We, as the operator of the website at https://monamu.com/ (also referred to as the "website"), are responsible under applicable data protection laws, particularly the General Data Protection Regulation ("GDPR"), for the personal data of the users ("you") of this website. In the following, we will inform you clearly within the scope of our information obligations (Art. 13 ff. GDPR) about which data is processed when you visit our website and on what legal basis this occurs. You will also receive information about your rights vis-à-vis us and the competent supervisory authority.
Information on the person responsible
points Gesellschaft für digitale Informationssysteme mbH
Landhausstr. 198-200
70188 Stuttgart
Germany
Email: info@points.de
Data Protection Officer
We have appointed a corporate data protection officer. You can reach them as follows:
points Gesellschaft für digitale Informationssysteme mbH
Data Protection Officer
Landhausstr. 198-200
70188 Stuttgart
Email: datenschutz@points.de
Informational use of our website
When you access our website merely to visit it, so-called log files are processed, as they are automatically collected by our system. The following log files are processed automatically:
- Name of the website and/or file accessed
- Date and time of retrieval
- Transferred data volume
- Notification of successful retrieval
- Browser type and version
- Operating system of the user
- Referrer URL
- IP address
- Requesting provider
The log files contain your IP address and possibly other personal data. It is therefore basically possible to identify you. However, we store your data only temporarily and, in particular, not together with other personal data.
For the provision of our website, the processing of the above-mentioned data is necessary. We also store the data for the purpose of ensuring the security of our information technology systems. These purposes also justify our legitimate interest in processing the data on the legal basis of Art. 6 (1) sentence 1 lit. f GDPR. The log files, which also contain your IP address, are deleted or anonymized immediately after they are no longer required to achieve the aforementioned purposes, but no later than after seven days.
Website hosting
Our website is operated on the servers of the provider Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, with servers located in Germany. This means that the data we collect when you visit and use this website is stored by our hosting provider.
The legal basis for processing your personal data is Art. 6 (1) sentence 1 lit. f GDPR, as it is in our legitimate interest to use the services of a professional provider for the secure and efficient operation of our website. We have signed a data processing agreement with Hetzner.
Contact via email, fax, or telephone
You have the option of contacting us by e-mail, fax or telephone. The personal data you transmit to us through these channels will be stored. These data will be processed solely for the purpose of handling your inquiry, which constitutes our legitimate interest. The legal basis for processing your personal data is Art. 6 (1) sentence 1 lit. f GDPR. The data will be stored until they are no longer necessary to achieve the purpose of the conversation with you, and your inquiry has been fully resolved.
If your contact is intended to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) sentence 1 lit. b GDPR. These data will be stored for as long as they are necessary to execute the contract or pre-contractual measures. Beyond this, we will store your data only to comply with legal obligations (e.g., tax requirements) under Art. 6 (1) sentence 1 lit. c GDPR.
You may inform us at any time (see above, section 1) if you wish for the data provided during the conversation to be deleted. In this case, all personal data from the conversation will be deleted, as far as permissible, and continuing the conversation will no longer be possible.
Use of service providers
Please note that we may employ service providers for the processing of your personal data, with whom we have concluded data processing agreements (e.g., for website hosting). If data processing is performed by processors in a third country (outside the EU), we ensure that the level of protection guaranteed by the GDPR is not compromised (Art. 44 et seq. GDPR). The legal basis for employing service providers is Art. 6 (1) sentence 1 lit. f GDPR. The use of service providers (specialists or other service providers in areas we cannot manage ourselves) aligns with our legitimate interest. If you would like to receive a copy of the appropriate or adequate safeguards, feel free to contact us (see above, section 1).
Your rights
If we process your data, you are considered a "data subject" under the GDPR. You are entitled to the following rights: the right of access, the right to rectification, the right to restriction of processing, the right to erasure, the right to information, and the right to data portability. Additionally, you have the right to object, the right to withdraw consent, and the right to lodge a complaint with a supervisory authority.
Below you will find some details on the individual rights:
Right to access
You have the right to request confirmation from us as to whether we are processing your personal data. If we are processing your personal data, you are entitled to receive information on the purposes of processing, categories of personal data, recipients or categories of recipients, and the retention period, if applicable.
Right to rectification
You have the right to correct and/or complete the data that we have stored about you if this data is incorrect or incomplete. We will make such corrections or additions without delay.
Right to restriction of processing
Under certain circumstances, you have the right to request that we restrict the processing of your personal data. An example of this is if you dispute the accuracy of your personal data and we need to verify the accuracy for a certain period of time. Your data will only be processed to a limited extent for the duration of the check. Another example of restriction is if we no longer need your data, but you need it for a legal dispute.
Right to erasure
In certain situations, you have the right to request that we delete your personal data without delay. This applies, for instance, if we no longer need your personal data for the purposes for which it was collected, or if we have processed your data unlawfully. Another example would be if we process your data based on your consent and you withdraw that consent, and there is no other legal basis for processing. However, your right to erasure is not absolute. For instance, we may still process your personal data to comply with a legal obligation or because it is needed for a legal dispute.
Right to notification
If you exercise your right to rectification, erasure, or restriction of processing, we are obligated to inform all recipients to whom your personal data has been disclosed about the rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.
Right to data portability
Under certain conditions, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transmitted to another controller. This is the case if we process the data either on the basis of your consent or on the basis of a contract with you and that we process the data using automated procedures.
You also have the right to request that we transmit your personal data directly to another controller, where technically feasible, provided that this does not adversely affect the rights and freedoms of others.
Right to objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6(1)(1)(e) or (f) GDPR. This also applies to any profiling based on these provisions.
After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is associated with direct advertising. If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.
Right to withdraw consent
You have the right, pursuant to Art. 7(3) GDPR, to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in the Member State of your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of your personal data infringes the GDPR.
You can find an overview of the respective state data protection officers and their contact details under the following link:
https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
Status and last updated of this data protection information
March 2024
