Award-winning innovation: MionTec is Company of the Year 2026!

Privacy Policy

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

MionTec GmbH, represented by its managing directors Dr. Dieter Mauer and M.Eng. Sandra Lambertz Ernst-Bloch-Straße 8, 51377 Leverkusen, Germany Phone: +49 2171 4019-0 · Email:

2. Data Protection Officer

You can reach our Data Protection Officer at:

Marvin Lentes, MionTec GmbH, Ernst-Bloch-Straße 8, 51377 Leverkusen, Germany Email:

Please contact him with any questions about data protection and to exercise your rights.

3. General information

We only process personal data where a legal basis applies. We name the legal basis for each processing activity. The main ones are:

  • Art. 6 (1) (a) GDPR (consent),
  • Art. 6 (1) (b) GDPR (contract or pre-contractual measures),
  • Art. 6(1)(c) GDPR (legal obligation, e.g. retention duties),
  • Art. 6 (1) (f) GDPR (legitimate interests),
  • Section 25(1) and (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) for storing information on, and accessing information from, your device.

Recipients. We use service providers who process data on our behalf (processors, Art. 28 GDPR) and are bound by our instructions. Otherwise we only disclose data where a legal basis allows it, e.g. to tax advisors or authorities.

Transfer to third countries. Some service providers also process data in the USA. We only transfer data there on the basis of an adequacy decision of the European Commission (EU-US Data Privacy Framework, Art. 45 GDPR) or EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). We name the basis for each service. You can request a copy of the Standard Contractual Clauses from our Data Protection Officer.

Storage duration. We delete data once it is no longer needed for its purpose and no statutory retention duties apply. Commercial and tax records are retained for six, eight or ten years under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

4. Hosting and Server Log Files

Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. STRATO acts as our processor; the data processing agreement under Art. 28 GDPR forms part of its terms.

When you visit the website, the server automatically processes: IP address, date and time, page requested, amount of data transferred, referrer URL, browser type and operating system. This is necessary to deliver the website and to keep it secure and stable, e.g. to fend off attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the website. Log files are deleted after 14 days at the latest unless they are needed longer to investigate a specific security incident.

5. Cookies and Consent Management

We use cookies and similar technologies. We set strictly necessary cookies on the basis of Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR, for example to store your language choice and privacy settings. All other services are only loaded with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

We manage your consent with the WordPress plugin Real Cookie Banner (devowl.io GmbH), which runs on our own server. We store your choice, a pseudonymous identifier and the time, so that we can demonstrate your consent (Art. 7(1), Art. 6(1)(c) GDPR). Consent records are kept for 12 months.

A list of all cookies used, including their storage period, is available there.

Name

Provider / Service

Purpose

Storage duration

Type

real-cookie-banner

MionTec (Real Cookie Banner)

Stores your privacy settings

1 year

technically necessary

wp-wpml_current_language

MionTec (WPML)

Stores the selected language

1 day

technically necessary

youtube

Google Ireland Limited (YouTube)

Playback of embedded videos, reach measurement by Google

1 year

only with consent

no cookies

Brevo GmbH (Newsletter form), Cloudflare (Turnstile)

Display of the form, spam protection; scripts are loaded

–

only with consent

6. Fonts

The fonts used on this website are stored locally on our server. No connection to servers of Google or other third parties is made when a page is loaded.

7. Contact by Email and Telephone

If you contact us by email or phone, we process your details (e.g. name, company, contact details, content of your enquiry) to handle your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). We delete the data six months after your request has been fully handled unless retention duties apply; business letters are kept for six years (Section 257 HGB). Emails to us are received via the mail servers of STRATO GmbH as our processor.

8. Seminar Registration (Academy)

For seminar registrations we process name, company, billing address, email address, optionally phone number, and booking details (seminar, date, book if ordered). The purpose is to run the seminar, issue the certificate of attendance and invoice.

The legal basis is Art. 6(1)(b) GDPR and, for invoices, Art. 6(1)(c) GDPR. Mandatory fields are required for registration. We delete participant data three years after the end of the year in which the seminar took place; invoice data after the statutory tax retention period.

9. Newsletter

With your consent (Art. 6(1)(a) GDPR) we send you our newsletter with information on processes, equipment, seminars and MionTec news. Your email address is mandatory. After signing up you receive an email asking you to confirm (double opt-in). As proof we store the time of sign-up and confirmation and your IP address.

We use Brevo, provided by Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, as processor for sending and for the sign-up form. The data is stored on servers in the EU. Brevo records whether a newsletter was opened and which links were clicked; we use this to improve the newsletter. This analysis is part of your consent.

You can unsubscribe at any time via the link in each issue or by email to . After you unsubscribe we delete your address; to prove the earlier consent we keep it blocked for up to three years (Art. 6(1)(f) GDPR).

10. Spam Protection (Cloudflare Turnstile)

To protect our forms from automated submissions we use Cloudflare Turnstile by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile uses technical characteristics (including IP address and browser information) to check whether a human is filling in the form. Turnstile is loaded together with the newsletter form only once you consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR); its purpose is protection against abuse. The data processed are IP address, TLS fingerprint, browser identifier (user agent) and the page visited. For bot detection Cloudflare acts as our processor; where Cloudflare uses this data to improve Turnstile, it acts as an independent controller. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); should the certification lapse, EU Standard Contractual Clauses apply.

11. YouTube Videos

On some pages we embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are only loaded once you agree in the cookie banner or directly at the video (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Your browser then transmits, among other things, your IP address to Google; Google may set cookies and process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy.

12. LinkedIn

Our website links to our company page on LinkedIn. This is a simple link; no data is transferred until you click it and visit LinkedIn. Processing on LinkedIn is governed by the privacy policy of LinkedIn Ireland Unlimited Company.

13. Use of Artificial Intelligence

Our employees use the AI assistant Claude as a working aid. This may involve personal data you have provided to us, for example when we translate or summarise an email or prepare a reply. This website itself does not use any AI you interact with directly (e.g. chatbots).

Purposes. Translating, summarising and drafting texts, analysing technical documents, preparing quotations and replies.

Processed data. Contact details and the content of your communication with us, as far as necessary for the purpose. We only enter what is needed and omit names where possible. We do not process special categories of personal data (Art. 9 GDPR), such as health data, with AI.

Legal basis. Art. 6(1)(b) GDPR where processing serves to handle your enquiry or perform a contract. Otherwise Art. 6(1)(f) GDPR; our legitimate interest is handling your requests quickly, carefully and in several languages.

Human control. Our employees review all results before they are used. We do not take decisions based solely on AI (Art. 22 GDPR) and do not use AI to create profiles of individuals.

Provider. Claude is provided by Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, acting for customers in the EEA through Anthropic Ireland, Limited, Ireland (together “Anthropic”). Anthropic processes the data as our processor under a contract pursuant to Art. 28 GDPR. We only use a business account; under the contract terms Anthropic may not use our inputs to train its AI models.

Transfer to third countries. Anthropic also processes data in the USA. Transfers are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement.

Storage duration. Conversations with the AI assistant are deleted after 30 days at the latest. Results that become part of our correspondence or records are stored like these (sections 7 and 8).

Your choice. If you do not want your enquiries to be handled with AI support, please let us know (). We will then handle your request without AI. Your right to object under Art. 21 GDPR remains unaffected.

14. Video Surveillance of the Company Premises

The grounds and building at Ernst-Bloch-Straße 8 are monitored by video and alarm systems; the areas are marked by signs. The purpose is to protect people and property, exercise our domiciliary rights, prevent and investigate theft and vandalism, and alert security staff and police quickly.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest follows from these purposes. Remote monitoring is carried out by KOBRA Sicherheitsdienste Mike Oliver Vitt e.K., Campusallee 4, 51379 Leverkusen, Germany, as our processor. Recordings are deleted after 72 hours unless needed to investigate an incident or to assert legal claims. If a criminal offence is suspected, recordings may be passed to law enforcement authorities, lawyers and insurers.

15. Applications

If you apply to us, we process your application documents to conduct the application procedure (Art. 6(1)(b) GDPR). We delete unsuccessful applications six months after the procedure ends; longer storage in our talent pool only takes place with your consent. Detailed information is provided in our privacy notice for applicants.

16. Your Rights

You have the right at any time to

  • Access to your data stored by us (Art. 15 GDPR),
  • Rectification of inaccurate data (Art. 16 GDPR),
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • withdraw any consent given, with effect for the future (Art. 7(3) GDPR).

Please contact . We generally respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, .

17. Right to Object According to Art. 21 GDPR

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to direct marketing at any time without giving reasons.
No particular form is required; ideally write to .

18. Obligation to Provide Data, Automated Decisions

You are not obliged to provide us with data. Without the details marked as mandatory, however, we cannot process a registration or enquiry. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

19. Encryption

This website uses TLS encryption (recognisable by “https://”). Data you send to us therefore cannot be read by third parties in transit.

20. Status

This privacy policy is dated 2026-10-28. We update it when our website, our processing activities or the legal situation change. In case of doubt, the German version prevails.