Privacy Policy

In the following, we inform you about the processing of your personal data in the context of the use of our online offer.

Responsible

MEXXFRO GmbH

Rudolf-Diesel-Str. 21
87700 Memmingen

Telephone: +49 (0) 8331 994 78-0
Mail: info@mexxfro.de

Contact

If you have any questions about data protection, please use the contact details above.

Data Protection Officer

Tobias Keller
MEXXFRO GmbH
Rudolf-Diesel-Str. 21
87700 Memmingen

Phone: +49 (0) 8331 994 78-0
Mail: info@mexxfro.de

Storage period

We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have asked for your consent and you have given it, we will delete your personal data if you withdraw your consent and there is no other legal basis for the processing.

We will erase your personal data if you object to the processing and there are no overriding legitimate grounds for the processing or you object to the processing for the purposes of direct marketing or related profiling.

If deletion is not possible because processing is still necessary for compliance with a legal obligation (legal retention periods, etc.) to which we are subject or for the assertion, exercise or defence of legal claims, we will restrict the processing of your personal data.

You can also find more information on the storage period in the following passages.

Your rights

You have the following rights with regard to your personal data:
– Right to information
– Right to rectification
– Right of deletion
– Right to restrict processing
– Right to object to processing
– Right to data portability

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw consent to the processing of your personal data at any time if you have given us such consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You have the right to complain to a supervisory authority about our processing of your personal data.

Provision of your personal data

The provision of your personal data is generally not required by law or contract and is not necessary for the conclusion of a contract. In principle, you are not obliged to provide your personal data. If this should nevertheless be the case, we will point this out to you separately when collecting your personal data (for example by marking the mandatory fields in input forms).

Failure to provide your personal data regularly results in us not processing your personal data for one of the purposes described below and you not being able to take advantage of an offer related to the respective processing (example: without providing your e-mail address, you will not receive our newsletter).

Web hosting

We use external services for web hosting. These services may have access to personal data that is processed in the course of using our online services.

Web server log files

We process your personal data in order to be able to display our online offer to you and to guarantee the stability and security of our online offer. In the process, information (e.g. requested element, accessed URL, operating system, date and time of the request, browser type and the version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the proper display of our online offer and ensuring the stability and security of our online offer.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognise this in the browser line by the character string “https://” and the lock symbol.

Contacting

If you contact us, we will process your personal data in order to deal with your contact.

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the processing of your contact. If the processing is necessary to fulfil a contract with you or to carry out pre-contractual measures based on your request, the legal basis for the processing is also Art. 6 (1) lit. b DS-GVO.

We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed in the context of contacting us.

Cookies & similar technologies

Cookies are used. Cookies are text information that is stored on your terminal device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and permanent cookies, which are only deleted after a certain time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. In this respect, the following explanations on cookies also apply to similar technologies. These explanations also apply to further processing in connection with cookies and similar technologies (analysis & marketing, etc.). This also applies in particular to any consent you may have given for the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.

Cookies may be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online offer, to design it according to needs and interests and thus to optimise our online offer and our marketing. Cookies can be used by us and by external services.

We use a consent tool to manage the cookies used and the relevant consents. Details on the cookies used (purpose, storage period, external service, etc.) and the consent tool can be found in the following passages and in the consent tool we use.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a DS-GVO. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests can be taken from the following passages.

You can prevent cookies from being stored by setting your browser accordingly. Below we provide links for typical browsers where you can find more detailed information on managing cookie settings:
– Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
– Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
– Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
– Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
– Opera: https://help.opera.com/de/latest/web-preferences/#cookies
– Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

You can find further objection options under the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.

If you prevent cookies from being saved, this may impair the proper functioning of our online services. If you delete all cookies, the above settings will also be lost and must be made again.

Furthermore, you can activate the “Do-Not-Track” function of your browser to indicate that you do not wish to be tracked. Below we provide links for typical browsers where you can find further information on the “Do-Not-Track” setting:
– Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
– Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
– Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
– Opera: https://help.opera.com/de/latest/security-and-privacy/
– Safari no longer supports the “Do-Not-Track” function as of February 2019. The following link can be used to prevent cross-site tracking in Safari: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
– Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html

You can also revoke or manage your consent with regard to the cookies used in the Consent Tool we use.

Newsletter

If we have asked for your consent and you have given it, we will process your e-mail address in order to carry out e-mail marketing and, if necessary, other personal data in order to address you personally in the process. The legal basis for the processing is Art. 6 para. 1 lit. a DS-GVO. The contents of the email marketing are specifically described when obtaining your consent. Apart from that, the email marketing contains information about us, our goods and services.

We use the so-called double opt-in procedure to prevent possible misuse of your personal data. For this purpose, after collecting your e-mail address, we send you an e-mail to the e-mail address you have provided, in which we ask you to confirm that you actually wish to receive e-mail marketing. The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the legally compliant implementation of email marketing.

We log the time of granting your consent and the time of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that your consent was obtained in compliance with the law. The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the legally compliant implementation of email marketing.

We use external services for email marketing. Further information on the services used, the scope of the data processing and the technologies and processes involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information on the logic involved as well as the scope and intended effects of such processing for you, can be found in the further information on the services we use at the end of this passage and under the links provided there.

You can withdraw your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us at the contact details provided above.

If you have revoked your consent, we reserve the right to process your personal data in a so-called blacklist/blocklist in order to be able to ensure in the future that no further email marketing takes place in connection with this personal data. The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is to avoid unwanted email marketing.

We process your personal data in the context of tracking or success measurements in order to measure the reach of our email marketing, to design it in a needs and interest-based manner and thus to optimise our email marketing. This may also involve profiling (for the purposes of advertising, personalised information, etc.). Profiling may also take place across services and devices. If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the optimisation of our email marketing. A separate revocation of your consent or objection with regard to tracking or success measurements is unfortunately not possible. You must use the above options to revoke your consent or object to the processing of your personal data for the purpose of email marketing altogether.

Mailchimp
Provider: The Rocket Science Group, LLC, United States of America. The Rocket Science Group, LLC is a subsidiary of Intuit Inc, United States of America.
Website: https://mailchimp.com/de/?currency=EUR
Further information & data protection: https://www.intuit.com/privacy/statement/
Warranty: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us. The provider has signed up to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection on the basis of a decision by the European Commission.

Analysis & Marketing

We process your personal data in order to measure the reach of our online offer, to design it in a needs and interest-based manner and thus to optimise our online offer and our marketing.

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the optimisation of our online offer and our marketing.

We use external services for analysis and marketing. This may also involve profiling (for the purposes of advertising, personalised information, etc.). Profiling can also take place across services and devices. For more information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information on the logic involved as well as the scope and intended effects of such processing for you, please refer to the further information on the services we use at the end of this passage and the links provided there.

Further information on cookies & similar technologies can be found above.

Matomo – Cloud
Provider: InnoCraft Ltd, New Zealand.
Website: https://matomo.org/
Further information & data protection: https://matomo.org/gdpr-analytics and https://matomo.org/matomo-cloud-privacy-policy/
Adequate level of data protection for transfers of personal data to New Zealand: Adequacy Decision of the EU Commission.

Matomo – On-Premise
Provider: Self-hosted
Website: https://matomo.org/
Further information & data protection: https://matomo.org/gdpr-analytics and https://matomo.org/privacy-policy/

Social media presences

We maintain social media presences with external services in order to be able to communicate with users there and thus optimise our online offer and our marketing.

This data protection declaration also applies to the following social media presences:
– facebook: https://www.facebook.com/Mexxfro
– instagram: https://www.instagram.com/mexxfro.tours/
– youtube: https://www.youtube.com/channel/UCor07PDR7hR5v1LeODJeA4Q/

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the optimisation of our online offer and our marketing.

Profiling (for purposes of advertising, personalised information, etc.) may also occur in the context of the use of external services. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services, and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services we use at the end of this passage and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc, United States of America.
Website: https://www.facebook.com
The provider and we are jointly responsible. We have concluded a corresponding agreement with the provider. You can view this agreement at https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum.
Further information & data protection: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has signed up to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection on the basis of a decision by the European Commission.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc, United States of America.
Website: https://www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Warranty: EU Standard Contractual Clauses. You can request a copy of the EU Standard Contractual Clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information & data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has signed up to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection on the basis of a decision by the European Commission.

Fonts & Scripts

We use fonts and scripts from external services in order to be able to display our online offer to you and to always ensure up-to-date fonts and scripts.

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the proper display of our online offer and the guarantee of up-to-date fonts and scripts.

Profiling (for the purposes of advertising, personalised information, etc.) may also occur within the framework of the use of external services. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved as well as the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Google Fonts
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://fonts.google.com/
Further information & data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link: https://business.safety.google/gdpr/. A copy of the EU standard contractual clauses can be viewed there. The provider has signed up to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection on the basis of a decision by the European Commission.

Rating platforms

We use rating platforms and process your personal data in order to have our services rated and thus to optimise our online offer and our marketing. For this purpose, we also integrate so-called widgets of the rating platforms in order to indicate, for example, that we use a rating platform and how our services are rated.

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the optimisation of our online offer and our marketing.

If we or the rating platforms we use have asked you for your consent and you have given it, we or the rating platforms we use process your personal data to remind you to submit a rating. The legal basis for the processing is Art. 6 para. 1 lit. a DS-GVO.

For more information on the rating platforms we use, the scope of data processing and the technologies and processes involved in using the respective rating platforms, please refer to the further information on the rating platforms we use at the end of this passage and the links provided there.

Trustpilot
Provider: Trustpilot A/S, Denmark.
Website: https://de.trustpilot.com/
Further information & data protection: https://de.legal.trustpilot.com/end-user-privacy-terms

Comments

If you leave comments via the functions provided for this purpose (on blog entries, products, etc.), we process your personal data in order to be able to display your comments and to prevent any misuse.

If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a DS-GVO. If we have not asked for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest here is the proper display of your comments and the prevention of misuse.