- Name and contact details of the responsible controller
- Contact details of the data protection officer
- General information about data processing
- Provision of the website and creation of log files
- Contact form, e-mail contact, telephone contact, social media
- Web analytics by Google Analytics
- Transfer of personal data to third parties
- LinkedIn button and social widgets (LinkedIn Corporation)
- Right to information, deletion and correction as well as complaint
- Links to other websites or offers
Name and contact details of the responsible controller
Mitto AG, represented by its sole managing director, Mr Andrea Giacomini, is the responsible controller within the meaning of EU Regulation 2016/679 of 27 April 2016 (General Data Protection Regulation) (“GDPR”). Our contact details are:
Contact details of the data protection officer
Our data protection officer can be reached at:
Mitto, E-mail: firstname.lastname@example.org
General information about data processing
We are committed to the responsible handling of your personal data. Consequently, we comply with the requirements of the GDPR, the applicable national data protection laws and other provisions of the applicable data protection regulations.
In the following we would like to inform you about how we handle your personal data. Unless explicitly stated otherwise, the following information applies to all websites operated by us.
Provision of the website and creation of log files
Each time our website is accessed, our system automatically records in a log file data and information from the computer system of the requesting computer or terminal and only data that your browser transmits to our servers. The following data is processed:
- IP address of the requesting computer or host,
- Date and time of access as well as the time zone difference to Greenwich Mean Time (GMT),
- Name and URL of the retrieved data,
- Transferred amount of data,
- Website from which our domain was accessed as well as the last opened website,
- Operating system of your computer and its interface as well as the browser you use, including language and version of your browser,
- The search term used when accessing via search engine,
This data is also stored automatically in the log files of our system. There is no storage together with other personal data pertaining to you. The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.
The processing of this data as well as the storage in log files takes place anonymously without personal reference and only temporarily for the purpose of enabling the use of the website (connection establishment), since this is only possible if the IP address remains stored for the duration of the session. Furthermore, the system security and stability should be thereby permanently guaranteed and our internet offer optimised. Our legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR lies in these purposes.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
The collection of data for the provision of our website and the storage of the data in log files is essential for the operation of the website. There is therefore no possibility of objecting to such processing.
Web analytics by Google Analytics
We use the web analytics service Google Analytics of Google LLC, Amphitheater Parkway, Mountain View, CA 94043, USA, on our website and Nimbow.
- Browser type/version,
- Operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of server request,
are usually transferred to a Google LLC server in the US and processed there. The IP address is shortened by the activation of IP anonymisation (“anonymizeIP”) on our website before the transmission. This guarantees an anonymisation of your IP address so that all data is only processed anonymously. Only in exceptional cases will the full IP address be sent to a server of Google LLC in the USA and shortened there. In these cases, we provide contractual guarantees to ensure that Google LLC maintains a reasonable level of data protection. According to Google LLC, the IP address will in no case be associated with any other data related to the user.
The legal basis for processing users’ personal data is Article 6 (1) (f) GDPR.
Google will on our behalf use the transmitted information to evaluate your use of our website and Nimbow. By analysing the data obtained, we are able to compile information about the use of the individual components of our website and Nimbow. This helps us to constantly improve our website, Nimbow and their user-friendliness. Our legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR lies in these purposes. The anonymisation of the IP address sufficiently takes into account the interests of users in their protection of personal data.
The data will be deleted as soon as it is no longer needed for our recording purposes.
Since Google Analytics works with cookies, you as the user also have control over the use of stored cookies (see section VIII).
In addition, you may prevent the collection and transmission to Google of the data generated by the cookie and related to your use of our website and Nimbow (including the IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser plug-in, you can click on this link to prevent data collection by Google Analytics on the website or Nimbow in the future. An opt-out cookie is stored on your used device. If you delete your cookies, the link must be clicked again.
For more information about privacy related to Google Analytics, see the Google Analytics Help Center(https://support.google.com/analytics/answer/6004245?hl=de.
Transfer of personal data to third parties
We only pass on your personal data if you have expressly consented, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to assert claims arising from the contractual relationship, as well as to fulfil our obligations.
In addition, we pass on your data to third parties, as far as it is required in the context of the use of the website and the contract, namely for the processing of your orders, the processing of your purchases, the delivery of your ordered products and their payment, and for the provision of the services you request, for the analysis of your user behaviour as well as for the service providers supporting us.
Our service providers are always carefully selected, commissioned and bound by our instructions. They are checked regularly by us.
Right to information, deletion and correction as well as complaint
You can always ask for information about your personal data stored by us. Likewise, you are fundamentally entitled to demand the deletion or correction of your stored data at any time, as long as legal obligations do not conflict. Please note that by law certain data must be kept for a certain period of time. Such data must therefore be stored by us until the expiration of these deadlines. We block this data in our system and only use it to fulfil legal requirements.
Please note that we reserve the right to require submission of proof of identity, and that in the event of deletion of your data use of our services is not or is no longer fully possible.
Consents to certain data processing can be revoked at any time with effect for the future.
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence or the place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.
Our website and are open to people only from the age of 16 years. Personal data of persons who have not yet reached the age of 16 is therefore not collected by us. If you think your child is sharing data with us, you can contact us at the contact details provided.
Version date: 17 December 2018