Privacy Policy

1. General information

Meguin GmbH & Co. KG Mineraloelwerke (hereinafter: Meguin), Rodener Str. 25, D-66740 Saarlouis, is the operator of the website www.meguin.de and would therefore like to use the following Privacy Policy to inform you to what extent data are collected when you use our website and what purpose these data are used for.

Meguin also wishes to point out the rights you are entitled to in this respect. Please note: This Privacy Policy applies exclusively to the website www.meguin.de including any subpages (e.g. www.meguin.biz ). At www.meguin.de, you have the option of switching to other websites. Separate privacy policies apply to each of these sites, for whose content the respective operators of the websites are responsible.

The careful handling of your personal data has top priority at Meguin GmbH & Co. KG Mineraloelwerke. When processing data, we comply with the statutory provisions of the General Data Protection Regulation (GDPR) and the associated national provisions.

When you visit our website, the web servers temporarily store the connection data of the requesting computer, the subpages you visit on our site, the date and duration of your visit, the identification data of the browser and operating system type used as well as the website from which you are visiting us as standard for system security purposes.

This data batch consists of

the site from which the file was requested,
the name of the file,
the date and time of the request,
the amount of data transferred,
the access status (file transferred, file not found),
a description of the type of web browser used,
the IP address of the requesting computer, shortened by the last three digits.

These data are stored anonymously. Personal user profiles are thus not created. These data are erased or made anonymous after the end of the connection.

In addition, we collect personal data from you in other cases, specifically

when you contact us via e-mail or the contact form
through the software used for website tracking
to secure our web server and to ensure the functionality of our online services
for the online application process

Personal data are processed exclusively for a specific purpose (purpose limitation principle). In addition, we regularly review our data processing practices to ensure that we process as little personal data as possible (data minimization principle).

2. Details of the controller

Below you will find the details of the controller as defined by Art. 4 (17) GDPR:

Company name & legal form:	Meguin GmbH und Co. KG Mineraloelwerke
Representative:	Meguin Verwaltungs-GmbH represented by the Directors: Günter Hiermaier, Dr. Uli Weller
Address of the head office as defined by Art. 4 (16) GDPR:	Rodener Str. 25, 66740 Saarlouis
Contact details:	Meguin GmbH und Co. KG Mineraloelwerke, Rodener Str. 25, 66740 Saarlouis, info@meguin.de
Contact details of the Data Protection Officer:	it.sec GmbH&Co.KG Einsteinstraße 55, 89077 Ulm (Germany) Tel.: 0 731 205 89 24 E-mail: datenschutz@it-sec.de

3. What are personal data?

Personal data are all information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name. Personal data include information such as your name, address, telephone number and date of birth (if provided). Statistical information that cannot be directly or indirectly associated with you – such as the popularity of individual websites operated by us or the number of users of a site – is not personal data.

4. Protection of minors

Our website is not directed at minors and we do not knowingly collect personal data from minors.

If persons under the age of 16 transfer personal data to us, this is only permitted if the parent or legal guardian themselves has consented or has agreed to the consent of the young person. Pursuant to Art. 8 (2) GDPR, the contact details of the parent or legal guardian must be communicated to us in order to convince us of the consent or the agreement of the parent or legal guardian. These data and the data of the minor will then be processed in accordance with this Privacy Policy.

If we determine that a minor under the age of 16 has sent us personal data without the parent or guardian consenting themselves or agreeing to the consent of the minor, we will erase the data immediately.

5. Purposes of data processing and legal basis

Your personal data will be processed for the following purposes on the following legal bases:

Communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR
Public image and advertising pursuant to Art. 6 (1) a), f) GDPR
Implementation of declarations of consent pursuant to Art. 6 (1) a) GDPR
Ensuring the proper operation of a data processing system pursuant
to Art. 6 (1) c) and f) GDPR
Applicant selection procedures within the framework of personnel and resource management pursuant to Art. 6 (1) a), b) GDPR in conjunction with § 26 New Federal Data Protection Act (BDSG-Neu)

6. Storage duration

We store personal data within the scope of legal regulations or your consent.

We use the following criteria to determine the specific storage duration:

We store personal data until the purpose for which they were collected no longer apply (e.g. upon termination of a contractual relationship or through the last activity, if there is no continuing obligation, or in the event of a withdrawal of your consent to the data processing in question).

Data will only be stored beyond this if

legal storage obligations (e.g. pursuant to AO (German Tax Code) and HGB (German Commercial Code) exist;
the data are still needed to establish and exercise legal claims or to defend against legal claims, e.g. due to technological and forensic requirements to defend against attacks on our web servers and to prosecute these;
erasure would be contrary to the data subjects’ legitimate interests;

any other exception applies pursuant to Art. 17 (3) GDPR.

7. Rights of data subjects

7.1 Right to information and data portability

You have a right to information about the personal data processed by us pursuant to Art. 15 GDPR at any time.

If the data processing is based on your consentor on a contract pursuant to Art. 6 (1) b) GDPR, you may, pursuant to Art. 20 (1) GDPR, request that you receive the personal data stored about you in a structured, established and machine-readable format, or to have these data transferred to a system of a third party. You are thus entitled to direct forwarding of your data.

7.2 Right to rectification, restriction and erasure

Furthermore, pursuant to Art. 16 to 18 GDPR, you may request that we rectify, restrict (block) or erase your personal data if we have processed the data incorrectly, if there are grounds for restricting further data processing or if the data processing has become illegal for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to erasure may be restricted by legal retention periods.

7.3. Rights to object

If our data processing is based exclusively on our legitimate interest pursuant to Art. 6 (1) f) GDPR, you may object to this processing pursuant to Art. 21 (1) GDPR. We will then stop processing your data unless we can prove legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct advertising with future effect pursuant to Art. 21 (2) GDPR.

7.4. Right of withdrawal

If you have allowed us to process your personal data by giving your consent, you have a right of withdrawal with effect for the future pursuant to Art. 7 (3) GDPR.

7.5 Right to complain to the supervisory authority

You are free to lodge a complaint with a supervisory authority if you believe that our processing of your personal data is in breach of the European General Data Protection Regulation or other national and international data protection laws, Art 77 GDPR.

The contact details of the supervisory authority responsible for us are as follows:

Independent Data Protection Center Saarland

Monika Grethel

State Representative for Data Protection and Freedom of Information
P.O. Box 10 26 31
66026 Saarbrücken

or:

Fritz-Dobisch-Straße 12
66111 Saarbrücken

7.6 Contact information

To exercise your rights, you can send us an informal message to the contact details below. Please also address the withdrawal of your consent to the contact details below, indicating which declaration of consent you wish to withdraw:

Company name & legal form:	Meguin GmbH & Co. KG Mineraloelwerke
Address:	Rodener Str. 25, D-66740 Saarlouis
E-mail address:	datenschutz@meguin.de
Web form	http://www.meguin.de/meguin/web.nsf/formular?OpenForm&formular=mdkontakt&lang=md

8. Data transfer by means of contact

8.1 Contact form

Via the web form at http://www.meguin.de/meguin/web.nsf/formular?OpenForm&formular=mdkontakt&lang=md we request the following data:

Message text (required)
Title (optional)
E-mail address (required)
First and last name (optional)[CL1]
Telephone number (optional)
Street and house number (optional)
Postcode (optional)
Company (optional)

Data that you send us via the contact form will be processed for the purpose of communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR. These data are only stored as long as their processing is required for these purposes or until the expiry of any subsequent retention periods.

8.2 Contact via e-mail

Data that you send us by e-mail for the purpose of making contact with us will be processed for the purpose of communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR. These data are stored as long as their processing is required for these purposes or until the expiry of any subsequent retention periods.

9. Online application process

To apply online for a job with us, you can use the link www.meguin.de/meguin/web.nsf/id/pa_initiativbewerbung.html. You can access this in the “Meguin, Careers” section. The data entered by you and the attachments you send with it are transferred via a secure https connection.

[CL2] Your electronic application data will be received by the relevant HR department and only forwarded to the department responsible for the position in question or to the persons in charge of processing. All parties involved will treat your application documents with the necessary care and with absolute confidentiality.

Data processing is based on Art. 6 (1) a), b) GDPR in conjunction with § 26 BDSG-Neu. By sending your application documents, you agree to the processing of your personal data within the application procedure.

After completion of the applicant selection procedure, we will keep your application documents for
another 3 months and then erase them or destroy any copies if we have not concluded a contract of employment with you. If we add your application documents to our talent pool, we will notify you accordingly. In the notification you can actively consent to the further storage of your documents. If you consent to the storage of your documents, we will store them for one year.

Please note that applications that you send us by e-mail will be transfered to us unencrypted. We therefore recommend that you use the online application program.

10. Data processing and use for profiling purposes

We would like to point out that tracking via cookies is currently not carried out, as we are in the conversion phase.

We also use your data for profiling (cookies and web tracking procedure) as described in more detail below. Profiling is based on Art. 6 (1) a) or f) GDPR.

10.1 Cookies

We use so-called cookies in some areas of our website, e.g. to recognize the preferences of visitors and to design the website accordingly. This simplifies navigation and enables a high degree of website user-friendliness. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor’s hard drive. They allow information to be stored for a certain period of time and the identification of the visitor’s computer. For better user guidance and individual service display, we use permanent cookies. We also use so-called session cookies, which are automatically erased when you close your browser. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. We collect thefollowing technical connection data: The page accessed on our website, your IP address shortened by the last three digits, date and time of access, end device used and browser configuration data.This takes place to check theauthorization of actions and the authentication of the requesting user of our services. The legal bases are Art. 6 (1) c) in conjunction with Art. 32 and Art. 6 (1) f) GDPR. Our legitimate interest is to secure our web server, for example, to defend ourselves against attacks, and to ensure the functionality of our services.

We only set non-technically necessary cookies after you have given your express consent, which you can of course withdraw at any time.

As part of our cookie information on our website, you have agreed to the following statement in this respect:

This website uses tracking cookies/tracking software to provide you with the full functionality of our website and thus a better online experience. You can find more information on the cookies and web tracking procedures used by us in our Privacy Policy under [insert link]. However, all cookies/our tracking software will not be activated until you have given us your consent.

If you completely reject the use of cookies, you will be unable to use certain features of our website, including the possibility of a cookie-based opt-out from tracking. Please allow the opt-out cookies of those services for which you wish to prevent tracking.

Please also bear in mind that deleting all cookies will also delete opt-out cookies. You will therefore have to reset these. Cookies are also browser-bound, which means that they must be set separately for each browser you use on each device you use. You will find the necessary links in the description of the service in question below.

We use the following cookies – if you allow this and have not set one or more opt-out cookies – for the purpose described below in more detail:

Name of cookie	Purpose	Storage duration	Technically necessary	Withdrawing consent (if cookie is not technically necessary)
_utma	Distinguishing between user and session	2 years		See below
_utmb	Determining a new session	30 minutes		See below
_utmc	Operational cookie to determine whether the user is in a new session.	After the session is over		See below
_utmt	Reduction of the requirement rate	10 minutes		See below
_utmz	Storage of the source that explains how the website was accessed by the user.	6 months		See below

10.1.1 Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC (“Google”). Google Analytics uses so-called cookies, text files which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie concerning your use of this website is generally passed on to a Google server in the USA and stored there. If IP anonymization is enabled on this website, your IP address is first shortened by Google within member states of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to the use of the website and of the Internet to the website operator. The IP address transferred from your browser as part of Google Analytics is not added to other Google data. One way to object to web analysis by Google Analytics is to set an opt-out cookie that instructs Google not to store or use your data for web analysis purposes. Please note that in this solution the web analysis will not take place only for as long as the browser stores the opt-out cookie. If you wish to set the opt-out cookie now, please click here https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable.

You can avoid the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that if you choose to do so it may not be possible for you to use all the features of this website. Furthermore, you can prevent the recording of the data created by the cookie and related to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plugin available at the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.

Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

The information generated by the cookie concerning your use of this website will be stored by us for the duration based on the specific purpose and subsequently deleted. Session cookies are deleted directly after the session. Other cookies remain for longer and expire after two years at the latest.

10.1.2 DoubleClick by Google

Doubleclick by Google uses cookies to present you with advertisements that are relevant to you. A pseudonymous identification number is assigned to your browser to check which ads were displayed in your browser and which ads were viewed. The cookies do not contain any personal information. The use of DoubleClick cookies only allows Google and its affiliates to place ads based on previous visits to our websites or other websites on the internet. The information generated by the cookies is transmitted and stored by Google for evaluation purposes. Transmission of the data by Google to third parties only takes place based on statutory regulations or in connection with order processing. Google will not merge your data with other data collected by Google.

If you do not agree with this form of processing, you can prevent the cookies from being saved by making the appropriate settings in your browser. You can also prevent Google from collecting the data generated by the cookies and related to your use of the websites and prevent Google from processing this data by downloading and installing the browser plug-in available here <https://support.google.com/ads/answer/7395996?hl=de>. Alternatively, you can also deactivate the double-click cookies on this page < www.google.com/ads/preferences/html/opt-out.html>.

Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy Shield: www.privacyshield.gov/participant

10.1.3 Google Tag Manager

Google Tag Manager is a solution which we use to manage so-called website tags via a single interface (and thus integrate Google Analytics and other Google marketing services into our online presence). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, reference is made to the following information on Google services. Guidelines for use: www.google.com/intl/de/tagmanager/use-policy.html.

11. Data recipient

Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to work with this personal data to fulfill their assignments.

If third parties gain access to your data, we have obtained your permission or there is a legal basis for this.

We use service providers to provide services and process your data (including hosting your data in a secure computer center, delivering ordered goods, sending letters or e-mails and maintaining and analyzing databases, destroying documents and files, so-called order processing pursuant to Art. 28 GDPR). These service providers process the data exclusively on our instructions and are obliged to comply with the applicable data protection regulations. All processors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services, or to the extent to which you have consented to the processing and use of your data.

The following recipient is also included in the web tracking procedure:

Google LLC regarding Google Analytics

Data exchange within the group of companies to which we belong takes place exclusively within the EU/EEA and is only for internal administrative purposes. By group of companies we mean affiliated companies as defined by Art. 4 (19) GDPR.

12. Data processing for the purpose of direct marketing

Postal advertising

To the extent permitted by law, we may also use your name and the postal address known to us to send you advertising for our own offers. The legal basis is
Art. 6 (1) f) in conjunction with Recital 47 GDPR. Our legitimate interest is to promote sales or create demand among our existing customers. Of course, you can object to the future processing of your data for advertising purposes at any time. A notification in text form to the contact details above is sufficient. We will then delete your data from our mailing list. The data supporting your objection will be kept for another 6 years pursuant to Art. 17 (3) e) GDPR. During this period, however, your personal data will be blocked for further processing.

Telephone advertising

To the extent permitted by law, we may also use business customers’ name, company affiliation and telephone number to inform them about our own offers, provided that these are presumed to be of interest. The legal basis is Art. 6 (1) f) in conjunction with Recital 47 GDPR, § 7 Para. 2 No. 2 German Unfair Competition Act (UWG). Our legitimate interest is to promote sales or create demand among our existing business customers. Of course, you can object to the future processing of your data for advertising purposes at any time. A notification in text form to the contact details above is sufficient. We will then delete your data from our mailing list. The data supporting your objection will be kept for another 6 years pursuant to Art. 17 (3) e) GDPR. During this period, however, your personal data will be blocked for further processing.

13. Transfer to third countries and legal basis

A transfer of personal data to third countries only takes place

within the scope of the use of Google Analytics on the basis of the EU Commission’s adequacy decision regarding the EU-U.S. Privacy Shield pursuant to Art. 45 GDPR,
within the scope of the activation of YouTube videos, if you have given your consent pursuant to Art. 49 (1) a) GDPR.

The servers of some of the service providers we use are located in the USA and other countries outside the European Union. Companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union. If your data are processed in a country which does not have a recognized high level of data protection like the European Union, this will be on the basis of the EU Commission’s adequacy decision regarding the EU-U.S. Privacy Shield pursuant to Art. 45 GDPR or the EU Standard Treaty 2010 pursuant to Art. 46 (2) c) GDPR in conjunction with the EU Commission’s decision of 02/05/2010 (2010/87/EU) or pursuant to Art. 49 (1) a) GDPR.

14. Transfer to law enforcement and criminal investigation authorities

In exceptional cases, we transfer personal data to law enforcement and criminal investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the German Code of Criminal Procedure (Strafprozessordnung), the German Tax Code (Abgabenordnung), the Money Laundering Act (Geldwäschegesetz) or state police laws.

15. Data security

We maintain a wide variety of security measures pursuant to Art. 32 GDPR (technical and organizational measures) for the protection of your personal data.

For a secure transfer of the data you send to us, we offer SSL/TLS encryption with the current TLS v1.1. and TLS v1.2 encryption protocols on our website. We would like to point out that the comprehensive encryption of the transmission path also depends on your Internet browser. We therefore recommend that you keep your Internet browser up to date so that TLS v1.1. or TLS v1.2 encryption is automatically established when you visit our website.

If you contact us by e-mail, we would like to point out that the confidentiality of the information transferred is not guaranteed. The content of e-mails may be viewed by third parties. We therefore recommend that you send us confidential information by post or, for job applications, via our online portal.