Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

MEA Industries UG (haftungsbeschränkt)
Mühlenweg 80, 59269 Beckum, Germany
represented by the managing director Engin Ömer Akçay
engin.akcay@mea-info.com

2. Your rights as a data subject

You have the right to obtain, free of charge, information about your stored personal data, its origin, its recipients and the purpose of the data processing at any time (Art. 15 GDPR). You also have the following rights:

• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you have any questions about the collection, processing or use of your personal data, please contact us using the details above.

The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

3. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Workers) and delivered via its global content delivery network. When the website is accessed, Cloudflare processes connection data (in particular the IP address, see section 4) on our behalf. In doing so, personal data may be transferred to the USA and other third countries. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6 (1) lit. f GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Cloudflare; the EU Commission’s Standard Contractual Clauses (Art. 46 GDPR) serve as the safeguard for transfers to third countries where the provider is not certified under the EU-US Data Privacy Framework; where it is certified, the European Commission’s adequacy decision (Art. 45 GDPR) applies.

4. Server log files

When you visit this website, information is automatically collected by the hosting provider in so-called server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) lit. f GDPR arising from our legitimate interest in the technically error-free presentation and optimisation of our website. We do not keep or analyse access logs ourselves. The retention period at Cloudflare is governed by the rules of Cloudflare; we do not store this data any longer ourselves.

5. Contacting us

If you send us an enquiry via the contact form, the data you enter (name, company, email address, phone number, selected topic and message, as well as the language of the page you visited) is transmitted to us. It is processed by a function of our hosting provider Cloudflare (see section 3), which receives your input and forwards it to us as an email via the email service Resend (Resend, Inc., USA). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Resend. Resend stores email content and sending logs in the USA, for 30 days on the plan we use; after our customer account is terminated, remaining data is deleted within 90 days. Resend is certified under the EU-US Data Privacy Framework. We do not store the enquiry in a database; it is then held as an email in our mailbox with IONOS SE (Germany), with which a data processing agreement exists. The data may be transferred to the USA (safeguards: adequacy decision under the EU-US Data Privacy Framework where the provider is certified, otherwise Standard Contractual Clauses, Art. 45, 46 GDPR). To protect against spam, we use a form field that is invisible to humans (honeypot).

Providing your name, email address and message is required so that we can handle your enquiry; company and phone number are optional. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures) or lit. f GDPR (legitimate interest in responding to your enquiry). Without this mandatory information we cannot handle your enquiry. Our legitimate interest under lit. f is to respond efficiently to enquiries from prospective customers and business partners. We delete enquiries that do not lead to a contract as soon as they have been fully handled, and no later than six months thereafter. If a contract is concluded, we keep the data for the duration of the business relationship and beyond that as far as statutory retention obligations apply (in particular six years for business correspondence under Sec. 257 German Commercial Code (HGB) and ten years for accounting records under Sec. 147 German Fiscal Code (AO)).

If transmission via the form is technically not possible, your own email application opens with a prepared message that you can review before sending. The same applies to the phone numbers and email addresses on this website: they merely open your own phone or email application. If you contact us by email or phone, we process the data you voluntarily provide solely to handle your enquiry, on the same legal bases.

6. Fonts (self-hosted)

This website uses the fonts “Bricolage Grotesque”, “Inter” and “IBM Plex Mono”. These are hosted locally on the website’s own server and are loaded exclusively from there. No connection to Google servers or other third parties is established, and no personal data (in particular no IP address) is transmitted to third parties for this purpose.

7. Cookies and local storage

This website does not set any cookies and does not store any information in your browser (e.g. in local storage). The selected language results solely from the page address you visit.

8. No analytics or tracking tools

This website does not use any analytics services (e.g. Google Analytics), marketing tracking, or cookies for advertising or statistical purposes. No automated decision-making, including profiling, takes place.

9. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption to protect the transmission of confidential content. You can recognise an encrypted connection by the lock icon in your browser’s address bar and by the address beginning with “https://” instead of “http://”.