Privacy Policy
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:
A.R. Systems GmbH
Stuttgarter Straße 59
74321 Bietigheim-Bissingen
Germany
Tel.: +49 7142 99 – 2208
Email: info@cartopsystems.com
The protection of personal data is very important to us. Below, we provide information about the collection, processing, and use of personal data when you use our websites.
Personal data refers to any data that relates personally to you as a natural person or can be used to identify you, such as your name, address, email addresses, IP address, user behavior, etc.
How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so.
What do we mean by a legal basis?
Consent (Art. 6(1), first sentence, lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You may withdraw your consent to the processing of personal data at any time. This may result in certain features or services no longer being available to you, such as our IR Service. For more information on how to withdraw your consent, please refer to the subsection “Your Rights Regarding Your Personal Data” in the following sections of this Privacy Notice.
Contract (Art. 6(1), first sentence, subparagraph (b) of the GDPR) – We must use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we asked you to provide it or because you took certain steps yourself before entering into this contract.
Legal obligation (Art. 6(1), first sentence, subparagraph (c) of the GDPR) – We must use your data to comply with the law.
Vital Interests (Art. 6(1), Sentence 1, Subparagraph d of the GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you or others from serious physical harm.
Public Task (Art. 6(1), Sentence 1, Subparagraph (e) of the GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task prescribed by law, e.g., for a statutory function.
Legitimate Interests (Art. 6(1), first sentence, subparagraph (f) of the GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party has, provided that your own interests do not override those interests.
Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or a legal obligation and you do not provide the requested data.
As explained in this Privacy Policy, we use various service providers to help us deliver our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.
We have entered into agreements with all service providers to whom we disclose your data, requiring them to protect your data.
If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” data protection standard as determined by the European Commission, or by implementing another safeguard, such as an enhanced contractual arrangement—specifically, the Standard Contractual Clauses (SCCs) adopted by the European Commission.
For example, when we use U.S. service providers, we rely either on the SCCs or the EU-U.S. Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.
- Description and Scope of Data Processing
If you use the websites solely for informational purposes—that is, if you do not provide us with any information via the contact options—we collect and process only the data that your browser transmits to enable you to visit the websites, for statistical purposes, and to improve our website. This data includes:
- IP address (with the last octet omitted)
- Date and time of the request
- Subject of the inquiry (specific page)
- Access Status/HTTP Status Code
- amount of data transferred in each case
- Referrer URL
- Information About the Browser Type
- Language and Version of the Browser Software
- Operating system of the accessing computer
This data is stored in our system’s log files.
This data is not stored together with the user’s other personal data.
- Purpose of Data Processing
The system must temporarily store the IP address in order to deliver the website to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.
Data is stored in log files to ensure the proper functioning of the website. In addition, we use this data to optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.
- Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6(1), first sentence, subparagraph (f) of the GDPR.
- Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.
If the data is stored in log files, this occurs no later than thirty days after collection. Storage beyond this period is possible. In such cases, users’ IP addresses are deleted or anonymized so that the client making the request can no longer be identified.
- Exercising Your Rights
The collection of data for the purpose of providing the website and the storage of that data in log files is essential for the operation of the website. The user may object to this. Whether the objection is successful must be determined through a balancing of interests.
- Description and Scope of Data Processing
When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you access our website—and at any time thereafter—you can choose whether to allow cookies in general or select which specific additional features you would like to enable. You can make changes in your browser settings or through our Consent Manager.
Cookies are text files or pieces of information stored in a database on your hard drive and associated with the browser you are using, allowing the entity that sets the cookie to receive certain information. Below, we describe the types of cookies we use:
We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (correctly) or the support features will not work.
The following data is stored and transmitted by technically necessary cookies:
- Language Settings
- Use of Website Features
We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not used solely to ensure the website functions properly, but also collect other data.
The following data is processed through the use of cookies that are not technically necessary:
- IP address
- Purpose of Data Processing
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after changing pages.
We require the technically necessary cookies for the following applications:
- Applying Language Settings
- Website Functionality
We use cookies that are not technically necessary to improve the quality of our website and its content, and thereby enhance our reach and financial performance. By setting these cookies, we learn how the website is used and can thus continuously optimize our offerings. Specifically, these cookies serve the following purposes:
The Google Maps API is integrated into our websites to display geographic information about our location. When using Google Maps, Google also collects, processes, and uses data regarding visitors’ use of the Maps features. For more information about Google’s data processing, please see Google’s Privacy Policy at https://www.google.com/intl/de/policies/privacy/index.html.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Additional Terms of Use for Google Maps: https://www.google.com/intl/de_US/help/terms_maps.html
- Legal Basis for Data Processing
The provisions of the Telecommunications and Telemedia Data Protection Act (TTDSG) apply to the storage of information on the end user’s device and/or access to information already stored on the end user’s device. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your device is based on Section 25(2)(2) of the TTDSG. This storage of and access to the information on your end device serve to facilitate your use of our website and to enable us to offer you our services as you have requested. Some features of our website also do not function without the use of these cookies and therefore could not be provided. Cookies are generally deleted at the end of the session (e.g., when you log out or close your browser) or after a specified period has elapsed. Information regarding different retention periods for cookies can be found in the following sections of this Privacy Policy.
To the extent that cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can provide via the cookie banner. In this case, the legal basis for storing and accessing information is Section 25(1) of the German Teleservices Data Protection Act (TTDSG) in conjunction with Article 6(1)(a) and Article 7 of the General Data Protection Regulation (GDPR). You may revoke your consent at any time with future effect or subsequently re-grant it by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by adjusting the settings in your browser software. Please note that the browser settings you configure apply only to the browser you are currently using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find more information on this in the following sections of this Privacy Policy.
- Description and Scope of Data Processing
Our website features a contact form that can be used to contact us electronically. If a user chooses this option, the data entered in the form is transmitted to us and stored.
The following data is stored at the time the message is sent:
- Subject
- Message
- Date and Time
- Email address
- Last Name (if provided)
- First Name (if provided)
- Phone / Cell Phone Number (if provided)
- Purpose of Data Processing
We process the personal data entered in the contact form or sent via the provided email address solely for the purpose of responding to your inquiry.
- Legal Basis for Data Processing
The legal basis for processing the data transmitted when sending an email is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest is to provide the best possible response to your inquiry submitted via the contact form. If the purpose of the email contact is to enter into a contract, the additional legal basis for processing is Article 6(1), first sentence, letter b of the GDPR.
- Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered in the contact form and data sent via email, this occurs when the respective conversation with the user has ended. The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved.
- Exercising Your Rights
If a user contacts us via the contact form, they may object to the storage of their personal data at any time by doing the following:
You may withdraw your consent to the processing of personal data at any time. This may result in certain features or services no longer being available to you, such as our IR Service. For more information on how to withdraw your consent, please see the subsection “Your Rights Regarding Your Personal Data” in the following sections of this Privacy Notice.
In this case, all personal data stored when you contacted us will be deleted.
- Description and Scope of Data Processing
You can contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored.
The data is used exclusively for processing the conversation.
- Purpose of Data Processing
If contact is made via email, this also constitutes the necessary legitimate interest in the processing of the data.
- Legal Basis for Data Processing
The legal basis for processing the data transmitted when you send an email is Article 6(1)(f) of the GDPR. Our legitimate interest is to provide the best possible response to the inquiry you submit via email.
If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
- Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter in question has been conclusively resolved.
- Exercising Your Rights
If a user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot continue.
You may revoke your consent to the processing of personal data at any time. This may result in certain features or services no longer being available to you, such as our IR Service. Please direct all requests for information, inquiries, or objections regarding data processing via email to privacy@mutares.com or contact us through one of the communication channels listed in the legal notice.
In this case, all personal data stored when you contacted us will be deleted.
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
On our company page, we provide information and offer Twitter users the opportunity to interact with us. If you take any action on our company’s Twitter page (e.g., comments, posts, likes, etc.), you may thereby make personal data (e.g., your real name or profile photo) publicly available. However, since we generally have little to no influence over how Twitter processes your personal data, we cannot make any binding statements regarding the purpose and scope of that processing.
We use our company’s social media presence to communicate and exchange information with (potential) shareholders and other interested parties. In particular, we use our company’s social media presence for:
We use our company profiles on social and professional networks to publish relevant information and to communicate with third parties, such as shareholders or prospective clients.
The content published on the company’s website may include the following:
- Product Information
- Contact with Third Parties
Each user is free to disclose personal information through their activities.
To the extent that we process your personal data to analyze your online behavior, offer you sweepstakes, or conduct lead generation campaigns, we do so based on your express consent, in accordance with Article 6(1), first sentence, subparagraph (a), and Article 7 of the GDPR.
The legal basis for the processing of personal data for the purpose of communicating with shareholders and interested parties is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest in this regard is to respond to your inquiry in the best possible way and to provide you with the requested information.
If the purpose of establishing contact is to enter into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
The data generated by the company’s website is not stored in our own systems.
For the processing of your personal data in third countries, we have put in place appropriate safeguards in the form of standard data protection clauses pursuant to Article 46(2)(c) of the GDPR. You may request a copy of the standard data protection clauses from us.
You may object at any time to the processing of your personal data that we collect in connection with your use of our corporate website and exercise your rights as a data subject, as set forth in the section “Your Rights Regarding Your Personal Data” in this Privacy Policy. To do so, please send us an informal email to privacy@mutares.com.
For more information about Twitter’s processing of your personal data and your options for objecting, please see here:
Twitter: https://x.com/de/privacy
- Scope of Data Processing
We use company profiles on professional networks, for example, for job applications, information/PR, and active sourcing. We maintain a company presence on the following professional networks:
On our website, we provide information and offer users the opportunity to communicate.
We do not have any information regarding the processing of your personal data by the companies jointly responsible for this website. For more information, please see the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
If you participate in an activity on our company’s website (e.g., comments, posts, likes, etc.), you may be making personal information (e.g., your real name or profile photo) public.
- Legal Basis for Data Processing
The legal basis for processing personal data for the purpose of communicating with customers and prospective customers is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest in this regard is to respond to your inquiry in the best possible way and to provide you with the requested information.
If the purpose of establishing contact is to enter into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
- Purpose of Data Processing
Our website is designed to inform users about our services. Users are free to disclose personal information through their activities on the site.
- Duration of Storage
The data generated by the company’s website is not stored in our own systems.
- Exercising Your Rights
You may object at any time to the processing of your personal data that we collect in connection with your use of our company website and exercise your rights as a data subject, as set forth in the section “Your Rights Regarding Your Personal Data” in this Privacy Policy. To do so, please send us an informal email to the email address provided in this Privacy Policy.
For more information on exercising your rights, click here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
The website is hosted on servers operated by a service provider we have engaged. Our service provider is:
cooper media GmbH
Ziegelbusch 3
64354 Reinheim
Germany
For more information, please see the provider’s privacy policy: https://cooper-media.com/privacy-policy/
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
- Information about the browser type and version being used
- Date and time of access
This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest in processing this data is to ensure that our website displays correctly and to optimize its functionality.
The website’s server is geographically located in Germany.
If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to the controller:
- The Right of Access (Art. 15 of the GDPR)
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to receive the following information:
- Purposes of Processing
- Categories of Personal Data
- Recipients or categories of recipients
- Planned retention period or the criteria for determining this period
- the existence of the rights to rectification, erasure, restriction, or objection
- Right to File a Complaint with the Competent Regulatory Authority
- Source of the data (if collected from a third party)
- The existence of automated decision-making, including profiling, with meaningful information about the logic involved, the scope, and the expected effects
- Transfer of personal data to a third country or an international organization.
- Right to Rectification (Art. 16 of the GDPR)
If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without delay.
- Right to Restriction of Processing (Art. 18 of the GDPR)
If any of the following conditions are met, you have the right to request that the processing of your personal data be restricted:
- You may contest the accuracy of your personal data for a period of time that allows us to verify the accuracy of the personal data.
- In the event of unlawful processing, you may object to the erasure of the personal data and instead request that the use of the personal data be restricted.
- We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise, or defend your legal claims, or
- After you have objected to the processing, for the duration of the review to determine whether our legitimate grounds outweigh your interests.
- Right to Erasure (“Right to Be Forgotten”) (Art. 17 of the GDPR)
If any of the following grounds apply, you have the right to request the immediate deletion of your personal data:
- Your data is no longer necessary for the purposes for which it was originally collected.
- You have withdrawn your consent, and there is no other legal basis for the processing.
- You object to the processing, and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) of the GDPR.
- Your personal data is being processed unlawfully.
- The erasure is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
- The personal data was collected in connection with the information society services offered, in accordance with Article 8(1) of the GDPR.
Please note that the reasons listed above do not apply if the processing is necessary:
- To exercise the right to freedom of expression and information;
- To comply with a legal obligation or to perform a task carried out in the public interest to which we are subject.
- For reasons of public interest in the area of public health.
- For archival purposes in the public interest, for scientific or historical research purposes, or for statistical purposes.
- To assert, exercise, or defend legal claims.
- Right to Data Portability (Art. 20 of the GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request that it be transferred to another data controller.
- Right to Object to Certain Data Processing (Art. 21 of the GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1), first sentence, subparagraphs (e) or (f) of the GDPR. This also applies to profiling based on these provisions.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.
- Right to File a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of seeking judicial remedy under Article 78 of the GDPR.
The supervisory authority responsible for Mutares SE & Co. KGaA is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany. For more information, visit https://www.lda.bayern.de/de/index.html#.
Please direct all requests for information, inquiries, or objections regarding data processing by email to privacy@mutares.com or contact us via one of the communication channels listed in the legal notice.
You can contact our Data Protection Officer through the following channels:
Stefan Heß
EmEtz GmbH
Max-Eyth-Str. 8
D – 71672 Marbach
Email: stefan.hess@emetz.de
Website: www.emetz.de
