Privacy Policy
The following privacy policy applies to use of the website https:/mcs-media.com (hereinafter “Website”).
The operator of this Website attaches great importance to data protection. The collection and processing of your personal data is carried out in compliance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to provide you with the portal named above. This statement describes how and for what purpose your personal data is collected and used and what choices you have in connection with personal data.
By using this Website you consent to the collection, use and transfer of your data in accordance with this privacy policy. If you wish to object to the collection, processing or use of your data by us in whole or in part under the terms of this privacy policy, you may direct your objection to the controller.
- Controller
The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is
MCS
Schwalbenstraße 4
D-85232 Bergkirchen
E‑Mail: info(at)mcs-media.com
Owner: Christoph Strauß
1.2 General
Types of data processed: Contact details (e.g., e‑mail address, telephone numbers) when contacting us by e‑mail, blog posts
Categories of data subjects Visitors and users of the online offering. Hereinafter we collectively refer to the data subjects as “users.”
Purpose of processing – Responding to users’ contact requests; – Security measures;
Definitions used “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.
The “controller” is the natural or legal person, authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 Data collection and logging
When you access our websites, your web browser (for technical reasons) transmits data to our web server. The following data are logged during an ongoing connection for communication between your web browser and our web server:
Date and time of the request Name of the requested file Page from which the file was requested Access status (file transferred, file not found, etc.) Web browser and operating system used Full IP address of the requesting computer Amount of data transferred For reasons of technical security, in particular to defend against attempted attacks on our web server, we temporarily store these data. It is not possible for us to draw conclusions about individual persons from these data. After no more than seven days the data are anonymized by shortening the IP address to the domain level so that it is no longer possible to relate them to an individual user. The data are also processed in anonymized form for statistical purposes; no comparison with other data sets or disclosure to third parties, even in excerpts, takes place. Only as part of our server statistics, which we publish every two years in our activity report, is a presentation of the number of page views provided.
Collection of further data If you contact us by e‑mail, we will collect, process and use your personal data solely for the purpose of handling your request.
Cookies If you write a comment on our website, this may constitute consent to store your name, e‑mail address and website in cookies. This is a convenience feature so that you do not have to re-enter all this information when you write another comment. These cookies are stored for one year.
If you have an account and log in to this website, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will set some cookies to store your login information and your display preferences. Login cookies last for two days and display preference cookies last for one year. If you select “Remember me” when logging in, your login will persist for two weeks. Logging out of your account will remove the login cookies.
If you edit or publish an article, an additional cookie will be stored in your browser. This cookie contains no personal data and simply refers to the ID of the article you just edited. The cookie expires after one day.
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents, we use the consent tool “Real Cookie Banner.” Details on the operation of “Real Cookie Banner” can be found at https://devowl.io/de/rcb/datenverarbeitung/.
Legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
Providing personal data is neither legally nor contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we cannot manage your consents.
Media
If you are a registered user and upload photos to this website, you should avoid uploading photos that contain EXIF GPS location data. Visitors to this website could download photos stored on this website and extract their location information.
Embedded content from other websites
Posts on this website may include embedded content (e.g., videos, images, posts, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.
Those websites may collect data about you, use cookies, embed additional third‑party tracking services, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.
Google Fonts
We embed the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt‑Out: https://adssettings.google.com/authenticated.
Web tracking methods (reach measurement) Analytics programs and other techniques for evaluating your usage behavior are not used on our website.
1.4 Hosting
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the operation of this online offering.
In doing so, we and our hosting provider process the aforementioned data on the basis of our legitimate interests in an efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
2 General use of this website
2.1 E‑mail contact
If you contact us (e.g., via contact form, e‑mail), we store your details to process the request and in case follow‑up questions arise. We will only store and use further personal data if you consent to this or if this is legally permissible without a special consent.
2.2 Comments and contributions
If you, as a user, leave comments or other contributions (e.g., on our blog), your IP addresses will be stored on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR. This is done for our security in case someone posts unlawful content in comments and contributions (insults, prohibited political propaganda, etc.). In such a case we could be held liable for the comment or contribution and are therefore interested in the identity of the author.
Visitor comments may be checked by an automated spam detection service.
2.3 Online presences in social media
Embedding of third‑party services and content
Within our online offering we use content or service offerings from third‑party providers on the basis of our legitimate interests (i.e., optimization of our online offering within the meaning of Art. 6(1)(f) GDPR) in order to integrate their content and services such as videos or fonts (hereinafter collectively referred to as “content”).
This always requires that the third‑party providers of this content perceive the users’ IP address, since without the IP address they could not send the content to the users’ browser. The IP address is therefore required for the presentation of this content. We endeavor to use only such content whose respective providers use the IP address solely for delivering the content. Third parties may also use so‑called pixel tags (invisible graphics, also called “web beacons”) for statistical or marketing purposes. The pixel tags can evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the users’ device and may include, among other things, technical information about the browser and operating system, referring sites, visit time as well as further information on the use of our online offering, and can also be combined with such information from other sources.
Use of plugins from social media providers
We use plugins from social networks (e.g., Facebook, Twitter, LinkedIn, WhatsApp, XING) on this website. You can usually recognize the plugins by the respective social media logos. To ensure data protection on this website, we use these plugins only together with the so‑called “Shariff” solution. Embedding via Shariff prevents the integrated plugins from transmitting data to the respective social media provider as soon as the detail page on our website is accessed. Only when you activate the respective plugin by clicking the associated button is a direct connection established to the provider’s server. Only then does the respective social media provider receive the information that you have visited this website with your IP address. If you are simultaneously logged into your respective social media account (e.g., Xing), the respective provider may assign the visit to this website to your user account. Activating the plugin constitutes consent within the meaning of Art. 6(1)(a) GDPR. You can revoke this consent with effect for the future directly with the respective social media provider at any time.
We use services of the following social media providers:
Xing:
On our pages we use plugins of the provider Xing AG (XING), Gänsemarkt 43, 20354 Hamburg. By activating the “Share on Xing” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so that personal data is only collected by Xing when the button is activated. We have no influence on the type and scope of the further collection of personal data. Information on data protection at Xing is available at https://privacy.xing.com/de/datenschutzerklaerung.
LinkedIn
On our pages we use plugins of the provider LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. By activating the “Share on LinkedIn” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so that personal data is only collected by LinkedIn when the button is activated. We have no influence on the type and scope of the further collection of personal data. Information on data protection at LinkedIn is available at https://www.linkedin.com/legal/privacy-policy.
X (Twitter)
On our pages we use plugins of the provider Twitter Inc., One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. By activating the “Share on X” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so that personal data is only collected by X when the button is activated. We have no influence on the type and scope of the further collection of personal data. Information on data protection at X is available at https://x.com/de/privacy.
Facebook
On our pages we use plugins of the provider Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook). By activating the “Share on Facebook” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so that personal data is only collected by Facebook when the button is activated. We have no influence on the type and scope of the further collection of personal data. The controller for the data processing is Meta Platforms Ireland (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). More information on data processing at Facebook is available at https://www.facebook.com/policy.php.
Reddit
On our pages we use plugins of the provider Reddit, Inc., 1455 Market Street, Suite 1600, San Francisco, CA 94103, USA. By activating the “Share on Reddit” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so that personal data is only collected by Reddit when the button is activated. We have no influence on the type and scope of the further collection of personal data. Information on data protection at Reddit is available at https://www.reddit.com/policies/privacy-policy.
Tumblr
On our pages we use plugins from the provider Tumblr, Inc., 60 29th Street #343, San Francisco, CA 94110, USA. By activating the “Share on Tumblr” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by Tumblr when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at Tumblr is available at https://www.tumblr.com/privacy
Flipboard
On our pages we use plugins from the provider Flipboard, 555 Bryant Street #352, Palo Alto, CA 94301, USA. By activating the “Share on Flipboard” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by Flipboard when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at Flipboard is available at https://about.flipboard.com/privacy-policy/
Mastodon
On our pages we use plugins from the provider Mastodon gGmbH, Mühlenstraße 8a, 14167 Berlin, Germany. By activating the “Share on Mastodon” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by Mastodon when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at Mastodon is available at https://mastodon.social/privacy-policy
WhatsApp
On our pages we use plugins from the provider WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. By activating the “Share on WhatsApp” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by WhatsApp when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at WhatsApp is available at https://www.whatsapp.com/legal/privacy-policy-eea
Telegram
On our pages we use plugins from the provider Telegram, represented by the European Digital Services Representative (EDSR), Avenue Huart Hamoir 71, 1030 Brussels, Belgium. By activating the “Share on Telegram” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by Telegram when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at Telegram is available at https://telegram.org/privacy/de
Threema
On our pages we use plugins from the provider Threema GmbH, Churerstrasse 82, 8808 Pfäffikon, Switzerland. By activating the “Share on Threema” button you can notify other members of the network about the page you visited. The button is embedded using the Shariff solution described above, so personal data is only collected by Threema when the button is activated. We have no influence on the type and scope of any further collection of personal data. Information on privacy at Threema is available at https://threema.ch/de/privacy
Newsletter
When you subscribe to the newsletter, your e‑mail address will be used for our own advertising purposes. By subscribing to the newsletter we process the data you enter (e‑mail address and any other voluntary information). The dispatch of the newsletter after registration is based on your consent pursuant to Art. 6(1)(a) GDPR.
Newsletter registration is done using the double opt‑in procedure. To prevent abuse we will send you an e‑mail after registration asking you to confirm your subscription. To be able to demonstrate the registration process in accordance with legal requirements, your registration is logged. This includes storage of the registration and confirmation timestamps and your IP address.
You can unsubscribe from the newsletter at any time. Please use the link in the newsletter or send an e‑mail to info(at)mcs-media.com.
2.4 Legal basis and storage period
The legal basis for the data processing under the preceding sections is Art. 6(1)(f) GDPR. Our interests in data processing are, in particular, ensuring the operation and security of the website, investigating how visitors use the website, and simplifying the use of the website.
Unless otherwise specified, we store personal data only as long as necessary to fulfill the purposes pursued.
If you write a comment, it and its metadata are stored indefinitely. This allows us to automatically recognize and approve follow‑up comments instead of holding them in a moderation queue.
For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time (username cannot be changed). Website administrators can also view and change that information.
3 Your rights as a data subject
Under applicable law you have various rights regarding your personal data. To assert these rights, please direct your request by e‑mail or post with clear identification of your person to the website operator (see Section 1). As a data subject you have the following rights:
3.1 Right of access
You have the right at any time to obtain confirmation from us as to whether we are processing personal data concerning you. If that is the case, you have the right to obtain free access to the personal data stored about you together with a copy of those data. You also have the following information rights:
- the purposes of processing;
- the categories of personal data processed;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of a right to request rectification or erasure of personal data concerning you;
- the right to request restriction of processing by the controller;
- the right to object to the processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from you, any available information as to their source;
- the existence of automated decision‑making, including profiling pursuant to Article 22(1) and (4) GDPR and — at least in those cases — meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you.
Where personal data are transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
3.2 Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.
3.3 Right to erasure (“right to be forgotten”)
You have the right to request that personal data concerning you be erased without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR and where there is no other legal ground for the processing;
- you object pursuant to Art. 21(1) GDPR to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR to processing for direct marketing purposes;
- the personal data have been unlawfully processed;
- the erasure of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject;
- the personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
Where we have made personal data public and are obliged to delete them, we will take reasonable steps, taking into account available technology and the cost of implementation, to inform data controllers who process the personal data that you have requested the erasure of any links to, or copy or replication of, those personal data.
3.4 Right to restriction of processing
You have the right to obtain restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by you for a period enabling us to verify the accuracy;
- the processing is unlawful and you oppose the erasure of the personal data and request restriction instead;
- we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise or defense of legal claims;
- you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether our legitimate grounds override yours.
3.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine‑readable format, and you have the right to transmit those data to another controller without hindrance from us, provided that
- the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
- the processing is carried out by automated means.
In exercising your right to data portability you also have the right to have the personal data transmitted directly from us to another controller where technically feasible.
3.6 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
3.7 Automated decision‑making including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
3.8 Right to withdraw consent
You have the right to withdraw consent to processing of personal data at any time.
3.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable law.
4 Data security
We make every effort—within the limits of applicable data protection laws and technical possibilities—to protect the security of your personal data.
Your personal data are transmitted to us in encrypted form. This applies to your orders and to customer logins. We use the SSL (Secure Socket Layer) encryption system, but note that data transmission over the Internet (e.g., communication by e‑mail) can have security gaps. Complete protection of the data from access by third parties is not possible.
To secure your data we maintain technical and organizational protective measures, which we continually adapt to the state of the art. We also do not guarantee that our service will be available at all times; interruptions, outages or failures cannot be excluded. The servers we use are backed up regularly and carefully.
5 Automated decision‑making
Automated decision‑making based on the personal data collected does not take place.
6 Disclosure of data to third parties; no transfer of data outside the EU/EEA
As a rule, we use your personal data only within our company.
If and to the extent that we engage third parties in the performance of contracts, these third parties receive personal data only to the extent that the transfer is necessary for the respective service.
In cases where we outsource parts of data processing (“processing on behalf”), we contractually obligate our processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
No transfer of data to entities or persons outside the EU and outside the cases mentioned in this declaration takes place or is planned.
7 Changes to the privacy policy
MCS reserves the right to amend the privacy policy in order to adapt it to changed legal situations or to changes in the service and data processing. This, however, applies only to statements on data processing. Where user consents are required or parts of the privacy policy contain provisions of the contractual relationship with users, changes will only be made with the users’ consent.
Users are requested to check the content of the privacy policy regularly. You may save and print this privacy policy at any time.
If you have any questions about our data protection or this privacy policy, or wish to exercise your rights, please contact the website operator (contact details see Section 1 and in the imprint).
(Status: July 2024)
