Zum Hauptinhalt springen

Privacy Policy

Privacy Policy

1. Data controller

The controller responsible for data processing on this website is:

Milchwerke Schwaben eG
Reuttier Straße 142
89231 Neu-Ulm

Telephone: +49 (0)731 / 706-0
Fax: +49 (0)731 / 706-282
Email: info@milchwerkeschwaben.de

The controller is the legal entity which, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. Data Protection Officer

Our Data Protection Officer is available to answer any questions or concerns you may have regarding data protection:

Email: dsb@milchwerkeschwaben.de

3. Hosting

This website is hosted by rockenstein AG, Veitshöchheim, Germany. The personal data collected in connection with the use of this website is processed on rockenstein’s servers.

The use of the hosting provider is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable and efficient provision of this website.

A contract for data processing has been concluded with the hosting provider in accordance with Article 28 of the GDPR.

4. Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These include, in particular:

  1. Browser type and browser version
  2. Operating system used
  3. Referrer URL
  4. Host name of the accessing computer
  5. Time of the server request
  6. IP address

This data is not combined with other data sources.

Processing is carried out on the basis of Article 6(1)(f) of the GDPR. The legitimate interest lies in the technically error-free display, as well as the security and optimisation of this website.

5. Cookies

This website sets a single cookie (pll_language) on your first visit, which stores the selected language version (German or English). This is technically necessary to ensure that content is consistently displayed in the correct language and is not used for analysis, tracking or marketing purposes.

Further cookies are set exclusively when authorised persons log in to restricted areas of the website (password-protected B2B area, WordPress administration). They are technically necessary to maintain the logged-in status during the session.

In addition, we store your consent for YouTube videos in your browser’s local storage (see Section 6).

Third-party cookies are not used unless you have given your consent (see Section 6).

The legal basis for the aforementioned technically necessary storage is Section 25(2)(2) of the German Teleservices Data Protection Act (TTDSG) and Article 6(1)(f) of the General Data Protection Regulation (GDPR) (legitimate interest in the linguistically correct presentation of content and the secure provision of protected areas).

6. Embedding of YouTube videos

We embed videos from YouTube (operator: Google Ireland Limited, Ireland) on this website. By default, the videos are not loaded; instead, a thumbnail image with explanatory text is displayed. Only after clicking the “Load video” button is the connection to YouTube established. In doing so, personal data (e.g. IP address, browser identifier) is transmitted to YouTube (Google). Data transfer to the USA cannot be ruled out.

We use YouTube’s “No-Cookie” mode for all embeds. According to YouTube, no analytics cookies are set as long as you do not start a video; when playing, YouTube may store and analyse data on your device.

To save you from having to give your consent again every time you visit the page, we store your consent locally in your browser (local storage, consent_youtube). The entry is not transferred to a server and does not contain any personal data.

The legal basis is your consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. You may withdraw your consent at any time with future effect:

Withdraw consent for YouTube

7. Spam protection (Altcha)

To distinguish between human input and automated access, we use the Altcha spam protection on our forms. Altcha runs as a plugin on this server, operates entirely locally within your browser and uses only your browser’s local storage. IP addresses are anonymised in the process; any logs generated are automatically deleted after 7 days. No personal data is transferred to third parties.

The legal basis is Article 6(1)(f) of the GDPR in conjunction with Section 25(2)(2) of the TDDDG. The legitimate interest lies in protection against abusive automated use.

8. Contact form

A contact form is available on this website. The data entered via the form is processed for the purpose of handling and responding to your enquiry and is forwarded by email to the relevant department.

In particular, the following data is processed:

  1. Name
  2. Email address
  3. Subject (selectable)
  4. Message
  5. IP address
  6. Browser ID

The legal basis is Article 6(1)(b) of the GDPR (pre-contractual measures / performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in processing your enquiry).

The data transmitted via the contact form will be automatically deleted once processing is complete, but no later than 90 days, provided there are no statutory retention obligations.

9. Online application

An application form is available on this website. The data entered via the form is processed for the purpose of handling your application and forwarded by email to the relevant department.

In particular, the following data is processed:

  1. Name
  2. Email address
  3. Telephone number
  4. Cover letter
  5. File attachments (up to three files)
  6. IP address
  7. Browser identifier

The legal basis for processing is Article 6(1)(b) of the GDPR (initiation of an employment relationship) and Section 26 of the BDSG.

The application data will be automatically deleted upon completion of the application process, but no later than 180 days thereafter, provided there are no statutory retention obligations.

10. Complaints form

A complaints form is available on this website. The data entered via the form is processed for the purpose of handling your complaint and forwarded by email to the relevant department.

In particular, the following data is processed:

  1. Product
  2. Best-before date
  3. Place of purchase
  4. Reason for the complaint
  5. Name
  6. Email address
  7. Address (Street, House number, Postcode, Town)
  8. File attachments (up to three files)
  9. IP address
  10. Browser ID

The legal basis is Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in the processing of complaints and quality assurance).

The data submitted via the complaints form will be automatically deleted once processing is complete, but no later than 90 days, provided there are no statutory retention obligations.

11. Competitions

A form is available on this website for participation in competitions. The data entered via the form is processed for the purpose of conducting the competition and determining the winner, and is forwarded by email to the relevant department.

In particular, the following data is processed:

  1. First name and surname
  2. Email address
  3. Telephone number
  4. Date of birth
  5. Address (street, house number, postcode, town)
  6. Further details required for the relevant competition (e.g. answers to competition questions)
  7. IP address
  8. Browser identifier

The legal basis is Article 6(1)(b) of the GDPR (performance of a contract within the framework of the terms and conditions of participation).

The data will be automatically deleted upon completion of the competition, but no later than 180 days thereafter, provided there are no statutory retention obligations.

12. Contact via email, telephone or fax

If you contact us by email, telephone or fax, your details, including any personal data contained therein, will be processed for the purpose of handling your enquiry.

Processing is carried out on the basis of Article 6(1)(b) of the GDPR (pre-contractual measures / performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in processing your enquiry).

13. Retention period

Personal data will only be stored for as long as is necessary for the respective purposes or where statutory retention obligations apply.

Once the relevant purpose no longer applies, the data will be deleted, provided there are no conflicting legal obligations.

14. Your rights

You have the right at any time to:

  1. Access (Art. 15 GDPR)
  2. Rectification (Art. 16 GDPR)
  3. Erasure (Art. 17 GDPR)
  4. Restriction of processing (Art. 18 GDPR)
  5. Objection to processing (Art. 21 GDPR)
  6. Data portability (Art. 20 GDPR)

To exercise your rights, please contact the data controller.

15. Right to lodge a complaint with the supervisory authority

Under Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.