Privacy policy

This Privacy Policy applies to the use of our online services (hereinafter referred to as the “Website”).

We attach great importance to data protection. Your personal data is collected and processed in accordance with applicable data protection legislation, in particular the EU General Data Protection Regulation (GDPR).

Consent to this Privacy Policy is voluntary. However, if you do not consent, you will not be able to use the contact form or register on our Website. In this case, please send us an email at the email address provided on the Website.

1 Objection

If you wish to object to our collection, processing or use of your data under this Privacy Policy, either in its entirety or in relation to individual measures (see Section 7 for further details), you may address your objection to the controller. You may also do so using the Website’s contact form.

You may save and print this Privacy Policy at any time.

2 General Purposes of Processing

We use personal data to operate the Website. This means that, when you submit an enquiry through our contact form, we use the information you provide to contact you and prepare an individual quotation for you. The data you provide is never disclosed to third parties and is transmitted to us using secure SSL encryption. Your data is stored solely for the purpose of processing your enquiry and is deleted no later than 14 days afterwards.

Any data you provide directly to a provider on our marketplace through our Website is transmitted directly to that provider and is never stored by us. Responsibility for protecting your data in connection with that offer then rests with the respective provider. You may obtain or request further information from that provider.

If you are a partner or provider on our marketplace, the data you provide is stored by us only for as long as your account remains active. If your account is deleted, your data is also deleted from our systems (see Section 3 for further details). The data is stored solely for the purpose of presenting your offer on our Website.

3 User Account

You may create a user account on our Website as a provider. If you wish to do so, we require the personal data requested during the login process. For subsequent logins, only your email address or username and your chosen password are required.

For new registrations, we collect basic details (e.g. name and address), communication details (e.g. email address), payment details where applicable (bank account details), and access credentials (username and password).

To ensure that your registration is valid and to prevent unauthorised registrations by third parties, you will receive an activation link by email after registering, which you must use to activate your account. Only after registration has been completed do we store the data you have provided on a lasting basis in our system.

You may ask us to delete an existing user account at any time, without incurring any costs other than transmission costs at basic rates. A notice in text form sent to the contact details specified in Section 1 (e.g. by email, fax or letter) is sufficient. We will then delete your stored personal data unless we still need to retain it to process orders or comply with statutory retention obligations.

The legal basis for processing this data is your consent under Article 6(1), first subparagraph, point (a) GDPR.

4 What Data We Use and Why

4.1 Hosting

The hosting services we use provide the following: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we use to operate the Website.

In this context, we or our hosting provider process basic details, contact details, content data, contractual data, usage data, metadata and communication data relating to customers, prospective customers and visitors to this Website, on the basis of our legitimate interests in providing our Website efficiently and securely under Article 6(1), first subparagraph, point (f) GDPR in conjunction with Article 28 GDPR.

4.2 Access Data

We collect information about you when you use this Website. We automatically collect information about your usage behaviour and your interaction with us, and record data about your computer or mobile device. We collect, store and use data relating to each access to our Website in what are known as server log files. Access data includes:

• The name and URL of the requested file;
• The date and time of access;
• The volume of data transferred;
• Notification of whether the request was successful (HTTP response code);
• Browser type and version;
• Operating system;
• Referrer URL (i.e. the previously visited page);
• Websites accessed by the user’s system through our Website;
• The user’s Internet service provider;
• The IP address and the requesting provider.

We use this log data without linking it to your identity or otherwise creating profiles, for statistical evaluations aimed at operating, securing and optimising our Website. We also use it to record anonymously the number of visitors to our Website (traffic), the extent and nature of the use of our Website and services, and, for billing purposes, to measure the number of clicks received from cooperation partners. This information enables us to provide personalised and location-based content, analyse traffic, identify and correct errors, and improve our services.

This also constitutes our legitimate interest under Article 6(1), first subparagraph, point (f) GDPR.

We reserve the right to review log data retrospectively where specific indications give rise to reasonable suspicion of unlawful use. We retain IP addresses in log files for a limited period where necessary for security purposes, to provide a service or to bill for a service, for example when you use one of our offers. If an order process is abandoned or payment has been received, we delete the IP address once it is no longer required for security purposes. We also store IP addresses if we have a specific suspicion of a criminal offence connected with the use of our Website. In addition, we store the date of your last visit as part of your account (e.g. registration, login or clicking on links).

4.3 Cookies

We use session cookies to optimise our Website. A session cookie is a small text file sent by the relevant server when you visit a website and temporarily stored on your hard drive. This file contains a session ID that allows different requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our Website. These cookies are deleted when you close your browser. For example, they allow you to use the shopping basket function across several pages.

We also make limited use of persistent cookies, which are likewise small text files stored on your device. They remain on your device and enable us to recognise your browser on your next visit. These cookies are stored on your hard drive and are automatically deleted after a predefined period. Their lifespan ranges from one month to ten years. They allow us to make our services more user-friendly, effective and secure and, for example, to display information on the Website tailored specifically to your interests.

Our legitimate interest in using cookies under Article 6(1), first subparagraph, point (f) GDPR is to make our Website more user-friendly, effective and secure.

Cookies may store the following data and information:

• Login information;
• Language preferences;
• Search terms entered;
• Information about the number of visits to our Website and the use of individual Website functions.

When a cookie is activated, it is assigned an identification number. Your personal data is not associated with this identification number. Your name, IP address or similar data that would allow the cookie to be linked to you is not stored in the cookie. Cookie technology provides us only with pseudonymised information, for example about which pages of our shop have been visited or which products have been viewed.

You can configure your browser to notify you before cookies are set and allow you to decide on a case-by-case basis whether to accept them, reject cookies in specific cases or generally, or block cookies entirely. This may limit the Website’s functionality.

4.4 Data Required to Fulfil Our Contractual Obligations

Our partners process personal data that they require to fulfil their contractual obligations, such as names, addresses, email addresses, products ordered, and billing and payment details. Collecting this data is necessary to enter into the contract.

You can obtain further information from the respective partner.

4.5 Email Contact

When you contact us, for example through the contact form or by email, we process the information you provide to handle your enquiry and any follow-up questions.

We process other personal data only if you consent under Article 6(1), first subparagraph, point (a) GDPR, or if we have a legitimate interest in processing your data under Article 6(1), first subparagraph, point (f) GDPR. Responding to your email is, for example, a legitimate interest.

5 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files stored on your computer that enable an analysis of your use of the Website. The information generated by the cookie about visitors’ use of this Website is generally transmitted to a Google server in the United States and stored there.

This also constitutes our legitimate interest under Article 6(1), first subparagraph, point (f) GDPR.

Google has joined and obtained certification under the Privacy Shield agreement concluded between the European Union and the United States. In doing so, Google undertakes to comply with the standards and requirements of European data protection law. Further information is available in the following linked entry:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

We have activated IP anonymisation on this Website (“anonymizeIp”). This means that Google truncates your IP address within Member States of the European Union or other countries that are parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On our behalf, Google uses this information to evaluate your use of the Website, compile reports on Website activity and provide us with other services relating to Website and Internet usage.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. You can prevent cookies from being stored by configuring your browser software accordingly. However, please note that you may then be unable to use all the functions of this Website to their full extent.

You can also prevent the transmission to Google of the data generated by the cookie relating to your use of the Website, including your IP address, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, or when using browsers on mobile devices, you can click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this Website in future. This opt-out cookie works only in this browser and for this domain. If you delete the cookies in your browser, you must click this link again:

[Disable Google Analytics]

6 Retention Period

Unless otherwise specifically stated, we retain personal data only for as long as necessary to fulfil the purposes pursued. Your data is deleted from our systems no later than 14 days after the last contact.

In certain cases, legislation requires personal data to be retained, for example under tax or commercial law. In such cases, we retain the data solely for these statutory purposes, do not otherwise process it, and delete it when the statutory retention period expires.

6.1 Controller

The controller responsible for collecting, processing and using your personal data within the meaning of Article 4(7) GDPR is:

MCM Media Project Management Service – FZCO

7 Your Rights as a Data Subject

Under applicable law, you have various rights concerning your personal data. If you wish to exercise these rights, please send your request by email or post to the address specified in Section 1, clearly identifying yourself.

An overview of your rights is provided below.

7.1 Right to Confirmation and Access

You have the right to receive clear information about the processing of your personal data.

Specifically:

You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If it is, you have the right to request access, free of charge, to the personal data we hold about you, together with a copy of that data. You also have the right to receive the following information:

• The purposes of the processing;
• The categories of personal data concerned;
• The recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organisations;
• Where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
• The existence of the right to request rectification or erasure of your personal data, restriction of processing by the controller, or to object to such processing;
• The right to lodge a complaint with a supervisory authority;
• Where the personal data is not collected from you, any available information about its source;
• The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

Where personal data is transferred to a third country or an international organisation, you have the right to be informed of the appropriate safeguards under Article 46 GDPR relating to the transfer.

7.2 Right to Rectification

You have the right to ask us to correct and, where appropriate, complete personal data concerning you.

Specifically:

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement.

7.3 Right to Erasure (“Right to Be Forgotten”)

In a number of circumstances, we are required to erase personal data concerning you.

Specifically:

Under Article 17(1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are required to erase personal data without undue delay where one of the following grounds applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw the consent on which the processing was based under Article 6(1), first subparagraph, point (a) GDPR or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
• You object to the processing under Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing under Article 21(2) GDPR.
• The personal data has been unlawfully processed.
• The personal data must be erased to comply with a legal obligation under Union or Member State law to which we are subject.
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged to erase it under Article 17(1) GDPR, we take reasonable steps, including technical measures, taking into account available technology and implementation costs, to inform controllers processing that personal data that you have requested the erasure of any links to, or copies or replications of, that personal data.

7.4 Right to Restriction of Processing

In a number of circumstances, you have the right to ask us to restrict the processing of your personal data.

Specifically:

You have the right to obtain restriction of processing from us where one of the following conditions applies:

• You contest the accuracy of the personal data, for a period enabling us to verify its accuracy;
• The processing is unlawful and you oppose erasure of the personal data, requesting restriction of its use instead;
• We no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
• You have objected to processing under Article 21(1) GDPR, pending verification of whether our company’s legitimate grounds override yours.

7.5 Right to Data Portability

You have the right to receive personal data concerning you in a machine-readable format, to transmit it or to have us transmit it.

Specifically:

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us, where:

• The processing is based on consent under Article 6(1), first subparagraph, point (a) GDPR or Article 9(2)(a) GDPR, or on a contract under Article 6(1), first subparagraph, point (b) GDPR; and
• The processing is carried out by automated means.

When exercising your right to data portability under paragraph 1, you have the right to have the personal data transmitted directly by us to another controller, where technically feasible.

7.6 Right to Object

You have the right to object to our lawful processing of your personal data where this is justified by your particular situation and our interests in the processing do not override yours.

Specifically:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1), first subparagraph, point (e) or (f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling insofar as it relates to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes under Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

7.7 Automated Decisions, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

No automated decision-making takes place on the basis of the personal data collected.

7.8 Right to Withdraw Consent to Data Processing

You have the right to withdraw your consent to the processing of personal data at any time.

7.9 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.

8 Data Security

We make every effort to ensure the security of your data within the framework of applicable data protection laws and available technical capabilities.

Your personal data is transmitted to us in encrypted form. We use SSL (Secure Socket Layer) encryption. However, please note that data transmission over the Internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

To protect your data, we maintain technical and organisational security measures under Article 32 GDPR, which we regularly adapt to the state of the art.

We also do not guarantee that our services will be available at specific times; disruptions, interruptions or outages cannot be ruled out. The servers we use are regularly and carefully backed up.

9 Disclosure of Data to Third Parties; No Transfer of Data to Countries Outside the EU

As a general rule, we use your personal data only within our company.

If and insofar as we engage third parties to perform contracts, such as logistics service providers, they receive personal data only to the extent that transmission is necessary for the relevant service.

Where we outsource certain parts of data processing (“processing on our behalf”), we contractually require processors to use personal data only in accordance with the requirements of data protection legislation and to ensure the protection of data subjects’ rights.

No transfer of data to organisations or individuals outside the EU takes place or is planned, except for the case referred to in Section 4 of this Privacy Policy.

10 Social Media Buttons

10.1 Facebook

You can access our Facebook page using the Facebook button integrated into our Website.

Please note that you use this Facebook page and its functions at your own responsibility. This applies particularly to the use of interactive functions, such as commenting, sharing and rating. Alternatively, you can also access the information provided on this page through our website at [website address].

When you visit our Facebook page, Facebook collects, among other things, your IP address and additional information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information at the following link:

http://de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes, in general terms, what information it receives and how it uses that information in its Data Policy. There you will also find information about how to contact Facebook and the settings available for advertisements. The Data Policy is available at:

http://de-de.facebook.com/about/privacy

Facebook’s full Data Policy can be found here:

https://de-de.facebook.com/full_data_use_policy

Facebook does not provide a complete and clear explanation of how it uses data from visits to Facebook pages for its own purposes, to what extent activities on a Facebook page are attributed to individual users, how long Facebook stores this data, or whether data from visits to a Facebook page is disclosed to third parties. We do not have this information.

When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymised in the case of German IP addresses and deleted after 90 days. Facebook also stores information about its users’ devices, for example through the “Login Notifications” function; this may enable Facebook to associate IP addresses with individual users.

If you are currently logged into Facebook, your device contains a cookie with your Facebook identifier. This enables Facebook to determine that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons embedded in websites allow Facebook to record your visits to those websites and link them to your Facebook profile. This data may be used to offer you tailored content or advertising.

If you wish to avoid this, you should log out of Facebook or disable the “Keep me logged in” function, delete the cookies stored on your device, and close and restart your browser. This removes Facebook information that can be used to identify you directly. You can then use our Facebook page without disclosing your Facebook identifier. If you access the page’s interactive functions, such as Like, Comment, Share or Messages, a Facebook login screen will appear. If you subsequently log in, Facebook will again be able to recognise you as a specific user.

Information about how to manage or delete information held about you can be found on the following Facebook support pages:

https://de-de.facebook.com/about/privacy#

10.2 Instagram

You can access our Instagram page using the Instagram button integrated into our Website.

Please note that you use this Instagram page and its functions at your own responsibility. This page is provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, clicking the Instagram button allows you to link content from our pages to your Instagram profile. This enables Instagram to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it. If you do not want Instagram to associate your visit with your user account, log out of Instagram and click our button again.

Further information is available in Instagram’s Privacy Policy:

http://instagram.com/about/legal/privacy/

Last updated: August 2026