Privacy Policy
1. An overview of data protection
General information
The following information provides an easy overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in this Privacy Policy.
Data recording on this website
Who is responsible for the recording of data on this website?
The data on this website is processed by the operator of the website, whose contact information is available under "Information about the responsible party" in this Privacy Policy.
How do we record your data?
We collect your data as a result of your sharing it with us, for instance information you enter into a contact form. Other data is recorded automatically or after you consent to its recording during your website visit, primarily technical information such as browser, operating system, or access time.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user patterns.
What rights do you have regarding your data?
You have the right to receive information about the source, recipients and purpose of your archived personal data free of charge at any time. You also have the right to demand that your data be rectified or erased. If you have given consent, you may revoke it at any time. You also have the right, under certain circumstances, to demand that the processing of your data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Please contact us at any time if you have questions about this or any other data protection matter.
2. Hosting
External hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the host. This may include, without limitation, IP addresses, contact requests, metadata and communications, contact information, names, website access and other data generated through a website.
External hosting is carried out for the purpose of fulfilling our contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR, insofar as the consent covers the storage of cookies or access to information in the user's device. Consent can be revoked at any time.
Our host will only process your data to the extent necessary to fulfil its obligations and will follow our instructions regarding such data. We use the following host:
active minds GmbH
Felsenrech 17
66539 Neunkirchen
Germany
https://activeminds.de
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service, a contract mandated by data protection law that guarantees the processor handles the personal data of our website visitors only on our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
We advise you that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security gaps. Complete protection of data against access by third parties is not possible.
Information about the responsible party (controller)
The controller responsible for data processing on this website is:
M.Z.I. S.à r.l.
3, rue du Fort Wedell
L-2718 Luxembourg
Phone: +352 485836
E-mail: info@mzilux.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Storage period
Unless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for erasure or revoke your consent, your data will be deleted unless we have other legally permissible grounds for storing it (e.g. tax or commercial retention periods); in that case, erasure takes place once those grounds cease to apply.
General information on the legal basis for data processing on this website
Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your device, this is likewise based on your consent under Art. 6(1)(a) GDPR. Consent may be revoked at any time. Where your data is required for the performance of a contract or pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. We also process data where required to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may further be based on our legitimate interest under Art. 6(1)(f) GDPR.
Recipients of personal data
In the course of our business activities we work with various external parties. We only disclose personal data to external parties where required for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest under Art. 6(1)(f) GDPR in the disclosure, or where another legal basis permits it. When using processors, we only disclose personal data on the basis of a valid data processing agreement.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke consent already given at any time. This does not affect the lawfulness of data processing carried out prior to revocation.
Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)
Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data. If you object, we will no longer process the affected data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).
Where your personal data is processed for direct advertising purposes, you have the right to object at any time to processing for such advertising (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged violation. This right exists without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. Direct transfer to another controller will only take place where technically feasible.
Information, rectification and erasure
Within the scope of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the processing, as well as a right to rectification or erasure of this data. Please contact us at any time regarding this or any other questions.
Right to restriction of processing
You have the right to demand the restriction of the processing of your personal data. This right applies in particular:
- while we verify the accuracy of personal data you dispute;
- where processing was/is unlawful and you request restriction instead of erasure;
- where we no longer need the data but you need it to assert legal claims;
- where you have objected under Art. 21(1) GDPR and it is not yet clear whose interests prevail.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.
4. Recording of data on this website
Server log files
The provider of this website automatically collects and stores information in server log files, which your browser automatically transmits to us. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. It is recorded on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website.
5. Plug-ins and tools
Google Maps
This website uses the mapping service Google Maps, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map material on our website.
To use Google Maps, your IP address must be stored. This information is generally transferred to a Google server in the United States and stored there. The operator of this website has no influence over this data transfer.
We use Google Maps in the interest of an appealing presentation of our online offering and to make the locations shown on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR, insofar as the consent covers the storage of cookies or access to information on the user's device. Consent can be revoked at any time.
Data transfer to the US is based on the European Commission's Standard Contractual Clauses. Details can be found here: privacy.google.com/businesses/gdprcontrollerterms and .../sccs.
More information on the handling of user data can be found in Google's Privacy Policy: policies.google.com/privacy.
The company is certified under the "EU-US Data Privacy Framework" (DPF), intended to ensure compliance with European data protection standards for data processing in the US. More information: dataprivacyframework.gov/participant/5780.