is transmitted to the provider of the social media service. This includes, for example:

• The address of the webpage on which the activated link is located

• Date and time the website was accessed or the link was activated

• Information about the browser and operating system used

• IP address

If you are already logged in to the relevant social media service at the time you click the link, the social media service provider may be able to determine your username and, in some cases, even your real name from the transmitted data and associate this information with your personal user account on the social media service. You can prevent this association with your personal user account by logging out of your user account beforehand.

The servers of the social media services are located in the United States and other countries outside the European Union. The data may therefore also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as is the case in the member states of the European Union.

Please note that we have no control over the scope, nature, or purpose of data processing by the social media service provider. For more information on how your data is used by the social media services integrated into our website, please refer to the privacy policy of the respective social media service.

SSL Encryption

We use SSL encryption for security reasons and to protect the transmission of confidential information, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser’s address bar.

When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Data Security

We have implemented appropriate technical and organizational safeguards to protect your data from unauthorized access, misuse, unauthorized disclosure, and alteration, as well as loss and destruction. Your personal data is stored and processed exclusively within the European Union. We only make personal data available to those employees who need it to provide our websites and deliver the requested services and information.

However, you should also take precautions to protect your personal data, in particular by keeping your login information confidential and by monitoring and controlling access to your computer.

Contact Form / Contact via Email (Art. 6(1)(a), (b) EU GDPR)

Our website features a contact form that can be used to contact us electronically. When you contact us via the contact form, we process the data you provide in the form to get in touch with you and respond to your questions and requests.

We adhere to the principles of data minimization and data avoidance, meaning you are only required to provide the data we absolutely need from you to get in touch.

When you submit a contact request, we process the following data:

Required fields:

• Title

• Last Name

• First Name

• Email Address

• Subject

Optional fields:

• Department

• Phone number

• Company

• Country

In addition, your IP address is processed for technical reasons and to ensure legal compliance. All other data fields are optional and may be provided at your discretion (e.g., to enable a more personalized response to your questions).

To protect the security and confidentiality of your data as effectively as possible, we implement appropriate security measures. Your inquiry is transmitted to us in encrypted form.

If you contact us via email, we will process the personal data provided in the email solely for the purpose of handling your inquiry. If you do not use the contact forms provided, no further data will be collected.

Applicant Portal (Art. 6(1)(a), (b) of the EU GDPR)

Applicant Portal (Art. 6(1)(a), (b) of the EU GDPR)

We appreciate your interest in working at MEKRAtronics GmbH. We recognize the importance of your data and process the personal data you provide via the application form solely for the purpose of effectively and correctly handling the application process and for contacting you in connection with the application process. Your data will not be disclosed to third parties without your consent.

In the application form, you will be asked to provide personal data. In doing so, we adhere to the principles of data minimization and data avoidance, meaning you are only required to provide the data we need to fully review your application materials—such as your resume, certificates, and similar documents—or data that we are legally obligated to collect. These required fields are marked with an * (asterisk). For technical reasons and to ensure legal compliance, your IP address is also processed.

For online applications, we collect and process the following data:

Required information:

• First name

• Last name

• Street, house number, ZIP code, city

• Country

• Email address

• Resume, etc.

Optional information:

• Title

• Academic title

• Phone number

• Salary expectations

• Availability

• Additional information, if relevant

Unfortunately, without this information, we cannot review your application materials; therefore, our application system will not allow you to upload your application materials in this case. Of course, you have the option to provide optional information in the application form.

To ensure the best possible protection of the security and confidentiality of your data, we implement appropriate security measures. Your application documents are transmitted to us in encrypted form via our application system.

We store your data for the purpose stated above until the application process is complete and any related deadlines have expired—no later than six months after you receive a decision.

Social Media Presence

We maintain a presence on various social media platforms to communicate with customers, prospective customers, and users who are registered there and to inform them about our offerings.

Please note that you use these platforms and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating).

We also wish to inform you that your data may be processed outside the European Union in this context.

In addition, your data may be processed for market research and advertising purposes. For example, usage profiles may be created based on your usage behavior and the resulting interests. This allows, for example, advertisements to be displayed both within and outside the platforms that are presumed to be of interest to you. Cookies are typically stored on your computer for this purpose. Regardless of this, usage profiles may also store data that is not collected directly from your device (particularly if you are a YouTube member and are logged in).

As the provider of this information service, we do not collect or process any other data resulting from your use of our service.

The processing of users’ personal data is based on our legitimate interests in effectively informing users and communicating with them, in accordance with Article 6(1), first sentence, subparagraph (f) of the EU GDPR. If you are asked by the respective providers to consent to data processing (i.e., to give your consent, for example, by checking a box or clicking a confirmation button), the legal basis for the processing is Article 6(1), first sentence, letter a, and Article 7 of the EU GDPR.

Right to Object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data on the respective network, you must

• log out of the respective network before visiting our website,

• delete the cookies stored on your device, and

• close and restart your browser.

However, once you log in again, you will once more be recognizable to the network as a specific user.

For a detailed description of the respective processing activities and the options to object (opt-out), please refer to the information provided by the providers via the links below.

In the case of requests for information and the exercise of user rights, we would also like to point out that these can most effectively be exercised with the providers themselves. Only the providers have access to user data and can take appropriate action and provide information directly. If you still need assistance, however, you can contact us.

• Google / YouTube (Google Ireland Limited, Gordons House, Barrow Street, Dublin 4, Ireland)

Opt-Out: https://adssettings.google.com/authenticated

• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

• Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Do4X2K5, Ireland)

Right to Access, Erasure, Restriction, and Withdrawal

Right of Access, Erasure, Restriction of Processing, and Withdrawal

If your personal data is being processed, you are a data subject within the meaning of the GDPR and are entitled to exercise your rights as a data subject vis-à-vis the controller (=website operator). You have the right at any time, upon request and free of charge, to inquire about the data collected about you, its origin and recipients, and the purposes and planned duration of storage, and to have this data corrected, restricted, or erased in accordance with legal provisions. Furthermore, you have the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate safeguards in connection with the transfer. In such cases, it is sufficient to send an email specifying your request for access, correction, deletion, or blocking to datenschutz@atarax.de.

If you have consented to the use of your personal data, you may revoke your consent at any time without providing a reason by sending an email to datenschutz@atarax.de, effective for the future. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to the revocation.

Right to Object

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing a reason. This also applies to profiling, to the extent that it is related to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and may be submitted in any form.

In the event that we process your data to protect legitimate interests, you may object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Complaints Regarding Data Protection Violations to Supervisory Authorities

If you believe that data protection regulations have been violated in the collection, processing, or use of your personal data and that your rights have been infringed, you may contact the relevant data protection authority. The authority will investigate the complaint and inform you of the outcome. For Bavaria, this is the

Bavarian State Office for Data Protection Supervision

Promenade 27 (Schloss)

91522 Ansbach

Phone: +49 (0) 981 53 1300

Fax: +49 (0) 981 53 98 1300

Email: poststelle@lda.bayern.de

Automated Individual Decision-Making

We do not use purely automated processing procedures to make decisions.

Online Services for Children

Individuals under the age of 16 may not provide us with any personal data or submit a declaration of consent without the consent of their legal guardians. We encourage parents and legal guardians to actively participate in their children’s online activities and interests.

Links to Other Providers

Our website also contains—clearly identifiable—links to the websites of other companies. Where links to websites operated by other providers are included, we have no influence over their content. Therefore, we cannot assume any liability or guarantee for this content. The respective provider or operator of the linked sites is always responsible for their content.

The linked sites were checked for possible legal violations and recognizable infringements at the time the links were created. No illegal content was identifiable at the time the links were created. However, continuous monitoring of the content of the linked sites is not reasonable without concrete evidence of a legal violation. Should we become aware of any legal violations, such links will be removed immediately.

Additional Information

Please note that complete confidentiality and data security cannot be guaranteed when communicating via the Internet (e.g., by email). We therefore recommend sending confidential information by mail.

I would like to withdraw my consent to tracking by Matomo. You will be asked again the next time you visit this page.

I would like to withdraw my consent to the use of Google Maps.