Privacy Policy

Information on the processing of your data in accordance with Article 13 of the European General Data Protection Regulation (GDPR). References to legal provisions relate to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) in the version applicable from 25 May 2018.


1. Scope

This privacy policy applies to the website operated by Michael Martin (‘michael-martin.de’) and to the personal data collected via this website. For websites operated by other providers, such as those accessed via links, the privacy notices and policies of those websites apply.


2. Responsibility

The organisation responsible for the processing of personal data on this website is:

Michael Martin
Perhamerstraße 66
80687 Munich
Germany

Tel.: 0 89 / 8 88 87 41
Fax: 0 89 / 89 68 98 66

Email: info@michael-martin.de


3. Hosting

The web server used to host our website is technically operated by Host Europe GmbH.

Hetzner Online GmbH
Industriestraße 25
D-91710 Gunzenhausen


4. How we handle your data

a) Scope of the processing of personal data

As a general rule, we process our users’ personal data only to the extent necessary to provide a fully functional website and our content and services. The processing of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance and where the processing of the data is permitted by law.

b) Legal basis for the processing of personal data

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

Where the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

c) Data erasure and retention period

The data subject’s personal data shall be erased or restricted as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.


5. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS. SSL (Secure Sockets Layer) is a method whereby your data is encrypted in such a way that it cannot be read by unauthorised parties whilst being transmitted over the internet.

You can recognise the SSL connection by the fact that the web address has changed from http:// to https://. In addition, the secure connection is usually indicated by a closed padlock in the status bar of your web browser.


6. Accessing web pages and creating log files

When you visit our website, you transmit data to our web server via your web browser (for technical reasons). The following data is recorded during an active connection for the purpose of communication between your web browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser and operating system used
  • Full IP address of the requesting computer
  • Amount of data transferred

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data temporarily. It is not possible for us to identify individual persons on the basis of this data. The data is deleted after seven days at the latest. The data is not cross-referenced with other databases nor is it disclosed to third parties, even in part.

The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR. The collection of data for the purpose of providing the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.


7. Cookies

Our website uses cookies. Cookies are text files that the website visited stores on the user’s computer system via the web browser. The cookie is either sent to the browser by the web server or generated by a script (e.g. JavaScript) on the page. On subsequent visits to the website, the browser sends the cookie information to the web server each time a page is loaded, and this information can be read, processed or modified by the web server or by a script on the page being displayed.

Some elements of our website require that the browser making the request can be identified even after a page change. For example, we use cookies in the shop as a session ID to store items in the shopping basket. To improve user-friendliness – such as when searching for maps – we use cookies to save your current settings so that the page can be automatically adapted to your last settings on your next visit.

The purpose of using cookies is to make it easier for users to use the website. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after a page has been changed. The user data collected via cookies is not used to create user profiles. The legal basis for the processing of personal data using cookies is Article 6(1)(f) of the GDPR.

Cookies are stored on the user’s computer system. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to make full use of all the website’s functions.


8. Contact form

We offer you the option of contacting us via a contact form on our website. In order for us to respond to your enquiry, you must provide your name, a message and a valid email address. You may also provide the following optional details: title, first name, company name, postal address, telephone number and mobile number.

We process this information in accordance with Article 6(1)(a) of the GDPR on the basis of the consent you have voluntarily given. The data collected as part of your contact enquiry will be deleted once it is no longer required for the stated purpose of the enquiry or if you request that it be deleted.


9. Newsletter

On our website, you can subscribe to a free newsletter. When you sign up for the newsletter, your email address is transmitted to us. Your consent to the processing of your data is obtained as part of the registration process, and reference is made to this privacy policy.

No data is passed on to third parties in connection with the data processing required for sending newsletters. The data is used exclusively for the purpose of sending the newsletter. The legal basis for processing the data following the user’s subscription to the newsletter is Article 6(1)(a) of the GDPR, provided the user has given their consent. The user’s email address is collected for the purpose of delivering the newsletter.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.

The user concerned may cancel their newsletter subscription at any time. For this purpose, a corresponding unsubscribe link is included in every newsletter.

Please note that we analyse the behaviour of readers of our email newsletter. For this analysis, a small image file is embedded in the emails we send. When you open the newsletter, this image is loaded from our server and the access is logged. In addition, all links in the newsletter are routed through a programme that records which links have been clicked. No personal data is stored in the logs. Only an anonymous ID, the date and time of opening, and the links clicked are stored.

The purpose of this processing is to improve the quality of the newsletter and to optimise our services. The legal basis for the processing is Article 6(1)(f) of the GDPR. Logging does not take place if you have disabled the display of images by default in your email programme and do not click on any links.


10. Shop

When placing an order on our website, the collection, storage and processing of personal data are essential for the fulfilment of the contractual relationship. The following data is collected when an order is placed: title, first name, surname, address, email address, telephone number, payment method. Optional: company name, comments, signature.

The data is collected for the following reasons:

  • Customer identification
  • Processing, fulfilment and handling of the order
  • Correspondence with the customer
  • Invoicing the customer
  • Handling any liability claims that may arise, as well as asserting any claims against the customer
  • Ensuring the technical administration of our website
  • Management of our customer data

As part of the ordering process, we will seek your consent to the processing of this data.

We process payments by credit card, direct debit, Klarna, Apple Pay, eps and PayPal via the ‘STRIPE’ e-payment system. As part of the payment process, you will be redirected directly to the payment service provider’s website. We do not collect, process or store any data you enter on the payment service provider’s website. In this respect, only the privacy policy of the respective payment service provider applies. You can view STRIPE’s privacy policy at stripe.com/de/privacy.

Data processing is carried out at your request and is necessary, in accordance with Article 6(1), first sentence, point (b) of the GDPR, for the stated purposes of the proper processing of your order and for the fulfilment of obligations arising from the contract of sale by both parties.

The personal data we collect for the processing of your order will be stored until the expiry of the statutory retention period and will then be deleted, unless we are obliged, pursuant to Article 6(1), first sentence, point (c) of the GDPR, to retain it for a longer period due to retention and documentation obligations under tax and commercial law (under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) or you have consented to further storage in accordance with Article 6(1), first sentence, point (a) of the GDPR.

We will only disclose your personal data to third parties who are service partners involved in the fulfilment of the contract, such as the logistics company responsible for delivery and the bank responsible for payment matters. However, where your personal data is disclosed to third parties, the scope of the data transferred is limited to the minimum necessary.


11. Embedding YouTube videos

We use YouTube on the website ‘michael-martin.de’. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as ‘YouTube’. YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as ‘Google’.

Through its certification under the EU-US Privacy Shield, Google – and consequently its subsidiary YouTube – guarantees that the EU’s data protection requirements are complied with even when data is processed in the US.

We prevent the unintentional and unauthorised collection and transmission of data to YouTube by ensuring that, when a page containing an embedded YouTube video is loaded, only a placeholder image is initially displayed. A connection to YouTube’s servers is only established once the image is clicked.

In addition, we use YouTube in conjunction with the ‘Enhanced Privacy Mode’ feature to show you videos. The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the ‘Enhanced Privacy Mode’ function means that the data listed below is only transmitted to the YouTube server if you actually start playing a video.

The connection to YouTube is required in order to display the relevant video on our website via your web browser. In doing so, YouTube collects and processes at least your IP address, the date and time, and the website you have visited. In addition, a connection is established to the Google advertising network ‘DoubleClick’.

If you are logged in to YouTube at the same time, YouTube will associate the connection information with your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or adjust the relevant settings in your YouTube account.

For the purposes of functionality and analysing usage behaviour, YouTube permanently stores cookies in your browser. If you do not consent to this processing, you can prevent cookies from being stored by selecting the appropriate setting in your browser.

Further information on the collection and use of data, as well as your rights and the safeguards available to you in this regard, can be found in the privacy policy at: https://policies.google.com/privacy

You can prevent data from being sent to YouTube by disabling JavaScript in your browser. It is also possible to block YouTube using browser add-ons, for example with uBlock Origin or uMatrix.


12. Integration of OpenStreetMap

The website “michael-martin.de” uses map services provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (hereinafter “OSMF”). Your web browser or web application connects to servers operated by the OSMF, which are located in the United Kingdom and other countries. The operator of this website has no control over these connections or the processing of your data by the OSMF. Further information on the processing of user data by the OSMF can be found in the privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

We use OpenStreetMap to ensure that our website is presented in an appealing way and that the locations listed on our website are easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.


13. Integration of Facebook Pixel, Facebook Custom Audiences and Facebook Conversion

Our website ‘michael-martin.de’ uses the so-called ‘Facebook Pixel’ from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’), is used.

With the help of the Facebook Pixel, Facebook is able, on the one hand, to identify you as a visitor to our website as a target audience for the display of adverts (so-called ‘Facebook Ads’). Accordingly, we use the Facebook Pixel to ensure that the Facebook Ads we place are shown only to those Facebook users who have demonstrated an interest in our online offering or who exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the web pages they have visited), which we transmit to Facebook (so-called ‘Custom Audiences’). We also use the Facebook Pixel to ensure that our Facebook adverts are tailored to users’ potential interests and do not come across as intrusive. Using the Facebook Pixel, we can further track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advert (known as a ‘conversion’).

  • Facebook’s Privacy Policy

    Facebook processes the data in accordance with its Data Use Policy. General information on the display of Facebook adverts can be found in Facebook’s Data Use Policy. Specific information and details about the Facebook Pixel and how it works can be found in Facebook’s Help Centre.
  • EU-US-Privacy-Shield
  • Facebook is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law.
  • Basis
    The use of the Facebook Pixel and the storage of ‘conversion cookies’ are based on Article 6(1)(f) of the GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our website and our advertising.

  • Data Processing Agreement

    For the processing of data where Facebook acts as a data processor, we have entered into a data processing agreement with Facebook, in which we require Facebook to protect our customers’ data and not to disclose it to third parties.

  • Objection
    Although we rely on legitimate interests to use the Facebook Pixel and to store ‘conversion cookies’, we offer you options to opt out. You can object to data collection via the Facebook Pixel and to the use of your data for the display of Facebook adverts. To control the types of adverts shown to you on Facebook, you can visit the page set up by Facebook and follow the instructions there regarding the settings for usage-based advertising. These settings apply across all platforms, i.e. they are applied to all devices, such as desktop computers or mobile devices. You can also object to the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page, as well as via the US website aboutads.info or the European website youronlinechoices.com.

You can prevent data from being sent to Facebook by disabling JavaScript in your browser. It is also possible to block Facebook using browser add-ons, such as uBlock Origin or uMatrix.


14. Privacy Policy regarding the use of Google Analytics and Google Tag Manager (with anonymisation feature)

The ‘michael-martin.de’ website incorporates the Google Analytics component (with an anonymisation function). Google Analytics is a web analytics service. Web analytics refers to the collection, gathering and analysis of data relating to the behaviour of visitors to websites. Among other things, a web analytics service records data on which website a data subject came from to access a particular website (known as a ‘referrer’), which subpages of the website were accessed, and how often and for how long a subpage was viewed. Web analytics is primarily used to optimise a website and to carry out a cost-benefit analysis of online advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the suffix ‘_gat._anonymizeIp’ for web analytics via Google Analytics. This suffix ensures that the IP address of the data subject’s internet connection is truncated and anonymised by Google when our website is accessed from a Member State of the European Union or from another signatory state to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor traffic on our website. Google uses the data and information collected, amongst other things, to evaluate the use of our website, to compile online reports for us showing activity on our website, and to provide other services relating to the use of our website.

Google Analytics places a cookie on the data subject’s IT system. What cookies are has already been explained above. The placement of the cookie enables Google to analyse the use of our website. Each time a user accesses one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics component has been integrated, the web browser on the data subject’s IT system is automatically prompted by the relevant Google Analytics component to transmit data to Google for the purposes of online analysis. As part of this technical process, Google obtains personal data, such as the data subject’s IP address, which Google uses, amongst other things, to trace the origin of visitors and clicks and, consequently, to enable commission settlements.

Cookies are used to store personal information, such as the time of access, the location from which access originated and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data – including the IP address of the internet connection used by the data subject – is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, disclose this personal data, collected via technical means, to third parties.

As outlined above, the data subject may at any time prevent our website from setting cookies by adjusting the settings of the web browser they are using, thereby permanently objecting to the setting of cookies. Adjusting the settings of the web browser used in this way would also prevent Google from setting a cookie on the data subject’s IT system. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the web browser or other software programmes.

Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics relating to the use of this website, as well as to the processing of this data by Google, and to prevent such processing. To do so, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to inform Google Analytics that no data or information regarding visits to websites may be transmitted to Google Analytics. Google regards the installation of the browser add-on as an objection. If the data subject’s IT system is subsequently deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or by another person within their control, it is possible to reinstall or reactivate the browser add-on.

Use of Google Tag Manager: Google Tag Manager is a solution that enables marketers to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected in future when you visit this website:

  1. Disable Google Analytics on ‘michael-martin.de’

Further information and Google’s applicable privacy policy can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link: https://www.google.com/intl/de_de/analytics/.


15. Transfer of data

We will only pass on your personal data to third parties in the following cases:

  • If you have expressly consented to the disclosure of your data to third parties in accordance with Article 6(1), first sentence, point (a) of the GDPR,
  • If we are required to disclose the data in accordance with Article 6(1), first sentence, point (f) of the GDPR in order to establish, exercise or defend legal claims, and you do not have an overriding legitimate interest in preventing the data from being disclosed.
  • If we are legally obliged to transfer the data in accordance with Article 6(1), first sentence, point (c) of the GDPR
  • If it is legally permissible and necessary for the performance of contractual obligations in accordance with Article 6(1), first sentence, point (b) of the GDPR.


16. Your rights

As a user of our website, you have various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21 of the GDPR:

a) Right of access

You may request information, in accordance with Article 15 of the GDPR, regarding the personal data we process about you.

b) Right to retification

If the information relating to you is incorrect, you may request that it be rectified in accordance with Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.

c) Right to erasure

You may request the erasure of your personal data in accordance with the provisions of Article 17 of the GDPR.

d) Right to restriction of processing

Under the provisions of Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.

e) Right to confirmation

If you have exercised your right to rectification, erasure or restriction of processing, you are entitled, under Article 19 of the GDPR, to have the controller notify all recipients to whom personal data has been disclosed of any rectification or erasure of the personal data or any restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. The controller shall inform the data subject of these recipients if the data subject so requests.

f) Right to data portability

Under Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

g) Right to object

Under Article 21 of the GDPR, you have the right to object at any time to the processing of data relating to you on grounds relating to your particular situation. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.

h) Automated decisions in individual cases, including profiling

Under Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

i) Right to complain

Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the GDPR.

As at 15 November 2025