In the following, we inform you about the collection, retention and use of personal data. “Personal data” means all data relating to you, e.g. name, address, e-mail address, telephone number and usage behaviour.
- Information on the Controller and Data Protection Officer
- Information on Data Subject Rights
- Information on Data Processing
- Server Data
- Order Forms
- Data Dissemination
- Google Analytics
- Social Media Presence
- Google Fonts
- Data Security
1. Name and Contact Details of the Person Responsible for Processing and of the Corporate Data Protection Officer
Person responsible for data processing:
Moeding Keramikfassaden GmbH
Data protection officer:
Telephone: +49 (0) 8732 – 24 60 0
Fax: +49 (0) 8732 – 24 66 9
2. Data Subject Rights
2.1 Right of Access, Art. 15 GDPR
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information: purposes of the processing, the category of personal data concerned, recipients or categories of recipients to whom your personal data has been or will be disclosed, the envisaged retention period, the existence of the right to request rectification, erasure, restriction of processing or to object to such processing, the right to lodge a complaint with a supervisory authority, information as to the source of your data and the existence of automated decision-making, including profiling, and, where appropriate, meaningful information about its details.
2.2 Right to Rectification, Art. 16 GDPR
You have the right to obtain the rectification of inaccurate or the completion of your personal data retained by us without undue delay.
2.3 Right to Erasure, Art. 17 GDPR
You have the right to obtain the erasure of your personal data retained with us without undue delay, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
2.4 Right to Restriction of Processing, Art. 18 GDPR
You have the right to obtain restriction of processing of your personal data, where the accuracy of the data is contested by you, for a period enabling us to verify the accuracy of the personal data, processing is unlawful, but you oppose its erasure, and if we no longer need the data for the purposes of processing, but it is required by you for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
2.5 Right to Data Portability, Art. 20 GDPR
You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.
2.6 Right to Withdraw a Given Consent, Art. 7(3) sentence 1 GDPR
You have the right to withdraw your consent once given at any time towards us. An e-mail to email@example.com is sufficient. The withdrawal does not affect the lawfulness of processing based on such consent before its withdrawal.
2.7 Right to Lodge a Complaint With a Supervisory Authority, Art. 77 GDPR
Moreover, you have the right to lodge a complaint with a supervisory authority about the processing of your personal data by us.
Right to Object
To the extent that we process your personal data based on legitimate interests as per point (f) of Art. 6(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data as per Art. 21 GDPR. If you would like to make use of this right, an e-mail to firstname.lastname@example.org is sufficient. We will then verify the ongoing admissibility of processing. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
3. Collection, Retention and Use of Personal Data
3.1. When Visiting the Website
When you visit our website www.moeding.de, the browser used on your terminal automatically sends information to the server of our website (“server log files”). The following information is captured without you being involved:
- the URL of the visited website
- access date and time
- amount of sent data in bytes
- source/reference from which you entered the website
- browser used
- operating system used
- IP address used
We need this data to enable smooth establishment of the connection and to ensure comfortable use of the website as well as system security and stability. The log files are checked only where there is concrete evidence of any unlawful use of the website.
The data is retained for 1 day and then erased, unless there is concrete evidence of any unlawful use, requiring prolonged retention for evidentiary purposes. Processing is based on point (f) of Article 6(1) GDPR. Our legitimate interest is to improve the stability, functionality and safety of our website.
Our website is hosted on a server of the provider hostpress. We concluded an order data processing agreement with hostpress in which hostpress undertakes to protect the data of the users of our website and to not disseminate it to third parties. Further information on this provider can be found here: https://www.hostpress.de/.
Most browsers accept cookies automatically; however, you can configure your browser so that no cookies will be retained on your computer or that a note will appear each time before a new cookie is placed. Cookies already retained can be erased at any time. Please note that disabling cookies overall may result in you no longer being able to make full use of all features of our website.
We use different cookies on our website:
We use “session cookies” on our website which retain a “session ID” to determine whether you have already visited individual pages of our website. These cookies help to make the use of our services more convenient for you. The session cookies are automatically erased when you close the browser.
The website uses Borlabs Cookie. When you visit our website, two technically necessary cookies (borlabsCookie and borlabsCookieUnblockContent) are placed to save your cookie preference. The borlabsCookie cookie retains your chosen preference selected by you when entering the website.
Moreover, we use a software extension called plug-in to organise our different language versions of the website. The plug-in places a cookie to retain the language selected by you. As long as the cookie continues to be retained, the same language version will be accessed the next time you visit the website.
To allow multiple references to be downloaded, we use a reference cookie that stores the selected references in a list and enables the download of the collection.
Using these cookies serves to make the use of our web services more user-friendly and effective. The data processed by cookies is needed for these purposes to safeguard our legitimate interests under point (f) of Article 6(1) GDPR.
- Analysis Cookies
We use Google Analytics to capture the use of our website and to evaluate it to optimise the user-friendliness of our services for you (more on Google Analytics: see below). The cookie placed to that end has a term of two years. When accessing our website, you are asked whether you consent to the use of analysis cookies. The cookie is placed only after you consented; the legal basis is point (a) of Art. 6(1) GDPR. The cookie is not placed without your prior consent.
You may withdraw your consent once given to us at any time with effect for the future by customising your cookie settings here:
We provide you with an opportunity to contact us via forms provided on our website (s. point 3.4). In order to answer your enquiry, a valid e-mail address needs to be provided. In addition, further details (company, sector, first name and surname, address and phone number) may be provided on a voluntary basis, helping us to perfectly process your request.
As an alternative to the contact form, you can contact us via the e-mail address email@example.com. In this case, your personal data transmitted with the e-mail is retained and used to respond to your request.
Legal basis for the processing is point (b) of Art. 6(1) GDPR to the extent that processing of the request is necessary to take steps prior to entering into a contract or to fulfil obligations prior to entering into a contract. Processing for other purposes is based on point (f) of Art. 6(1) GDPR, since we have a legitimate interest in complying with the user’s expectations and to answer the user’s request.
3.4 Order Forms
We provide you with an opportunity to download brochures, colour overviews and technical detail booklets from our website. Some of these can also be selected for dispatch by mail and ordered by you. To do so, you have to indicate your e-mail address and, for delivery by mail, your name and address in the provided order form. In addition, further details (company, phone number, fax, construction project) may be provided on a voluntary basis, helping us to perfectly process your request. You may also indicate that you wish to be contacted, and you can send us an additional message.
Moreover, we provide you with an opportunity to enquire samples of colours, surfaces and special forms on our website. In order to answer your enquiry, a valid e-mail address needs to be provided in the relevant order form. In addition, further details (company, first name and surname, address, phone number, fax, construction project) may be provided on a voluntary basis, helping us to perfectly process your request. You may also indicate that you wish to be contacted, and you can send us an additional message. We’ll get in touch with you straight away afterwards.
Legal basis for the processing in both cases is point (b) of Art. 6(1) GDPR to the extent that processing of the request is necessary to deliver the order to take steps prior to entering into a contract or to fulfil obligations prior to entering into a contract. Processing for other purposes is based on point (f) of Art. 6(1) GDPR, since we have a legitimate interest in complying with the user’s expectations and to answer the user’s request. We will erase the collected data once this is requested under point 2.3 and if the erasure does not conflict with legal retention obligations based on a pre-contractual or contractual relation.
The same applies to the processing of orders directly via our field service.
If you want to receive the newsletter offered on the website with regular information on our services and products, we need your e-mail address as a mandatory detail. To dispatch the newsletter, we use the “double-opt-in procedure”. This means that we will send you our newsletter by e-mail only after you have expressly confirmed to us that you consent to the dispatch of newsletters. To that end, we will first send an e-mail to the e-mail address indicated by you upon your subscription. By clicking on the link in this e-mail, you can confirm that you want to receive newsletters in the future as addressee of the relevant e-mail address. By issuing this confirmation, you give us your consent as per point (a) of Art. 6(1) GDPR that we may process your personal data to dispatch the desired newsletter.
Upon your subscription to the newsletter, we retain, besides the e-mail address required for the dispatch, the IP address used by you to subscribe to the newsletter as well as the date and time of both the subscription and confirmation in order to retrace any potential misuse at a later point in time.
If you do not confirm your subscription, your data will not be retained in our system.
You may revoke your given consent at any time for the future and unsubscribe the newsletter using the link included in each newsletter or by e-mail to firstname.lastname@example.org. Following your unsubscription, your e-mail address will be immediately erased from our newsletter mailing list, unless you explicitly consented to the continued use of the collected data or the continued processing is otherwise admissible by law.
Our e-mail newsletter is dispatched via the technical service provider Newsletter2Go, to which we disseminate your data provided upon your newsletter subscription, and on the Newsletter2Go servers located in Germany. The data entered by you to receive the newsletter (e-mail address) will be retained on the servers of Newsletter2Go in Germany up to their erasure.
We concluded an order data processing agreement with Newsletter2Go in which Newsletter2Go undertakes to protect the data of the newsletter recipients and to not disseminate it to third parties. Further information can be found at the following links:
3.6 Data Dissemination
Except in the cases described under the individual processing operations, your personal data will be disseminated to third parties only if you have given your explicit consent under point (a) of Art. 6(1) GDPR, the dissemination is necessary for the establishment, exercise or defence of legal claims under point (f) of Art. 6(1) GDPR and there is no reason to consider that this conflicts with any overriding legitimate interest for the case that an obligation under point (c) of Art. 6(1) GDPR exists or this is admissible and necessary under point (c) of Art. 6(1) GDPR to implement contractual relationships with you.
3.7 Google Analytics
This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics creates pseudonymised user profiles and uses “cookies’, i.e. text files retained on your computer and allowing to analyse your use of the website. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited website), host name of the accessing computer (IP address), time of the server query, is transferred to a Google server in the US and retained there. If IP anonymisation is enabled on this website, however, your IP address will first be shortened by Google within Member States of the European Union or in other States which are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. Google will use this information on behalf of the provider of this website to analyse your use of the website, to compile reports about the website activities and to provide the website operator with further services associated with the website and Internet use.
The IP address transmitted by your browser as part of Google Analytics will not be amalgamated with any other data of Google.
When accessing our website, you are asked whether you consent to the use of analysis cookies. Your data will be processed in the manner described above only after you have consented. Google Analytics will not be used without your prior consent. You may withdraw your consent once given at any time with effect for the future by changing your cookie settings under point 3.2.
You can prevent the retention of the cookies by setting your browser software accordingly; please note, however, that you might not have full access to all website functions in this case. You may also prevent the collection by Google of the data captured by the cookie and relating to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
This website uses Google Analytics with the “anonymizeIP” extension. IP addresses are thus further processed in shortened form, allowing to exclude any personal identification. To the extent that the data collected about you is assigned a personal reference, it will thus be immediately excluded, and the personal data will be deleted without delay.
We use Google Analytics in order to analyse and regularly improve the use of our website. Using the statistics obtained by us, we can improve our services and make them more interesting for you as user.
For the exceptional cases in which personal data is transferred to the US, Google submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The lifetime of the cookie is two years. The data is retained for a period of 14 months.
Legal basis for the use of Google Analytics is your prior consent as per point (a) of Art. 6(1) GDPR.
Further information on data protection in connection with Google Analytics can be found, for example, in Google Analytics Help: https://support.google.com/analytics/?hl=en#topic=3544906.
3.8 Social Media
We maintain an online presence with different platforms to call attention to us and our services and to reach out to customers and interested parties. We used graphics to link to our presence on the platforms. By clicking on the graphic, you are forwarded to the respective platform.
When users access these platforms, their data is collected and retained by the operators.
We and the platform operator are jointly responsible for the data processing. Processing is based on point (f) of Article 6(1) GDPR. Our legitimate interest is to call attention to us and our services and to be able to reach out to customers and interested parties. Legal basis may also be a consent given to the platform as per point (a) of Art. 6(1) GDPR which may be revoked at any time with effect for the future.
When you access our online presence on these platforms, the respective operator processes your data to obtain statistical information on the use of our presence on the platform. The platform operator also uses this data for market research and advertising purposes and to create user profiles to solicit users outside the platform as well. If the user is logged in with an own account at the time of access, the data may be linked to the respective user account.
More detailed information on data processing by the respective platform operator can be found at the links below.
Please note that data of the users might be processed outside the European Union, in particular in the US, which causes increased risks for users, e.g. in that later access to the user data may be impeded, since it can exclusively be accessed by the providers of the respective platform. These are certified under the Privacy Shield and thus undertook to comply with the European data protection standards. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework.
Our website uses plug-ins of the video portal Vimeo. Provider is the Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
You will be asked when visiting the site if you agree to the assignment. If you agree to the mission, a connection to the Vimeo servers is established. At the same time, the Vimeo server is provided with information about the websites visited by you. Moreover, Vimeo obtains your IP address. This is also the case if you are not logged in with Vimeo or do not have an account with Vimeo. The information captured by Vimeo is transmitted to the Vimeo server in the US.
When you are logged in with your Vimeo account, you enable Vimeo to directly assign your browsing habits to your personal profile. You can prevent this by logging out from your Vimeo account.
3.10 Google Fonts
This website uses Google Fonts as external fonts. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
When our website is accessed, the required Google font is loaded by your browser into your browser cache, unless it is already available there to correctly display texts and fonts. To do so, a connection to a Google server usually located in the US is established. At the same time, your IP address, information on your browser, the URL of the website from which the query was sent as well as the pages visited by you are transmitted to Google. The font data is retained on the terminal for one year to improve the loading times of websites using Google Fonts.
Legal basis for the use of Google Fonts is point (f) of Article 6(1) GDPR. Our legitimate interest is to optimise the user-friendliness of our website by displaying fonts in a uniform way and by reduced loading times.
According to own statements, Google uses the transmitted data only to the extent that this is necessary to display the fonts. Moreover, Google uses aggregated data to analyse the popularity of the individual fonts. More detailed information on this is available at https://developers.google.com/fonts/faq and https://fonts.google.com/about.
Google submitted to the EU-US Privacy Shield and undertook to comply with the European data protection stipulations when processing data in the US. More detailed information on this is available at https://www.privacyshield.gov/EU-US-Framework.
4. Data Security by SSL Encryption (HTTPS Protocol)
The HTTPS transport encryption is consistent with the state of the art. As for the rest as well, we make use of appropriate technical and organisational safeguards to protect your data against accidental or deliberate manipulations, loss in full or in part, destruction or unauthorised access by third parties. Our safeguards are continuously improved in line with technological developments.