PRIVACY POLICY FOR SOCIAL MEDIA

Facebook & Instagram (Meta Platforms)

Responsible & service provider

Joint controllers for the operation of the Facebook fanpage (MZ Toner Technologies GmbH & Co. KG) and the Instagram account (ceramictoner) are within the meaning of the GDPR as well as other data protection ­regulations:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland,

and

MZ Toner Technologies GmbH & Co.KG, Kossmannstraße 27, 66119 Saarbrücken, Tel.: + 49(0) 94553-1, e-mail: info@mkw.eu

Data protection officer: Verimax GmbH, Andreas Schönbucher, Warndtstraße 115, 66127 Saarbrücken, E-Mail: datenschutzbeauftragter@mkw.eu.

When visiting our Instagram page, personal data is processed by the controllers. We have entered into agreements with Meta, which govern, among other things, the terms and conditions for the use of Instagram and Facebook pages. Relevant are the terms of use and privacy policies of Instagram(­https://help.instagram.com/519522125107875) and Facebook (https://www.facebook.com/about/privacy/­book.com/about/privacy/)

We would like to point out that you use our Instagram and Facebook pages and their functions under your own responsibility. This applies in particular to the use of interactive functions such as commenting, sharing and evaluating.

Data processing when visiting the Instagram appearance/Facebook Fanpage

The processing of the information is intended to allow Meta to improve its advertising system, which it distributes through its network. On the other hand, it is intended to enable us, as the operator of the Instagram page/Facebook fanpage, to obtain statistics that Meta generates on the basis of visits to our pages. This allows us to provide specialised content based on our visitors’ profiles and develop features that may be of interest to them.

In order to better understand how our Instagram page/Facebookk fanpage can achieve our goals better, demographic and geographical evacuations are also­created and made available to us based on the information collected.

If visitors use Instagram/Facebook on multiple devices, the collection and evaluation can also be carried out across devices if they are registered visitors registered in their own profile. The generated visitor statistics are transmitted to us exclusively in anonymised form. We do not have access to the underlying data.

Legal basis

The legal basis for the processing of data on the Instagram page is the consent of the users in accordance with Article 6 (1) (a) of the GDPR. By registering on the Instagram/Facebook account, the user consents to the terms and conditions and the data policy (­https://help.instagram.com/519522125107875) of Meta Platforms Ireland Limited and the processing activities specified therein.

Third country transfer

It is conceivable that some of the information collected may also be processed outside the European Union by Meta Platforms Inc., established in the United States, or American authorities may access the data stored by the subsidiary Meta Platforms Ireland Limited under the U.S. Cloud Act.

Sweepstakes

If you participate in a sweepstakes conducted by us via Facebook or Instagram, you give us the consent to share your data (public Facebook profile information, submitted Facebook comment in text/image form) on these­services. In the event of a win, we will contact you via Facebook so that you can email us your full name and address to send the prize.

Storage time

Your processed personal data will only be stored for as long as is necessary for the fulfillment of the purpose. After the end of this purpose, the data will be deleted, provided that there are no mandatory retention periods. In this case, the data in the­Verar Beitung will be restricted, so that they can only be processed for the purpose that makes it­necessary (e.g. tax audit). After these retention periods have expired, this data will also be deleted.

Rights of Affected

Under the settings for advertising preferences, users of Instagram/Facebook can influence the­extent to which their user behaviour may be recorded when visiting our pages. Other options include the Facebook and Instagram settings in the account settings or the right to object form. The processing of information by means of the cookie used by Meta can also be prevented by the fact that third-party cookies or those of Instagram are not allowed in their own browser settings.

It follows from the agreements with Meta on joint responsibility that information questions and­the assertion of further data subjects can be asserted with all persons responsible. We recommend that you exercise these rights directly with Meta. As a provider of the social networks Instagram and Facebook, Meta has the immediate access possibilities to the user­information and can also immediately take any necessary measures and provide information.

You may have the following rights, depending on certain conditions or with certain limitations: Right to information, rectification, deletion, restriction of processing, a right to data portability and right to­object and the right to withdraw consent at any time. The legality of the processing until the time of revocation/objection remains unaffected by this.

Questions about data protection and right of appeal

If you have further questions about data processing or our processes, you can contact the above-mentioned data controller­or our data protection officer. You can also contact them confidentially at datenschutzbeauftragter@mkw.eu.

In addition, you have a complaint­with a supervisory authority. The responsible supervisory­authority­is the Independent Data Protectionzen trum Saarland­, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Tel.: 0681/947810, E-mail: poststelle@datenschutz.saarland.de.

Further rights that you have against Meta (in particular the right to object to certain processing by Meta or to withdraw consent given to Meta) are described in Meta’s data policy at ­https://www.facebook.com/privacy/explanation. Since only Meta has full access to the User Data, we recommend that you contact Meta directly if you would like to ask for information or other questions about your rights as a user (e.g. right to delete).

If you no­ longer want the ­information provided here, please remove the connection of your user profile to our site by using the “I no longer like this site” and/or “No longer subscribe to this page”.

LinkedIn

MZ Toner Technologies GmbH & Co.KG uses the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland for its channel offered on LinkedIn.

We would like to point out that you use this LinkedIn page and its functions under your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, evaluating).

When visiting our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is present in the form of cookies on your device. This information is used to provide us as the operator of the LinkedIn pages statistical information on the use of the LinkedIn page. LinkedIn provides further information on this at the following link: https://www.linkedin.com/legal/privacy-policy

The data collected about you in this context will be processed by the US mother of LinkedIn Ireland Unlimited Company, LinkedIn Inc., and may be transferred to countries outside the European Union. LinkedIn describes in general what information LinkedIn receives and how it is used in its data use policies. There you will also find information about contact options for LinkedIn as well as the setting options for advertisements. The data usage guidelines are available at the following link: https://www.linkedin.com/legal/privacy-policy

If you are currently logged into LinkedIn as a user, there is a cookie with your LinkedIn identifier on your device. This allows LinkedIn to understand that you visited this page and how you used it. This also applies to all other LinkedIn pages. Via LinkedIn buttons integrated into websites, it is possible for LinkedIn to record your visits to these websites and to associate it with your LinkedIn profile. Based on this data, content or advertising can be offered tailored to you.

If you want to avoid this, you should unsubscribe from LinkedIn or disable the “remain logged in” function, delete the cookies existing on your device and terminate and restart your browser. In this way, LinkedIn information that can be directly identified will be deleted. This allows you to use our LinkedIn page without revealing your LinkedIn identifier. When you access interactive features of the site (such as the Like Butto or Share feature), a LinkedIn sign-in screen appears. After a possible login, you are again recognizable for LinkedIn as a specific user.

For information on how to manage or delete existing information about you, visit the following LinkedIn support pages: https://www.linkedin.com/legal/privacy-policy

We, as the provider of the information service, do not collect and process any data from your use of our service.

PRIVACY NOTICES FOR OUR BUSINESS CUSTOMERS AND SUPPLIERS

General

Effective technical and organisational measures are installed to protect personal data and to guarantee the right to informational self-determination. If, for example, technical service providers are used for data processing on behalf of mz Toner, they comply with the legal requirements for data protection and data security according to Artt. 28, 29 and 32 General Data Protection Regulation (GDPR).

Purposes of processing and legal basis

The legality arises on the one hand from Article 6(1)(b) GDPR, according to which data processing is lawful for the purpose of fulfilling a contract or for pre-contractual measures. The personal data you receive or the personal data provided to us about you is used by MZ Toner Technologies GmbH & Co. KG in the context of a business contact (sogen. B2B) in principle:

• for the provision of our services,
• for the execution of the contract (including initiation, conclusion, performance and termination of a contract),
• for processing and responding to requests,
• to ensure the security of business customer accounts,
• for advertising purposes within the meaning of § 7 (3) UWG and other marketing purposes, provided that consent has been given,
• to prevent, detect and investigate potentially prohibited or illegal activities and to enforce our Terms and Conditions.

MZ Toner Technologies GmbH & Co. KG will not forward this data to third parties for this purpose. Third parties within the meaning of this Agreement are not such companies that are affiliated with MZ Toner pursuant to §§ 15 et seq. AktG.

Data types/categories and data subjects

We process from and for B2B business contacts regularly, but not necessarily fully and completely

• Name, possibly first name
• Business address
• E-mail address
• Phone
• Fax
• if necessary, individual requests such as special telephone times
• Business function/Responsible area

Duration of storage

The deletion periods are based on the purpose of data processing or statutory retention periods for contractual and business letters and incidents: After the end of the purpose or a recognisable cessation of the business basis, personal data will be deleted if there is no mandatory retention obligation. In this case, the data will be restricted during the processing, so that they can only be processed for the purpose that makes their retention necessary (e.g. tax audit). After these retention periods have expired, this data will also be deleted.

Profiling and automated decision-making

If you provide us with information, a customer or prospective customer profile may be created in order to be able to provide you with optimal advice.

For this purpose, we use the following information in particular:

• Your contact details from registrations, enquiries and orders
• The websites and newsletter links you have clicked (if subscribed)
• The website functions you use

Further information can be found in the privacy policy of your customer account.

This may also apply to our companies in other countries, should you contact them.

Automated decision-making is not carried out at any time.

Your rights

In addition to the right to information (according to Art. 15 GDPR), rectification (according to Art. 16 GDPR), deletion (according to Art. 17 GDPR) and restriction of processing (according to Art. 18 GDPR), as well as a right to data portability (in accordance with Art. 20 GDPR), a right of objection (in accordance with Art. 21 GDPR) and the right of non-automated decision-making including profiling (in accordance with Art. 22 GDPR).

Questions about data protection and right of appeal

If you have further questions about data processing or our processes, you can contact the above responsible person or our data protection officer. You can also contact them confidentially at dsb.mrkreativ@verimax.de. In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for the controller is the Independent Data Protection Center Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Tel.: 0681/947810, E-mail: poststelle@datenschutz.saarland.de.