1. Operator of the web site and responsibility for your personal data

We, the MRU GmbH, Papenhuder Straße 49, 22087 Hamburg, (hereinafter referred to as 'operator') are the operators of the web site accessible at www.m-r-u.de.  We are responsible for the collection, processing and use of your personal data in accordance with the EU General Data Protection Regulation (GDPR). Given, we are not obliged to name a data protection officer, we haven't named one. We still comply with the GDPR.

We take the protection of our customers’ personal information extremely seriously. The following explains which personal data will be collected and stored when you visit our website or use the services provided via our platform. We will also provide information on how your personal data will be used and your rights regarding the use of this data. If you have any questions, please do not hesitate to send an e-mail to Mr. Wolf Symanczyk (wsymanczyk(at)m-r-u.de).

  1. Scope and purpose of data collection

a) when you visit our web site

Each time you access our platform on www.m-r-u.de, the servers used by Host Europe GmbH will temporarily store your visit in a log file. The following data is recorded, without any action on your part, and then stored before being deleted automatically:

  • IP address of the computer accessing the servers, 
  • Date and time of access, 
  • Name and URL of accessed file, 
  • Website from which access was initiated, 
  • Operating system of your computer and the browsers used, 
  • Country from which access was initiated. 

 

This data is collected and processed solely to enable you to use our web site (establishment of a connection), to ensure continued system security and stability and to help us to optimise our website as well as for internal statistical purposes. The IP address will only be analysed if the platform’s network infrastructure is accessed and used for statistical purposes.

  1. Transfer of personal data

We will only pass your personal information onto third parties if we are required to do so by law or with your authorisation. 

 

a) for the fulfilment of a contract 

 

Provided this is permitted by law and is required for the implementation of a contract with you, your personal data will be passed on to third parties. This includes the transfer of information to payment service providers or credit institutions to perform a payment transaction. Third parties may only use the data they receive for the purpose for which it was originally transferred. 

 

b)      for other purposes

 

Further, we will only pass your data to third parties with your express permission or where we are required to do so by law or for the purpose of enforcing proven third party legal claims, and where there are no grounds to assume that there is a legitimate overriding interest not to disclose this data.

  1. Right to access, reason and rectification of personal data
  1. Your rights 

 

You may request information about your personal data and whether and if yes what data is stored and used. 

Provided information:

You may request information about your personal data including where we got the data and who received it.

We provide you with the following information for free: 

  • Purpose of processing
  • Categories of personal data processed
  • Legal entities who received the data or categories thereof
  • Planned duration of storage of personal data and the criteria for storing them
  • Information on the right of access, erasure and rectification of personal data in relation to your personal data and the right of appeal before the supervisory authority
  • In case the personal data were not retrieved from you, all available information on the data source
  • The existence of automated decision making processes in accordance with GDRP s 22(1), (4).

Correction:

You have the right to rectification of your personal data in case inaccurate personal data concerning you was stored or to complete incomplete personal data.

Erasure ('right to be forgotten'):

You have the right to obtain the erasure of your persona data in accordance to GDPR s 17. An erasure before the expiration of the statutory storage period can't be obtained.

Restriction:

You have the right to obtain restriction of processing your personal data. The requirements for this can be found in GDPR s 18.

Objection:

You have the right to object to processing of personal data concerning you (which have been collected in accordance with GDPR s 6(1), (f). This also includes profiling based on those provisions. The data will no longer be processed unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Revoke of consent:

Moreover, you have the right to revoke your consent for processing your personal data at any time.

Data portability:

You have the right to receive your personal data, you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible in accordance with GDPR s 20(1).

Contact data:

To obtain information, apply for erasure or rectification of your data, please send an e-mail to  wsymanczyk(at)m-r-u.de.

Right to lodge a complaint:

You have the right to lodge a complaint with the supervisory authority:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Kurt-Schumacher-Allee 4, 20097 Hamburg, 6th floor

Telefon +49(0)40-42854-4040 ,Telefax +49(0)40-42854-4000

Email: mailbox(AT)datenschutz.hamburg.de Internet: http://www.datenschutz- hamburg.de