Effective privacy protection starts with transparency about how we collect, process, and use your personal data (“data processing”). We want you to know,
when and in which situations we process data
which data we process and for what purposes
who receives data
what rights you have in relation to that processing.
This Privacy Policy applies only to mc-quadrat.com and its subpages.
If you follow a link to another site or visit our social media pages, this policy no longer applies.
Information exchanged with this website is protected by TLS encryption.
You can access, print, or download this Privacy Policy at any time at www.mc-quadrat.com/datenschutz/
I. Contact Information
Controller responsible for processing your personal data on this website (under the EU General Data Protection Regulation, GDPR):
mc-quadrat® e. K.
Brand Agency and Communications Consulting
Berlin
Grünberger Höfe
Grünberger Straße 44 a
10245 Berlin
Phone: +49 30 288747-0
hallo@mc-quadrat.com
Further information about mc-quadrat can be found here.
We have also appointed a Data Protection Officer. You can reach our DPO at: Erik Friemel, datenschutz@dabag.de
II. General Information on Data Processing
1. Scope of Personal Data Processing
Controller responsible for processing your personal data on this website (within the meaning of the GDPR):
mc-quadrat® e. K.
Brand Agency and Communications Consulting
Berlin
Grünberger Höfe
Grünberger Straße 44 a
10245 Berlin
Phone: +49 30 288747-0
hallo@mc-quadrat.com
Further information about mc-quadrat can be found here.
We have also appointed a Data Protection Officer. You can reach our DPO at: Erik Friemel, datenschutz@dabag.de
2. Legal Basis for Processing Personal Data
The legal bases for processing personal data are set out below.
3. Data Deletion and Retention Period
We delete your personal data as soon as the legal basis for processing no longer applies. In some cases, multiple legal bases may exist in parallel, or a new one may apply when another ends – for example, we may be required to retain certain data to comply with statutory retention periods.
III. Data Processing for Providing the Website
We delete your personal data as soon as the legal basis for processing no longer applies. In some cases, multiple legal bases may exist in parallel, or a new one may apply when another ends – for example, we may be required to retain certain data to comply with statutory retention periods.
1. Log Files
When you access our website, your browser transmits various information to our server (server log files). We need this to establish and maintain the connection, and to compile statistics to analyze and improve our website. Your IP address is part of this data and is treated as personal data. We also collect the following data:
We store this data in server log files (log files). Your IP address is recorded together with the following information: HTTP status code, server timestamp of the visit, and HTTP user agent. We do not otherwise combine log-file data with other data about you. We store these log files, including your IP address, based on our legitimate interests in providing our website and preventing misuse. Stored log files are deleted no later than 30 days after collection, unless longer retention is necessary – for example, to defend against or investigate an attack on our website.
2. Cookies
We use cookies to establish and maintain the connection. A cookie is a small text file sent by your browser and stored on your device. These cookies do not contain personal data. You can control cookies in your browser and delete them at any time. Some cookies are necessary to set up the connection or to improve your use of the website.
You can prevent cookies from being stored by adjusting your browser settings; however, please note that you may then be unable to use all features of this website in full.
The use of technically necessary cookies – and the related data processing – is based on our legitimate interests in providing a technically sound and user-friendly website. Session cookies are typically deleted automatically when you close your browser; persistent cookies remain on your device for a longer period. The retention period for persistent cookies is set by the provider and can be viewed in your browser.
3. Blog Comments
You can comment on our blog posts to join the discussion. No registration is required. To comment, complete the form at the end of any post. Required fields are your email address, the name you wish to publish under, and your comment. Providing your website is optional. The legal basis for this processing is our legitimate interest in offering a comment function and enabling an exchange of views among visitors and with us. We store your information until you object to storage or our legitimate interest no longer applies.
4. Online Job Applications
If you apply through our online application form, we collect, process, and use your personal data to review and manage your application. Your applicant data is used solely for this purpose and in compliance with applicable law. Required fields are marked as mandatory; we need this information for a standard application. Any additional details you provide – including in the free-text field – are voluntary. We treat your data confidentially. The legal basis is the necessity to take steps prior to entering into an employment relationship. If your application is unsuccessful, we delete your data no later than six months after the decision.
5. Google Maps
On our website, we use the Google Maps API from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to display our location.
When you open the subpage that contains the embedded Google Map, our website transmits various information – including your IP address – to Google in the United States, where it is stored on Google’s servers. If you have a Google account and are logged in when you visit our site, this data is linked directly to your account. Even if you do not have a Google account or are not logged in, Google may create a usage profile for you.
Our transmission of data to Google is based on our legitimate interest in offering the Google Maps feature on our website. You can prevent Google from linking the data we transmit to your user account by logging out of Google before visiting our site. To block data transmission to Google entirely, disable JavaScript in your browser; the map display will then no longer be available. Further information about Google and the use of Google Maps can be found here:
Google Terms of Service:
http://www.google.de/intl/de/policies/terms/regional.html
Google Maps Terms of Service:
https://www.google.com/intl/de_US/help/terms_maps.html
Google Privacy Policy:
http://www.google.de/intl/de/policies/privacy/
6. Google Fonts
We use Google Web Fonts to display typefaces. When you access a page, your browser loads the required web fonts to render text correctly. This involves a connection to Google, informing Google that our website was accessed from your IP address. We use Google Fonts on the basis of our legitimate interests in a consistent and appealing presentation of our website. If your browser does not support Google Fonts/web fonts, a standard font from your device will be used.
For more information on Google Fonts and Google's Privacy Policy, visit:
Google:
https://fonts.google.com/
http://www.google.de/policies/privacy
7. Vimeo Video Embeds
We embed videos from the Vimeo platform on our website and use its plug-ins. This service is provided by Vimeo, LLC, 555 West 18th Street, New York, NY 10011.
If you visit pages where we have embedded Vimeo plug-ins, a connection to Vimeo’s servers is established and Vimeo is informed which of our pages you accessed. If you have a Vimeo account and are logged in, this information is associated with your account. The same applies when you interact with a Vimeo plug-in (e.g., by clicking a video’s play button). You can prevent this association by logging out of your Vimeo account before using our site and deleting Vimeo cookies.
Vimeo Privacy Policy: https://vimeo.com/privacy
Please also note that Vimeo may use Google Analytics; for details, see Google’s Privacy Policy (https://www.google.com/policies/privacy) as well as the opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de).
8. YouTube Video Embeds
We embed videos from the YouTube platform on our website and use its plug-ins. This service is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), a subsidiary of Google.
If you visit pages where we have embedded YouTube plug-ins, a connection to YouTube’s servers is established and YouTube is informed which of our pages you accessed. If you have a YouTube account and are logged in, this information is associated with your account. The same applies when you interact with a YouTube plug-in (e.g., by clicking a video’s play button). You can prevent this association by logging out of your YouTube account before using our site and deleting YouTube cookies.
For more information on YouTube and Google’s Privacy Policy, visit:
https://www.youtube.com/t/terms
https://policies.google.com/privacy?hl=de&gl=de
9. Processing of Personal Data When We Receive Email
If you email us at the addresses listed on this website, we process your data according to the content of your message. The legal basis may be your consent, the necessity to perform or initiate a contract, compliance with a legal obligation, or our legitimate interests (see II.2 for legal bases).
IV. Usage Analytics and Tracking
We aim to improve this website’s usability and the appeal of our services. For this reason, when you visit our site we collect data about usage behavior and analyze it for these purposes. In addition to the technically necessary cookies described above, we also use the tracking and analytics cookies described below.
The legal basis for processing data for analytics is our legitimate interest in statistically evaluating usage so we can continually optimize our website and services and market them more effectively.
We process data for usage analytics while you are on our site, and only until you opt out.
1. Matomo (formerly PIWIK)
We also use the Matomo web analytics tool (formerly Piwik), which we host ourselves, to statistically evaluate how our website is used. Matomo sets cookies that can recognize your browser and transmit, among other things, your IP address to our Matomo system. We use Matomo only with its IP anonymization feature enabled, which truncates your IP address before further processing and thus anonymizes it. Based on this, Matomo creates anonymized usage profiles. We do not use this information to identify you personally, nor do we merge it with other data about you.
You can object to the storage and analysis of your usage data at any time by clicking the button below to set an opt-out cookie in your browser. Matomo will then stop collecting data about your visit. The opt-out cookie must be set in each browser you use. If you delete cookies, the opt-out cookie will also be removed.
2. DoubleClick
We also use Google’s DoubleClick service. A cookie is set and a pseudonymous ID is assigned to your browser. The cookie records whether ads were displayed in your browser and which ones were clicked. This helps us tailor advertising to your interests. Because IP anonymization is enabled on this site, DoubleClick also shortens your IP address before transmission by Google within EU or EEA member states, and only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. Google analyzes the collected information, provides us with reports on website activity, and renders related services. The IP address transmitted by your browser in the context of Google Analytics is not combined with other Google data.
In addition to the general options above for blocking cookies, you can prevent Google from storing the DoubleClick cookie by installing the relevant browser plugin. You can find it here.
https://support.google.com/analytics/answer/6004245?hl=d
V. Right to Object and Deletion Options
Where processing is based on your consent or our legitimate interests, you may object at any time or withdraw your consent. Your objection or withdrawal only takes effect going forward. Where our analytics cookies offer their own opt-out tools, we indicate them in the relevant place. You can contact us at any time to exercise your right to object or withdraw consent. If you object to processing based on our legitimate interests, we may continue if we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
VI. Your Data Protection Rights
If personal data relating to you is processed, you are a data subject within the meaning of Art. 4(1) GDPR. As a data subject, you have the following rights regarding your personal data. To exercise these rights, please contact us using the details above.
If personal data relating to you is processed, you are a data subject within the meaning of Article 4(1) GDPR. As a data subject, you have the following rights regarding your personal data. To exercise these rights, please contact us using the details above.
Right of Access by the Data Subject (Art. 15 GDPR)
You have the right to obtain information about the personal data we process about you. This includes the mandatory details set out in Article 15 GDPR.
Right of Rectification (Art. 16 GDPR)
You have the right to request the prompt correction of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure (Art. 17 GDPR)
You have the right to request deletion of your personal data where one of the grounds in Article 17 GDPR applies, in particular where there is no longer a legal basis for processing.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of the processing of your personal data where one of the grounds in Article 18 GDPR applies, including, at your request, as an alternative to erasure.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive all personal data we store about you in a structured, commonly used, and machine readable format, and to transmit those data to another controller without hindrance from the controller to which the data were provided.
Right to Lodge a Complaint With a Supervisory Authority (Art. 77 GDPR)
Under Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority responsible for you.
VII. Recipients of Personal Data
Some processing of your personal data on this website is carried out by processors – for example, our hosting provider. Online applications are also handled directly via a processor. These activities take place solely under data processing agreements in accordance with Article 28(3) GDPR.
VIII. International Data Transfers
Personal data we collect through this website may, to a limited extent, be transferred to countries outside the European Economic Area (EEA). When using Google tools in the cases described above, your full IP address may be transmitted to Google.
Google LLC is located in the United States – a “third country” under Article 44 GDPR. Google participates in the EU–U.S. Data Privacy Framework (DPF), for which the European Commission has adopted an adequacy decision for certified organizations.
Last updated: September 2023
