Controller: Name and Address
The controller according to the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
MIB Konsumzentrale Leipzig GmbH & Co. KGWeißenfelser Straße 65 G04229 Leipzig, Germany
Phone: +49 341 486 680Email: datenschutz[at]mib.de
Data Protection Officer: Contact Details
The controller's data protection officer can be contacted at:Email: datenschutz[at]mib.de
General Information on Data Processing
Scope of Personal Data Processing
As a matter of principle, we only process the personal data of our users if this is necessary for the provision of a functional website and of our content and services. Personal user data will be regularly processed only by consent of the user. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.
Legal Basis for the Processing of Personal Data
In the case of consent by the data subject to the processing of personal data, Art. 6 Section 1 lit. a of the GDPR provides the legal basis.
When processing personal data that is necessary for the performance of a contract entered into with the data subject, Art. 6 Section 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations that are required for the implementation of pre-contractual measures.
Should the processing of personal data be necessary for the performance of a legal obligation to which our company is subject, Art. 6 Section 1 lit. c of the GDPR is the legal basis.
If processing is necessary to protect a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, then Art. 6 Section 1 lit. f of the GDPR serves as the legal basis for processing.
Data Deletion and Storage Periods
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, storage may take place if the European or national legislative body has provided for this in regulations, laws or other provisions that are legally binding in the EU and to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need to continue storing the data for the conclusion or performance of a contract.
Use of CookiesOur website does not use cookies.
Provision of the website and creation of log files
a) Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data are collected:
The data are also stored in the log files of our system. These data are not stored together with other personal user data.
b) Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 Section 1 lit. f of the GDPR.
c) Purpose of data processing
The temporary storage of the IP address in the system enables the website to be delivered to the user's computer. The user's IP address therefore needs to be stored for the duration of the session.
Storage in the log files ensures the functionality of the website. The data also help us to optimise the website and ensure the safety of our information technology systems. In this context, there is no analysis of the data for marketing purposes.
These purposes also constitute our legitimate interest in data processing according to Art. 6 Section 1 lit. f of the GDPR.
d) Duration of storage
Data are deleted as soon as they are no longer needed to fulfil the purpose for which they were collected. In the case of data collection for the provision of the website, this occurs at the end of the session.
In the case of data storage in log files, this is after seven days at the latest. Longer storage is possible. In this case, user IP addresses will be deleted or masked so that they can no longer be correlated to the client calling up the site.
e) Options for objection and removal
Data collection for the provision of the website and data storage in log files are essential for the operation of the website. Consequently, the user has no option for objection.
Google Maps
a) Description and scope of data processing
We use Google Maps from Google Inc. on our website. The enterprise Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.
The enterprise needs to collect and store personal data in order for Google Maps to offer its services in full. This includes the search terms used, the IP address and the latitude and longitude coordinates. If the route planner function was used, then the starting address is also stored.
However, this storage takes place on the Google Maps website. We have no influence on this and can only inform you about it. Google Maps is integrated into our website, so Google will store at least one cookie in your browser. This cookie will save data on your user actions. Google uses these data mainly to optimise its own services and provide you with individual, personalised advertising.
There are Google servers in data centres across the world. However, most servers are in the USA. This is why your data are increasingly being stored in the USA. Here you can see exactly where the Google data centres are: https://www.google.com/about/datacenters/inside/locations/?hl=de
b) Legal basis for data processing
Google Maps is used in the interest of an attractive presentation of our online services. This represents a legitimate interest in accordance with Art. 6 Section 1 lit. f of the GDPR.
c) Purpose of data processing
By working with Google Maps, we are in a better position to show you locations and thus adapt our service to your needs. Using Google Maps means data are transferred to Google and stored on Google servers.
d) Duration of storage
Google stores some data for a set period of time. For other data, Google only offers the option of manual deletion. The enterprise also anonymises information (such as advertising data) in server logs by deleting part of the IP address and cookie information after 9 and 18 months respectively.
e) Options for objection and removal
Since the automatic deletion of location and activity data was introduced in 2019, location and web/app activity information is stored for either 3 or 18 months – depending on your decision – and then deleted. You can also manually delete these data from your history at any time via your Google account. If you want to completely prevent your location from being tracked, you need to turn off the "web and app activity" setting in your Google account. Click on "data and personalisation" and then on "web and app activity". Here you can toggle the activities on and off.
Google Web Fonts
a) Description and scope of data processing
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of typefaces. When you call up a page, your browser loads the necessary web fonts into your browser cache to enable texts and typefaces to be shown correctly. If your browser does not support web fonts, your computer will use a standard font instead.
The following data are stored:
• IP address
You can find more information on Google Web Fonts at https://developers.google.com/fonts/faq and in the Google data protection statement: https://www.google.com/policies/privacy/
b) Legal basis for data processing
Google Web Fonts are used in the interest of a uniform and attractive presentation of our online services. This represents a legitimate interest in accordance with Art. 6 Section 1 lit. f of the GDPR.
c) Purpose of data processing
Integration requires a third-party provider of this content to process the IP address of the user because the content cannot be sent to their browser without the IP address. The IP address is thus required for the display of this content and functionality.
d) Duration of storage
Data are deleted as soon as they are no longer needed to fulfil the purpose for which they were collected.
e) Options for objection and removal
The collection of data for the provision of the plugin is essential for the operation of the website. Consequently, the user has no option for objection.
Rights of the Data Subject
If your personal data are processed, you are a data subject in accordance with the GDPR and you have the following rights vis-à-vis the controller: