Privacy

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

MCSquare Tech GmbH
Geschwister-Scholl-Straße 10
72160 Horb am Neckar
Germany
Represented by the Managing Director Touseef Ahmed
Phone: +49 7451 9191920
Email: kontakt@mcsquaretech.com

2. General information

We process personal data only to the extent necessary to provide a functional website, our content and services, or where you have given consent. Personal data is any information relating to an identified or identifiable natural person, such as a name, email address or IP address.

We rely in particular on the following legal bases:

Art. 6(1)(a) GDPR: consent
Art. 6(1)(b) GDPR: performance of a contract and pre-contractual measures
Art. 6(1)(c) GDPR: legal obligation
Art. 6(1)(f) GDPR: legitimate interests
§ 25(1) and (2) TDDDG: storing information on, or accessing information from, your device (e.g. cookies)

3. Hosting

This website is hosted by:

Amazon Web Services EMEA SARL (AWS Amplify Hosting)
38 Avenue John F. Kennedy, L-1855 Luxembourg

The host processes all data generated when the website is accessed on our behalf (in particular server log files, see section 4, and form submissions).

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our website.

The website is delivered via the provider’s content delivery network (Amazon CloudFront). Depending on where you access the website from, data may also be processed on servers outside the EU/EEA; see section 12.

4. Server log files

When you visit our website, the web server automatically collects information transmitted by your browser:

IP address of the requesting device
date and time of access
name and URL of the file requested
amount of data transferred and status code
referrer URL (previously visited page)
browser and operating system used

This data is technically required to display the website and to ensure its stability and security (e.g. to defend against attacks). The legal basis is Art. 6(1)(f) GDPR.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar. Data you transmit to us cannot be read by third parties.

6. Contact form

If you send us an enquiry via the contact form, we process the details you provide (topic, first and last name, email address, your message and, optionally, company and phone number) in order to handle your enquiry and answer any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

When you submit the form, your email program opens with a prepared message to us; your details are then transmitted by email (see section 7).

We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply (e.g. under commercial or tax law if a contract results from the enquiry).

7. Contact by email

If you contact us by email, we process your email address, the content of your message and any other details you provide in order to deal with your request. Legal bases and retention periods are as described in section 6.

8. Contact by phone

If you call us, we process your phone number and the information you share during the call to the extent necessary to deal with your request. Legal bases and retention periods are as described in section 6.

9. Cookies and consent management

What are cookies? Cookies are small text files stored on your device. We treat comparable technologies (e.g. local storage) in the same way as cookies.

Strictly necessary cookies. Storing information on your device, or accessing it, is permitted without consent where this is strictly necessary to provide a service you have explicitly requested (§ 25(2) no. 2 TDDDG). Where personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR.

Optional cookies and services. This website does not set cookies and does not use local storage. We do not use any optional technologies that require your consent. We therefore do not show a cookie banner. Should this change, we will only use such technologies with your consent (§ 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR) and will update this privacy policy.

10. External services

Web analytics with Plausible Analytics

Provider name and address: Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia
Purpose of processing: statistical analysis of how our website is used, so we can improve content and usability
Data processed: page visited, referrer URL, browser, operating system, device type and country (derived from the IP address). According to the provider, the IP address is not stored; it is only used, together with the browser identifier, to form an identifier that changes daily.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis of our website). Plausible does not set cookies and does not store information on your device.
Processing on behalf: Art. 28 GDPR
Third-country transfer: none; data is processed within the European Union
Retention period: only aggregated statistics are stored; the daily identifier is discarded after 24 hours
Provider’s privacy policy: plausible.io/privacy

Web fonts. All fonts are hosted locally on our own server. No connection to external font providers is established.

We do not use any other external services on this website, such as maps, videos, CAPTCHA services, newsletters, tracking or social media plugins.

11. Recipients of personal data

We only share personal data where this is necessary for the purposes described, where there is a legal obligation, or where you have given consent. Recipients may include:

IT and hosting service providers acting on our behalf (see sections 3 and 6)
providers of the services listed in section 10, where used
tax advisers and authorities, where required by law

We do not share data with third parties for advertising purposes.

12. Data processors and third-country transfers

Data processors. Where we use service providers that process personal data on our behalf, we conclude an agreement with them pursuant to Art. 28 GDPR. These providers are bound by our instructions.

Third-country transfers. We generally process your data within the European Union or the European Economic Area. Data is only transferred to third countries where the requirements of Art. 44 et seq. GDPR are met, in particular on the basis of an adequacy decision by the European Commission (for the USA, e.g. where the recipient is certified under the EU-US Data Privacy Framework) or appropriate safeguards such as the EU Standard Contractual Clauses.

Our hosting provider delivers this website via a worldwide content delivery network (Amazon CloudFront). When the website is accessed, data such as your IP address may therefore also be processed on servers outside the EU/EEA. Amazon Web Services, Inc. is certified under the EU-US Data Privacy Framework.

13. Retention period

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention obligations (e.g. up to ten years for tax-relevant records). Specific periods are stated in the relevant sections. Once the purpose no longer applies and no retention obligation exists, the data is deleted.

14. Your rights

Under the GDPR, you have the following rights:

Access to your personal data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR, see section 16)
Withdrawal of consent (Art. 7(3) GDPR, see section 15)
Complaint to a supervisory authority (Art. 77 GDPR, see section 17)

To exercise your rights, simply contact us at kontakt@mcsquaretech.com or by post.

15. Withdrawal of consent

You may withdraw your consent at any time with future effect, informally by email. The lawfulness of processing carried out before withdrawal remains unaffected.

16. Right to object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing purposes, you have the right to object to such processing at any time (Art. 21(2) GDPR).

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

18. Obligation to provide data and automated decision-making

You are not legally or contractually obliged to provide your data. However, we cannot process your enquiry via the contact form without the details marked as required.

19. Data security

We implement technical and organisational measures in accordance with Art. 32 GDPR to protect your data against loss, manipulation and unauthorised access, including encrypted transmission (TLS), access restrictions and regular updates of the systems we use. We continuously adapt these measures to the state of the art.

20. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal situation change. The version published here applies.