Privacy Policy
This is an English translation of our German privacy policy. In case of discrepancies, the German version prevails.
We are pleased about your interest in our company. Data protection is of particular importance to the management of moench + associates GmbH. Use of the moench + associates GmbH websites is generally possible without providing personal data. However, if a data subject wishes to use special services of our company via our website, processing of personal data may become necessary. If processing is required and there is no legal basis, we generally obtain the consent of the data subject.
The processing of personal data, such as name, address, email address, or telephone number, is always carried out in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to moench + associates GmbH. This privacy policy informs the public about the nature, scope, and purpose of the personal data we collect, use, and process. It also informs data subjects of their rights.
moench + associates GmbH, as the controller, has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions may have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
1. Definitions
This privacy policy uses the terminology adopted by the European legislator when adopting the GDPR. We use the following terms, among others:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person ("data subject").
b) Data subject
Data subject means any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing means any operation performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
d) Restriction of processing
Restriction of processing means marking stored personal data with the aim of limiting their processing in the future.
e) Profiling
Profiling means any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person.
f) Pseudonymization
Pseudonymization means processing personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information.
g) Controller
Controller means the natural or legal person which determines the purposes and means of the processing of personal data.
h) Processor
Processor means a natural or legal person which processes personal data on behalf of the controller.
i) Recipient
Recipient means a natural or legal person to whom personal data are disclosed.
j) Third party
Third party means a natural or legal person other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the controller or processor.
k) Consent
Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes.
2. Name and address of the controller
The controller within the meaning of the GDPR is:
moench + associates GmbH
Am Dickobskreuz 10
53121 Bonn
Germany
Tel.: +49 (0)228 / 766 1030
E-Mail: [email protected]
Website: macc-germany.de
3. Name and address of the data protection officer
Marek Klüsener
moench + associates GmbH
Am Dickobskreuz 10
53121 Bonn
Germany
Tel.: +49 (0)228 / 766 1030
E-Mail: [email protected]
Website: macc-germany.de
Every data subject may contact our data protection officer at any time with questions or suggestions regarding data protection.
4. Cookies and local storage
This website is a static web application and does not use analytics or marketing cookies. When you visit the site, our hosting provider Cloudflare (Cloudflare, Inc.) may process technically necessary cookies and connection data to deliver the website and protect it from attacks.
Your browser may store a display preference (light/dark mode) in local storage. This information remains on your device and is not transmitted to us.
External links (e.g. to LinkedIn profiles) lead to third-party websites that may set their own cookies.
5. Collection of general data and information
This website is hosted on Cloudflare Pages. When you access our pages, Cloudflare processes connection data as a processor to deliver and protect the website. This may include:
- Your IP address
- Information about your browser, network, and device
- Time and extent of page access
- Referrer URL (the previously visited page)
This data is processed in server log files for secure delivery, attack prevention, and error analysis. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website). Further information: https://www.cloudflare.com/privacypolicy/
The website is delivered as a static build (React, Vite) and does not store visitor personal data in its own database.
6. Contact via the website
Our website provides contact details (email, phone, address) and email links for job applications. When you contact us by email or phone, we process the personal data you provide solely to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
7. Routine erasure and blocking of personal data
The controller processes and stores personal data only for as long as necessary to achieve the storage purpose or as required by law.
8. Rights of the data subject
Data subjects have the right to confirmation, access, rectification, erasure, restriction of processing, data portability, objection, protection against automated decision-making, and withdrawal of consent. To exercise these rights, please contact us or our data protection officer.
9. Data protection in applications and the application process
We collect and process applicants' personal data for the purpose of conducting the application process. If no employment contract is concluded, application documents are automatically deleted two months after notification of the rejection decision, unless other legitimate interests prevent deletion.
10. Web analytics
This website currently does not use web analytics tools such as Google Analytics. If we introduce analytics services in the future, we will update this privacy policy accordingly and, where required, obtain your consent in advance.
11. External links to LinkedIn
On some pages (e.g. Team), we link to our employees' LinkedIn profiles. These are simple hyperlinks, not embedded LinkedIn plug-ins. When you click them, you leave our website; data processing on linkedin.com is governed by LinkedIn's privacy policy (https://www.linkedin.com/legal/privacy-policy). LinkedIn does not automatically receive information about your visit to our website.
12. Legal basis for processing
Processing is based on Art. 6(1) GDPR (consent, contract, legal obligation, vital interests, or legitimate interests as applicable).
13. Legitimate interests pursued by the controller or a third party
Where processing is based on Art. 6(1)(f) GDPR, our legitimate interest is the conduct of our business for the benefit of all employees and shareholders.
14. Period for which personal data is stored
The criterion for storage duration is the respective statutory retention period.
15. Provision of personal data; obligation; consequences of failure to provide
We inform you that the provision of personal data may be required by law or contract. Failure to provide data may prevent contract conclusion.
16. Automated decision-making
As a responsible company, we do not use automated decision-making or profiling.
17. Fonts
For consistent presentation, we load fonts via Adobe Fonts (Adobe Systems Software Ireland Limited) from Adobe servers (use.typekit.net). Adobe may process your IP address and browser information to deliver font files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation). Further information: https://www.adobe.com/privacy/policies/adobe-fonts.html
This privacy policy was created with the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH in cooperation with attorney Christian Solmecke.