Privacy Policy

1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:

Mühldorfer Nutrition Holding GmbH
Edisonstraße 11, 84453 Mühldorf, Germany
Phone: +49 (0) 8631-988 22 0
Fax: +49 (0) 8631-988 22 55
Email: info@muehldorfer-group.com
Website: www.muehldorfer-group.com
Management: Klaus Mittermeier (Managing Director, CEO), Andreas Altermann (Managing Director, COO)

2. Contact Details of the Data Protection Officer

The Data Protection Officer of the controller can be reached at the following contact address: dsb@muehldorfer-ag.de

3. General Privacy Policy

By using the website of Mühldorfer Nutrition Holding GmbH, you consent to the collection, processing, and use of data in accordance with the description below. This privacy policy informs users about the type, scope, and purposes of the collection and use of personal data by the responsible provider on this website. In general, our website can be visited without registration. When you visit, data such as accessed pages or names of retrieved files, date, and time are stored on the server for statistical purposes without being directly linked to you as a person. Personal data, in particular name, address, or email address, are collected on a voluntary basis. No data are transferred to third parties without your consent. As controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed. For this reason, any data subject is free to transmit personal data to us via alternative means, for example by telephone.

3.1 Handling of Personal Data
Personal data are information that can be used to identify an individual, i.e., data that can be traced back to a person. This includes name, email address, or telephone number. Data about preferences, hobbies, memberships, or which websites someone has visited are also personal data. Personal data are collected, used, and disclosed by the provider only where this is permitted by law or where users consent to the data collection. The legal basis for data protection is the General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG).

3.2 Options for Contacting Us
A contact form is available on our website and can be used for electronic contact. Alternatively, you can contact us via the centrally provided email address info@muehldorfer-pferdefutter.de. A telephone number and fax number are also provided. In addition, you may contact one of our employees directly. For this purpose, you can select the relevant business area and use the email address or telephone number of the respective employee. If you contact us via one of these channels, the personal data transmitted by the data subject will be stored. Storage serves solely the purpose of processing the request or contacting the data subject. The data are not passed on to third parties. The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR).

3.3 Contact as a Retailer
In the Contact / Retailers section, you can contact us if you intend to distribute our products. For this purpose, the following data or categories of data are processed:

  • Address and contact details
  • Information about your company (e.g., size, branches, radius of business activity)

If you contact us via this channel, the personal data transmitted by the data subject will be stored. Storage serves solely the purpose of processing your request or contacting you. The data are not passed on to third parties. The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR).

3.4 Requesting a Product Sample
You can contact us if you wish to receive a product sample. For this purpose, the following data or categories of data are processed:

  • Address and contact details
  • Product ordered

If you contact us via this channel, the personal data transmitted by the data subject will be stored. Storage serves solely the purpose of processing your request for a free sample. The data are not passed on to third parties.
The legal basis for processing these data is the initiation of a purchase contract (Art. 6(1)(b) GDPR). Your data are temporarily transferred to our order management system for processing the ordering procedure. If no further orders are placed, the data will be deleted.

3.5 Data Protection for Applications and the Application Process
We collect and process the personal data of applicants for the purpose of handling the application process. Applications can be submitted via the email address info@muehldorfer-pferdefutter.de. If we conclude an employment contract with an applicant, the transmitted data will be processed for the purpose of managing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller oppose deletion. Such legitimate interests may include, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).
The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR) and the provisions of § 32 BDSG / § 26 BDSG (new version) regarding the processing of employee data.

4. Creation of Log Files

Each time the website is accessed, Mühldorfer Nutrition Holding GmbH collects data and information through an automated system. These are stored in the server log files.
The following data may be collected:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address
  • Date and time of access
  • Websites from which the user’s system accessed our website (referrer)
  • Websites accessed by the user’s system via our website

The processing of the data serves to deliver the content of our website, to ensure the functionality of our information technology systems, and to optimize our website. The log file data are always stored separately from other personal data of users. The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR) as well as Art. 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

5. Privacy Policy on Cookies

Our website uses cookies. Cookies are small text files that make it possible to store specific information related to the user on the user’s device while the user uses the website. Cookies enable, in particular, the determination of the frequency of use and the number of users of the pages, the analysis of user behavior on the site, and the design of our offering to be more user-friendly. Cookies remain stored beyond the end of a browser session and can be accessed again when you revisit the site. When you visit our website, a pop-up window appears that informs you about the use of cookies. If you do not wish to receive persistent cookies, you should configure your internet browser to refuse cookies. By continuing to use the website, you implicitly consent to the use of cookies. The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR) as well as Art. 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

6. Registration on Our Website

If you use the option to register on our website by providing personal data, the data entered in the respective input form will be transmitted to the controller. The data are collected for the purpose of processing an order.
The following data or categories of data are required for processing:

  • Address and contact details
  • Payment information

You can manage your login credentials yourself. Data about your orders are stored in your customer account for as long as the customer account exists. During registration, the user’s IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data are not passed on to third parties. An exception applies where there is a legal obligation to disclose data. The data may be disclosed to service providers who process data on our behalf. Registration of the data is necessary for the provision of content or services. Registered persons can at any time request that the stored data be deleted or amended. The data subject has the right at any time to obtain information about the personal data stored about them. The legal basis for processing data for the creation of the customer account is your consent (Art. 6(1)(a) GDPR). Creating a customer account is voluntary. Orders can also be placed without creating a customer account. If an order is placed, the legal basis for processing is the performance of the purchase contract (Art. 6(1)(b) GDPR). Your data are also processed for the purposes of legitimate interests pursued by the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data (Art. 6(1)(f) GDPR). This processing relates to internal analytical processes for business administration purposes. In this context, your data are expressly not used to create user profiles.

7. Newsletter

If the newsletter of our company is subscribed to, the data entered in the respective input form will be transmitted to the controller. Only the email address is required for this purpose. Subscription to the newsletter will only be activated once you confirm via a link that is sent to the email address provided. When registering for the newsletter, the user’s IP address and the date and time of registration are stored. This serves to prevent misuse of the services or the email address of the data subject. The data are not passed on to third parties. An exception applies where there is a legal obligation to disclose data. The data are used exclusively for sending the newsletter. The data subject may cancel the newsletter subscription at any time. Likewise, consent to the storage of personal data may be revoked at any time. For this purpose, each newsletter contains a corresponding link. The legal basis for processing these data is your consent (Art. 6(1)(a) GDPR).

8. Requesting a Product Sample

You can contact us if you wish to receive a product sample. For this purpose, the following data or categories of data are processed:

  • Address and contact details
  • Product ordered

If you contact us via this channel, the personal data transmitted by the data subject will be stored. Storage serves solely the purpose of processing your request for a free sample. The data are not passed on to third parties. The legal basis for processing these data is the initiation of a purchase contract (Art. 6(1)(b) GDPR). Your data are temporarily transferred to our order management system for processing the ordering procedure. If no further orders are placed, the data will be deleted.

10. Routine Deletion and Blocking of Personal Data

We process and store personal data of the data subject only for as long as is necessary to achieve the purpose of storage. Storage may also take place where this is provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. As soon as the purpose of storage ceases to apply or a retention period prescribed by the aforementioned provisions expires, the personal data are routinely blocked or deleted.

11. Recipients and Disclosure of Data to Third Parties

Recipients of your data may also be service providers who process personal data on our behalf, such as IT service providers, shipping service providers, payment service providers (PayPal), or similar.

12. Rights of the Data Subject

If your personal data are processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

Right of Access
You may request confirmation from the controller as to whether personal data concerning you are processed by us. If such processing exists, you may request information from the controller about:

  • the purposes for which the personal data are processed;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data concerning you have been disclosed or will be disclosed;
  • the planned duration for which the personal data concerning you will be stored or, if specific information is not possible, criteria used to determine that duration;
  • the existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing by the controller, or the right to object to such processing;
  • the existence of the right to lodge a complaint with a supervisory authority;
  • all available information about the source of the data where the personal data are not collected from the data subject;

You have the right to be informed whether personal data concerning you are transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

Right to Rectification
You have the right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are inaccurate or incomplete. The controller must carry out rectification without undue delay.

Right to Restriction of Processing
You may request restriction of processing of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
  • if the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
  • if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

Where processing of personal data concerning you has been restricted, such data—apart from being stored—may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If restriction has been obtained under the above conditions, you will be informed by the controller before the restriction is lifted.

Right to Erasure
You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase such personal data without undue delay where one of the following grounds applies:

  • The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR and where there is no other legal ground for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • The personal data concerning you have been unlawfully processed.
  • The personal data concerning you must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

The right to erasure does not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise, or defense of legal claims.

Right to be Informed
If you have exercised the right to rectification, erasure, or restriction of processing, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.

Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes. You have the option, in the context of the use of information society services—without prejudice to Directive 2002/58/EC—to exercise your right to object by automated means using technical specifications.

Right to Withdraw Data Protection Consent
You have the right to withdraw your data protection consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.