1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. The following informs you about how your personal data is handled when you use our website. Personal data is any data with which you can be personally identified.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is MAXVEN GmbH, Frankfurter Str. 63-69, 65760 Frankfurt, Germany, Tel: 061962047156, Email: kontakt@maxven.de. The controller of personal data processing is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string „https://“ and the padlock icon in your browser bar.

2) Data collection when visiting our website

If you use our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source / Reference you came from to the page
• Browser used
• Operating system used
• IP Address Used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to review server log files retroactively if there are concrete indications of illegal use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information to a varying extent, such as browser and location data, and IP address values. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie.

Where personal data is also processed by individual cookies implemented by us, the processing occurs in accordance with Art. 6(1)(b) GDPR either for the performance of the contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our internet offering more interesting to you. For this purpose, when you visit our website, cookies from partner companies will also be stored on your hard drive (third-party cookies). If we work with the aforementioned advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the information collected within the following paragraphs.

Please note that you can configure your browser to inform you about cookie settings and decide on their acceptance individually, or to exclude the acceptance of cookies for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browsers at the following links:

Microsoft Edge: https://support.microsoft.com/de-de/
microsoft-edge/temporarily-allow-cookies-and-website-data-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
Firefox https://support.mozilla.org/de/
kb/allow-and-reject-cookies
Chrome http://support.google.com/
chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/
de-de/guide/safari/sfri11471/mac
Opera http://help.opera.com/
Windows/10.20/en/cookies.html

Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contact

When you contact us (e.g., via a contact form or email), personal data is collected. The data collected in the case of using a contact form will be evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact relates to the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your inquiry has been finally processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that no statutory retention periods prevent deletion.

5) Page Functionalities

5.1 Applying for job postings via email
On our website, we currently advertise open positions in a separate section. Interested parties can apply via email to the provided contact address.
Admission to the application process requires applicants to provide us with all personal data necessary for a sound and informed assessment and selection, along with their application via email.
The required information includes general personal details (name, address, telephone or electronic contact information) as well as proof of specific qualifications necessary for a position. If applicable, health-related information may also be required, which must be given special consideration under employment and social law in the applicant's interest for social protection.
The specific components that an application must contain in order to be considered, and the format in which these components should be submitted by email, can be found in the respective job advertisement.
Upon receipt of the application submitted using the provided email contact address, we will store your applicant data and use it solely for the purpose of processing your application. For any follow-up questions that arise during the processing, we will use either the email address provided by you with your application or a listed phone number, at our discretion.
The legal basis for these processing activities, including contact for inquiries, is generally Article 6(1)(b) of the GDPR (in conjunction with Section 26(1) of the BDSG for processing in Germany), under which the progression through the application process is considered the initiation of an employment contract.
To the extent that special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information on severe disability) are requested from applicants within the scope of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and the law on social security and social protection, and fulfill our corresponding obligations.
Cumulatively or alternatively, the processing of special categories of personal data can also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnosis, the provision of care or treatment in the health or social sector, or for the management of systems and services in the health or social sector.
If no applicant is selected as a result of the evaluation described above, or if an applicant withdraws their application prematurely, their data transmitted by email and all electronic correspondence, including the original application email, will be deleted after appropriate notification, at the latest after 6 months. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations to provide proof in accordance with the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed based on Article 6(1)(b) GDPR (for processing in Germany in conjunction with Section 26(1) BDSG) for the purposes of implementing the employment relationship.

5.2 Google Customer Reviews (formerly Google Trusted Stores Program)

We work with Google as part of the „Google Customer Reviews“ program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in an e-mail survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your e-mail address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The review you provide will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your review will also be used for Google seller reviews. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

You can get more information about Google's privacy practices related to the Google Customer Reviews program at the link below: https://support.google.com/
merchants/answer/7188525?hl=en

You can find more information about Google Seller Ratings privacy at this link: https://support.google.com/
google-ads/answer/2375474

6) Tools and Miscellaneous

6.1 Cookie Consent Tool

This website uses a „cookie consent tool“ to obtain effective user consent for cookies and cookie-based applications that require consent. The „cookie consent tool“ is displayed to users as an interactive user interface when they visit the page, where they can grant consent for specific cookies and/or cookie-based applications by ticking a box. The tool ensures that all cookies/services requiring consent are only loaded if the respective user grants appropriate consent by ticking the box. This guarantees that such cookies are only placed on the user's device in the event of granted consent.
The tool uses technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
In individual cases, if personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this will be done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and therefore in the legally compliant design of our website.
A further legal basis for the processing is Article 6(1)(c) GDPR. As controllers, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user's consent.
Further information about the operator and the settings options for the cookie consent tool can be found directly in the respective user interface on our website.

6.2 Google Maps
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. The use of this service will show you our location and facilitate any travel directions.
Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you access those subpages in which the Google Maps map is integrated; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can find Google's Terms of Service at https://www.google.de/
intl/de/policies/terms/regional.html To view the additional terms of service for Google Maps, please go to https://www.google.com/
intl/en_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website („Google Privacy Policy“): https://www.google.de/
intl/de/policies/privacy/
To the extent legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the procedure described above for lodging an objection.

6.3 Wordfence
For security purposes, this website uses the „Wordfence“ plugin, a service provided by Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter „Wordfence“). The plugin protects the website and its associated IT infrastructure from unauthorized third-party access, cyberattacks, as well as viruses and malware. Wordfence collects users' IP addresses, as well as potentially other data about your behavior on our website (in particular, accessed URLs and header information), in order to detect and ward off illegitimate page access and threats. The collected IP address is compared against a list of known attackers. If the collected IP address is identified as a security risk, Wordfence may automatically block it from accessing the page. The information collected in this way is transmitted to a Defiant Inc. server in the USA and stored there.
The described data processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interests in protecting the website from malicious cyberattacks and maintaining its structural and data integrity and security.
Defiant Inc. relies on the Standard Data Protection Clauses pursuant to Art. 46 para. 2 lit. c GDPR as the legal basis for data transfer to the USA.
If website visitors have login rights, Wordfence also places cookies (small text files) on the visitor's device. These cookies can be used to read out certain location and device information, which helps to assess whether login-authorized access originates from a legitimate person. At the same time, cookies can be used to evaluate access rights and, via a site-internal firewall, to grant access according to the authorization level. Finally, the cookies serve to register irregular accesses by site administrators from new devices or new locations and to notify other administrators about them.
These cookies are only set if a user has login rights. Wordfence does not set any cookies for site visitors without login authorization.
If personal data is processed via cookies, the processing is based on our legitimate interest in preventing unauthorized access to the site management and fending off unauthorized administrator access, in accordance with Art. 6(1)(f) of the GDPR.
We have concluded a Data Processing Agreement with Defiant Inc., with which we oblige the company to protect the data of site visitors and not to disclose it to third parties.
Further information on Defiant Inc.'s data usage for Wordfence can be found in Wordfence's Privacy Policy at https://www.wordfence.com/privacy-policy/.

7) Rights of the data subject

7.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) concerning the processing of your personal data, with references to the listed legal basis for the respective exercise requirements:

• Right of access under Article 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing according to Art. 18 GDPR;
• Right to information according to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Article 77 GDPR.

7.2 Right of objection

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE SCOPE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT, AT ANY TIME, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFOREMENTIONED DATA FOR DIRECT MARKETING PURPOSES.

8) Duration of storage of personal data

The duration of personal data storage is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Article 6(1)(a) GDPR, this data will be stored until the data subject withdraws their consent.

Are there legal retention periods for data processed within the scope of legal or quasi-legal obligations based on Art. 6 para. 1 lit. b GDPR, will this data be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or no legitimate interest for further storage on our part persists.

When processing personal data based on Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or the processing is for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this declaration concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.