Privacy Policy of the Masterflex Group

Thank you for your interest in using our website. The protection of personal data is a top priority for us. Below you will find information about the processing of your personal data and about your rights when using our website.

In the course of the further development of our website and the implementation of new legal requirements, new technologies or in order to improve our service for you, changes to this privacy policy may become necessary. We therefore recommend that you read this privacy policy again from time to time.

Here you will also find our separate data protection information for customers and interested parties:

Data protection information for customers and interested parties

Privacy policy

Status March 2025

1 Name and address of the controller

2 Contact details of the data protection officer

3 General information on data processing

4 Rights of the data subject

5 Provision of the website and creation of log files

6 Use of cookies

7 E-mail contact

8 Contact form

9 Use of company presences in social and professional networks

10 Hosting

11 Content delivery networks

12 Plugins and tools used

1 Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Matzen & Timm GmbH
Nordportbogen 2
22848 Norderstedt
+49 40 853212-0
datenschutz.matzen-timm@masterflexgroup.com 
www.matzen-timm.de

2 Contact details of the data protection officer

The data protection officer of the controller is

heyData GmbH
Schützenstr. 5
10117 Berlin
Germany
datenschutz@heydata.eu

3 General information on data processing

3.1 Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.
Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

3.3 Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

4 Rights of the data subject

If we process your personal data, you have the following rights as a data subject:

• a right to information about the processed data and to a copy,
• a right to rectification if we process incorrect data about you,
• a right to erasure, unless exceptions apply as to why we still store the data, e.g. retention obligations or limitation periods,
• a right to restriction of processing,
• a right to withdraw consent to data processing at any time,
• a right to object to processing in the public interest or legitimate interest,
• a right to data portability,
• a right to lodge a complaint with a data protection supervisory authority if you believe that we are not processing your data properly. The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for our company. However, if you are in another federal state or not in Germany, you can also contact the data protection authority there.

5 Provision of the website and creation of log files

5.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

5.2 Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

5.3 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 5.2.

5.4 Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

5.5 Possibility of objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

6 Use of cookies

6.1 Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies

• Log-in information
• Cookie settings
• Search terms
• Other information required to provide the website

The user data collected in this way is pseudonymized by technical precautions. The data is not stored together with other personal user data.

We also use cookies on our website that enable an analysis of the user's surfing behavior. The following data is stored and transmitted in the analysis cookies

• User behavior on our website
• Other information used for marketing purposes

Further information on our use of analysis cookies can be found in our privacy policy under section 12.

6.2 Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

6.3 Legal basis for data processing

The legal basis for the storage of analysis cookies in the user's terminal equipment is the user's consent in accordance with Section 25 (1) TDDDG. The legal basis for the processing of personal data using analysis cookies is Art. 6 para. 1 sentence 1 lit. a GDPR. The legal basis for the storage of strictly necessary cookies in the user's terminal equipment is Section 25(2)(2) TDDDG. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

6.4 Revocation and objection options

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. If you use a Safari browser version 12.1 or higher, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.

You can also prevent the collection and processing of your personal data by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(https://noscript.net/) or Ghostery(https://www.ghostery.com) in your browser.

You also have the option of selecting and deactivating the various tags / trackers / analysis tools on this website in the data protection settings. To do this, click on the fingerprint icon at the bottom left of the screen.

7 E-mail contact

7.1 Description and scope of data processing

You can contact us on our website using the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.

7.2 Purpose of data processing

If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.

7.3 Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

7.4 Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

7.5 Possibility of objection and removal

If the user sends an email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

8 Contact form

8.1 Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. The following data is stored when the message is sent:

• Business e-mail address
• Surname
• First name
• Company name
• Company address
• Telephone number
• IP address of the calling computer
• Date and time of contact

8.2 Purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact or to initiate a contractual relationship. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

8.3 Legal basis for data processing

The legal basis for the processing of data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR.

8.4 Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and statutory retention periods no longer require the data to be retained.

8.5 Possibility of objection

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

9 Use of company presences in social and professional networks

We use the possibility of company presences on social and professional networks for communication and the exchange of information with (potential) customers, interested parties and applicants. Publications about the company's presence may contain the following content:

• Information about products
• Information about services
• competitions
• advertising
• Customer contact
• Information/PR
• Job applications
• Active sourcing

We maintain a company presence on the following social / job-oriented networks:

• Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• YouTube: Google Ireland Limited-Dublin, Ireland
• X: Twitter International Unlimited Company, Ireland
• LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
• XING: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

The legal basis for the processing of the data that we collect in connection with the use of our company websites is Art. 6 para. 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. You can object to the processing of your personal data that we collect when you use our company websites at any time and assert your rights as a data subject as set out in section 4 of this privacy policy.

If you carry out an action on one of our company websites (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by the companies jointly responsible for the corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data. Further information on objection and removal options vis-à-vis the providers of the social networks can be found here:

• Facebook: https://de-de.facebook.com/privacy/policy
• YouTube: https://policies.google.com/privacy
• X: https://x.com/de/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• XING: https://privacy.xing.com/de/datenschutzerklaerung

10 Hosting

The website is hosted on servers of a service provider commissioned by us. Our service provider is: Host Europe GmbH, Hansestr. 111, 51149 Cologne, Germany. The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions. The location of the website server is geographically located in the European Union (EU) or the European Economic Area (EEA).

11 Content delivery networks

We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you visit our website, a connection is established to the servers of the providers we use in order to retrieve content and store it in the cache of the user's browser. As a result, personal data may be stored and analyzed in server log files, in particular device and browser information (especially the IP address and operating system). We use the content delivery network KeyCDN from the provider proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland

11.1 Purpose of data processing

The use of the functions of these services serves to deliver and accelerate online applications and content.

11.2 Legal basis for data processing

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

11.3 Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

11.4 Possibility of objection

Information on exercising your rights against KeyCDN can be found at: https://www.keycdn.com/privacy

12 Plugins and tools used

By using our plugins, some of your personal data is sent to the USA or other third countries outside the EU. To ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data is transferred to and processed by our plugin operators on the basis of suitable guarantees in accordance with Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. 
We use plugins for various purposes. The plugins used are listed below:

12.1 Use of Inxmail

12.1.1 Scope of the processing of personal data

We use functionalities of the newsletter tool Inxmail Professional from Inxmail GmbH, Wentzigerstraße 17, 79106, Freiburg, Germany (hereinafter: Inxmail). Inxmail Professional is a software for personalized newsletters and automated email campaigns. Interactions with the newsletters can be measured using so-called web beacons or tracking pixels. Cookies from Inxmail are stored on your end device. In particular, the following personal data is processed by Inxmail:

• Surname
• first name
• e-mail address
• Meta and communication data
• Device information
• IP address
• Usage data
• interests
• Access times

Further information on the processing of data by Inxmail can be found here: https://www.inxmail.de/datenschutz

12.1.2 Purpose of data processing

We use Inxmail Professional to register interested parties for newsletters and to analyze and evaluate newsletter campaigns.

12.1.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

12.1.4 Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. 
This data can also be deleted at Inxmail's request. The storage of cookies is not the responsibility of Inxmail.

12.1.5 Right of revocation

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Further information on objection and removal options vis-à-vis Inxmail can be found at: https://www.inxmail.de/datenschutz

12.2 Use of YouTube

12.2.1 Scope of the processing of personal data

We use the YouTube plugin operated by Google, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA and its representative in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google). We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser establishes a connection with the YouTube servers. This allows personal data to be stored and analyzed, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). We have no influence on the content of the plug-in. If you are logged into your YouTube account during your visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this corresponding information is transmitted directly to YouTube and stored there.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

12.2.2 Purpose of the data processing

The use of the YouTube plug-in serves to improve user-friendliness and an appealing presentation of our online presence.

12.2.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

12.2.4 Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

12.2.5 Right of withdrawal

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

12.3 Use of Matomo

We use the open source tracking tool Matomo from the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand(https://matomo.org/) for the purpose of reach analysis by means of local log file analysis. No information is stored in the end user's end device or information that is already stored in the end device is accessed. Information can be collected by means of log file analysis when analyzing reach:

• Host name (FQDN) that is accessed
• IP address of the requesting computer
• Date and time of access
• Type of http request
• Requested file
• http status code
• Website from which the access was made (referrer URL)
• Browser used and, if applicable, operating system of the accessing computer (user agent)

No personal data is transmitted to third parties and user data is not merged.

12.3.1 Purpose of data processing

The reach analysis helps us to learn more about the visitors to our website and thus make the website better. This involves recording the user behavior of website visitors in general and not that of an individual website visitor in particular. This tells us, for example, which subpages are viewed more frequently, which videos are viewed or how long website visitors spend on our website. The data is not analyzed for marketing purposes.

12.3.2 Legal basis for the processing of personal data

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this purpose.

12.3.3 Duration of storage

The data is deleted as soon as it is no longer required for our recording purposes. The generated statistics and underlying data are not deleted.

12.3.4 Right of revocation and removal

The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this purpose. The user can object to this. You can find more information on the right to object in section 4 of this privacy policy.

12.4 Use of CCM19

12.4.1 Scope of the processing of personal data

We use the consent management tool CCM19 from Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany on our website.

The tool enables you to give your consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent you have already given.

12.4.2 Purpose of data processing

The purpose of data processing is to obtain and document the necessary consent for data processing and thus to comply with legal obligations. The following information is collected for this purpose

• Date and time of the page view
• a random ID
• Consent status

Data will not be passed on to Papoo Software & Media GmbH.

The website cannot be closed or continued.