Data privacy

Website Privacy Policy and Information for Data Subjects in Accordance with Articles 13 and 14 of the EU General Data Protection Regulation

General Information


Information about the Responsible Entity

mst group GmbH
Am Münchfeld 59
80999 München
Tel. +49 (89) 550 514-50
Fax +49 (89) 550 514-40
info@mst-group.eu


Managing Director

Lena Jentsch
Tel. +49 (89) 215 42 78 27
Lena.Jentsch@mst-group.eu


Data Protection Officer

Sebastian Kraska (IITR)
Tel. +49 (89) 189 1736 - 0
privacy@mst-group.eu


General Data Processing Information


Data concerned:

Personal data is collected only when you voluntarily provide it to us. No additional personal data is collected. Processing of personal data beyond the scope of legal permissions is only carried out with your explicit consent.

Purpose of Processing:
Contract execution.

Categories of Recipients:
- Public authorities in the event of overriding legal regulations.
- External service providers or other contractors.
- Other external parties if the data subject has given consent or if transmission is permissible due to overriding interest.

Third-Country Transfers:
In the course of contract execution, processors outside the European Union may also be used.

Data Retention Period:
The retention period is based on legal retention obligations and is generally 10 years.


Specific Information for the Website

Use of a Newsletter
Im Rahmen der Registrierung unseres Newsletters teilen Sie uns Ihre E-Mail-Adresse und optional weitere Daten mit. Diese Angaben verwenden wir ausschließlich, um Ihnen den Newsletter zuzusenden.

Ihre E-Mailadresse, die wir im Zusammenhang mit dem Verkauf einer Ware oder Dienstleistung erhalten, nutzen wir darüber hinaus ausschließlich für Direktwerbung in Form unseres Newsletters für eigene ähnliche Waren oder Dienstleistungen, wie die von Ihnen bestellten, sofern Sie dieser Verwendung nicht widersprochen haben.

Sie können der Verwendung Ihrer E-Mail-Adresse jederzeit widersprechen, ohne dass hierfür andere als die Übermittlungskosten nach den Basistarifen entstehen. Ihr Widerspruch (und damit die Abbestellung unseres Newsletters) kann durch entsprechende Nachricht an unsere E-Mail-Adresse (siehe Impressum) ausgeübt werden.

Rechtsgrundlage für den Versand von Newslettern an Bestandskunden ist das berechtigte Interesse des Unternehmens (Art.6 I f DSGVO).

Usage Data
When you access our website, your browser automatically transmits data to our web server. The following data is recorded during an active connection:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Browser type and operating system used
  • Full IP address of the requesting computer
  • Transmitted data volume

For security reasons, particularly to defend against attacks on our web server, these data are stored temporarily. Identifying individual users is not possible. The data is anonymized shortly after collection, and no matching with other data sets or sharing with third parties occurs.

Registration
On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

The following data is also stored at the time of registration:

  1. The IP address of the user
  2. Date and time of registration


As part of the registration process, the user's consent to the processing of this data is obtained.
The processing is based on the user's consent (Art. 6 para. 1 lit. a GDPR).
The data is deleted when it is no longer necessary for its intended purpose.

Contact Form
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:

If you use our contact form, the entered data is transmitted and stored. This includes:

  1. The IP address of the user
  2. Date and time of registration
  3. First name and surname of the user
  4. Email address of the user
  5. Contact purpose details (subject, message, etc.)

Legal basis is Art. 6 para. 1 lit. f GDPR. The data is deleted when it is no longer necessary for its intended purpose.

Cookies und Analyse-Cookies

Unsere Website verwendet sogenannte Cookies, um Einstellungen zu speichern, die für die Darstellung und Funktion notwendig sind. In diesen essenziellen Cookies werden keine personenbezogenen Daten gespeichert.

Zusätzlich setzen wir Analyse-Cookies ein, um die Qualität unserer Website und ihrer Inhalte zu verbessern. Diese ermöglichen es uns zu verstehen, wie unsere Website genutzt wird, und sie entsprechend weiterzuentwickeln.

Rechtsgrundlagen:

  • Essenzielle Cookies: Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse)
  • Analyse-Cookies: Art. 6 Abs. 1 lit. a DSGVO (Einwilligung)

Webanalyse durch Google Analytics 4
Wir verwenden auf unserer Website Google Analytics 4, einen Webanalysedienst der Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland („Google“), zur Analyse des Nutzungsverhaltens unserer Besucher.

Google Analytics 4 verwendet Technologien wie Cookies oder das sogenannte „Measurement Protocol“, um Informationen über Ihre Nutzung unserer Website zu erheben. Die dabei erhobenen Daten können an Server von Google in den USA übertragen und dort verarbeitet werden. Google Analytics 4 anonymisiert IP-Adressen standardmäßig, sodass eine direkte Personenbeziehbarkeit ausgeschlossen ist.

Zweck der Verarbeitung: Die Analyse des Nutzerverhaltens dient der Optimierung unseres Angebots und der bedarfsgerechten Gestaltung unserer Website.

Rechtsgrundlage: Die Verarbeitung Ihrer Daten erfolgt auf Basis Ihrer Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO, die Sie über unser Consent-Banner erteilen können. Eine einmal erteilte Einwilligung können Sie jederzeit mit Wirkung für die Zukunft widerrufen.

Empfänger: Google Ireland Limited (ggf. Datenübermittlung an Google LLC, USA).
Drittlandtransfer: Ein angemessenes Datenschutzniveau wird durch das EU-U.S. Data Privacy Framework sichergestellt.

Weitere Informationen zur Datenverarbeitung durch Google finden Sie unter:
https://policies.google.com/privacy?hl=de
https://support.google.com/analytics/answer/12017362?hl=de

Web Analytics with Leadinfo
We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits by companies to our website based on IP addresses and shows us publicly available information for this purpose, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g., "leadinfo.com") to correlate IP addresses with companies and improve the services. For more information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. If you opt-out, your information will no longer be collected by Leadinfo."
https://www.leadinfo.com/de/opt-out

Use of own “cookies” required for the website display
This website uses its own “cookies” to store settings required for the website display (“cookies” are data records that are sent from the web server to the user's browser and stored there for later retrieval). No personal data is stored in our own “cookies”. You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser.


Information on further data processing procedures


Specific information on the application procedure

Data concerned:
Application details

Purpose of Processing:
Implementation of the application procedure.

Categories of recipients:
Public bodies in the case of overriding legal provisions.
External service providers or other contractors, e.g. for data processing and hosting.
Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest, including customers and interested parties in the context of order acquisition.

Third-Country Transfers:
Processors outside the European Union, including email providers, may also be used in the performance of the contract.

Data Retention Period:
Application data will generally be deleted within four months of notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.


Specific information on the processing of employee data

Data concerned:
Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Purpose of Processing:
Contract performance within the scope of the employment relationship.

Categories of recipients:
Public authorities in the case of overriding legal provisions, including the tax office, social insurance institutions, employers' liability insurance association.
External service providers or other contractors, e.g. for data processing and hosting, payroll accounting, travel expense accounting, insurance services, vehicle use.
Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest, e.g. for order acquisition, insurance services.

Third-Country Transfers:
Processors outside the European Union, including email providers, may also be used in the performance of the contract.

Data Retention Period:
The retention period is based on legal retention obligations and is generally 10 years.


Specific information on the processing of supplier data

Data concerned:
Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Purpose of Processing:
Contract implementation, including inquiries, purchasing, quality assurance.

Categories of recipients:
Public authorities in the case of overriding legal provisions, e.g. tax office, customs.
External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing.
Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest.

Third-Country Transfers:
Processors outside the European Union, including email providers, may also be used in the performance of the contract.

Data Retention Period:
The retention period is based on legal retention obligations and is generally 10 years.


Further information and contacts

In addition, you can assert your rights to information, rectification or erasure or to restriction of processing or to exercise your right to object to processing as well as the right to data portability at any time. Here you will find the possibility to contact us by e-mail or letter https://www.mst-group.eu/impressum/ to contact us. You also have the right to contact the data protection supervisory authority in the event of complaints.


Version

Version: 3.0
Last revision: 21.03.2025