We welcome you to our website and appreciate your interest. THE MEGALON GROUP AG takes the protection of personal data very seriously. Therefore, we would like to inform you about the data of your visit and the purposes for which they are used.

1. Controller and Data Protection Officer
Responsible for the processing of your personal data is

THE MEGALON GROUP AG
Astraturm
Zirkusweg 2
D-20359 Hamburg

Phone +49 (0) 40 / 734 435 540
Fax +49 (0) 40 / 734 435 549

Email: info@megalon.de

Our Data Protection Officer can be found under the section: "13. Contact details of the Data Protection Officer"

2. General information on data processing
Here we inform you about the processing of personal data when visiting our website. Personal data, according to the General Data Protection Regulation, includes all information relating to an identified or identifiable natural person ("data subject"). This includes your name, address, or email address.

Informational Use
If you only visit our website without registering or providing us with information, we only collect the data that your browser automatically transmits to our server. These are temporarily stored on our servers.

The following data is collected:

• Information about the browser type, language, and version used
• User's operating system
• User's internet service provider
• User's IP address
• Date and time of access
• Time zone difference to Greenwich Mean Time (GMT)
• Websites from which the user's system accesses our website
• Websites accessed by the user's system through our website
• Access status/HTTP status code
• Amount of data transferred in each case

This data is technically necessary to display the website to you and to ensure the security of our website. We only evaluate this data for statistical purposes to fix possible technical errors, identify and defend against attacks and security risks, and improve the attractiveness, content, and functionality of our websites. MEGALON AG cannot assign this data to specific individuals. No merging of this data with other data sources is performed.

The legal basis for the temporary storage of data and log files is our legitimate interest in the security and stability of our website (Art. 6 (1) lit. f GDPR). The user's interest is taken into account by not using the data for their identification.

3. Cookies
Use of Cookies:
When using our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the location that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the overall internet offering more user-friendly and effective.

This website uses the following types of cookies, the scope and functionality of which are explained below:

a. Transient Cookies
These cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

b. Persistent Cookies
These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

2. Prevention of Cookies
You can configure your browser settings according to your preferences, e.g., to reject third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.

3. Legal Basis and Storage Duration
The legal bases for possible processing of personal data and their storage duration vary and are presented in the following sections.

4. Contact
When you contact us by email, the data you provide (your email address, possibly your name and telephone number) will be stored by us to answer your questions. The disclosure of this information is expressly on a voluntary basis and with your consent, Art. 6 (1) a GDPR. If these are communication channel details (e.g., email address, telephone number), you also consent that we may contact you via this communication channel to respond to your request. Of course, you can revoke this consent at any time for the future.

We delete the data incurred in this context after storage is no longer required, or restrict processing if legal retention obligations exist.

5. Application Procedure
You can apply to our company electronically via email. If you apply to us, we need your personal data to process your application for the purpose of conducting the application procedure. Please note that unencrypted emails transmitted are not protected against unauthorized access.

Your application documents are usually stored for a period of six months unless you have explicitly given us your consent for a longer storage of your data or a contract has been concluded.

If, following your application, an employment relationship is established, your data and documents will be transferred to the personnel file for the purpose of carrying out the employment relationship, in accordance with § 26 (1) sentence 1, BDSG.

You are neither legally nor contractually obliged to provide us with your data. However, this data is necessary for the decision on your application. Without this information, the application procedure and a possible hiring cannot take place.

The legal basis for data processing in the context of the application procedure is Art. 6 (1) lit. a, b GDPR, § 26 (1) sentence 1 BDSG.

6. Comments on Blog Posts
There is the option for you to write comments on blog posts. For this, we need your name and email address. Optionally, you can provide your website. We request this information to promote more transparent and individual communication between the authors of blog posts and comments. Additionally, your IP and email addresses are recorded or queried to prevent spam. The disclosure of the data provided in this context is expressly on a voluntary basis and with your consent, Art. 6 (1) a GDPR. The personally identifiable information transmitted is used solely for the purpose for which you provided us with your data. Of course, you can revoke your consent at any time for the future. A message to the address mentioned in the imprint is sufficient.

7. Website Analysis
For the purpose of analyzing and optimizing our websites, we use various services, which are presented below. This allows us to analyze, for example, how many users visit our site, which information is in high demand, or how users find the offer. We collect data, among other things, about from which website an affected person has come to a website (so-called referrer), which subpages of the website were accessed or how often and for what duration a subpage was viewed. This helps us to design and improve our offers to be more user-friendly. The data collected in this process is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 (1) f GDPR.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The purposes of data processing also include our legitimate interest in data processing. The legal basis for the use of Google Analytics is § 15 (3) TMG or Art. 6 (1) f GDPR. The data sent by us and linked to cookies, user identifiers (e.g., user ID), or advertising IDs will be automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/us.html or https://policies.google.com/?hl=us

You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent the collection by Universal Analytics across different devices, you must perform the opt-out on all used systems. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

8. Use of Social Plugins
This website uses social plugins from the following providers:

• Facebook (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)

These plugins usually collect data from you by default and transmit it to the servers of the respective provider. To ensure the protection of your privacy, we have taken technical measures to ensure that your data cannot be collected by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. Only with a click on the respective symbol are the plugins activated, and you thereby give your consent for your data to be transferred to the respective provider. The legal basis for the use of the plugins is Art. 6 (1) a and f GDPR.

After activation, the plugins also collect personal data such as your IP address and send it to the servers of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the respective website is called up. This enables the providers to create profiles of your usage behavior. This also happens if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and are logged into your account during your visit to this website, your data and information about your visit to this website may be linked to your profile on the social network. We have no influence on the exact scope of the data collected about you by the respective provider. For more information about the scope, nature, and purpose of data processing and about rights and setting options for protecting your privacy, please refer to the data protection information of the respective social network provider. These can be found at the following addresses:

• Facebook: https://www.facebook.com/policy.php
• Twitter: https://twitter.com/privacy/

9. Data Transmission
We work with service providers who handle technical and content-related tasks in providing our website. This includes services such as hosting and maintenance of our website. To the extent that external service providers come into contact with your personal data, we have ensured, through legal, technical, and organizational measures, as well as through regular checks, that they comply with the provisions of data protection laws.

10. Your Rights
In connection with the processing of your personal data, you have the right to:

• Information about which data about you is processed by us for what purposes (right to information of the data subject, Art. 15 GDPR).
• Request correction of the personal data concerning you (right to rectification, Art. 16 GDPR)
• Request deletion of the personal data concerning you (right to deletion/right to be forgotten, Art. 17 GDPR)
• Request a restriction of processing if the legal requirements are met (right to restriction of processing, Art. 18 GDPR)
• Object to the processing of personal data concerning you at any time, in cases provided for by law, for reasons arising from your particular situation (right to object, Art. 21 GDPR)
• Data portability in cases provided for by law (right to data portability Art. 20 GDPR)
• Revoke consent to the processing of your personal data in whole or in part with effect for the future (Art. 7 (3) GDPR).

You also have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data violates data protection regulations.

If you have any questions about data protection and the processing of your personal data, please contact our data protection officer. She is also available for requests, information requests, suggestions, or complaints.

11. Data Security
MEGALON AG has taken extensive technical and operational security precautions to protect your data from unauthorized access or misuse. Our security procedures are regularly reviewed and adapted to technological progress. Our employees are trained and committed to maintaining data confidentiality.

12. Changes to the Data Protection Information
We reserve the right to change this data protection declaration at any time, observing the applicable data protection regulations. The current status is May 2018

13. Contact details of the Data Protection Officer
Personal/confidential

Mr. Lawyer
Kaspar-Ludwig Stolzenhain
Joachimsthaler Straße 24
10719 Berlin

Last updated on May 2018