Privacy Policy & Data Protection

At masato holding GmbH (MASATO), we take the issue of privacy seriously. We recognize that when you provide us with information about yourself or your business that you’re trusting us to act in a responsible manner and we’re committed to making sure we earn that trust.


Our policy for how we use information that you provide us, or that we collect through your use of our site, is set forth below. Please note that by visiting our site, you are accepting the practices described in this notice.


Our commitment to privacy 


Any information you provide to MASATO over this website is maintained and accessible only by MASATOWe will not sell any information we collect nor will we share it with third party organizations unless required by applicable law or valid legal process.


Legal Information 


PLEASE READ THE FOLLOWING TERMS AND CONDITIONS CAREFULLY. THEY GOVERN YOUR USE OF THIS WEBSITE. BY USING THIS WEBSITE, YOU AGREE TO BE BOUND BY THESE TERMS AND CONDITIONS, AS THEY MAY BE MODIFIED BY MASATO FROM TIME-TO-TIME AND POSTED ON THIS WEBSITE.



Each user of this website agrees as follows: 


Copyrights and Other Intellectual Property 


Except as otherwise noted in this website, all information, documentation and other content posted in this Web site (collectively, the “Information”) is the property of MASATO. Without limiting the foregoing, the graphics, icons and overall appearance of this Web site are the property of MASATO.



Links to Other Websites 


Periodically, links may be established between this website and one or more websites operated or content provided by third parties. For purposes of these Terms and Conditions, the term “link” includes both outlinks (hypertext links to external Web sites or content) and inlinks (hypertext links which draw material from other sources into this Web site). MASATO has no control over any such other websites or their contents and will have no liability arising out of or related to such Web sites or their contents. The existence of any such links does not constitute an endorsement of such Web sites, the contents of the Web sites or the operators of the Web sites. MASATO is providing these links to you only as a convenience.



Non-Confidentiality of Communications 


If you send a message or information to this website, such as (but not limited to) an e-mail to the webmaster, you hereby grant to MASATO the right to read, use, distribute, disclose and otherwise handle the communication and any related information consistent with MASATO Privacy Policy governing this Web site. For messages and information not covered by such Privacy Policy, you hereby grant to MASATO the right to read, use, distribute, disclose and otherwise handle the communication and any related information as MASATO deems appropriate in its sole judgment.



Data Privacy Statement 


Any collection, processing and use (hereinafter “use”) of data is solely for the purpose of providing our services. The services of the MASATO have been designed to use as little personal information as possible. For that matter, “personal data” is understood as all individual details about a person or factual circumstances of an identifiable natural person (so-called “affected person”). 

The following statements on data protection describe what types of data are collected when accessing our website, what happens with these data and how you may object to data usage.


Person responsible (Controller) 


Responsible within the meaning of the EU General Data Protection Regulation (GDPR) is:

Dr. Tobias Lukowitz

Aegidienberger Str. 14

50939 Cologne



Which data will be used 


When visiting our website, our web servers temporarily store every access in a log file. The following data is collected and stored until automated deletion:
  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Transmitted amount of data
  • Message if the retrieval was successful
  • Detection data of the browser and operating system used
  • Website from which access is made
  • Name of your Internet access provider


The processing of this data serves: the purpose of enabling the use of the website (connection establishment), the system security, the technical administration of the network infrastructure, as well as to optimize the Internet site. The IP address is evaluated only in case of attacks on our network infrastructure or the network infrastructure of our Internet provider.


Furthermore, no input of your personal data is required to use our website.



Protection of your data 


We have taken technical and organizational measures to ensure that the requirements of the EU General Data Protection Regulation (GDPR) are met by us, as well as, by external service providers working for us. If we work with other companies in order to provide our services, such as email and server providers, this will only be done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in terms of technical and organizational data protection skills. This selection procedure will be documented in writing and an agreement on the order processing of data (order processing contract) will only be concluded if the third party complies with the requirements of Art. 28 GDPR. 

Your information will be stored on specially protected servers. Access to it is only possible for a few specially authorized persons. 


If you send us data via web forms, the data is always transmitted via an encrypted connection (128-bit TLS).



Service providers from third countries 


In order to be able to provide our services, we use the support of service providers from third party countries (non EU countries). In order to ensure the protection of your personal data in this case, we conclude with each – carefully selected – service provider special order processing contracts.


We use the support of the following providers:
  • Email service provider of MASATO
  • Storage service provider of MASATO



Deletion of personal data 


MASATO processes the personal data only as long as necessary. As soon as the purpose of the data processing is fulfilled, deletion of the data is carried out according to the standards of the deletion concept, unless legal regulations oppose this.



Legal basis for the processing of personal data 


The processing of personal data requires a legal basis. The GDPR names different legal bases in Art. 6 GDPR. A legal basis for processing personal data is, for example, Art. 6 (1) (a) GDPR. This refers to the consent given by the user. The consent is earmarked. Processing personal data is also allowed in order to fulfill a contract acc. Art. 6 (1) (b) GDPR. However, Art. 6 (1) (b) GDPR must be interpreted broadly, since the initiation of a contractual relationship regarding data processing is also included. This applies in particular to those cases in which the user uses the contact form of MASATO in order to receive a non-binding offer. Art. 6 (1) (c) GDPR describes the legal basis of data processing in cases involving a legal obligation to process data. Processing personal data may in exceptional cases be based on Art. 6 (1) (d) GDPR. This requires the vital interests of the affected person or other natural person to be protected. This refers to cases which would lead to injury or impairment of life, limb and health. For the initiation of assistance personal data such as the name, contact details and possibly health insurance would be required to be handed over. It is also possible that processing personal data is based on the legal basis of Art. 6 (1) (f) GDPR. The so-called “legitimate interest” is standardized in this basis, which is to be read with reference to the addendum reason 47 of the GDPR. In the legal sense, Article 6 (1) (f) of the GDPR is a so-called “standard of interception”, which applies unless other legal bases than those described above apply. When the standard of interception is applied, weighting the specific interests – that of the affected person or that of the data processor – takes place.


Contact 


Through the website www.masatoho.com is possible to obtain a non-binding offer. This will require processing different data to answer the request, which will be automatically saved for this purpose. A transfer of the data to third parties does not take place, unless the user has given his consent.


Data processing for applications 


MASATO offers the opportunity to apply for jobs via an application form and via e-mail. For this purpose, personal data is processed and stored for further processing during the respective application process. In case of successful application and employment, the personal data is stored in accordance with the legal requirements. In case of unsuccessful application the data will be deleted in accordance with the rules of the local deletion concept. In doing so the provisions of the AGG (German Employment Law), in particular the existing evidence pursuant to § 22 AGG are taken into account.



Your Rights 


You have the following rights with respect to the personal data concerning you:
  • Right to information
  • Right to rectification or deletion
  • Right to restriction of processing
  • Right to object to the processing
  • Right to data transfer
  • Right on confirmation


In the case of a request for information, you must provide sufficient information about your identity and provide proof that it is your personal data. The information relates to data that has been stored regarding your person, the origin of the data, the recipient or the categories of recipients to which data has been transmitted and the purpose of the storage. To exercise these rights, please contact our Privacy Officer, which is mentioned at the beginning of the Privacy Policy.


If you have given your consent to the processing of your data, you can revoke at any time. Such revocation will affect the admissibility of processing your personal data by us. Insofar as we base the processing of your personal data on the weighting of interests, you may object to the processing. This is the case if processing your data is not required to fulfill a contract with you, which is explained in the following description of the functions. In the event of such a revocation, we ask you to explain the reasons why we should not process your personal data. In the case of your justified objection, we will examine the situation and will either stop processing your data, adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.


Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. 


You may contact us or our responsible data security officer via the contact details stated at the beginning of the Privacy Policy.


You also have the right to complain about our processing your personal data to a supervisory authority.



How you perceive these rights 


To exercise these rights, please contact our data security officer:


privacy@masatoho.com

masato holding GmbH

Aegidienberger Str. 14

50939 Cologne

Germany



Subject to change 


We reserve the right to change this privacy policy in compliance with legal requirements.

June 2020