Zum Inhalt Zum Inhaltsverzeichnis Zur Hautpnavigation
Privacy Policies
Privacy Policy:

Privacy Policy

We take the protection of your data seriously

Mayer & Co Beschläge GmbH and its affiliates (hereinafter “MACO”, “we” or “us”), are pleased that you have visited our website and shown an interest in our company.

Security is a top priority for MACO. This is why the protection of your personal data is particularly important to MACO. In the following, we inform you about the collection of personal data when you use our website www.maco.eu (hereinafter "website").

Personal data include all information relating to an identified or identifiable natural person ("data subject") (e.g. first and last name, date of birth, address, email address, telephone number, payment information, IP address, etc.).

MACO, as data controller, only processes and uses your personal data in compliance with the requirements laid down by the General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter "GDPR") and in conformity with country-specific data protection laws such as the UK GDPR, telecommunications laws, e-commerce laws, and any other legal provisions to which MACO is subject. 

Table of Contents

1. Start
2. Name, contact details and location of servers
3. General information 
4. Data processing activities
5. Data recipients 
6. International transfer of personal data
7. Cookies
8. Web analysis 
9. External media content
10. Data security
11. Your Rights
12. Updating and modifying this Privacy Policy

2. Name, contact details and location of servers

The controller within the meaning of Article 4(7) of the GDPR is:

Mayer & Co Beschläge GmbH
Alpenstraße 173
5020 Salzburg
Austria

Email: maco@maco.eu
Telephone: +43 662 6196-0 (see our Imprint)
Fax: +43 662 6196-1449

You can reach us at the following email address: dataprotection@maco.eu.

Personal data are stored by MACO on servers located within the European Union.

3. General information

In principle, you are not required to provide any personal data to MACO. Inasmuch as there is a statutory or contractual requirement, or you need to provide the data to conclude a contract with us, this is explicitly mentioned in this Privacy Policy. However, in specific situations the provision of your data might be necessary for you to take full advantage of the functionalities offered by MACO (e.g. inquiries, orders, sending of catalogues and other information and material, etc.).

Unless otherwise stated in this Privacy Policy, we (or our processors) collect your personal data directly from you and do not obtain it from third parties and, in principle, we do not process your personal data for any purpose other than that for which we collected the data.

We process personal data only for as long as necessary to attain their purposes and will immediately erase your personal data after we fulfill these purposes. A longer storage of data may only be required for compliance with legal obligations or for the establishment or defense of legal claims.

We process your personal data when you use our website or related services. It depends on your use of the website and other services which specific personal data is processed, as specified below. 

4. Data processing activities

a. Visiting our website

When you access our website, information is automatically transmitted to us by the browser used on your end device when it is strictly necessary for the proper functioning of the site. If you access our website, the following data are collected without any action on your part and temporarily stored in a so-called log file:

  • IP address
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content requested (specific page)
  • Access status/HTTP status code
  • Data volume transferred 
  • Website from which the request originates
  • Browser used
  • Language and version of the browser software
  • Operating system and its interface

We process the data listed above for the following purposes:

  • To ensure a smooth connection to the website
  • To promote the usability of our website
  • To evaluate system security and stability
  • To determine the correct country website
  • For other administrative purposes

The legal basis for the processing of your personal data is our legitimate interest according to Article 6(1)(f) GDPR. Our legitimate interest is the pursuance of the aforementioned purposes.

Furthermore, we make use of cookies and analysis services when you visit our website. You can find more information about those in section 8.

b. Using a contact form or sending an email

Through our website you can access the MACO Partner Portal. Each time you contact us via a contact form or by sending us an email, the personal data you provide (for instance, your email address, name, telephone number, address and any other information you provide) will be processed by us for the purpose of processing and answering your questions. Where necessary to handle the inquiry, the data may also be transmitted to and processed by companies affiliated with MACO or service providers in your area, which will act as data processors.

The legal basis for processing your personal data when establishing contact with us is your consent (Article 6 (1) (a) GDPR), our overriding legitimate interests in processing for the purpose of responding to user requests (Article 6 (1) (f) GDRPR), or the necessity to take steps at the request of the data subject prior to entering into a contract or to provide a service (Article 6 (1) (b) GDPR).

c. Using our MACO Partner Portal and the online services offered in the portal

Through our website you can access the MACO Partner Portal. Should you wish to use our Partner Portal, you must register by entering your email address and a password of your choosing. The provision of the aforementioned data is necessary for management, use of the customer portal and granting personal authorization for online services. Such data are stored on servers located within the European Union using the Azure Cloud of the Microsoft Corporation. We use what is known as double-opt-in for the registration process (i.e. your registration is only complete once you have confirmed your registration by entering a code sent to you in advance by email). Upon completion of the double opt-in procedure, further personal data (such as title, first name, surname, desired language of communication and details of the company you work for) are requested to identify you as a B2B (business) user and not as a consumer within the meaning of the applicable consumer protection laws. Further, we need this information to be able to offer you online services that are adapted to your preferences and provided in your desired language. All these data are stored in our CRM system, which is hosted in our in-house data centre within the European Union.

Using our customer portal, you can view the personal data that we have stored about you at any time and have it modified and amended upon request. When making a booking request for an online service, you agree to our Terms of Use and General Terms and Conditions. We record the date on which you agreed to such Terms of Use and General Terms and Conditions to inform you of any updates to the Terms of Use and General Terms and Conditions. In addition, we record the date on which you were granted authorization for the online service and, in the case of the booking of an online service subject to payment of a fee, your service-related data are linked to the company data assigned to you for the purpose of processing the transaction. We also use this data for the purpose of managing customer data.

Information that you make available in the MACO Partner Portal may be linked in a customer profile to other information we have stored about you. In doing so, we adhere to and observe the principle of purpose limitation and only link data collected for the same purposes. MACO may provide information from your customer profile to suppliers or service providers that are autonomous data controllers if you have given your consent, which can be revoked at any time, to such a transfer, or if the transfer is necessary to pursue the purposes of the processing. MACO will only disclose and transfer your personal data to the extent necessary. Third parties are required to provide adequate protection for your data and use it in accordance with applicable laws.

The legal basis for the processing of your personal data when using the MACO Partner Portal are Article 6(1)(a) GDPR (where you give your consent) and Article 6(1)(b) GDPR (fulfilment of a contract or implementation of pre-contractual measures when booking online services). You are not under a legal obligation to provide personal data. However, use of the Partner Portal is only possible if you provide the required information mentioned above.

We may also process your personal data for the purpose of establishment or defense of legal claims, in which case our overriding legitimate interest according to Article 6(1)(f) GDPR provides the legal basis for this data processing. Our legitimate interest is the pursuance of the purposes referred in the previous sentence.

d. Subscribing to our newsletter

You can subscribe to our newsletter in our Partner Portal (see section c) for the purpose of receiving information about all of the latest products and services as well as technical information from MACO. The personal data processed as regards your subscription to our newsletter are the e-mail address, the first and last name and the form of address you provided during the register process in our Partner Portal.

You are not under a legal obligation to provide personal data necessary for subscribing. However, you are only able to make use of our newsletter service if you provide the required information mentioned above.

We use the software and solutions supplied from the external service provider eworx Network & Internet GmbH, Hanriederstraße 25, 4150 Rohrbach-Berg, Austria (hereinafter "eworx"), which has access to your personal data as data processor within the meaning of Article 4 no. 8 GDPR to manage our newsletter service and the subsequent evaluation of your user behaviour.  

Please note that, if you have provided a specific consent for profiling purposes, we may use our newsletter also to evaluate your user behaviour. This can be done manually or by using an algorithm. If you click on a link in a newsletter, you will be redirected to one of our websites via an eworx server. As a result, eworx evaluates various parameters; for instance, when you click on which links in the newsletter and which of our pages you visit.

We only send our newsletter if you have provided your consent. You can revoke your consent at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link in any newsletter email or by unsubscribing in the MACO Partner Portal. The data collected in this context will be stored until you revoke your consent.

e. Uploading your application to the job application portal

On our website we offer you the possibility to apply online for jobs with us via the job application portal. Therefore, we process your personal data for the purpose of managing your job application and sending you information in this regard. For this purpose, we use the e-recruiting system onlyfly by XING developed by New Work SE, Am Strandkai 1, 20457 Hamburg (hereinafter "onlyfly"). Under this arrangement, onlyfly has access to your personal data and acts as processor within the meaning of Article 4(8) GDPR.

If you send us an application, we will process the data in your application to complete the job application process. You can rest assured that the personal data contained in your application will only be disclosed to the internal departments and specialist departments responsible for filling the specific position.

Generally, your consent according to Article 6(1)(a) GDPR provides the legal basis for the processing of your data. Moreover, where consent is not collected (such as in case of any spontaneous application), taken into consideration that the recruiting purposes pursued consist in a processing necessary in order to take steps at the request of the data subject prior to entering into a contract, Article 6(1)(b) GDPR provides the legal basis for the processing for recruiting purposes.

You can find further information, in particular on the categories of data processed and deletion periods, at https://maco.onlyfy.jobs/policy.

f. Using MACOversity and its online training and education content

We provide our employees and sales agents the option to use online training and education content via our e-learning portal MACOversity. In this regard we rely on the e-learning system of CLICK&LEARN GmbH Petrinumstraße 12/3, 4040 Linz, Austria (“Click&Learn”). Click&Learn is a processor within the meaning of Article 4(8) GDPR. To use MACOversity and the e-learning content it offers, it is necessary that we process your personal data such as your name and email address. 

We transfer the data collected and processed in relation to the use of MACOversity to third parties only to the extent necessary for the use of MACOversity. The transfer and processing of such data is always in compliance with applicable data protection rules.

The legal basis for the processing of your personal data in relation to MACOversity is Article 6 (1)(a) GDPR insofar as you provide your consent and Article 6 (1)(b) GDPR to perform a contract or take steps at your request of online services prior to entering into a contract. There is no legal requirement to provide your personal data. However, the use of MACOversity is only possible if you provide the necessary data indicated above.

Inasmuch as MACO intends to process your data for any other purposes MACO will ask for your consent to do so.

5. Data recipients

MACO uses selected external service providers as data processors within the meaning of Article 4 para. 8 GDPR to provide support for our website and carry out administrative tasks. These service providers may have access to your personal data. The service providers process your data exclusively on behalf of and in accordance with the instructions issued by MACO and in compliance with the provisions of this Privacy Policy and all applicable laws.

MACO only allows its service providers to process your personal data if it is satisfied that they take appropriate measures to protect it.

MACO also imposes contractual obligations on service providers to ensure that they can only use your personal data to provide services to us. The recipient of the information will be bound by confidentiality obligations.

We currently use the following service providers:

Partner

Address

Services

clickandlearn GmbH

Petrinumstraße 12/3, 4040 Linz, Austria

E-learning platform

CSS Computer-Systems-Support GmbH

Landstrasser Hauptstrasse 167, 1030 Vienna, Austria

Implementation partner maco.eu

eworx Netzwerk & Internet GmbH

Hanriederstraße 25, 4150 Rohrbach-Berg, Austria

System provider Newsletter Solution

InnoCraft Ltd.

150 Willis St, 6011 Wellington, New Zealand; all data are processed in data centers located in the EU

Hosting of the web analysis software of Matomo

Microsoft Corporation

One, Microsoft Way, Redmond, WA 98052, USA; all data are processed in data centers located in the EU

System provider CRM + Cloud Services (Azure)

New Work SE

Am Strandkai 1, 20457 Hamburg, Germany

Job applicant management

PRIM Management Consult GmbH

Schönbrunner Straße 38/6, 1050 Vienna, Austria

Implementation partner CRM

Your personal data are only transferred to other third parties to the extent that such a transfer is expressly provided for in this Privacy Policy or for one of the following purposes:

  • You have given your consent in accordance with Article 6(1)(a) GDPR.
  • The disclosure is necessary for the establishment, exercise or defence of legal claims or for the purpose of making our website available based on a legitimate interest (Article 6 (1) (f) GDPR). There is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
  • In the event that there is a legal obligation to disclose data in accordance with Article 6(1)(c) GDPR.
  • The disclosure is permitted by law and is necessary pursuant to Article 6(1)(b) GDPR for the performance of a contract with you or in order to take steps prior to entering into a contract.

Possible third parties with whom we may share personal data include administrative authorities and courts, legal advisors and potential successors in business transactions. These will usually be located in your area and within the EU, but may potentially be located outside the EU globally.

6. International transfer of personal data

The servers on which your personal data are stored by MACO are located within the European Union. However, in so far as permitted by the GDPR, MACO may also transfer personal data to other third parties including those that are established outside the EEA (European Economic Area). MACO implements the necessary appropriate safeguards to transfer the personal data to such countries in a lawful manner, including the conclusion of standard contractual clauses established by the European Commission and a Transfer Impact Assessment (TIA). If you wish to receive further information about the safeguards implemented by MACO, please reach out to us using the contact detail set out in this privacy policy.

7. Cookies

We use cookies on our website. Cookies are small text files stored on your hard drive that are assigned to the browser you are using and through which we receive certain information. 

By using the cookie manager, you can provide or revoke your consent to the extent you wish. Provision is made for appeal and redress, so long as there are no technical reasons that would prevent this.

a. How can I manage cookies?

On the basis of the information provided in this Cookies Policy, we would now like to give you details about how to manage the cookies used in our website via the options offered by the most common browsers. If you reject the installation of all cookies of our Website, some features and contents may be affected.

b. Technically necessary cookies

These cookies are necessary for the operation of the website and allow the use of the main features of the website. Without these cookies, users cannot use the website normally. For the use of these cookies, we do not need the users’ consent. The legal basis for the related data processing are our legitimate interests (Article 6(1)(f) GDPR) to operate a functioning and secure website.

We use the following technically necessary cookies:

  • BIGipServerMACO-Website-Default-Pool

    • Processed data: IP-Adresse
    • Intended use: this cookie is used for the purposes of load balancing between our web servers.

    • Duration: for the duration of the session

    • Third party access: no

  • maco_session

    • Processed data: Client Session ID

    • Intended use: This cookie is used by our content management system to be able to assign downloads from our web server to the respective (anonymous) visitor (client) during the current website visit.

    • Duration: for the duration of the session

    • Third party access: no

  • PHPSESSID

    • Intended use: On the page https://www.maco.eu/jobs we integrate a cookie from the external application tool Prescreen in order not to lose form entries after reloading the page. Here we process your session ID. The processing is necessary to use our application tool.

    • Duration: for the duration of the session

    • Third party access: New Work SE

  • ps_widget_token

    • Intended use: We integrate a cookie on the page https://www.maco.eu/jobs in order not to lose form entries even after closing the browser or otherwise unintentionally ending the session. Here we process your session ID. The processing is necessary to use our application tool.

    • Duration: one week

    • Third party access: no

  • mtm_consent_removed

    • Intended use: saves the rejection of Matomo data processing.

    • Dauer: 30 years

    • Third party access: no

  • x-ms-cpim-*

8. Web analysis

Subject to your consent, we use the web analysis software developed by Matomo, InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, on our website. This software helps us search our website for errors and analyse them. Furthermore, this web analysis software helps us evaluate the use of the website with a view to identifying measures for its further development and optimisation. Your personal data (in this case your IP address) is anonymised immediately after it has been collected. There will therefore be no storage of personal data above and beyond this. You can find more information on the configuration of Matomo under https://matomo.org/faq/new-to-piwik/how-do-i-use-matomo-analytics-without-consent-or-cookie-banner/.

The hosting of the Matomo software is provided as a cloud service by InnoCraft Ltd. The servers of InnoCraft Ltd. are located in a data centre in the European Union. The privacy policy of InnoCraft Ltd. can be found at https://matomo.org/matomo-cloud-privacy-policy/.You can find the order processing contract at unter https://matomo.org/matomo-cloud-dpa/.

You can deactivate web analytics in our cookie manager.

9. External media content

You may access certain applications and other services linked with our website but provided by a third party. We are not responsible for the collection or use of personal data in relation to the applications or services provided by a third party. We recommend that you carefully review the applicable terms and/or the privacy policy in relation to such applications or services before you use them. If you have questions concerning a certain third party's use of your personal data, please contact the third party directly. We make use of the following third party services on our website:

a. Issuu

A plug-in developed by Issuu Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA, is integrated on our website. This plug-in enables you to access some of our publications as e-papers. If you visit one of our pages that has an integrated Issuu plug-in, Issuu sets cookies and transmits personal data, such as IP address and information about the time and duration of use, to Issuu servers located in the United States. This also happens if you are not logged in to Issuu or do not have an account with Issuu. If you are logged in to your Issuu account, you allow Issuu to assign your browsing behaviour directly to your personal profile. You can prevent this from happening by logging out of your Issuu account.

The legal basis for processing data by Issuu is your consent according to Article 6(1)(a) GDPR.

Further information on the personal data Issuu collects can be found on this website: https://issuu.com/legal/privacy.
You have the option of agreeing to the integration of Issuu in advance. Only with your consent will the corresponding cookies be set by Issuu and data transferred to Issuu. Consent is stored on your computer in the form of a cookie and is valid for a maximum of one year for all embeddings on the maco.eu website, unless you delete the cookies in your browser or remove this consent cookie via our cookie manager.

b. YouTube

We have integrated YouTube videos from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube") into our website. These videos are stored at https://www.youtube-nocookie.com and can be played directly from our website. YouTube videos are integrated to enable you to use the website in a convenient way.

The legal basis for processing data by Youtube is your consent according to Article 6(1)(a) GDPR.

The YouTube videos on our website are all embedded using "enhanced privacy mode"; this means that less information about you as a user is transferred to YouTube if you choose not to play the videos. Only if you actually play a video data be transmitted to YouTube.

You have the option of agreeing to the embedding of YouTube videos in advance. Only with your consent will corresponding cookies be set by YouTube and data transferred to YouTube. The consent is stored in the form of a cookie on your computer and is valid for a maximum of one year for all embeddings on the maco.eu website, unless you delete the cookies in your browser or remove this consent cookie via our cookie manager.

c. Google Maps

On our website, we use the services of Google Maps provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA ("Google"). Google Maps allows us to display interactive maps directly on our website and enables you to make convenient use of the map function.

You have the option of agreeing in advance to the integration of interactive maps from Google Maps. Only with your consent will the corresponding cookies be set by Google Maps and data transferred to Google. The consent is stored in the form of a cookie on your computer and is valid for a maximum of one year for all embeddings on the maco.eu website, unless you delete the cookies in your browser or remove this consent cookie via our cookie manager.

The legal basis for the processing of data by Google Maps is your consent in accordance with Art 6 para 1 lit a DSGVO.

Further information on the purpose and scope of data collection and processing by Google Maps can be found in Google's privacy policy.

d. Matterport

On our website we use the 3-D data platform of Matterport Inc, 352 E. Java Dr. Sunnyvale, CA 94089, USA. This enables 3D models to be captured.

The following data is processed by Matterport when you visit our website: IP address, browser version and displaying device, origin and destination URL and the ID of the respective 3D tour.

Matterport processes data outside the EU or the EEA (third country). For data processing in the USA, the appropriate level of data protection results from the standard data protection clauses pursuant to Art 46 (2) and (3) DSGVO. Matterport thus ensures compliance with the European level of data protection.

The legal basis for the processing of data by Matterport is your consent pursuant to Art 6 para 1 lit a DSGVO.

You have the option of agreeing to the integration of Matterport in advance. Only with your consent will the corresponding cookies be set by Matterport and data be transferred to Matterport. The consent is stored in the form of a cookie on your computer and is valid for a maximum of one year for all embeddings on the maco.eu website, unless you delete the cookies in your browser or remove this consent cookie via our cookie manager.

You can access Matterport's privacy policy at the following link: https://matterport.com/legal/privacy-policy

10. Data security

When you visit our website, we use the common TLS (Transport Layer Security) procedure in conjunction with the very highest level of encryption supported by your browser. In addition, we take appropriate technical and organisational measures to help secure and protect your data against accidental or intentional manipulation, partial or complete loss, and destruction, as well as to prevent any unauthorised access of your data by third parties. Our security measures are continuously being improved with the latest technological developments.

11. Your rights

You have certain rights in relation to our processing of your data, depending on the applicable law and subject to certain exceptions. The following list explains your rights under the GDPR, but not all of these rights may be available under other laws. To exercise any of the following rights, please send an email to dataprotection@maco.eu. Please note that we may ask for information to verify your identity.

You have the right:

  • under Article 15 GDPR and country-specific data protection laws to which MACO is subject (where applicable), to obtain access to information and a copy about the personal data concerning you that are being processed by us within 1 month from the receipt date of your request, except as provided by applicable law. In particular, you may request information about the purposes of the processing of data, the categories of personal data concerned, the categories of recipients (e.g. in third countries or international organizations) to whom your data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of a right to request rectification, erasure, restriction of processing of data or to object to processing, the right to lodge a complaint, the origin of your data (where the data are not collected by us), as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information on the details;

  • under Article 16 GDPR and country-specific data protection laws to which MACO is subject (where applicable), to obtain without undue delay the rectification of inaccurate personal data stored by us and to have incomplete personal data completed;

  • under Article 17 GDPR GDPR and country-specific data protection laws to which MACO is subject (where applicable), to obtain the erasure of your personal data stored by us, save in those instances where the processing of data is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation to which the controller is subject, for reasons or public interest, or for the establishment, exercise or defence of legal claims;

  • under Article 18 GDPR and country-specific data protection laws to which MACO is subject (where applicable), to obtain a restriction of the processing of your personal data where (a) you contest the accuracy of the data, (b) the processing is unlawful but you oppose the erasure of the data, and (c) we no longer need the data, but you need the data for the establishment, exercise or defence of legal claims or (d) you have objected to the processing of your data in accordance with Article 21 GDPR;

  • under Article 20 GDPR and country-specific data protection laws to which MACO is subject (where applicable), the right to data portability, which implies the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to have such data transmitted to another controller, where the processing is based on your consent (Article 6 para 1 lit a GDPR) or on a contract (Article 6 para 1 lit b GDPR), and the processing is carried out by automated means;

  • under Article 7(3) GDPR and country-specific data protection laws to which MACO is subject (where applicable), to revoke at any time the consent previously given to us where the data processing is based on consent. The consequence of this is that we may no longer continue processing; the lawfulness of the processing carried out on the basis of the consent before the revocation is not affected.

Right to object:

If we process your personal data to safeguard legitimate interests within the meaning of Article 6(1)(f) GDPR, you have the right to object to this processing on grounds relating to your particular situation, under Article 21(1) GDPR and country-specific data protection laws. Pursuant to Article 21(2) GDPR, you have the right to object at any time to the processing of your data for direct marketing purposes, without having to give any reason for doing so.

Right to submit a complaint:

In accordance with Article 77 GDPR, you have the right to submit a complaint with the competent supervisory authority if you are of the view that the processing of the personal data relating to you infringes the General Data Protection Regulation. In the Exhibit you can find a list of the supervisory authorities of the countries in which MACO operates.

Competent authorities:

12. Updating and modifying this Privacy Policy

This Privacy Policy is in force and valid as of 01.10.2023.

It may from time to time become necessary to amend this Privacy Policy due to the further development of our website and offers or to reflect any changes made to the legal requirements or official regulations. You can access and print out the current Privacy Policy at any time on our website, available at https://www.maco.eu/privacy/website.

close
MACO Company
MACO Door & Window Hardware (UK) LTD, Eurolink Industrial Centre, Castle Road, Sittingbourne, Kent. ME10 3LY, United Kingdom
Dealer search