Privacy Policy

Privacy Policy

Muhr und Bender KG

We care about the protection of your personal data

1. General information

Muhr und Bender KG, including the business unit Mubea U-Mobility ( umobility@mubea.com ), appreciates your interest in our company. We take the protection of your personal data seriously and hereby inform you about the type and scope of personal data that we collect when you visit our online store and our app. It is generally possible to use our website without providing personal data. Insofar as personal data (e.g. name, address or email addresses) is collected on our website, this is always done on a voluntary basis. This data will not be passed on to third parties without your express consent.

All personal data is collected, processed and used in accordance with the applicable provisions of the GDPR for the protection of personal data.

This privacy policy applies to the Mubea U-Mobility website, the XBoard product website, the associated web store and the XBoard app. In addition, the privacy policy applies to the Cargo website with included configurator.

 

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Muhr und Bender KG
Mubea-Platz 1
57439 Attendorn, Germany

Telefon: +49 2722 620
E-Mail:  info@mubea.com

 

3. Name and address of the data protection officer

The data protection officer of the controller is: 
External:

VIA Consult GmbH & Co. KG
Fr. Dr. Koch
Kurfürst-Heinrich-Str. 10 
57462 Olpe, Germany 

Telefon: +49 2761 83668-0
E-Mail:  mubea.datenschutz@via-consult.de

Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

 

4. Security

Muhr und Bender KG uses technical and organizational security measures to protect the data you provide to Muhr und Bender KG against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are not only continuously improved in line with technological developments, but are also protected by an integrated information security management system (ISMS). 

 

5. Purpose of data collection and, if applicable, transmission of data

We only collect personal data if you provide it to us voluntarily, for example when placing an order. The legal basis for processing is Art. 6 para. 1 lit. b GDPR if the contact is aimed at subsequent contract processing. If you establish e-mail contact via the addresses provided on our website without a contract being concluded, we store your data on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If we obtain your consent for data processing, we refer to Art. 6 para. 1 lit. a GDPR.

We only transfer your personal data to third parties to involved service partners, e.g. to those we use in the context of contract processing. If you contact our trading partners, Muhr und Bender KG is no longer responsible for this data processing. As a rule, data is not passed on to third parties outside the EU. If data is forwarded, standard contractual clauses are concluded.

Data is entered in the areas described below:

5.1 Contact form

The contact form offers interested parties the opportunity to send inquiries directly to Mubea U-Mobility electronically. If a private interested party contacts Mubea U-Mobility in this way, the data entered in the form (first name / surname, e-mail address) is automatically saved. You also have the option of providing the following information voluntarily: Sector, title, telephone number, address, subject, inquiry and consent to the XBoard newsletter. If a commercial interested party contacts Muhr und Bender KG in this way, the data provided in the form (company, title, first name / surname, e-mail address) will also be saved automatically. In addition, you have the option of providing the following information voluntarily: Sector, telephone number, address, subject, inquiry and consent to the XBoard newsletter. The data is stored solely for the purpose of processing or contacting the person concerned. 

Alternatively, it is possible to contact the company via the e-mail addresses provided on the website. All data provided by the person will be stored. In most cases, the e-mails sent are delivered to general departmental mailboxes. This storage also serves the above-mentioned purposes.

5.2 Service concerns

We use your personal data to process service requests. You can contact us via the following communication channels for your service request: Contact form. We require the following data for this: First name, last name, e-mail address, subject, chassis number and the request itself. You can also provide the following data voluntarily: Company, telephone and pictures. It may also be necessary for you to provide us with a description of the fault, including photographs, the fault code, the serial number and the date on which the fault first occurred. The data collected in this way will be stored in our internal database for processing the service request.

5.3 Hosting

We host our Mubea U-Mobility websites at ALL-INKL.COM - Neue Medien Münnich, owner: Rene Münnich, Hauptstraße 68, D-02742 Friedersdorf. Details can be found in the privacy policy of ALL-INKL.COM - Neue Medien Münnich (https://all-inkl.com/datenschutzinformationen/).

The use of ALL-INKL.COM - Neue Medien Münnich is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

The XBoards webshop is hosted by maxcluster GmbH, owners: Sebastian Ringel, Bernhard Lippert, Lise-Meitner-Str. 1b, D-33104 Paderborn. Details can be found in maxcluster GmbH's privacy policy (https://maxcluster.de/datenschutz).

The use of maxcluster GmbH is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data processing agreement 
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is 
a contract prescribed by data protection law, which ensures that the provider only processes 
the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

5.4 Order request/online store

We use your personal data to process your purchases in our online store (handling, processing payments or warranty claims) and for notifications about your deliveries. 

We collect the following data when you place an order: Title, first name, surname, e-mail address, telephone number, address, federal state, country, birthday. The data collected in this way is stored in our internal database for the processing of your order.

If you send us a cargo configuration, your data will be transferred to our Salesforce system. In our company, we use the service provider Salesforce Inc. Salesforce Tower, 415 Mission Street. 3rd Floor, San Francisco, CA 94105, United States. This is a software company that offers cloud computing solutions for companies. You can find the privacy policy here: https://www.salesforce.com/de/company/privacy/full_privacy/. The legal bases on which our processing operations are based are Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest). It cannot be ruled out that personal data stored in Salesforce may be processed outside the European Economic Area. 

 

6. Cookies and server log files

The Internet pages of the Muhr und Bender KG use cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser. The use of cookies enables the websites and servers visited to distinguish the individual browser of the data subject from others. 

By using cookies, Muhr und Bender KG can increase the user-friendliness of this website and provide services that would not be possible without cookies. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user's computer system. 

The setting of cookies can be prevented for all Internet pages by changing the settings of the respective Internet browser. Cookies that have already been set can be deleted again. This is possible in all common Internet browsers, but in some cases the function of the website is then restricted.
 Server log files are also created for technical reasons. In these files, the hosting provider stores technical data (e.g. browser type and browser version, operating system used, time of the request, IP address, etc.) that the browser automatically transmits to it. This data is not merged with other data, so that it is not possible to identify individuals.

 

7. Payment methods

We offer various payment options in our online store.

If the data subject selects a payment method during the ordering process in the online store, the data of the data subject is automatically transmitted to the respective service provider. By selecting a payment option, the data subject consents to the transfer of personal data for the processing of the payment on the basis of Art. 6 para. 1 lit. a GDPR (consent). The personal data transmitted to the service provider is usually first name, surname, address, gender, email address, IP address and, if applicable, date of birth, telephone number, cell phone number and other data required to process a payment. Personal data relating to the respective order is also required to process the purchase contract. These are collected on the basis of Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, data on goods and services, prices. The transmission of data is intended in particular for identity verification, payment administration and fraud prevention. The controller will transfer personal data to the service provider in particular if there is a legitimate interest in the transfer. The personal data exchanged between the service provider and the controller may be transmitted by the service providers to credit reference agencies. The purpose of this transfer is to check identity and creditworthiness. The service provider also passes on the personal data to service providers or subcontractors if this is necessary to fulfill the contractual obligations or if the data is to be processed. You have the option of withdrawing your consent to data processing at any time. This also applies to the revocation of data processing by the respective payment service provider. A revocation does not affect the effectiveness of data processing operations that took place in the past.

 

8. Shipping service provider

For the delivery of goods, we pass on personal data to third parties (service providers) to the minimum extent necessary, insofar as this is necessary for the execution of the contract. If we pass on your data to a shipping service provider, the legal basis for this is Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR), which allows us to process the data if this is necessary for the fulfillment of a contract with you or for the implementation of a pre-contractual measure. You have the choice to consent to the disclosure of your email address and/or telephone number in order to enable the shipping service provider to announce the delivery or to coordinate it with you.

8.1 DHL Parcel

If your goods are delivered by the shipping service provider DHL and you have expressly consented to the forwarding of your email address during the ordering process, this will be forwarded to DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn) to announce the delivery or coordinate the delivery date. The legal basis for data processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR), which allows us to process the data if you have consented to the processing. If you do not consent to the forwarding of the email address, delivery will be made in accordance with the conditions of section 2.3.1 of this privacy policy. It is then not possible for DHL to announce the delivery or coordinate the delivery date.

Consent given to the use of data can be revoked at any time for the future. To do so, please contact the person responsible for data processing or the shipping service provider directly.

For more information, please refer to the DHL Paket privacy policy: https://www.dhl.de/de/toolbar/footer/datenschutz.html.

 

9. Google services

Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The controller is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) offers a variety of services. Google collects data about the apps, browsers and devices you use to access Google services in the form of individual activities (e.g. search terms, browsing history, purchase activities) or location data (e.g. GPS, IP address, Wi-Fi access points). The legal basis for the integration of all Google services and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser will not be merged with other Google data.

Google's processing relates, among other things, to the purposes of providing services, maintaining and improving the services offered and providing personalized services. Google does not provide any precise information on deletion periods for individual services.

You can find Google's privacy policy here: https://policies.google.com/privacy?hl=de and the additional terms of use for Google Maps here: https://www.google.com/intl/de_de/help/terms_maps.html.

9.1 Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. Google Analytics uses so-called "cookies", text files which are stored on your computer and which enable an analysis of your use of the website. 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

You can find more information on this at http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure an anonymized collection of IP addresses (so-called IP masking).

9.2 Use of Google Optimize

Our website uses the web analysis and optimization service "Google Optimize", which is provided by Google. The Google Optimize service is used to increase the attractiveness, content and functionality of our website by displaying new functions and content to a percentage of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see above).

Google Optimize uses cookies to enable optimization and analysis of your use of our website. You can find out how to prevent the storage of cookies under point 9.1..

9.3 Route calculation with Google Maps

We use "Google Maps" on our website, a service provided by Google Inc. When Google Maps is used, Google collects data about the use of the Maps functions by visitors to the websites.

9.4 Use of Google Web Fonts

To display our content correctly and graphically appealing across browsers, we use script libraries and font libraries on this website, such as Google Web Fonts (https://www.google.com/webfonts/). Google web fonts are transferred to your browser's cache to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font.

Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible for operators of such libraries to collect data.

9.5 Use of Google Tag Manager

We use the Google Tag Manager service from Google. Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures that other components are loaded, which in turn may collect data. It does not access this data itself. 

9.6 Google Ads

Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
 Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Ads Remarketing 
This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
 With Google Ads Remarketing, we can assign people who interact with our online offer to specific target groups in order to subsequently display interest-based advertising in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC).  If you have a Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.
 The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. 
Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. 
You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de. 

 

10. Use of meta pixels (Facebook pixels)

This website uses the Facebook/Meta visitor action pixel to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

By using the tool, we can track the behavior of site visitors after they have been redirected to the provider's website by clicking on an advertisement. This allows the effectiveness of the advertisements to be evaluated for statistical and market research purposes and to optimize future advertising measures. The data collected is pseudonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://de-de.facebook.com/about/privacy/). This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The data is processed by us within the European Union. However, it cannot be ruled out that Meta may also process the data outside the European Union/European Economic Area. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time. The cookie is stored for one year. 

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/. You can also deactivate the remarketing function "Custom Audiences" in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.

 

11. Cookiebot 

We use the consent management service Cookiebot, of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). This enables us to obtain and manage the consent of the users of the website for data processing. The processing is necessary to fulfill a legal obligation (Art. 6 para. 1 lit. b) GDPR). The following data is processed for this purpose with the help of cookies Your IP address (the last three digits are set to '0'), date and time of consent, browser information, URL from which the consent was sent,An anonymous, random and encrypted key, your consent status as proof of consent.

The key and the consent status are stored in the browser for 12  months using the "CookieConsent" cookie. This retains your cookie preference for subsequent page requests. With the help of the key, your consent can be verified and tracked.

The functionality of the website cannot be guaranteed without processing. Usercentrics is the recipient of your personal data and acts as a processor for us. The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: https://www.cookiebot.com/de/privacy-policy. 

Your personal data will be deleted on an ongoing basis after 12 months or immediately after termination of the contract between us and Usercentrics. Please refer to our general information on the deletion and deactivation of cookies above.

 

12. Social Media

We create online presences within social networks in order to communicate with the interested parties and users active there and to be able to inform them about us. User data may be processed by the service provider outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights. 

As a rule, the service provider processes user data for market research and advertising purposes. For example, user interests resulting from usage behavior can be used to place advertisements within and outside the platforms that could correspond to the interests of the users. Cookies are usually stored on users' computers for this purpose. In addition, data can also be stored in the user profiles independently of the devices used (especially if the users are members of the respective platforms and are logged in to them).

The social media page you visit offers you the opportunity to respond to our posts, comment on them, create a user post yourself and send us private messages with personal requests. The data you provide in this context and which may be accessible to us (e.g. user name, images, interests, contact details) will be used by us exclusively for the purpose of communicating with customers and interests. Our interest lies in offering you a platform on which we can display current information and with the help of which you can address your request to us and we can respond to your request as quickly as possible. 

We do not carry out any further data processing in addition to the basic functions of the website. Please note that the service provider may use tracking tools and cookies independently of our use of the site. 

In the following, we inform you about the processing of your personal data carried out by us in the context of the online presences provided by us. In its ruling of June 5, 2018, the ECJ confirmed the joint responsibility of the service provider and the website operator. 

In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us. 

For a detailed description of the respective processing and the opt-out options, please refer to the following links to the information provided by the providers we use.

12.1 Social plugins

Social plugins for the social networks we use are used on our websites. You can recognize the plugins of the respective providers by their logo. When you visit a page with such a plugin, the operator of the service is informed which pages you visit. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that an activated plugin collects and how it is used by the provider. It is also possible that the service providers may attempt to store cookies on the computer used.

If you are logged in with your respective account, the provider may be able to assign your surfing behavior to your personal profile. You can prevent this by logging out of your account beforehand and deleting any cookies that have been set.

Please refer to the data protection declarations of the respective provider to find out which specific data is collected and how it is used.

We operate the following websites and use the following plugins on our website:

12.2 Youtube

We use components (videos) of YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. The controller is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Here we use the " - extended data protection mode - " option provided by YouTube.
 When you access a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.
 According to YouTube, in "- extended data protection mode -", data is only transmitted to the YouTube server when you watch the video. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Further information on data protection from YouTube is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/.

 

13. Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

If you send us an e-mail via the contact form, your e-mails will be received by the relevant mailboxes and archived there indefinitely. Your data for the newsletter will be used by us until your revocation in order to keep you informed about news. Your data stored in the course of using our online presence will - as far as possible - be deleted when the site is closed.

13.1 Newsletter Brevo

We use Brevo from Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin (Brevo) to send our newsletter. This enables us to contact subscribers directly. In addition, we analyze your usage behavior in order to optimize our offer.

For this purpose, we pass on the following personal data to Brevo: e-mail address, first name, surname.

Brevo is the recipient of your personal data and acts as a processor for us as far as the sending of our newsletter is concerned. The processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we cannot send you a newsletter.

In addition, Brevo collects the following personal data using cookies and other tracking methods: Information about your end device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information about hardware and internet connection. In addition, usage data such as date and time, when you opened the email / campaign and browser activities (e.g. which emails / websites were opened) are collected. Brevo requires this data to ensure the security and reliability of the systems, compliance with the terms of use and the prevention of misuse. This corresponds to Brevo's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). Brevo also analyzes performance data, such as email delivery statistics and other communication data. This information is used to compile usage and performance statistics for the services. Brevo also collects information about you from other sources. In an unspecified period and scope, personal data is collected via social media and other third-party data providers. We have no control over this process.

You can find further information on objection and removal options vis-à-vis Brevo at: https://www.brevo.com/de/legal/privacypolicy/. 
The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent to the processing of your personal data at any time. There is a corresponding link in all mailings. You can also withdraw your consent using the contact options provided. The declaration of revocation does not affect the legality of the processing carried out so far.

Your data will be processed as long as we have your consent to do so. Apart from this, it will be deleted after the contract between us and Brevo has ended, unless legal requirements make further storage necessary.

Data processing agreement 
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Participation in competitions:
If you register for our newsletter as part of a competition, the following provisions apply in addition to the existing newsletter information: Your personal data will be processed by Muhr und Bender KG, Mubea-Platz 1, 57439 Attendorn, Germany, as the responsible body for the duration of the competition for the purpose of determining and processing the prize on the basis of the above conditions. The legal basis for the processing is Art. 6 para. 1 lit. a) GDPR. Your data will only be stored until the prize has been determined and processed and then destroyed in accordance with data protection regulations.
 Your data may be passed on within the Mubea Group and to an advertising agency commissioned by us.
 We reserve the right to publish the winners in Mubea's internal media.

You can request information about the stored data at any time and have the stored data changed or deleted. Participation in the competition ends with the deletion. Mubea will delete your data after the confirmation period has expired. 

To protect your rights, please contact  mubea.datenschutz@via-consult.de or the data protection officer VIA Consult GmbH & Co KG, Kurfürst-Heinrich-Str. 10, 57462 Olpe. You also have the right to lodge a complaint with a data protection supervisory authority.  

Here you will find the conditions of participation for the City Surf Weekend Berlin 2024 competition.

 

14. Rights of data subjects

You have the right to receive information about your data stored by us and the purpose of storage at any time in accordance with Art. 15 GDPR. You can revoke your consent to the storage or use of your personal data in writing at any time. In addition, you have the right to object to processing based on legitimate interest, Art. 21 GDPR. In addition to the revocation, you have the right to demand the correction (Art. 16 GDPR) as well as the restriction of processing (Art. 18 GDPR) and blocking or deletion of your data (Art. 17 GDPR). 

You have the right to contact the relevant supervisory authority (for NRW: The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf) for complaints in accordance with Art. 77 GDPR. You also have the right to receive the data you have provided in a machine-readable format for transmission.

If you have any questions regarding the processing of your personal data, you can also contact us directly (responsible body: see legal notice). For all questions and requests for information, applications or complaints, you can also contact our external data protection officers directly.