Privacy Policy

1. Data Controller

The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General Notes

This website is operated to provide information about MHz-72 and to enable contact by interested parties and business partners. User registration for visitors of the website is not provided.

In the context of the functions described below, personal data may be processed – in particular when using the contact form (item 6). Analytics, tracking, or profiling tools as well as third-party web fonts are not used.

3. Server Log Files

When this website is accessed, the web server automatically collects technically necessary information and stores it in so-called server log files. The following is collected:

• IP address of the requesting device
• Date and time of access
• URL accessed
• HTTP status code and amount of data transferred
• Referrer URL (previously visited page)
• Browser and operating system used (user agent)

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). The processing serves to ensure technical operation and to defend against attacks.
Retention period: Log files are stored for a maximum of 14 days and then automatically deleted.

4. Use of Cloudflare (CDN & Reverse Proxy)

This website is delivered via the content delivery network and reverse proxy of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes visitors' IP addresses to deliver content and defend against attacks.

This processing involves a transfer of personal data to the USA. Cloudflare is certified under the EU-US Data Privacy Framework (DPF); an adequate level of data protection is therefore guaranteed by the European Commission's adequacy decision of 10 July 2023 (Decision 2023/1795). Additionally, Standard Contractual Clauses pursuant to Art. 46 (2) lit. c GDPR apply.

Legal basis: Art. 6 (1) lit. f GDPR.
More information: cloudflare.com/privacypolicy

5. Contact via Email or Phone

If you contact us by email or phone, the data you provide will be processed solely for handling your inquiry and any follow-up questions.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures) or Art. 6 (1) lit. f GDPR.
Retention period: Data will be deleted as soon as the inquiry has been finally processed and no statutory retention obligations exist.

6. Contact Form

If a contact form is provided on this website through which you can send us a message, the following data is processed:

• First and last name
• Email address
• Other voluntary information, if applicable
• Content of the message

Mandatory fields are marked as such in the form. Transmission is SSL/TLS-encrypted. Data is not shared with third parties; exceptions are legally required transmissions and technical service providers acting as processors under Art. 28 GDPR.

Legal basis: Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.
Retention period: Data will be deleted as soon as the inquiry has been finally processed and no statutory retention obligations exist.

7. Your Rights as a Data Subject

You have the following rights vis-à-vis the data controller at any time:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, an informal notification to the contact details specified under item 1 is sufficient.

8. Right to Complain to the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for the controller is:

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons.

10. Currency and Changes to this Privacy Policy

The current version is always available at this URL.