“Data subject” means any identified or identifiable natural person whose personal data is processed by the controller;
"Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
“Restriction of the processing” means the marking of stored personal data with the aim to limit their future processing;
“Profiling” is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to job performance, economic situation, health, personal preferences interests, reliability, behavior, whereabouts or relocation of that natural person.
“Pseudonymisation” is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data can’t be attributed to an identified or identifiable natural person;
"Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
“The processor” is a natural or legal person, public authority, institution or other entity that processes personal data on behalf of the controller;
„Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
“Third party” means a natural or legal person, public authority, institution or other entity other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data;
“Consent” means any voluntarily given and unambiguously expressed declaration of intention in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates the consent to the processing of the personal data concerning him / her.
II. General information
MPS Bauplanung GmbH
Winfried Mayer Dipl.-Ing. (FH)
Rutesheimer Str. 24
Tel.: 0049 711 1399 650
2. Contact details of the data protection officer
We have not nominated a data protection officer nor are we obliged to appoint one.
3. Legal bases
We process personal data based on at least one of the following legal bases:
- The data subject has given consent to the processing of his or her personal data for one or more specific purposes (Art. 6 para. 1 lit. a GDPR);
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 lit. b GDPR);
- Processing is necessary for compliance with a legal obligation to which we are subject (Art. 6 para. 1 lit. c GDPR);
- Processing is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1 lit. d GDPR);
- Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party (Art. 6 para. 1 lit. f GDPR)
4. Onward transfer of personal data
We forward personal data to recipients (data processors or other third parties) only to the extent required and only if one of the subsequent conditions are met:
- the data subject has consented to the data transfer;
- the onward transfer is required to fulfil a contractual obligation or pre-contractual measure on the request of the data subject;
- we are obliged by law to make such a transfer;
- The onward transfer is made on the basis of our legitimate interest or on those of a third party.
5. Third countries
The transfer of personal data to a third country or an international organisation outside the European Union (EU) or the European Economic Area (EEA) is subject to legal or contractual permission only in accordance with the provisions under Art. 44 et seq. GDPR. It means that pursuant to Art. 45 GDPR an adequacy decision of the EU commission must be present for the respective country, appropriate safeguards for data privacy under Art. 46 GDPR, or Binding Corporate Rules under Art. 47 GDPR do exist.
6. Rights of data subjects
As a data subject you have the following right:
- Pursuant to Art. 15 GDPR to request information about your personal data processed by us. You may also request information regarding the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or the criteria used to determine that period; where the personal data are not collected from you, the data source; the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing; the existence of the right to request rectification or erasure of data concerning you, the right to restrict processing or to object to such processing, the right to lodge a complaint with a supervisory authority. Finally, you have a right to know whether personal data has been transferred to a third country or to an international organisation, and, if so, the appropriate safeguards relating to this transfer;
- Pursuant to Art. 16 GDPR to demand the immediate rectification of inaccurate personal data and to have incomplete personal data that are stored by us to be completed;
- Pursuant to Art. 17 GDPR to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of a legal claim;
- Pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data if the accuracy of the personal data is contested by you; the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether our legitimate grounds override your interests;
- Pursuant to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
- Pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes and the legal basis for the processing are our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR;
- Pursuant to Art. 7 para. 3 GDPR to withdraw your consent given to us at any time. As a result we are no longer allowed to continue the data processing that was based on this consent in the future;
- Pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. A list of contact details of the data protection officers and supervisory authorities can be found on this web site: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Unless otherwise provided for in this privacy notice, personal data will be deleted, if these data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and the deletion does not conflict with statutory retention requirements. In addition, we will erase the personal data processed by us in accordance with Art. 17 GDPR on your request, if the conditions provided therein are met. If personal data are required for other lawful purposes, they will not be erased, but their processing will be restricted in accordance with Art. 18 GDPR.
In case of restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us for commercial or tax law reasons. For example, data must be kept for 6 years pursuant to Section 257 (1) Nos. 2 and 3 German Commercial Code (HGB) and Section 147 (1) Nos. 2, 3, 5 German Tax Code (AO); data must be kept for 10 years pursuant to Section 257 (1) Nos. 1 and 4 HGB and Section 147 Abs. 1 No. 1, 4, 4a AO.
Cookie Name: sid
Purpose: Recognizes your visit on our site and that you have visited specific web pages
Expires: 1 Hour
Sample content: 9121628031b03348675514f62a66
Cookie Name: cookies-accepted
Purpose: This cookie is used to record whether the cookie information bar has been viewed and whether the setting of certain cookie categories has been accepted.
Expires: 1 Year
Sample content: ["default","analysis"]
The data processed by necessary cookies are required for the purposes of providing website functionality in order to protect our legitimate interests which result thereof, as well as those of third parties according to Art. 6 para. 1 lit. f GDPR.
Cookies for advertising and marketing:
Cookie Name: _ga
Purpose: Google Universal Analytics. Differentiation of unique users by randomly generated number as client ID. Used to identify returning visitors, calculate visitor, session and campaign data.
Expires: 2 Year
Sample content: GA1.3.1369932704.1580458261
Further Information: https://policies.google.com/privacy?hl=en
Cookie Name: _gat
Zweck: Google Aanlytics: throttles the request rate to limit data collection on high traffic websites
Expires: 10 Minutes
Sample content: 1
Further Information: https://policies.google.com/privacy?hl=en
Cookie Name: _gid
Purpose: Google Universal Analytics. Used to distinguish users.
Expires: 24 Hours
Sample content: GA1.3.1183256634.1586250684
Further Information: https://developers.google.com/analytics/devguides/collection/
III. Individual processing operations
In order to make available our web site, we use services provided by hosting companies, such as: Provision of web servers, disk space, database services, and security or maintenance services. Here we, or our hosting providers, process personal data of the web site visitors on the basis of our legitimate interests in providing efficient and secure access to our web site in accordance with Art. 6 para. 1 lit. f GDPR.
2. Access data and log files
By visiting our web site or its individual pages, your device’s internet browsers automatically sends information to the server of our web site. This information is stored in so-called log files by us or our hosting provider and will be deleted after 4 days at the latest.
The following information is stored:
- IP address of the requesting computer;
- Date and time of access;
- Name and URL of the requested file;
- Web site from which our site was accessed (Referrer-URL);
- The browser used and your computer’s operating system;
- Status codes and the transferred amount of data;
- Name of your access providers.
This data will be used for the following purposes:
- The provision of our web site, including all of its features and contents;
- To ensure a smooth connection to our web site;
- To ensure the comfortable use of our web site;
- To ensure system security and stability;
- For anonymised statistical evaluation of web site access;
- For disclosure to law enforcement authorities in the event of unlawful interference / attacks on our systems;
- For further administrative purposes.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes mentioned above. Under no circumstance will we use the personal data collected for the purpose of drawing conclusions about a person.
3. Other modes of contact
If you contact us using the contact details published in our web site (for example, by e-mail) and in this context provide us with personal data, we will use this data to process your request on the basis of Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is required to perform pre-contractual action. In all other cases, processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and / or our legitimate interest in the effective processing of requests addressed to us pursuant to Art. 6 para. 1 lit. f GDPR. We will store your personal data until you ask us for deletion, revoke your consent to the storage, or the data are no longer necessary for the purpose for which they were collected (for example, after completion of your request). Mandatory statutory provisions - especially retention periods - remain thereof unaffected.
4. Job application
If you wish to apply for a job, please provide us with your name, contact information and further application documents so that we can review your application and get in personal contact with you. The data processing for the purpose of processing your application is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on your voluntary consent. Taking into account the limitation periods of the General Equal Treatment Act (AGG), application documents will be kept for a period of 6 months after completion of the application process and then deleted, unless storage is required for the documentation of other operations (for example, subsequent recruitment).
IV. Google Services
The legal basis for the use of the following Google services are our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
Google has joined the EU/US Privacy Shield Agreement and is committed to uphold EU data privacy standards. Google therefore meets the EU requirements for legitimising the transfer of personal data to the United States. For information about Google’s commitment, please visit:
V. Media content
Microsoft is a party to the EU/US Privacy Shield Agreement and is committed to uphold EU data privacy standards. Microsoft therefore meets the EU requirements for legitimising the transfer of personal data to the United States. For information about Microsoft’s commitment, please visit:
For more information about Microsoft Bing's privacy practices, please visit the Microsoft Web site at: https://privacy.microsoft.com/de-de/privacystatement