DATA PRIVACY (DSGVO)

Data privacy

Privacy Policy

Below, we inform you about the processing of personal data when using our website. Personal data is any data that can be related to you personally, e.g., name, address, email addresses, user behavior.

  1. The controller pursuant to Article 4(7) GDPR is:

Matthiessen Lagertechnik GmbH

Joh.- Hinrich -Fehrs-Str. 2

25361 Krempe

Telephone: 00 49 – 4824 – 309 57

Email: info@matthiessen-technik.de

  1. Contact

When you contact us by email, telephone or via the contact form, your email address and, if you provide it, your name and telephone number will be stored by us in order to answer your questions.

On our website, you have the option of sending us an encrypted email with your request via the “Contact” form. Here you can, for example, ask questions about our company, our products, or our services.

In order to process your request, we ask you to provide personal data. This includes your name, email address, and other information such as the subject of your inquiry and your message. Providing your telephone number, company name, and address is optional.

The information you provide will allow us to fully address your request. Providing the data you submit in this context is entirely voluntary.

The personal data you provide, including the time of contact, will be used exclusively for the purpose for which you provided it – specifically, processing your inquiry. This data will not be used for any other purpose or shared with third parties without your explicit consent. Exceptions to this are our third-party recipients, if necessary to fulfill your request. Unless legal retention obligations apply, your personal data will be deleted after your inquiry has been resolved.

The legal basis for data processing is Article 6(1 ) (b) GDPR if your inquiry serves the purpose of initiating a contract, and otherwise Article 6(1 ) (f) GDPR. Our legitimate interest lies in the fact that we need your data to process and respond to your message.

  1. Processing of personal data when visiting our website

When you use our website for informational purposes only, meaning you simply view it without registering or otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security, and therefore must be processed by us. This data is stored for 14 days. The legal basis for this processing is Article 6(1 ) (f) GDPR: IP address, date and time of access, name of the accessed page, referrer URL (the previously visited page), amount of data transferred, browser type and version, and operating system.

  1. Processing of data from your devices

In addition to the data mentioned above, we use technical tools for various functions when you use our website, in particular cookies, which can be stored on your device. When you visit our website, and at any time later, you can choose whether to generally allow the setting of cookies or which individual additional functions you wish to select. You can make changes in your browser settings or via our cookie policy. Below, we first describe cookies from a technical perspective.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond a single session. Regarding their function, cookies are further categorized as follows:

Technical cookies (functional): These are essential for navigating the website, using basic functions, and ensuring website security; they do not collect information about you for marketing purposes, nor do they store which websites you have visited. On our website, this includes, in particular, the ” pll_language ” cookie , which stores your selected language version so that our website is automatically displayed in your preferred language when you revisit it or switch between subpages. Sharing or third-party cookies: These serve to
improve the interactivity of our website with other services (e.g., YouTube, Google reCAPTCHA ). We use Google reCAPTCHA to protect our input and contact forms from abusive automated use by bots. By embedding YouTube videos, we enable you to play content provided on YouTube directly within our website. When using these services, personal data, in particular your IP address, may be transferred to the providers Google Ireland Limited and, where applicable, Google LLC, which are based in the USA. Details regarding the services used, data processing, and transfers to third countries can be found in the relevant sections of this privacy policy.

For more information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking, please see our Cookie Policy: https://www.bagsplitter.com/cookie-policy-eu/#cmplz-cookies-overview

You can withdraw your consent at any time under “Manage consent”, without affecting the lawfulness of processing up to the point of withdrawal.

If we consider the use of cookies to be technically essential, data processing is based on Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). Further processing is carried out in accordance with Article 6 Paragraph 1 Letter f) of the GDPR. For all other cookies that are not required for the display and function of the website, data processing is based on Section 25 Paragraph 1 of the TDDG and Article 6 Paragraph 1 Letter a) of the GDPR.

  1. Consent Manager and a Cookie Policy

We use a consent manager and a cookie policy to legally obtain, manage, and document your consent to the use of cookies and other technologies. The consent manager serves to comply with our legal documentation obligations.

When you visit our website, the consent manager requests your consent. If you grant your consent, the following data will be automatically logged: the anonymized IP address, the date and time of consent, the browser’s user agent, the URL of our website, and an anonymous, randomly generated, and encrypted key. Furthermore, your chosen consent status (cookie status) will be stored, serving as proof of consent. The encrypted key and the consent status are stored on your device using a cookie to restore the corresponding consent status on future page visits. This cookie is automatically deleted after 12 months.

The legal basis for the use of the Consent Manager is Article 6(1 ) (c) GDPR (compliance with a legal obligation, in particular the obligation to provide evidence pursuant to Article 7(1) GDPR) in conjunction with Article 6(1) ( f) GDPR (legitimate interest in obtaining and managing consent in a lawful manner). The Consent Manager’s cookie is strictly necessary within the meaning of Section 25(2)(2) of the German Telemedia Act (TMG) and therefore does not require consent.

You can view and change your consent settings at any time with effect for the future via the Consent Manager. The Consent Manager can be accessed via the icon in the bottom left corner of the screen or via the “Cookies” link in the website footer.

  1. Use of Google reCaptcha

To protect our website from abusive automated access, spam, and fraudulent requests, particularly in connection with input forms, we use the ” reCAPTCHA ” service on certain pages of our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). reCAPTCHA uses various characteristics to verify whether the input on our website is made by a human or by an automated program (bot).
When using reCAPTCHA , the following information is collected and transmitted to Google: IP address of the accessing device, referrer URL (previously visited page), date and time of access, duration of stay on the website, browser type and settings (language, installed plug-ins),
screen and window resolution, time zone, mouse movements, keystrokes and other user behavior on the respective page, device information, and, if applicable, a Google cookie already set in the browser (in particular “_GRECAPTCHA”). The evaluation of this information is fully automated. We ourselves only receive the result of the assessment from Google (risk score or classification as “human” or “bot”). This processing serves solely to distinguish between human users and bots, to prevent spam, brute-force attacks, and other misuse of our input and contact functions, and to maintain the security and functionality of our website. If consent to the use of reCAPTCHA has been requested and granted via our consent banner, the legal basis for the processing is Article 6(1) ( a) GDPR and Section 25(1) TDDDG. You can revoke your consent at any time with effect for the future by accessing the cookie settings again via the corresponding link on our website and changing your selection.
If consent is not required, the processing is based on Article 6(1) ( f) GDPR. Our legitimate interest lies in protecting our website from abusive automated use, preventing security risks, and ensuring the proper operation of our website. You have the right to object to this processing at any time, on grounds relating to your particular situation, pursuant to Article 21(1) GDPR.
Effective April 2, 2026, Google integrated reCAPTCHA into its Google Cloud infrastructure. Since then, the processing of data collected via reCAPTCHA has been carried out by Google exclusively on our behalf and according to our instructions, based on the Cloud Data Processing Addendum (CDPA), which meets the requirements of Article 28 GDPR.
The data is processed by Google Ireland Limited within the European Union. However, it cannot be ruled out that data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for further processing. Google LLC is certified under the EU-US Data Privacy Framework, thus ensuring an adequate level of data protection for data transfers to the USA within the meaning of Article 45(3) GDPR. V. m. the adequacy decision of the European Commission of 10 July 2023. In addition, Google has committed to applying the standard data protection clauses of the European Commission (Art. 46 para. 2 lit. c GDPR).
The cookies set by reCAPTCHA have different storage durations. The cookie “_GRECAPTCHA” is generally stored for six months. Other data transmitted by the service is stored by Google for the duration necessary to fulfill the aforementioned purposes. The rating results obtained as part of bot detection are not permanently stored on our site .
Right of withdrawal and objection; Your rights: Your rights as a data subject (in particular access, rectification, erasure, restriction of processing, data portability, objection and lodging a complaint with a supervisory authority) remain unchanged. The exercise of these rights is governed by the corresponding section of this privacy policy. Further information on how reCAPTCHA works and its privacy settings can be found at https://policies.google.com/privacy and at https://www.google.com/recaptcha/about/ .

  1. Use of a cookie to store the language selection ( pll_language )

On our website, we use the cookie ” pll_language “. This cookie is set by the WordPress plugin Polylang and serves to save your chosen language version of our website. This ensures that when you revisit the website or switch between subpages, the language you previously selected is automatically displayed. The cookie is necessary to technically provide the multilingual functionality of the website, including the correct language assignment for internal page navigation and similar requests.
Cookie details: Name: Polylang / pll_language
Provider: First-party provider (operator of this website) Purpose: Storing and recognizing the selected language version Example content: Language identifier (e.g., “de” for German) Storage period: Up to twelve months from the last website visit Type: Persistent first-party cookie Third-country transfer: None Legal basis: The storage of this cookie on your device is carried out without your consent pursuant to Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG), as the cookie is essential to provide the service you have expressly requested – displaying the website in your chosen language. The subsequent processing of the associated information is based on Article 6 Paragraph 1 Letter f) of the GDPR. Our legitimate interest lies in the user-friendly, error-free, and consistent presentation of our multilingual website.
Right to object and control: You can prevent this cookie from being set or delete a cookie that has already been set by adjusting your browser settings accordingly (for example, blocking cookies, deleting them when you close your browser, or selectively removing individual cookies). Please note that in this case, some functions of our website – in particular the automatic display of your previously selected language – may not be fully available.

  1. Our presence on social networks

(1) We maintain various presences on so-called social media platforms. We operate these presences on the following providers: LinkedIn and YouTube.

Types of data processed: Contact data (e.g., email addresses, telephone numbers); Content data (e.g., entries in online forms); Usage data (e.g., websites visited, interest in content, access times); Meta/communication data (e.g., device information, IP addresses).

Affected persons: Users (e.g., website visitors, users of social media platforms).

Purposes of processing: Contact requests and communication; feedback (e.g. collecting feedback via online form); marketing.

The legal basis for processing your data on social media platforms is Article 6(1 ) (f) GDPR.

LinkedIn : Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;

Privacy policy: https://www.linkedin.com/legal/privacy-policy Standard contractual clauses: https://legal.linkedin.com/dpa

Opt -out option : https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Data processing agreement: https://legal.linkedin.com/dpa

The regulations regarding the internal processing of Page Insights at LinkedIn can be found at https://legal.linkedin.com/pages-joint-controller-addendum .

YouTube: Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, United States of America.

Privacy policy: https://policies.google.com/privacy?hl=de

(2) We use the technical platforms and services of the providers for these information services. Please note that you use our presence on social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). When you visit our pages, the providers of the social media platforms collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the account operators, with statistical information about interactions with us.

(3) The data collected about you in this context will be processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. An adequacy decision is in force between the EU and the USA, confirming the permissibility of such data transfers. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection equivalent to the former Privacy Shield. Google and LinkedIn have certified themselves under the EU-US Data Privacy Framework.

We do not know how social media platforms use the data from your visit to our account and your interaction with our posts for their own purposes, how long this data is stored, or whether data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visiting the site as an unregistered and/or logged-out user. When you access a post or the account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can track your online activity. Through buttons embedded in websites, the platforms can record your visits to these websites and associate them with your respective profile. This data can then be used to tailor content or advertising to you. If you wish to prevent this, you should log out or deactivate the “stay logged in” function, delete the cookies stored on your device, and restart your browser.

(4) We, as the provider of the information service, also only process data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy notice.

(5) To exercise your data subject rights, you can contact either us or the provider of the social media platform. If one party is not responsible for answering your request or needs to obtain the information from the other party, we or the provider will forward your request to the respective partner. For questions about profiling and the processing of your data when using the website, please contact the operator of the social media platform directly. For questions about the processing of your interaction with us on our site, please write to the contact details of the data controller provided above [see Section 1 (2)].

(6) The providers describe in their privacy policies what information the social media platform receives and how it is used. There you will also find information about how to contact them and how to adjust your ad settings.

  1. YouTube

We provide public videos on a YouTube channel. These videos are also embedded on our website. The videos are embedded using “enhanced privacy mode,” meaning that no data is sent to YouTube until the video is viewed. Clicking on and watching the videos results in data being collected by YouTube, over which the operator of this website has no control.

We use a cookie to record whether you consent to the display of the video and thus the transfer of data to YouTube. You can change your consent status and withdraw your consent at any time in the Consent Manager. The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR.

Information on data collection when using YouTube can be found in Google’s privacy policy and terms of service: https://policies.google.com/?hl=de&gl=de

  1. Applications

When you submit an application to us, we process your associated personal data (e.g., contact and communication data, application documents, notes from job interviews, etc.) to the extent necessary for deciding whether to establish an employment relationship. The legal basis for this is Article 6(1) ( b) GDPR (pre-contractual measures) and – if you have given your consent – Article 6(1 ) (a) GDPR. You can withdraw your consent at any time. Within our company, your personal data will only be shared with individuals involved in processing your application. If your application is successful, the data you submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship, based on Article 6(1)( b ) GDPR. If special categories of personal data within the meaning of Article 9 GDPR are processed (e.g., health data), the legal basis is Section 26(3) BDSG or Article 9(2 ) (b) GDPR in conjunction with [relevant national legislation] . Article 6 paragraph 1 letter b) GDPR.

Your application data will be reviewed by the hiring team upon receipt of your application. Suitable applications will then be forwarded internally to the department heads responsible for the respective open positions. The further process will then be coordinated. Within the company, only those individuals who require access to your data for the proper execution of our application process will have access to it.

If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you submitted for up to six months from the conclusion of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6 para. 1 lit. f) GDPR). After this period, the data will be deleted and any physical application documents destroyed. This retention serves, in particular, as evidence in the event of legal proceedings. If it becomes apparent that the data will be required after the six-month period (e.g., due to threatened or pending legal proceedings), deletion will only occur once the purpose for the extended retention no longer applies. Extended retention may also occur if you have given your consent (Art. 6 para. 1 lit. a) GDPR) or if statutory retention obligations preclude deletion.

Please note that data transmission over the internet (e.g., communication via email) can have security vulnerabilities. Complete protection of data against access by third parties is technically impossible. If you feel that sending an email is too insecure, please feel free to send us your application documents by post.

  1. Categories of recipients

Data processor

We use various external service providers who work exclusively on our behalf and under our instructions (data processing) to provide the offered service, e.g., hosting this website or operating our IT systems. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

Third-party recipients

In order to process your requests satisfactorily, we may need to share your personal data with third-party recipients. These third-party recipients may include our suppliers, transport and logistics partners.

  1. Links to other websites

When we provide links to websites of other organizations, this privacy policy does not apply to the processing of personal data by those organizations. We therefore recommend that you read the privacy policies on the other websites you visit.

  1. Contact details of the external data protection officer:

Ms. Kerstin Lange

c/o Vater Solution GmbH

Boschstrasse 5

24118 Kiel

Email: kelange@ Vater-gruppe.de

  1. Your rights

You have the following rights vis-à-vis a controller with regard to your personal data:

–        Right to information,

–        Right to rectification or erasure,

–        Right to restriction of processing,

–        Right to object to processing,

–        Right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

  1. Objection or revocation of the processing of your data

If you have given your consent to the processing of your data, you can revoke it at any time by mail or email to the data controller named above. Such a revocation affects the lawfulness of processing your personal data after you have communicated it to us. The lawfulness of processing your data up to the point of your revocation remains unaffected.

Where we base the processing of your personal data on a balancing of interests, you may object to this processing. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the following description of the functions. When exercising such an objection, please state the reasons why we should not process your personal data as we have been doing. In the event of your objection, we will review the situation and either cease or adjust the data processing, or demonstrate to you our compelling legitimate grounds for continuing the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to exercise your right to object to advertising is by using the contact details provided above.

  1. Timeliness

This privacy policy is dated May 13, 2026. However, we would like to point out that it may be necessary to revise this privacy policy from time to time due to factual or legal changes.