Dear visitor to this website, the protection of your personal data is not only important to you, but also to us, the controller of the "Machine Spirits" website (hereinafter referred to as "we", "us"). We appreciate your trust that we will handle your personal data conscientiously and in accordance with the law. Your data will be treated confidentially by us. With this data protection notice, we not only wish to comply with our legal obligation under Art. 13 and 14 GDPR, but also to provide you with a clear description of what personal data is collected when you visit our website and how we handle it.

1. Controller

The controller pursuant to Art. 24 GDPR is

Machine Spirits UG (limited liability)
c/o Startplatz
Im Mediapark 5
50670 Cologne, Germany

You can contact the controller with your concerns at any time using the contact details above or via e-mail at [email protected].

2. Provision of the Website

This section explains which of your data we process in order to provide you with our website.

2.1 Provision of our Website

2.1.1 Purposes

This processing serves the external presentation of our company.

2.1.2 Types of Data

We process connection data (access data and terminal device data) as categories of data relating to you.

2.1.3 Legal Basis

The legal basis is the implementation of necessary pre-contractual measures and fulfillment of contracts pursuant to Art. 6 para. 1 subpara. 1 lit. b GDPR.

2.1.4 Requirement

The processing of the above-mentioned data relating to you is necessary for you to contact us. If you do not provide us with the above-mentioned data relating to you, we will not be able to display our website to you.

2.1.5 Storage Period

The storage period is for the duration of the browser session.

2.1.6 Recipients

The above-mentioned data relating to you will be processed by our website host Cloudflare, Inc, 101 Townsend Street, San Francisco, CA 94107, USA as our processor. The above-mentioned data relating to you will be transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

2.2 Website Security

2.2.1 Purposes

This processing serves to ensure the trouble-free operation of the website.

2.2.2 Types of Data

We process connection data (access data and terminal device data) and your system information as categories of data relating to you.

2.2.3 Legal Basis

The legal basis is Art. 6 Para. 1 Subpara. 1 lit. f GDPR. Our legitimate interest is to ensure the trouble-free operation of the website.

2.2.4 Storage Period

The storage duration is 30 days.

2.2.5 Recipients

2.2.6 Your Right to Object

In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data as described above if there are grounds relating to your particular situation or if your objection is directed against direct marketing. You can exercise your right to object by sending an email to [email protected].

3. Contacting Us

This section explains how you can contact us and which of your data we process when you contact us.

3.1 Contact Us by E-Mail or Telephone

3.1.1 Purposes

Processing by email or phone serves to answer inquiries as well as customer acquisition, contract processing, and press/data protection inquiries.

3.1.2 Data Types

We process your contact data (email address or phone number) and the content of your inquiry as categories of data relating to you.

3.1.3 Legal Basis

The legal basis is the implementation of necessary pre-contractual measures and fulfillment of contracts pursuant to Art. 6 Para. 1 Subpara. 1 lit. b GDPR.

3.1.4 Necessity

The processing of the above-mentioned data relating to you is necessary for processing your request. If you do not provide us with the above-mentioned data relating to you, we cannot process your request.

3.1.5 Storage Duration

The storage duration is six months unless a contract has been concluded. The contract-relevant data will then be stored in accordance with the respective regulations.

3.1.6 Recipients

When contacting us by email, the above-mentioned data relating to you is transmitted to our email host Gmail of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The above-mentioned data relating to you is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

3.2 Scheduling a Consultation Appointment

3.2.1 Purposes

This processing serves to arrange a consultation appointment with us.

3.2.2 Data Types

We process appointment data, your name, your email address, as well as other voluntary information as categories of data relating to you.

3.2.3 Legal Basis

The legal basis is the implementation of necessary pre-contractual measures and fulfillment of contracts pursuant to Art. 6 Para. 1 Subpara. 1 lit. b GDPR.

3.2.4 Necessity

3.2.5 Storage Duration

The storage duration is six months unless a contract has been concluded. The contract-relevant data will then be stored in accordance with the respective regulations.

3.2.6 Recipients

When arranging a consultation appointment, the above-mentioned data relating to you is transmitted to our email host Gmail of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The above-mentioned data relating to you is transferred to the USA as a third country with an adequacy decision pursuant to Art. 45 GDPR.

4. Data Subject Rights

Data protection law grants you as a data subject rights concerning the handling of data relating to you. We guarantee you the implementation of your data subject rights in relation to us. More on this in this section.

4.1 Your Data Subject Rights

You have the following rights with regard to the personal data concerning you: right to information and to receive a copy of your data, right to rectification, right to erasure and to be forgotten, right to restriction of processing, right to object to processing, right to data portability. You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.

4.2 Data Subject Rights Management

4.2.1 Purposes

This processing serves the data protection-compliant handling of data subject rights.

4.2.2 Data Types

We process all categories of data as categories of data relating to you.

4.2.3 Legal Basis

The legal basis for Machine Spirits UG is Art. 6 Para. 1 Subpara. 1 lit. c GDPR in conjunction with Chapter III GDPR.

4.2.4 Necessity

The processing of the above-mentioned data relating to you is necessary for the fulfillment of our legal obligations.

4.2.5 Storage Duration

The storage duration is three years.

4.2.6 Recipients

The above-mentioned data relating to you is processed by our email host.

Privacy Policy