1. General information
The careful handling of your personal data has top priority at Meguin GmbH & Co. KG Mineraloelwerke. When processing data, we comply with the statutory provisions of the General Data Protection Regulation (GDPR) and the associated national provisions.
When you visit our website, the web servers temporarily store the connection data of the requesting computer, the subpages you visit on our site, the date and duration of your visit, the identification data of the browser and operating system type used as well as the website from which you are visiting us as standard for system security purposes.
This data batch consists of
- the site from which the file was requested,
- the name of the file,
- the date and time of the request,
- the amount of data transferred,
- the access status (file transferred, file not found),
- a description of the type of web browser used,
- the IP address of the requesting computer, shortened by the last three digits.
These data are stored anonymously. Personal user profiles are thus not created. These data are erased or made anonymous after the end of the connection.
In addition, we collect personal data from you in other cases, specifically
- when you contact us via e-mail or the contact form
- through the software used for website tracking
- to secure our web server and to ensure the functionality of our online services
- for the online application process
Personal data are processed exclusively for a specific purpose (purpose limitation principle). In addition, we regularly review our data processing practices to ensure that we process as little personal data as possible (data minimization principle).
2. Details of the controller
Below you will find the details of the controller as defined by Art. 4 (17) GDPR:
Company name & legal form:
Meguin GmbH und Co. KG Mineraloelwerke
represented by the Directors:
Günter Hiermaier, Dr. Uli Weller
Address of the head office as defined by Art. 4 (16) GDPR:
Rodener Str. 25, 66740 Saarlouis
Meguin GmbH und Co. KG Mineraloelwerke,
Rodener Str. 25, 66740 Saarlouis, firstname.lastname@example.org
Contact details of the Data Protection Officer:
Einsteinstraße 55, 89077 Ulm (Germany)
Tel.: 0 731 205 89 24
3. What are personal data?
Personal data are all information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name. Personal data include information such as your name, address, telephone number and date of birth (if provided). Statistical information that cannot be directly or indirectly associated with you – such as the popularity of individual websites operated by us or the number of users of a site – is not personal data.
4. Protection of minors
Our website is not directed at minors and we do not knowingly collect personal data from minors.
If we determine that a minor under the age of 16 has sent us personal data without the parent or guardian consenting themselves or agreeing to the consent of the minor, we will erase the data immediately.
5. Purposes of data processing and legal basis
Your personal data will be processed for the following purposes on the following legal bases:
- Communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR
- Public image and advertising pursuant to Art. 6 (1) a), f) GDPR
- Implementation of declarations of consent pursuant to Art. 6 (1) a) GDPR
- Ensuring the proper operation of a data processing system pursuant
to Art. 6 (1) c) and f) GDPR
- Applicant selection procedures within the framework of personnel and resource management pursuant to Art. 6 (1) a), b) GDPR in conjunction with § 26 New Federal Data Protection Act (BDSG-Neu)
6. Storage duration
We store personal data within the scope of legal regulations or your consent.
We use the following criteria to determine the specific storage duration:
We store personal data until the purpose for which they were collected no longer apply (e.g. upon termination of a contractual relationship or through the last activity, if there is no continuing obligation, or in the event of a withdrawal of your consent to the data processing in question).
Data will only be stored beyond this if
- legal storage obligations (e.g. pursuant to AO (German Tax Code) and HGB (German Commercial Code) exist;
- the data are still needed to establish and exercise legal claims or to defend against legal claims, e.g. due to technological and forensic requirements to defend against attacks on our web servers and to prosecute these;
- erasure would be contrary to the data subjects’ legitimate interests;
- any other exception applies pursuant to Art. 17 (3) GDPR.
7. Rights of data subjects
7.1 Right to information and data portability
You have a right to information about the personal data processed by us pursuant to Art. 15 GDPR at any time.
If the data processing is based on your consentor on a contract pursuant to Art. 6 (1) b) GDPR, you may, pursuant to Art. 20 (1) GDPR, request that you receive the personal data stored about you in a structured, established and machine-readable format, or to have these data transferred to a system of a third party. You are thus entitled to direct forwarding of your data.
7.2 Right to rectification, restriction and erasure
Furthermore, pursuant to Art. 16 to 18 GDPR, you may request that we rectify, restrict (block) or erase your personal data if we have processed the data incorrectly, if there are grounds for restricting further data processing or if the data processing has become illegal for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to erasure may be restricted by legal retention periods.
7.3. Rights to object
If our data processing is based exclusively on our legitimate interest pursuant to Art. 6 (1) f) GDPR, you may object to this processing pursuant to Art. 21 (1) GDPR. We will then stop processing your data unless we can prove legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct advertising with future effect pursuant to Art. 21 (2) GDPR.
7.4. Right of withdrawal
If you have allowed us to process your personal data by giving your consent, you have a right of withdrawal with effect for the future pursuant to Art. 7 (3) GDPR.
7.5 Right to complain to the supervisory authority
You are free to lodge a complaint with a supervisory authority if you believe that our processing of your personal data is in breach of the European General Data Protection Regulation or other national and international data protection laws, Art 77 GDPR.
The contact details of the supervisory authority responsible for us are as follows:
Independent Data Protection Center Saarland
State Representative for Data Protection and Freedom of Information
P.O. Box 10 26 31
7.6 Contact information
To exercise your rights, you can send us an informal message to the contact details below. Please also address the withdrawal of your consent to the contact details below, indicating which declaration of consent you wish to withdraw:
Company name & legal form:
Meguin GmbH & Co. KG Mineraloelwerke
Rodener Str. 25, D-66740 Saarlouis
8. Data transfer by means of contact
8.1 Contact form
Via the web form at http://www.meguin.de/meguin/web.nsf/formular?OpenForm&formular=mdkontakt&lang=md we request the following data:
- Message text (required)
- Title (optional)
- E-mail address (required)
- First and last name (optional)[CL1]
- Telephone number (optional)
- Street and house number (optional)
- Postcode (optional)
- Company (optional)
Data that you send us via the contact form will be processed for the purpose of communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR. These data are only stored as long as their processing is required for these purposes or until the expiry of any subsequent retention periods.
8.2 Contact via e-mail
Data that you send us by e-mail for the purpose of making contact with us will be processed for the purpose of communication and data exchange pursuant to Art. 6 (1) a), b), c), f) GDPR. These data are stored as long as their processing is required for these purposes or until the expiry of any subsequent retention periods.
9. Online application process
To apply online for a job with us, you can use the link www.meguin.de/meguin/web.nsf/id/pa_initiativbewerbung.html. You can access this in the “Meguin, Careers” section. The data entered by you and the attachments you send with it are transferred via a secure https connection.[CL2] Your electronic application data will be received by the relevant HR department and only forwarded to the department responsible for the position in question or to the persons in charge of processing. All parties involved will treat your application documents with the necessary care and with absolute confidentiality.
Data processing is based on Art. 6 (1) a), b) GDPR in conjunction with § 26 BDSG-Neu. By sending your application documents, you agree to the processing of your personal data within the application procedure.
After completion of the applicant selection procedure, we will keep your application documents for
another 3 months and then erase them or destroy any copies if we have not concluded a contract of employment with you. If we add your application documents to our talent pool, we will notify you accordingly. In the notification you can actively consent to the further storage of your documents. If you consent to the storage of your documents, we will store them for one year.
Please note that applications that you send us by e-mail will be transfered to us unencrypted. We therefore recommend that you use the online application program.
10. Data processing and use for profiling purposes
We would like to point out that tracking via cookies is currently not carried out, as we are in the conversion phase.
We also use your data for profiling (cookies and web tracking procedure) as described in more detail below. Profiling is based on Art. 6 (1) a) or f) GDPR.
We only set non-technically necessary cookies after you have given your express consent, which you can of course withdraw at any time.
As part of our cookie information on our website, you have agreed to the following statement in this respect:
Please also bear in mind that deleting all cookies will also delete opt-out cookies. You will therefore have to reset these. Cookies are also browser-bound, which means that they must be set separately for each browser you use on each device you use. You will find the necessary links in the description of the service in question below.
We use the following cookies – if you allow this and have not set one or more opt-out cookies – for the purpose described below in more detail:
Name of cookie
Withdrawing consent (if cookie is not technically necessary)
Distinguishing between user and session
Determining a new session
Operational cookie to determine whether the user is in a new session.
After the session is over
Reduction of the requirement rate
Storage of the source that explains how the website was accessed by the user.
10.1.1 Google Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC (“Google”). Google Analytics uses so-called cookies, text files which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie concerning your use of this website is generally passed on to a Google server in the USA and stored there. If IP anonymization is enabled on this website, your IP address is first shortened by Google within member states of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to the use of the website and of the Internet to the website operator. The IP address transferred from your browser as part of Google Analytics is not added to other Google data. One way to object to web analysis by Google Analytics is to set an opt-out cookie that instructs Google not to store or use your data for web analysis purposes. Please note that in this solution the web analysis will not take place only for as long as the browser stores the opt-out cookie. If you wish to set the opt-out cookie now, please click here https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable.
You can avoid the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that if you choose to do so it may not be possible for you to use all the features of this website. Furthermore, you can prevent the recording of the data created by the cookie and related to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plugin available at the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.
Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
The information generated by the cookie concerning your use of this website will be stored by us for the duration based on the specific purpose and subsequently deleted. Session cookies are deleted directly after the session. Other cookies remain for longer and expire after two years at the latest.
10.1.2 DoubleClick by Google
If you do not agree with this form of processing, you can prevent the cookies from being saved by making the appropriate settings in your browser. You can also prevent Google from collecting the data generated by the cookies and related to your use of the websites and prevent Google from processing this data by downloading and installing the browser plug-in available here <https://support.google.com/ads/answer/7395996?hl=de>. Alternatively, you can also deactivate the double-click cookies on this page < www.google.com/ads/preferences/html/opt-out.html>.
Data recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Shield: www.privacyshield.gov/participant
10.1.3 Google Tag Manager
Google Tag Manager is a solution which we use to manage so-called website tags via a single interface (and thus integrate Google Analytics and other Google marketing services into our online presence). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, reference is made to the following information on Google services. Guidelines for use: www.google.com/intl/de/tagmanager/use-policy.html.
11. Data recipient
Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to work with this personal data to fulfill their assignments.
If third parties gain access to your data, we have obtained your permission or there is a legal basis for this.
We use service providers to provide services and process your data (including hosting your data in a secure computer center, delivering ordered goods, sending letters or e-mails and maintaining and analyzing databases, destroying documents and files, so-called order processing pursuant to Art. 28 GDPR). These service providers process the data exclusively on our instructions and are obliged to comply with the applicable data protection regulations. All processors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services, or to the extent to which you have consented to the processing and use of your data.
The following recipient is also included in the web tracking procedure:
Google LLC regarding Google Analytics
Data exchange within the group of companies to which we belong takes place exclusively within the EU/EEA and is only for internal administrative purposes. By group of companies we mean affiliated companies as defined by Art. 4 (19) GDPR.
12. Data processing for the purpose of direct marketing
To the extent permitted by law, we may also use your name and the postal address known to us to send you advertising for our own offers. The legal basis is
Art. 6 (1) f) in conjunction with Recital 47 GDPR. Our legitimate interest is to promote sales or create demand among our existing customers. Of course, you can object to the future processing of your data for advertising purposes at any time. A notification in text form to the contact details above is sufficient. We will then delete your data from our mailing list. The data supporting your objection will be kept for another 6 years pursuant to Art. 17 (3) e) GDPR. During this period, however, your personal data will be blocked for further processing.
To the extent permitted by law, we may also use business customers’ name, company affiliation and telephone number to inform them about our own offers, provided that these are presumed to be of interest. The legal basis is Art. 6 (1) f) in conjunction with Recital 47 GDPR, § 7 Para. 2 No. 2 German Unfair Competition Act (UWG). Our legitimate interest is to promote sales or create demand among our existing business customers. Of course, you can object to the future processing of your data for advertising purposes at any time. A notification in text form to the contact details above is sufficient. We will then delete your data from our mailing list. The data supporting your objection will be kept for another 6 years pursuant to Art. 17 (3) e) GDPR. During this period, however, your personal data will be blocked for further processing.
13. Transfer to third countries and legal basis
A transfer of personal data to third countries only takes place
- within the scope of the use of Google Analytics on the basis of the EU Commission’s adequacy decision regarding the EU-U.S. Privacy Shield pursuant to Art. 45 GDPR,
- within the scope of the activation of YouTube videos, if you have given your consent pursuant to Art. 49 (1) a) GDPR.
The servers of some of the service providers we use are located in the USA and other countries outside the European Union. Companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union. If your data are processed in a country which does not have a recognized high level of data protection like the European Union, this will be on the basis of the EU Commission’s adequacy decision regarding the EU-U.S. Privacy Shield pursuant to Art. 45 GDPR or the EU Standard Treaty 2010 pursuant to Art. 46 (2) c) GDPR in conjunction with the EU Commission’s decision of 02/05/2010 (2010/87/EU) or pursuant to Art. 49 (1) a) GDPR.
14. Transfer to law enforcement and criminal investigation authorities
In exceptional cases, we transfer personal data to law enforcement and criminal investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the German Code of Criminal Procedure (Strafprozessordnung), the German Tax Code (Abgabenordnung), the Money Laundering Act (Geldwäschegesetz) or state police laws.
15. Data security
We maintain a wide variety of security measures pursuant to Art. 32 GDPR (technical and organizational measures) for the protection of your personal data.
For a secure transfer of the data you send to us, we offer SSL/TLS encryption with the current TLS v1.1. and TLS v1.2 encryption protocols on our website. We would like to point out that the comprehensive encryption of the transmission path also depends on your Internet browser. We therefore recommend that you keep your Internet browser up to date so that TLS v1.1. or TLS v1.2 encryption is automatically established when you visit our website.
If you contact us by e-mail, we would like to point out that the confidentiality of the information transferred is not guaranteed. The content of e-mails may be viewed by third parties. We therefore recommend that you send us confidential information by post or, for job applications, via our online portal.