Privacy Policy
1. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
2. Controller
The controller responsible for data processing on this website is:
MBK Service GmbH
Motard Str. 103
13599 Berlin
Germany
Managing Director: Mouhand Al Schwach
Phone: +49 1575 3920573
Email: info@mbkservice.de
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit our website, technical access data (e.g. your IP address) is processed on Vercel’s servers.
Personal data may be transferred to the USA. This transfer is based on the EU Standard Contractual Clauses (SCC); a data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable provision of our website).
4. Server log files
The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address.
This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free presentation and security of the website). Log files are stored for a short period for security reasons and then deleted, unless they are required to investigate security incidents.
5. Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
Processing is based on Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR).
6. Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. Enquiries via the contact form are stored until the enquiry has been finally processed and no follow-up questions are to be expected, provided that no statutory retention periods (e.g. commercial or tax retention periods of up to 10 years) apply. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless there are statutory retention obligations.
7. Cookies and consent
This website does not use any tracking, analytics or marketing cookies and does not integrate any services that would require a cookie banner (consent management). Only technically necessary cookies or comparable techniques are used – for example to store your language selection. The password-protected administration area uses a session cookie for logged-in administrators; this is not relevant for normal visitors.
The legal basis for technically necessary cookies is § 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR.
8. WhatsApp / Meta
On several places of our website we link to the messenger service WhatsApp (wa.me). This is a plain link; no data is transmitted to WhatsApp before you click it.
If you click the link or contact us via WhatsApp, you leave our website and are forwarded to the WhatsApp service operated by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland) and WhatsApp LLC (USA). Meta then processes the data you transmit (e.g. your phone number and message content); a transfer to the USA is possible. We have no influence on this processing. The legal basis for providing the link is Art. 6 (1) (f) GDPR. For details, please refer to the WhatsApp/Meta privacy policy.
9. SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.
10. Your rights
Within the framework of the statutory provisions, you have the following rights: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR).
The right to data portability means that you can have data which we process automatically on the basis of your consent or in performance of a contract handed over to you, or transferred to a third party, in a structured, commonly used and machine-readable format. You can revoke any consent you have given at any time with effect for the future. To exercise your rights, you can contact us at any time.
11. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany