Basic Data Protection Regulation

Privacy policy

Your trust is important to us. MAFA GUSSVERTRIEBS GMBH takes the protection of your personal data very seriously. Personal data is only collected, processed or used if the person concerned has consented, if it is necessary for the fulfillment of a contract or if a law permits or prescribes the collection, processing or use.

With this data protection declaration, we would like to inform you about the details of data collection and data processing as well as about the rights to which you are entitled in this context.

  1. Name and address of the responsible person

The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other data protection provisions is the:

Energie-Allee 1
55286 Wörrstadt
Tel.:+49 (0) 6732 961146

  1. Basic information on the processing of personal data

Personal data is any information relating to an identified or identified natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

MAFA GUSSVERTRIEBS GMBH processes personal data only if the user gives his consent or if the data processing is permitted by legal regulations. The legal basis is Art. 6 para. 1 EU Basic Data Protection Regulation (DSGVO). According to this regulation, processing of personal data is only permitted if the data subject consents (Art. 6 para. 1 lit. a DSGVO) or the processing is necessary for one of the following purposes:

To fulfill a contract with the data subject to carry out pre-contractual measures at the request of the data subject (Art. 6 para. 1 lit b DSGVO).

To fulfill a legal obligation of our company (Art. 6 para. 1 lit c DSGVO).

To protect vital interests of the data subject or another natural person Art. 6 para. 1 lit. d DSGVO).

To perform a task that is in the public interest or that has been assigned to our company by the public administration (Art. 6 para. lit. e DSGVO).

To protect a legitimate interest of our company or a third party, unless the interests, fundamental rights and freedoms of the data subject for the protection of personal data prevail (Art. 6 para. 1 lit. f DSGVO).

  1. Storage period and data deletiong

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the legislator. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract. Prescribed storage periods in this sense are, for example, retention periods under tax law or commercial law.

04.acquisition of access data (creation of log files)

The website of MAFA GUSSVERTRIEBS GMBH automatically collects general data and information from the computer system of the calling computer with each call, which is stored in the log files of the server. The following data and information is collected:

Browser type including version used
Operating system used by the calling computer
Date and time of the call
IP address of the user
Internet service provider of the user
Web pages from which our website is called
Web pages and sub-websites called from our website

Other similar data and information that serve to avert danger in the event of attacks on our system

The data is stored anonymously in the log files of our system. No link is made with other personal data of the user, MAFA GUSSVERTRIEBS GMBH does not draw any conclusions about the person concerned.

The legal basis for the data processing is Art. 6 para. 1 lit. DSGVO. The storage is necessary to ensure the functionality of our website and the correct display of the content. Furthermore, the data serve our statistics and the continuous optimization of our content. Finally, storage takes place in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

The data will not be passed on to third parties, unless there is a legal obligation to disclose.

Since the collection and storage of data in the log files is absolutely necessary for the trouble-free operation of the website, the user has no possibility to object.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Insofar as the collection took place for the function-free provision of the website, this is the case with the end of the Internet session.

  1. Cookies

We use cookies on our website. Cookies are text data that are stored by our server on your computer and certain data. Cookies usually contain a characteristic character string, which allows a unique assignment of the Internet browser. When the user calls up the Internet page again. This allows the calling browser to be recognized and identified.

Cookies help us to make it easier for you to use the website. Through the recognition of the browser and the storage of previously entered data, the offers and contents of our website can be individually optimized by not having to re-enter data entered by you (e.g. access data, search terms) each time you visit the website. The legal basis for this is Art. 6 para. 1 lit DSGVO.

In addition, we use cookies on our website that enable an analysis of the user's surfing behavior. However, the data collected in this way is pseudonymized, i.e. the personal data is replaced by other identifiers (pseudonyms) so that it is no longer possible to identify the data subject without consulting additional information. Since your consent is obtained for this purpose when you call up the website, the legal basis for the processing of personal data by means of analysis cookies is Art. 6 para. 1 lit. a DSGVO.

To prevent this, you can disable or restrict the transfer of cookies in the settings of your Internet browser. Cookies that have already been stored can be deleted by you at any time. functions of the website can be used to their full extent.

  1. Contact form and e-mail contact

The website of MAFA GUSSVERTRIEBS GMBH contains a contact form that can be used to contact our company electronically. The data entered by the user in the input mask is transmitted to us and stored. In addition, the user's IP address and the date and time of transmission are also stored. For the processing of the data in the context of the sending process the consent of the user is obtained. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO.

Alternatively, it is possible to contact us via the e-mail address provided on our website. In this case, in addition to the e-mail address, those personal data are transmitted that are listed by the user in the e-mail. The legal basis in this respect is Art. 6 para. 1 lit. f DSGVO.

The processing of the data transmitted via the contact form or by e-mail serves exclusively to carry out the desired contact. Other data is stored to prevent or detect misuse of the website and to ensure the security of our system. The data will not be passed on to third parties, unless there is a legal obligation to disclose.

  1. Data protection with application

Persons may send applications to us electronically (e.g. by e-mail or via an application form provided on the website). In this case, the collection and processing of the transmitted personal data takes place for the purpose of carrying out the application procedure and thus for the potential initiation of an employment relationship. The legal basis for this is Art. 6 para. 1 lit. b DSGVO. If an employment contract is then concluded with us, the transmitted data is used for the purpose of processing the employment relationship, and the data is deleted within two months of notification of the rejection decision, provided that this does not conflict with any other legitimate interests of our company. Such a legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

  1. Use of Google Analytics

We use the analysis service Google Analytics on our website. Google Analytics stores cookies on your computer and thus enables an analysis of your use of the website. The information generated by the cookie, including your IP address, is usually transmitted to a Google server in the USA and stored there. However, the transmitted data is anonymized beforehand. On our behalf, Google will statistically evaluate the transmitted information in order to compile reports on website activity and to provide us with further services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

  1. Use of social plug-ins

We have integrated plug-ins from social networks on our website. If the data subject is registered with the respective social network when calling up our website and is also logged in, the social network recognizes which specific subpage of our website the data subject is visiting.

website the data subject calls up. This information is collected by the operator of the social network and assigned to the data subject's account there.

We have no influence on the type and scope of the data that is collected, stored and processed by the operator of the social network. For more detailed information, please therefore contact the operator of the respective social network. To prevent data about you from being processed by the operator of the respective social network, you must log out of the relevant network before accessing our website. In addition, you can use special tools that block the data transmission (e.g. Facebook blocker).

We have integrated the social media plug-ins of the following companies on our website:

Facebook Inc. https://de-de.

LinkedIn Corporation

  1. Your right as a data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:

  1. a) Rights to confirmation and information

You can request confirmation from us at any time as to whether personal data relating to you is being processed by us. If this is the case, you have a right to be informed by us about the following circumstances:

the categories of personal data which are processed;

The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

the planned duration of the storage of the personal data concerning you or, if concrete information on this is no longer possible, criteria for determining the storage duration;

the existence of a right of rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;

The existence of a right of appeal to a supervisory authority;

Any available information on the origin of the data if the personal data is not collected from the data subject;

The existence of automated decision-making, including profiling, pursuant to Article 22(Q) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

In addition, you have the right to be informed whether personal data is transferred to a state that is not a member of the EU (so-called third country) or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

  1. b) Right to rectification

You have the right to request immediate rectification of any inaccurate personal data concerning you. Furthermore, you have the right to request us to complete incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing.

  1. c) Rights to erasure (right to be forgotten)

You may request us to delete the personal data concerning you without delay if one of the following reasons applies:

The personal data concerning you shall be adequate for the purposes for which they were collected or processed.

otherwise processed, are no longer necessary:

You revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there was no other legal basis for the processing.

You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. Abs. 2 DSGVO against the processing.

The personal data concerning you have been processed unlawfully.

The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

If the personal data concerned have been made public by MAFA GUSSVERTRIEBS GMBH, and we are obliged to erase the personal data in accordance with the principles set out above, we shall also have the duty to inform other data controllers that you, as the data subject, have requested erasure of all links to or copies or replications of the personal data.

In this regard, we take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to comply with these obligations, in any case insofar as the processing is no longer necessary, i.e. legal requirements dictate this or legitimate interests conflict with the deletion.

  1. d) Rights to restrictions on processing

You may request us to restrict the processing of personal data concerning you under the following conditions:

The accuracy of the personal data is contested for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful and you request the restriction of the use of the personal data instead of erasure.

The personal data is no longer required by us for the purposes of processing, but you need this data to assert, exercise or defend legal claims.

You have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of MAFA GUSSVERTRIEBS GMBH outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may be

data - apart from their storage - are processed only with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. In this case, you will also be informed by us before the restriction is lifted.

  1. e) Rights to information

If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. In this respect, you may request us to inform you about these recipients.

  1. f) Right to data portability (data portability)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6 (1) (b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability pursuant to Art. 20 (1) DSGVO, you may.

request that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

  1. g) Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing by us of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO. This also applies to profiling based on this provision.

MAFA GUSSVERTRIEBS GMBH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or if the processing serves the legitimate interests of the data subject.

assertion, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

H) Right to revoke consent under data protection law

If you have given your consent under data protection law, you have the right to revoke this consent at any time with effect for the future.

i.) Automated decisions in individual cases including profiling

The have the right not to be subject to processing based solely on automated processing including

(b) to be subject to a decision based on profiling which produces legal effects vis-à-vis him or similarly significantly affects him, provided that the decision produces legal effects vis-à-vis him or similarly significantly affects him, provided that the decision produces legal effects vis-à-vis him or similarly significantly affects him, provided that the decision produces legal effects vis-à-vis him or similarly affects him.

Is not required for the conclusion or fulfillment of a contract between you and MAFA GUSSVERTRIEBS GMBH.


Permitted by Union or Member State legislation to which the controller is subject, and that legislation contains adequate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject.


With the express consent of the data subject.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(A) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

If the decision is necessary for entering into, or the performance of, a contract between the data subject and the responsible person, or if it is made with the explicit consent of the data subject, MAFA GUSSVERTRIEBS GMBH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, which include at least the right to obtain the intervention of a data subject on the part of the responsible person, to express his or her point of view and to contest the decision.

  1. J) Rights to complain to the supervisory authority

Notwithstanding the rights you have against us, you also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority with which the complaint has been established informs the you about the status and the results or complaint, including the possibility of a judicial remedy under Article 78 GDPR


Energie-Allee 1
55286 Wörrstadt