We are glad you visit our website and that you are interested in MHP Management- und IT-Beratung GmbH and in our services. Your privacy is importance to us. We handle the protection of your personal data and their strictly confidential processing with great care. Your personal data will be exclusively processed in compliance with the applicable provisions under data protection law.

In this Privacy Policy, we will inform you on the processing of your personal data and your rights under data protection law. Due to the ongoing technological further development, changes in our services or the legal situation, or other reasons, modifications or amendments of our Privacy Policy may be required. We reserve the right to update this Privacy Policy at any time and ask you to review the latest version at regular intervals.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER; CONTACT

The Data Controller within the meaning of data protection laws, rules, and regulations is:

MHP Management- und IT-Beratung GmbH
Film- und Medienzentrum
Königsallee 49
D-71638 Ludwigsburg
phone: +49 (0)7141 7856-0
email: info(at)mhp.com

If you have any questions regarding data protection, please contact our data protection officer at dataprivacy(at)mhp.com.

2. GEGENSTAND DES DATENSCHUTZES

The subject matter of this Privacy Policy is personal data.

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Unless otherwise stated in the following sections, personal data is collected when you use our site to enable you to make an appointment.

Other than described in the sections below, no personal data will be collected, processed, or used during the visit of our website. When you visit our website, our web servers will automatically capture general information. This includes the type of web browser, the operating system used, the domain name of the internet service provider, IP address of the computer used, the referring website, the pages of our website that you visit and the date and duration of your visit. We cannot use this data to identify individual users. We will only analyze this information for statistical purposes and for improving the attractiveness, contents, and functionality of our website.

Unless otherwise stated in the following sections, personal data is collected when you use our site to enable you to make an appointment.

When you access our Internet pages, our web servers automatically collect information of a general nature. This includes the type of web browser, the operating system used, the domain name of the Internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site and the date and duration of the visit. This data cannot be used by us to identify the individual user. The information is only statistically evaluated by us and used exclusively to improve the attractiveness, content and functionality of our websites.

3. LEGAL BASIS OF DATA PROCESSING

In the event we obtain a consent from a data subject for the processing of personal data, Art. 6, par. 1, lit. a of the European General Data Protection Regulation (GDPR) forms the legal basis for processing your personal data.

If the processing of personal data is necessary for performing an agreement to which the data subject is a party this is governed by Art. 6, par. 1, lit. b of the General Data Protection Regulation (GDPR). This shall also apply to processing steps that are required to carry out tasks prior to the conclusion of an agreement.

If the processing of personal data is necessary for meeting a statutory obligation to which our company is bound, Art. 6, par. 1, lit. c of the General Data Protection Regulation (GDPR) forms the legal basis.

In the event processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6, par. 1, lit. d of the General Data Protection Regulation (GDPR) forms the legal basis for processing your personal data.

If data processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, Art. 6 par. 1 lit. f of the General Data Protection Regulation (GDPR) forms the legal basis for processing your personal data.

The passing on of your personal data within the Porsche Group for the purpose of responding to and forwarding inquiries is also subject to these statutory provisions.

4. DELETION OF DATA AND STORAGE PERIOD

Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this period, if provided by EU regulations, national law, or other rules and regulations adopted by the EU or national legislators by which the controller is bound. Data will also be blocked or deleted when a storage period set forth in any of the indicated rules and regulations expires unless the further storage of data is required for the conclusion of a contract or contract performance.

We store your data within the scope of a consent as long as your consent exists and you have not revoked it. If the purpose no longer applies, your data will be deleted. We will store the consent you have given electronically for the purpose of proof. The associated processing of your data is based on legitimate interest (Art. 6(1) sentence 1 lit. f) GDPR). We must be able to prove compliance with the data protection requirements of the GDPR (Art. 5(2) GDPR) and therefore have a legitimate interest in documenting the consent given to us. After revocation, your consent will generally be deleted until the expiry of the simple statutory limitation periods according to §§ 195ff BGB (German Civil Code) for three years, unless a longer retention is required or permitted by law.

5. COLLECTION AND PROCESSING OF PERSONAL DATA

Personal data will only be collected if you provide it upon your own request, e.g., as a participant of a survey or when registering for personalized services. In these cases, you will be notified of the intended storage purpose and, if necessary, asked to grant your consent to data storage.

Personal data collected in connection with our website will only be used for filling orders or processing your inquiries unless you grant your consent to other forms of processing.

Any other form of processing requires your prior consent.

This use of data is restricted to the purposes of advertising and market and public opinion research and this data will be exclusively available to MHP.

You may withdraw your consent to a particular type of use at any time with effect to the future.

Your data will not be sold, rented, or made available to third parties in any manner other than those described herein. Data transmission of personal data to state and public authorities will only be carried out subject to mandatory national statutory provisions. Our employees, agencies, and dealers have been bound to the duty of strict confidentiality.

5.1. CONTACT

You may contact us by writing to our email address. Of course, we will use any personal data provided to us this way only for the purpose for which it was made available during this contact.

To the extent that our contact form contains fields that are not required for contacting you, these fields are marked as optional fields. This information helps us to gather further details regarding your inquiry and improves the handling of your concern.

We expressly draw your attention to the fact that you provide your information on a voluntary basis and that you grant your consent to us using it. In the event this should concern information on other communication channels (for instance, email account, phone number), you also provide your consent that we may contact you that way in order to respond to your inquiry.

In addition, at the time of sending the message the following data will be stored:

• IP address of user
• date and time of registration

Data processing is not permissible unless you have granted your consent.

Your personal data will not be passed on to third parties in connection herewith. This data will only be used for processing the conversation. Of course, you may withdraw this consent at any time with effect to the future by writing to info@mhp.com.

5.2. NEWSLETTER

You may subscribe to our free newsletter on our website. When you register for our newsletter, the information provided on screen will be transmitted to us.

The processing of data obtained through a user’s registration for a newsletter is governed by Art. 6, par 1, lit. a of the GDPR, if the user has granted his/her consent.

If you acquire goods or services through our website and enter your email account for this purpose, we have the right to use this address for mailing a newsletter afterwards. In this case, the newsletter will only contain direct marketing contents for similar goods or services provided by us.

No data will be passed on to third parties in connection with data processing for newsletter mailings. This data will only be used for mailing the newsletter.

In addition, the following information will be collected at the time of registration:

• IP address of requesting computer
• date and time of registration

The user may unsubscribe from the newsletter at any time. Each newsletter will contain a link for this purpose.

By clicking this link, the user may withdraw his/her consent to storing the personal data that was collected during the registration process to take effect in the future.

5.3. REGISTRATION

Our website allows users to register by entering personal data. The user’s registration is required for providing certain contents and services on our website. We need your registration information in order to be able to send you your login data or event information.

The legal basis for processing the data may be your consent, the legitimate interest of MHP or also the processing of data within the scope of a contractual relationship; attention is drawn to this in the registration screen. Information and notes on objection options can be found in chapters 3 and 9.

The data is entered in an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected as part of the registration process:

• Company
• Function
• Department
• Salutation
• First name
• Surname
• Street address
• House number
• ZIP CODE
• City
• Country
• Phone number
• fax number
• E-mail address

At the time of registration, the following data is also stored:

• The IP address of the user
• Date and time of registration

5.4. PROVISION OF WEBSITE AND GENERATION OF LOGFILES

During each visit of our web pages, our system will automatically collect data and information from the retrieving computer system. The following information will be collected:

Information on the browser type and the version used

• User’s operating system
• User’s internet service provider (ISP)
• IP address of user
• date and time of access
• Websites from which user’s system is referred to our website
• Websites that the user’s system calls up through our website

This information will also be stored in the logfiles of our system. This information will not be stored together with other personal data of the user.

The temporary storing of data and logfiles is governed by Art. 6, par 1, lit. f of the GDPR.

The IP address needs to be temporarily stored by the system in order to allow the delivery of the website to the user’s computer. To this end, the IP address of the user needs to be stored during the entire session.

This information will be stored in logfiles in order to ensure the operability of the website. In addition, this data helps us to optimize our website and to ensure the security of our IT systems. This information will not be analyzed for marketing purposes. We have a legitimate interest in data processing for these purposes pursuant to Art. 6, par. 1, lit. f of the GDPR.

Data will be deleted as soon as it is no longer needed for attaining the purpose for which it was collected. With regard to the collection of data for the purpose of making the website available this is the case when the session concerned is over.

In the event data is stored in logfiles, data will be deleted no later than within seven (7) days. It is possible to store data for a longer period. In this case, the IP addresses of the users will be deleted or pseudonymized so that the retrieving software client may no longer be assigned to an individual.

6. Cookies

On our booking page, so-called cookies are used. A cookie is a small text file that is stored by a website on your hard drive. Cookies do not harm your computer and do not contain viruses. We use the information contained in cookies to provide you with the functionality of the site.

Both session cookies and persistent cookies are used on our site. Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are thus deleted. Persistent cookies are used for repeated visits and are stored in the user's browser for a certain period of time (1 year). These cookies are not deleted when the browser is closed.

Of course, you may also view our website without allowing cookies. If you do not wish cookies to be stored on your computer, you may disable the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of your browser any time. For further details please refer to the user manual provided by the producer of your browser software. Please note, however, that our web presence may not be fully available without the use of cookies.

7.  DATA TRANSMISSION

Data transmission to external service providers (processors)

Your data will be forwarded to service providers that perform services on our behalf and assist MHP in the provision of its services.

If your personal data is processed by commissioned service providers, these activities will be carried out within the scope of data processing pursuant to Art. 28 of the GDPR. The service providers referred to above will only be granted access to such personal data that is needed for performing the corresponding tasks. These service providers are not allowed to pass on your personal data or to use it for any other purpose, in particular, for their own advertising or marketing purposes.

To the extent that external service providers have access to your personal data, we have ensured by legal measures, privacy by default and by design, and through regular reviews and inspections that they will comply with the applicable data protection laws, rules, and regulations.

Your personal data will not be transmitted to other companies for commercial purposes.

We use Microsoft®Bookings for booking appointments. The collected data is stored on servers in European data centers. A transfer to the USA only takes place in exceptional cases, for example in the context of support questions to Microsoft in connection with Bookings, which must be solved outside of normal working hours.

8. DATA SECURITY

We use technical and organizational safeguards (privacy by default and by design) to protect your personal data against coincidental or willful manipulation, loss, destruction or access by unauthorized parties. Our security measures will be continuously improved based on the state of the art.

9. RIGHTS OF THE DATA SUBJECT

If your personal data is processed, you are a “data subject” within the meaning of the GDPR and you are entitled to the following claims against the “controller”:

Right of access pursuant to Article 15 of the GDPR
You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed. If we have processed your personal data, you are entitled to further rights to access set forth in Article 15 of the GDPR.

Right to rectification
If data that we collected on you is inaccurate or incomplete, you may claim the rectification without undue delay pursuant to Article 16 of the GDPR.

Right to restriction of processing
Subject to Article 18 GDPR, you may also have the right to claim the restriction of processing of personal data concerning you. Where processing has been restricted, your personal data shall only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We will notify you before the restriction is lifted.

Right to erasure
If one or more of the grounds listed in Article 17 par. 1 of the GDPR apply, you may claim the erasure of personal data concerning you without undue delay, unless there is an exception pursuant to Article 17, par. 3 of the GDPR.

Right to notification
If you have asserted the right to rectification, erasure of personal data, or restriction of processing, we are obligated pursuant to Article 19 of the GDPR to notify all recipients to whom personal data has been disclosed, unless this proves impossible or involves disproportionate effort. In addition, you have the right to be informed about who these recipients are. You may exercise your right to be informed of those recipients against the controller.

Right to data portability
Furthermore, pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you in machine readable format and to transmit this data to another controller without hindrance, provided, however, that the conditions enumerated in Article 20, par. 1, lit. a of the GDPR exist or to demand to have the personal data transmitted directly from us another controller, where technically feasible and if this does not adversely affect the rights and freedoms of others. This right shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object
You have the right to object at any time to processing of personal data concerning you by written notice to MHP which is based on Article 6, par 1, lit. f of the GDPR. We shall not longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the assertion, exercise or defense of legal claims.

Right to withdraw the consent under data protection law, rules, and regulations
You may withdraw your data protection consent at any time by notifying MHP. The withdrawal of your consent shall not affect the lawfulness of processing based on this consent prior to its withdrawal.

Right to lodge complaints with the supervisory authority:
Furthermore, you have the right to lodge a complaint with the competent supervisory authority, if you consider that the processing of your personal data violates the applicable statutory provisions, rules, and regulations. In this case, you may contact the Data Protection Authority having competence at your place of residence or in your country or the Data Protection Authority having competence at our place of business.

How to contact us or to exercise your rights:
Furthermore, if you should have any questions on the processing of your personal data, your rights as a data subject, or any consent that may have been granted, you may contact us free of charge. If you wish to exercise any or all of your rights, please email us at info@mhp.com or write a letter to the address set forth in section 1 above.

10. MODIFICATONS AND AMENDMENTS

This Privacy Policy will be modified and/or amended when the internet or our web offering change. We will notify you of any updates on this page in due time. In order to stay informed on the current version of our Privacy Policy, please visit this web page at regular intervals.

This Privacy Policy shall apply as amended. Last revised: 12/02/2022