Data Protection Notice

We are very pleased about your interest in our company. The management of MWAY DIGITAL GmbH attaches great importance to data protection. A use of the internet pages of MWAY DIGITAL GmbH is basically possible without any indication of personal data. However, if a person concerned would like to use special services of our company via our website, it might be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned. The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to MWAY DIGITAL GmbH. By means of this privacy policy, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs affected persons about their rights. MWAY DIGITAL GmbH, as the person responsible for processing, has implemented numerous technical and organizational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as by telephone.

1 Definitions

Our Date protection notice should be simple and understandable for everyone. As a rule, the data protection declaration uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in art. 4 GDPR.

2 Name & Address Of Data Controller

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature is

MWAY DIGITAL GmbH
Daimlerstrasse 133
70372 Stuttgart
Germany
Phone: +49711 2525460
E-mail: datenschutz@mway.io
Website: mway.io

3 Name & Address Of Data Protection Officer

PROLIANCE GmbH
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de
Website: datenschutzexperte.de

When contacting the Data Protection Officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information such as a copy of an identity card with your request.

4 Cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until your web browser automatically resolves them. Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behavior or display advertising. Technically necessary cookies are stored on the basis of art. 6 par. 1 sect. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. Other cookies are only stored with your consent on the basis of art. 6 par. 1 sect. a GDPR. This consent can be revoked at any time for the future. The legal basis can also be derived from art. 6 par. 1 sect. b GDPR if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject. Insofar as cookies are used for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and obtain your consent.

You can set your browser so that you

  • are informed about the setting of cookies,
  • allow cookies only in individual cases,
  • exclude the acceptance of cookies for certain cases or generally,
  • activate the automatic deletion of cookies when closing the browser.

You can manage the cookie settings yourself in the browser (depending on the provider). You can also manage cookies of many companies and functions used for advertising individually. To do this, use the appropriate user tools, available at AboutAds or YourOnlineChoices. Most browsers also offer a so-called “do-not-track function”. When this feature is enabled, the browser tells ad networks, websites and applications that you do not wish to be “tracked” for behavioral advertising and the like. For information and instructions on how to edit this feature, please contact your browser provider.

In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows JavaScripts, Java and other plug-ins to be executed only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g. for Mozilla Firefox at : Firefox Addon NoScript ). Please note that if you disable cookies, the functionality of our website may be limited.

5 Data Processing By Visiting Our Website

When you access our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Visited domain
  • Date and time of the request
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Used web browser and used operating system
  • IP address of the requesting computer
  • Amount of data transferred

We collect this data to ensure a smooth connection to the website and to enable a comfortable use of our website by the users. In addition, the log file serves to evaluate system security and stability as well as for administrative purposes.

6 Contact Form & Contacting By Email

If you send us inquiries via contact form or e-mail, your data from the inquiry form or your e-mail, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with art. 6 par. 1 sect. f GDPR and, if applicable, art. 6 par. 1 sect. b GDPR, if your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your inquiry, provided that this does not conflict with any statutory retention obligations. In the case of art. 6 par. 1 sect. f GDPR, you can object to the processing of your personal data at any time with effect for the future.

7 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. The IP address of Google users within the member states of the European Union or in other states party to the Agreement on the European Economic Area is shortened, which makes it impossible to identify the user. Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. The processing is carried out in accordance with art. 6 par. 1 sect. a GDPR on the basis of user consent. On behalf of the operator of this website, Google will use this information to evaluate your use of the website. This serves the purpose of compiling reports on website activities and providing further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. The terms of use of Google Analytics and information on data protection can be accessed via the following links:

Google Analytics Terms
Google Policies

You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at URL https://tools.google.com/dlpage/gaoptout?hl=de. A click on the following link prevents the collection by Google Analytics by setting an opt-out cookie:
Deactivation of Google Analytics Information on the handling of user data at Google Analytics can be found in the Google privacy policy at

Goolge Analytics Support

8 Google Ads

The data controller has integrated Google Ads on this website. Google Ads is an Internet advertising service that allows advertisers to display ads in Google’s search engine results as well as in the Google advertising network. Google Ads allows an advertiser to specify pre-defined keywords that will display an ad in Google’s search engine results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant Internet pages by means of an automatic algorithm and in accordance with the previously defined keywords. The operating company of Google Ads services is Google Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google Ads is to promote our website by displaying advertisements relevant to our interests on the websites of third party companies and in the search engine results of the Google search engine and by displaying third-party advertisements on our website. If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both we and Google to track whether a person who has reached our website via an ad display has generated sales, i.e. whether he or she has completed or abandoned a purchase. The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users that were referred to us via ads, i.e. to determine the success or failure of the respective ad and to optimize our ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify the person concerned. The processing is carried out in accordance with art. 6 par. 1 sect. a GDPR on the basis of your consent. By means of the conversion cookie, personal information, such as the websites visited by the data subject, is stored. Each time our website is visited, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google. This personal data may be stored by Google in the USA. The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs. Furthermore, the person concerned has the opportunity to object to interest-based advertising by Google. To do so, the person concerned must access www.google.de/settings/ads from each of the Internet browsers he or she uses and make the desired settings there. Further information and Google’s applicable data protection regulations can be found at Google Policies DE Privacy.

9 Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information, e.g.

  • IP address
  • Duration of the website visitor’s stay on the website
  • mouse movements made by the user
  • The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place. The data processing is based on art. 6 par. 1 sect. f GDPR. We have a legitimate interest in protecting our website from improper automated spying and from unwanted automated transmissions (spam). Google LLC with headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. We do not store any personal data from the use of reCAPTCHA. In general, personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Further information about Google reCAPTCHA and the Google privacy policy can be found under the following links:
Google Policies Privacy
and Google Recaptcha v3beta.

10 Google Tag Manager

This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

11 YouTube

On the web pages of our Internet presence we include videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). When a website in which a video from YouTube is integrated is called up, data is transmitted to a Google server and stored there. If you have a user account with Google and are registered, Google can thereby assign the visit to your user account. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly. We integrate content from YouTube on the web pages of our Internet presence in order to make this content immediately available to you without you having to call up the content separately on YouTube. This allows you to use functions of the social media platform YouTube already on our website. This allows us to improve our offer and the user experience for you and make it more interesting. The legal basis is your consent according to art. 6 par. 1 sect. a GDPR. If you want to prevent the transfer of data, you cannot use the functions of YouTube. Irrespective of this, we recommend that you regularly log out of your user account after using a social network, but especially before activating integrated content, as this will enable you to avoid assignment to your profile with the respective provider. Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de

12 Social Media Links

Social networks (Facebook, Twitter, Instagram, LinkedIn and Xing) are only included on our website in the form of a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after the redirection, user information is transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers you use.

13 Data Transfer & Recipient

As a rule, your personal data will not be transferred to third parties, except for

  • we have explicitly pointed out in the description of the respective data processing,
  • You have given your express consent in accordance with art. 6 par. 1 S. 1 sect. a GDPR for this,
  • the disclosure is required under art. 6 par. 1 sentence 1 sect. f GDPR to assert, exercise or defend legal claims or is for other reasons in our legitimate interest and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • there is a legal obligation for the transfer according to art. 6 par. 1 sentence 1 sect. c GDPR and
  • this is required under art. 6 par. 1 sentence 1 sect. b GDPR for the processing of contractual relationships with you. In addition, we use external service providers for the provision of our services and the processing of our services, which we carefully select and commission in writing. These are bound by our instructions and are regularly checked by us. Contract processing agreements required in accordance with art. 28 GDPR will be concluded prior to commissioning. In detail, these are service providers for web hosting, the sending of e-mails and the maintenance and servicing of our IT systems. Under no circumstances will your personal data be passed on to third parties by the service providers working for us.

14 Duration Of Storage Of Personal Data

The duration of the storage of personal data is determined by the relevant legal storage obligations, e.g. from commercial law and tax law. After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfillment of a contract or the initiation of a contract or if we have a legitimate interest in its further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.

15 Your Rights

Below you will find a list of the rights of the data subjects to which the data subject is entitled vis-à-vis the data controller with regard to the processing of your personal data:

  • The right to request information about your personal data processed by us in accordance with art. 15 GDPR In particular, you may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on its details.
  • The right, in accordance with art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us.
  • The right to demand the deletion of your personal data stored with us in accordance with art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
  • The right to demand, in accordance with art. 18 GDPR, the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with art. 21 GDPR
  • The right, in accordance with art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another person responsible.
  • The right to complain to a supervisory authority in accordance with art. 77 GDPR As a rule, you can turn to the supervisory authority of the federal state of our registered office mentioned above or, if applicable, that of your usual place of residence or workplace.
  • Right to revoke consents granted pursuant to art. 7 par. 3 GDPR. You have the right to revoke at any time with future effect any consent you have given to the processing of data. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing that has taken place on the basis of the consent until the revocation.

16 Right To Object

If your personal data is processed by us on the basis of legitimate interests pursuant to art. 6, par. 1, lit f of the GDPR, you have the right to object to the processing of your personal data pursuant to art. 21 GDPR, if this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the need to indicate a special situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@mway.io.

17 Changes To Our Privacy Policy

We reserve the right to update this data protection declaration if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and take into account changes in our services, e.g. when introducing new services. The most current version applies to your visit.

Status of this data protection declaration: March 19th, 2021