- Home
- Privacy policy
Privacy policy
Information on the processing of personal data under Art. 13 and 14 GDPR.
This English version is provided for convenience. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website is:
- Controller
- Madyel Industrie
Owner: Batuhan Demir
Schüslerweg 2
21075 Hamburg
Germany - sales@madyel.com
- Phone
- +49 174 2405047
No data protection officer has been appointed, as the legal requirements for this are not met.
2. Principles of processing
We process personal data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). We only collect the data required for the respective purpose.
The legal bases for processing are:
- Art. 6 (1) (b) GDPR – performance of pre-contractual measures and of a contract (e.g. handling your inquiry).
- Art. 6 (1) (f) GDPR – our legitimate interests (e.g. secure and trouble-free operation of this website, defence against abusive form submissions).
- Art. 6 (1) (c) GDPR – compliance with legal obligations (e.g. retention obligations under commercial and tax law).
- Art. 6 (1) (a) GDPR – consent, where you have given it.
3. Hosting and server log files
This website is operated by an external hosting provider: STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. The provider processes the data arising when the website is accessed on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.
When you access this website, the hosting provider automatically stores information transmitted by your browser in server log files. This usually includes:
- page or file accessed
- date and time of access
- amount of data transferred and notification of successful access
- browser type and version as well as operating system
- previously visited page (referrer)
- IP address
This data is not merged with other data sources and is used solely for the technical operation, error analysis and security of the website. The legal basis is Art. 6 (1) (f) GDPR.
4. Inquiries, contact and file uploads
If you contact us via one of the inquiry forms (spare parts or custom metal manufacturing), by e-mail or by phone, we process the information you provide in order to handle your inquiry.
Data processed: company, name of the contact person, e-mail address, phone number (if provided), delivery country and your reference (if provided), the requested items (manufacturer, part number, quantity, comment), your project description with details of quantity, material, surface and delivery date, and the files you upload (e.g. parts lists, drawings, CAD files, photos).
Purpose: checking your inquiry, obtaining prices and lead times, preparing a quotation, communication about the matter and, where applicable, the subsequent performance of the contract.
Legal basis: Art. 6 (1) (b) GDPR for handling your inquiry and initiating a contractual relationship; additionally Art. 6 (1) (f) GDPR based on our interest in handling business inquiries efficiently.
Transmission and storage: your entries are sent by e-mail to our mailbox and additionally stored as a case in our internal customer and order management system, which runs on the same server. Uploaded files are attached to the e-mail and are not stored permanently on the web server.
Protection against misuse: to prevent automated submissions we use technical measures (invisible check fields, a time-limited check token, a limit on submissions per IP address and, on pages with an inquiry form, Google reCAPTCHA, see section 7). For this purpose a checksum of your IP address is stored on the server for a short time. The legal basis is Art. 6 (1) (f) GDPR.
Confirmation of receipt: after you submit an inquiry (spare parts or metal manufacturing), you receive an automatic confirmation of receipt with your inquiry number and a short summary of your details (items, or quantity, material and surface) at the e-mail address you provided (Art. 6 (1) (b) GDPR).
Voluntary nature: the data marked as required fields is necessary for us to handle your inquiry. All other information is voluntary.
5. Product catalog, search and inquiry list
Search: when you search the product catalog, your search term is sent to our server to display matching items. Search terms are not attributed to you and are not stored separately; like any page request, they may appear in the server log files (section 3). To protect against automated mass retrieval, the server counts requests per IP address in short time windows; a checksum of the IP address is stored for a few minutes for this purpose. The legal basis is Art. 6 (1) (f) GDPR.
Inquiry list: items you add with “Add to inquiry list” are stored exclusively in the local storage (localStorage) of your browser. They only leave your device when you send the inquiry. You can clear the list at any time in the inquiry form or via your browser settings. This storage is strictly necessary for this function requested by you (§ 25 (2) No. 2 TDDDG).
6. Recipients of data
Your data is only passed on to recipients where this is necessary to handle your inquiry or to fulfil legal obligations:
- Hosting and e-mail providers as processors under Art. 28 GDPR.
- Google Ireland Limited for reCAPTCHA and – only with your consent – Google Analytics (section 7).
- Suppliers and manufacturers, where necessary to obtain prices and lead times. Only the requested items and quantities are passed on, not your contact details – unless a direct delivery requires the delivery address.
- Manufacturing and logistics partners, where passing on project-related documents is necessary for technical review, preparing a quotation or performing the order (Art. 6 (1) (b) GDPR). Only the information required in each case is passed on.
- Tax advisors and authorities, where statutory retention or disclosure obligations exist.
Your data is not passed on for advertising purposes and is not sold.
7. Cookies, local storage, analytics and external services
Technically necessary storage: we store your choice in the cookie notice and – if you use the function – your inquiry list in the local storage of your browser. If you choose a language with the language switcher, we set the cookie madyel_lang (content only “en” or “de”, stored for one year) so that the website is displayed in the chosen language. This storage is strictly necessary for the functions you request (§ 25 (2) No. 2 TDDDG).
Google Analytics (only with consent): if you choose “Accept all” in the cookie notice or enable Google Analytics in the settings, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies are set and information about your use of the website (e.g. pages visited, time spent, device and browser information) is transmitted to and evaluated by Google. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time via the “Cookie settings” link in the footer of every page.
Google reCAPTCHA (inquiry forms): on pages with an inquiry form (inquiry, metal manufacturing) we use Google reCAPTCHA v3 by Google Ireland Limited to detect automated submissions. reCAPTCHA evaluates information such as IP address, browser and device details and behaviour on the page and transmits it to Google; a transfer to the USA is possible. The result serves us only as an indication – an inquiry is not rejected because of it. The legal basis is our legitimate interest in protecting the forms against misuse (Art. 6 (1) (f) GDPR). More information: Google privacy policy.
Fonts and other content: the font used is delivered locally from our server; there is no connection to Google Fonts. Maps, videos or social media elements of third parties are not embedded.
TLS encryption (HTTPS) is used to transmit your data.
8. Storage period
- Server log files: are deleted automatically by the hosting provider after a short time.
- Inquiry list, cookie choice and language choice: remain in your browser until you delete them (the language cookie for one year at most); the inquiry list is cleared after an inquiry has been sent.
- Form check data: the checksum of the IP address is deleted within a few hours.
- Inquiries without a subsequent order: are deleted as soon as the matter is closed and no retention obligations apply, at the latest after any warranty and limitation periods have expired.
- Business transactions: are subject to the retention periods under commercial and tax law (usually six or ten years under §§ 257 HGB, 147 AO).
9. Your rights
You have the following rights with regard to your personal data:
- Access (Art. 15 GDPR)
- Rectification of inaccurate or incomplete data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
An informal message to sales@madyel.com is sufficient to exercise your rights.
10. Right to lodge a complaint
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for us is:
Die Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
datenschutz-hamburg.de
You can also contact the supervisory authority of your usual place of residence or workplace.
11. Changes to this policy
We will adapt this privacy policy as soon as changes to the website or to the underlying processing make this necessary. The version published on this page applies.