Privacy policy

1. Designation of the processing activity

Thank you for visiting our website and for your interest in Meondi GmbH. Your privacy is an important concern for us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data is processed exclusively in compliance with the statutory provisions of the applicable data protection regulations.

With this privacy policy, we inform you about the processing of your personal data and about your data protection rights. Constant technological development, changes to our services or the legal situation and other reasons may require adjustments to our data protection information. We therefore reserve the right to change this data protection declaration at any time and ask you to inform yourself regularly about the current status.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

2. Name and contact details of the responsible person

Responsible for the data collection in the sense of the data protection laws is the:

Meondi GmbH
Epplestraße 225
70567 Stuttgart
Germany
Telephone: +49 (0)151 283 47283

If you have any questions regarding data protection, please contact our data protection officer at privacypolicy@meondi.com.

3. Purposes of data processing

As a matter of principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations. 

4. Legal basis for data processing

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a EU-Datenschutzgrundverordnung (DSGVO) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 Abs. 1 lit. c DSGVO serves as the legal basis.

In the event that the vital interests of the data subject or of another natural person make the processing of personal data necessary, the purpose of the processing shall be to protect the data subject's interests. Art. 6 Abs. 1 lit. d DSGVO serves as the legal basis.

and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Abs. 1 lit. f DSGVO as the legal basis for the processing.

5a. Data transfer

1. Webflow - External Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and follow our instructions with regard to this data. We use the following hoster: Webflow, Inc. 398 11th Street 2nd Floor San Francisco,CA 94103 United States

Conclusion of a contract on commissioned processing

In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster. Note on data transfer to the USA and other third countries.

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activitie

2. Google Maps

Description of the service

This is a web mapping service.

Data Processing company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data protection officer of the processing company

Below you will find the e-mail address of the data protection officer of the processing company.

https://support.google.com/policies/troubleshooter/7575787?hl=en

Purpose of the data

This list represents the purposes of data collection and processing.

  • Show maps

Technologies used

This list includes all the technologies used by this service to collect data. Typical technologies are cookies and pixels placed in the browser.

  • Cookies

Collected data

This list contains all (personal) data collected by or through the use of this service.

  • Date and time of visit
  • Location information
  • IP address
  • URL
  • Usage data

Legal basis

The following is the required legal basis for the processing of data.

  • Art. 6 para. 1 p. 1 lit. a DSGVO

Place of processing

This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the length of time that the collected data is stored for processing. The data must be deleted as soon as they are no longer needed for the specified processing purposes.

The data will be deleted as soon as it is no longer needed for the processing purposes.

Transfer to third countries

This service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes, without you potentially having any legal recourse. Below is a list of countries to which the data will be transferred. This may be for various purposes, such as storage or processing.

  • United States of America, Singapore, Taiwan, Chile

Data recipients

The following is a list of the recipients of the data collected.

  • Google Ireland Limited
  • Google LLC
  • Alphabet Inc

Click here to read the privacy policy of the data processor.

http://www.google.com/intl/de/policies/privacy

Click here to read the data processor's cookie policy.

https://policies.google.com/technologies/cookies?hl=en

Click here to opt-out on all domains of the processing company.

https://safety.google/privacy/privacy-controls/

Storage information

  • Maximum storage period for cookies: 6 months.

Information stored

  • Name: NID; This cookie stores information about user settings and information for Google Maps; Duration: 6 months; Type: cookie;

3. Matomo Tag Manager

Description of Service

The Matomo Tag Manager is used to transfer the consent status of the Consent Management Platform Usercentrics to the web analytics service Matomo.

Processing Company

InnoCraft
150 Willis St, 6011 Wellington, New Zealand

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

privacy@matomo.org

Data Purposes

This list represents the purposes of the data collection and processing.

  • Because of the Matomo Tag Manager Matomo only begins to analyze user behavior when the user has given their consent to use Matomo through the Usercentrics-Tool. If the user does not consent to the use of Matomo through the Usercentrics-Tool, the Tag Manager instructs Matomo not to track user behavior.

Technologies used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  • Cookie

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

  • Consent status and time of consent for the use of Matomo

Legal Basis

In the following the required legal basis for theprocessing of data is listed.

  • Art. 25 paragraph 2 TTDSG

Location of Processing

This is the primary location where the collected data is being processed. If thedata is also processed in other countries, you are informed separately.

  • European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  • 1 year, 1 month

Data Recipents

In the following the recipients of the data collected are listed.

  • Innocraft

Click here to read the privacy policy of the data processor

https://matomo.org/privacy-policy/

Click here to read the cookie policy of the data processor

https://matomo.org/privacy-policy/

Click here to opt out from this processor across all domains

https://matomo.org/privacy-policy/#optout

Storage Information

Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

  • Maximumage of cookie storage: 1 year, 1 month
  • Non-cookie storage: no

Stored Information

mtm_consent

Consent for using Matomo is given by the user through the Usercentrics tool.

Type: cookie

Duration: 1 year, 1 month

mtm_consent_removed

Consent for using Matomo is not given by the user through the Usercentrics tool.

Type: cookie

Duration: 1 year, 1 month

4. Matomo

Description of Service

This is an open source web analytics service.

Processing Company

InnoCraft
150 Willis St, 6011 Wellington, New Zealand

Data Protection Officer of Processing Company

Below you can find the email address of the data protection officer of the processing company.

privacy@matomo.org

Data Purposes

This list represents the purposes of the data collection and processing.

  • Analytics
  • Optimization

Technologies used

This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.

  • Cookies

Data Collected

This list represents all (personal) data that is collected by or through the use of this service.

  • Anonymised IP address (Two bytes of the IP address of the user's system. (The IP addresses are not stored in full, but 2 bytes of the IP address are masked (e.g.: 141.62.xxx.xxx). This way, it is no longer possible to match the shortened IP address to the requesting computer).
  • Browser information
  • Date and time of visit
  • Device information
  • Files clicked or downloaded
  • Geographic location
  • Links to outside domain clicked
  • Number of visits
  • Page title
  • Referrer URL
  • Screen resolution
  • Time of users first visit
  • Time of users previous visit
  • Time zone
  • Usage data
  • User agent
  • User ID
  • Page URL

Legal Basis

In the following the required legal basis for theprocessing of data is listed.

  • Art. 6para. 1 s. 1 lit. a GDPR

Location of Processing

Thisis the primary location where the collected data is being processed. If thedata is also processed in other countries, you are informed separately.

  • European Union

Retention Period

The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  • The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipents

In the following the recipients of the data collected are listed.

  • Innocraft

Click here to read the privacy policy of the data processor

https://matomo.org/privacy-policy/

Click here to read the cookie policy of the data processor

https://matomo.org/privacy-policy/

Click here to opt out from this processor across all domains

https://matomo.org/privacy-policy/#optout

Storage Information

Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

 

  • Maximumage of cookie storage: 1 year, 1 month
  • Non-cookie storage: no

Stored Information

Name: _pk_id

This is used to store a few details about the user such as the unique visitor ID.

Type: cookie

Duration: 1 year, 1 month

 

Name: _pk_ref

This is used to store the attribution information, the referrer initially used to visit the website.

Type: cookie

Duration: 6 months

 

Name: _pk_ses

This is used to store a unique session ID.

Type: cookie

Duration: 30 minutes

Name: _pk_cvar

Thisis used to store a unique session ID.

Type: cookie

Duration: 30 minutes

 

Name: _pk_hsr

This is used to store a unique session ID.

Type: cookie

Duration: 30 minutes

 

Name: _pk_testcookie

This is used to check whether the visitor’s browser supports cookies.

Type: cookie

5. Usercentrics Consent Management Platform

Service Description

This is a consent management service. Usercentrics GmbH is used as a processor on the website for the purpose of consent management.

Processing company

Usercentrics GmbH

Sendlinger Str. 7, 80331 Munich, Germany

Data protection officer of the processing company

Below you will find the e-mail address of the data protection officer of the processing company.

datenschutz@usercentrics.com

Purpose of the data

This list represents the purposes of data collection and processing.

  • Compliance with legal obligations
  • Consent storage

Technologies used

This list includes all technologies used by this service to collect data. Typical technologies include cookies and pixels placed in the browser.

  • Local Storage

Data collected

This list contains all (personal) data collected by or through the use of this service.

  • Opt-in and opt-out data
  • Referrer URL
  • User Agent
  • User preferences
  • Consent ID
  • Time of consent
  • Consent type
  • Template version
  • Banner language

Legal basis

The following is the required legal basis for the processing of data

  • Art. 6 para. 1 p. 1 lit. c DSGVO

Place of processing

This is the primary place where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the length of time that the collected data is stored for processing. Data must be deleted as soon as it is no longer needed for the specified processing purposes.

Consent data (consent and withdrawal of consent) is stored for three years. The data will then be deleted immediately.

Data recipients

The recipients of the data collected are listed below.

  • Usercentrics GmbH

Click here to read the data processor's privacy policy.

https://usercentrics.com/de/datenschutzerklaerung/

6. Google Fonts

Service description

This is a collection of fonts for commercial and personal use.

Processing Company

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data protection officer of the processing company

Please find below the email address of the data protection officer of the processing company.

https://support.google.com/policies/contact/general_privacy_form

Purpose of the data

This list represents the purposes of data collection and processing.

  • Provision of fonts

Collected data

This list contains all (personal) data collected by or through the use of this service.

  • IIP address
  • CSS request
  • Collected usage data
  • Font file requests
  • Referrer URL

Legal basis

The following is the required legal basis for processing data

  • Art. 6 para. 1 s. 1 lit. a DSGVO

Place of processing

This is the primary place where the collected data is processed. If the data is also processed in other countries, you will be informed separately.

  • European Union

Retention period

The retention period is the length of time that the collected data is stored for processing. Data must be deleted as soon as it is no longer needed for the specified processing purposes.

The data will be deleted as soon as it is no longer needed for the processing purposes.

Transfer to third countries

This service may transfer the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes, without any possible redress available to you. Below is a list of countries to which the data will be transferred. This may be for various purposes, such as storage or processing.

  • Worldwide

Data recipients

The following is a list of the recipients of the data collected.

  • Alphabet Inc.
  • Google LLC
  • Google Ireland Limited

Click here to read the privacy policy of the data processor.

https://policies.google.com/privacy?hl=en

Click here to read the data processor's cookie policy.

https://policies.google.com/technologies/cookies?hl=en

Click here to opt-out on all domains of the processing company.

https://safety.google/privacy/privacy-controls/

5b. Providing the website

1. Cookies

Our internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser. In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services). Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising. Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions desired by you (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a DSGVO); consent can be revoked at any time. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.

2. Server-Log-Data

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: Browser type and browser version Operating system used Referrer URL Host name of the accessing computer Time of the server request. IP address This data is not merged with other data sources. The collection of this data is based on Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - for this purpose, the server log files must be recorded.

3. Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

4. Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested. The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

6. Deletion of data and duration of storage of personal data

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

7. Links to third party sites

When visiting the website, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party sites, nor can the operator control them. Such third-party sites are not subject to the operator's data protection provisions.

8. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

a) Right of access (Art. 15 DSGVO)

You may request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing is taking place, you have further rights of access set out in Article 15 of the DSGVO. 

b) Right of rectification (Art. 16 DSGVO)

You have a right of rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

c) Right to restrict data processing (Art. 18 DSGVO)

Under the conditions of Article 18 of the DSGVO, you may request the restriction of the processing of personal data relating to you.

Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

d) Right to deletion (Art. 17 DSGVO)

If one of the reasons set out in Article 17 (1) DSGVO applies, you may demand that we delete the personal data relating to you without delay, unless there is an exception to the obligation to delete in accordance with Article 17 (3) DSGVO. 

e) Right to information (Art. 19 DSGVO)

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right against the controller to be informed about these recipients.

f) Right to data portability (Art. 20 DSGVO)

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance by the controller to whom the personal data was provided, provided that

  • (1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
  • (2) the processing is carried out with the aid of automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g) Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) or Article 6(1)(f) DSGVO (data processing on the basis of a balance of interests).

If you object, we will only continue to process your personal data if we can demonstrate compelling legitimate grounds for doing so that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for the purpose of direct marketing to protect legitimate interests on the basis of a balance of interests, you also have the right to object to this at any time without stating reasons.

h) Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

i) Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent supervisory authority (Art. 77 DSGVO), in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the DSGVO.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO).

j) Your contact with us and the exercise of your rights:

Furthermore, you can contact us free of charge if you have any questions about the processing of your personal data, your data subject rights and any consent you may have given.

To exercise all of your aforementioned rights, please contact us at info@meondi.com or by post at the contact address stated above under point 2.