Data Privacy Policy of Minimax Viking GmbH

1. General information on the collection of personal data

Minimax Viking GmbH (in the following referred to as "Minimax Viking") attaches great importance to the protection of your personal data. This data privacy policy describes how Minimax Viking (also referred to in the following by the words "we", "us" and "our") uses and protects personal data collected at http://www.minimax-viking.com/ ("Minimax Viking website").

Personal data are all data which refer to you personally, including for example your form of ad-dress, name, address, e-mail address, IP address, etc. We only collect and process your per-sonal data in compliance with the provisions of the EU General Data Protection Regulation ("GDPR") and other provisions of European and applicable national data protection law.

Personal data are usually collected and used only with your consent or if processing of such data is permitted by law. The following provisions provide information about the type, scope and purpose of the collection and processing of your personal data.

In the event that we make use of the services of commissioned service providers for the pur-pose of providing specific functions for our offer or of our services or if we use your data for marketing or analysis purposes, we will also inform you in detail in the following about the ac-tion taken. We also provide information about the stipulated criteria for and the period of stor-age. We also inform you about your rights with regard to data processing.

This Data Privacy Policy relates exclusively to our Minimax Viking website. If you click on links that take you from our pages to third-party websites, please consult those websites to find out how your data are handled by them.

2. Contact details

a) Name and address of the controller responsible for processing data

The party responsible for data protection within the meaning of the GDPR and under all other applicable EU data protection law ("controller") is Minimax Viking. If you have any questions, suggestions or criticisms relating to data protection in connection with our website, please con-tact:

Minimax Viking GmbH
Industriestr. 10/12
23843 Bad Oldesloe
e-mail: info@minimax-viking.com

b) Name and address of the data privacy officer

Any data subject can also contact our Data Privacy Officer directly at any time with any ques-tions or suggestions. The Data Privacy Officer can be contacted at:

Minimax Viking GmbH
Data Privacy Officer
Industriestr. 10/12
23843 Bad Oldesloe, Germany
E-mail: Dataprivacy@mx-vk.com

3. Notes on lawfulness and period of storage

a) Lawfulness of the processing of personal data

Our processing of your personal data is lawful if you have given your consent as stipulated in Article 6 (1) sentence 1 (a) GDPR.

Under Article 6 (1) sentence 1 (b) GDPR, processing of your personal data is lawful if such processing is necessary for the performance of a contract with you or your company. This also applies to processing activities required to take steps prior to entering into a contract.

Under Article 6 (1) sentence 1 c) GDPR, the processing of your personal data is lawful if such processing is necessary for compliance with one of our legal obligations.

Under Article 6(1) sentence 1 (d) GDPR, processing of your personal data is lawful if such pro-cessing is necessary in order to protect your vital interests or those of another natural person.

Under Article 6(1) sentence 1 (f) GDPR, processing of your personal data is lawful if such pro-cessing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

b) Period of storage and erasure of data

In principle, the personal data we collect, process and store are stored by us only for as long as required for the specific purpose for which they are stored. Your data will be erased or their processing will be restricted as soon as the specific purpose for which they were stored no longer applies.

However, there may also be European regulations, applicable national legislation or other pro-visions that require the data we process to be stored longer. We will erase or restrict pro-cessing of your data when these periods of storage expire.

4. Your rights

For the purposes of the GDPR you are the "data subject" of any of your personal data which we process. As a data subject you have the following rights with regard to Minimax Viking:

a) Right of access by the data subject

You have the right under data protection law to obtain information from us concerning whether your personal data are being processed by us. If this is the case, you have the right to request information about the extent of such data processing.

b) Right to rectification

You have the right to obtain from Minimax Viking the rectification of inaccurate personal data concerning you and/or to have incomplete personal data completed.

c) Right to restriction of the processing

You have the right to have the processing of your personal data restricted where the necessary preconditions apply.

d) Right to erasure ('right to be forgotten')

In certain circumstances, you have the right to demand that Minimax Viking erase personal data concerning you without undue delay. The right to erasure does not apply if data must be processed.

e) Right to notification

If you have asserted your right to rectification, erasure or restriction to Minimax Viking, Minimax Viking must communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

f) Right to data portability

You have the right to receive any personal data concerning you which you have provided to Minimax Viking in a structured, commonly used and machine-readable format. You also have the right in certain circumstances to transmit those data to another company without hindrance from Minimax Viking to which the personal data have been provided.

g) Right to object

You have the right under Article 6(1) sentence 1 (f) GDPR to object at any time to the pro-cessing of personal data concerning you on grounds relating to your particular situation. Minimax Viking may then no longer process the personal data relating to you unless Minimax Viking demonstrates compelling legitimate grounds for the processing which override your in-terests, rights and freedoms or data are processed for the establishment, exercise or defence of legal claims.

We will obtain your consent in advance before undertaking any marketing measures relating to you. If the personal data relating to you are processed for the purposes of engaging in direct marketing, you have the right to object at any time to the processing of your personal data for such advertising purposes. You can inform us of your objection by contacting us at:

Minimax Viking GmbH
Industriestr. 10/12
23843 Bad Oldesloe
E-mail: dataprivacy@mx-vk.com

h) Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual resid-ence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

5. Visits to our Minimax Viking website and creation of log files

Our system automatically collects data and information from your computer system every time you visit our Minimax Viking website. The following data may be then collected:

The data which we collect on you are stored in our system's log files. In general, these data are not stored together with other personal data of the user. One exception to this rule is the in-formation collected by us about your browser settings.

The legal basis for temporary storage of the data and log files is Article 6(1) sentence 1 (f) GDPR. We have a legitimate interest in collecting and temporarily storing the data referred to, as the IP address must be stored temporarily by the system in order to provide the website to your computer. For as long as you surf on our website, your IP address must be stored for the duration of the session.

The data is stored in log files in order to ensure that the website functions properly. This in-formation is also used to optimise our website and to guarantee the security of our information technology systems. Your log files are not analysed for marketing purposes.

The data will be erased or altered in a way that prevents them being associated with you as soon as they cease to be necessary for the purposes referred to here. Data which are stored in log files are erased after 7 days.

Further personal data is only collected if you provide this information voluntarily and send us an e-mail.

6. Data recipients

a) Principles

As a rule, we will only pass on your personal data in compliance with the applicable data pro-tection laws to service providers, business partners, affiliated undertakings and other third parties.

We may disclose personal data to service providers working on our behalf and require them to perform services in our name (order processing). These service providers may be affiliated un-dertakings of Minimax Viking or external service providers. In this context we comply with strin-gent applicable national and European data protection regulations. The service providers are subject to our instructions and to strict contractual restrictions with regard to the processing of personal data. Accordingly, data may only be processed if this is necessary for the perform-ance of services in our name or in order to comply with legal requirements. The rights and ob-ligations of our service providers in relation to personal data are stipulated by us precisely and in advance.

We may disclose personal data to a third party if we are required to do so by law or in legal proceedings or in order to supply and manage our products and services. We may also be re-quired to provide information to law enforcement agencies or other public authorities. We are also authorized to release data if the disclosure of information is necessary for the purposes of collaboration and thus of providing Minimax Viking services to you or if you declare your con-sent to such disclosure. Disclosure can also rarely be avoided in the course of tax audits.

b) Forwarding your data to Minimax Viking affiliated undertakings

Your data may also be forwarded to Minimax Viking group companies so that your request can be processed. You can find a list of the Minimax Viking group companies at this link.

All Minimax Viking group companies are obligated by Minimax Viking to comply with the provi-sions of the GDPR (order processing).

Your data are erased if they are no longer required to achieve the specific purpose.

c) Provider / Webhosting

Our website and thus your data are hosted by LYNET Kommunikation AG (Lübeck / Hamburg) (in the following referred to as "LYNET"). LYNET is based at Niels-Bohr-Ring 15, 23568 Lübeck, Germany. LYNET may only use the data in accordance with our instructions (data processing agreement). LYNET also adopts stringent technical measures to protect your personal data. LYNET does not pass on your personal data to third parties unless this is necessary in order to perform the agreed services or if LYNET is required to do so by law or to comply with a valid and mandatory instruction issued by a government or regulatory authority. The data transferred as part of this are confined to the absolute minimum. LYNET will store the information exclusively in Germany.

The processing of your data is lawful under Article 6 (1) sentence 1 f) GDPR. The purpose of processing data is that LYNET enables us to use LYNET servers. We only store the data for as long as is necessary to achieve this purpose.

More information from LYNET about data protection is available at:
https://www.lynet.de/datenschutz

d) Technical support and implementation of the website

Technical support and website implementation is provided in cooperation with the external partner LYNET Kommunikation AG (Lübeck / Hamburg). LYNET is based at Niels-Bohr-Ring 15, 23568 Lübeck, Germany. LYNET may only use the data in accordance with our instructions (data processing agreement). In this context we comply with stringent national and European data protection regulations. LYNET is subject to our instructions and to strict con-tractual restrictions with regard to the processing of personal data. Accordingly, data may only be processed if this is necessary for the performance of services in our name or in order to comply with legal requirements. The rights and obligations of LYNET in relation to personal data are stipulated by us precisely and in advance. LYNET also adopts stringent technical measures to protect your personal data. LYNET does not pass on your personal data to third parties unless this is necessary in order to perform the agreed services or if LYNET is required to do so by law or to comply with a valid and mandatory instruction issued by a government or regulatory authority. The data transferred as part of this are confined to the absolute minimum.

The legal basis for processing your data is Article 6(1) sentence 1 (f) GDPR. The purpose of processing the data is for LYNET to implement our website and continuously maintain it. We only store your data for as long as is necessary to achieve the respective purpose.

Further information on data protection at LYNET can be found at:
https://www.lynet.de/datenschutz

7. Security standards

Minimax Viking has implemented appropriate physical, technical and administrative security standards to prevent personal data being lost, misused, changed or destroyed. Our service providers and affiliated undertakings are contractually obligated to ensure that personal data are kept confidential. In addition, they are not allowed to use the data for purposes for which we have not given our approval.

8. Changes to this policy

We may update this Data Privacy Policy from time to time. We therefore recommend that you regularly read this Data Privacy Policy to ensure that you are familiar with our data protection practice.

This Data Privacy Policy was last updated on 23 July 2021.