We, Mabanaft GmbH & Co. KG, and our affiliated companies (hereinafter jointly referred to as “Mabanaft”) welcome you to our websites and thank you for your interest in our company. We strive to offer you the best possible service; this also includes continuous optimizing of our Internet presence and, it goes without saying, protection of your data. Our server will automatically record data whenever you visit our websites. We do not, however, assign any personal identity to this data, which can, for example, be the domain name and IP address of the requesting computer or the date of access, duration of your visit or the website from which you visit us. This data is generally used for system security purposes as well as to continually optimize our sites and services. Data evaluation is exclusively of a statistical nature.
Any additional personal data, such as your name, address, telephone number or e-mail address, will not be gathered unless you specifically provide them to us (e.g. via the contact form or by email). It goes without saying that in such cases your data will only be gathered, processed or used for the purposes as indicated or for purposes arising from them, unless current legal regulations require us to pass them on. We will only use your data for other purposes (e.g. advertising or market/opinion research) if you have specifically consented to us doing so.
Please find below information about how we, Mabanaft, handle your data in accordance with Art. 13 of the General Data Protection Regulation (“GDPR”).
The entity stated in our legal notice is responsible for collection and processing of the data described below.
We will store the IP address transmitted by your web browser for a period of seven days strictly for the purpose of being able to recognize, limit and rectify any attacks on our websites. After expiry of this period, we will erase or anonymize the IP address. The legal basis for this is Art. 6 Para. 1 lit. f GDPR.
Whenever you visit our websites, for statistical purposes our web server will temporarily store in a log your so-called “usage data” to allow us to improve the quality of our websites. This data set comprises:
- The site from which the file was requested,
- The file name,
- The date and time of the request,
- The data volume transmitted,
- The access status (file transmitted, file not found),
- The description of the type of web browser used,
- The requesting computer’s IP address, shortened in such a way that it can no longer be linked to an identified individual.
The above-mentioned log data will only be stored in an anonymized form.
Data transfer to third parties
Within the framework of data processing on our behalf as defined by Art. 28 GDPR, we will transfer your data to service providers who assist us with the operation of our websites and the related processes. Our service providers are bound by strict instructions issued by us and subject to corresponding contractual obligations. We use the following service providers: (e.g. hosting service provider, web analysis service provider, newsletter service provider, etc.).
We may transfer personal data collected as part of the contractual relationship in connection with the sending and receiving of payments to Treasury Intelligence Solutions GmbH, Langer Anger 7, 69115 Heidelberg (TIS). Legal basis for the transfer is article 6 para 1 lit. b and article 6 para 1 lit. f UK-GDPR.. The data exchange with TIS also serves to fulfill regulatory obligations from the SWIFT agreement, it may involve a transfer of data to the USA. TIS processes the data received and uses it for the purpose of providing Payee Community Screening to detect fraudulent Payees before the payment is executed (fraud prevention). Further information relating to the activities TIS can be found online https://tispayments.com/privacy-policy/.
In the context of know your customer checks in pre-contractual relationships as well as contractual relationships, we transmit personal data to Diligent Corporation, 1111 19th Street NW, 9th Floor, Washington DC 20036, USA (Diligent)). Legal basis for the transfer is article 6 para 1 lit. c, article 6 para 1 lit. e or article 6 para 1 lit. f UK-GDPR. The data exchange with Diligent also serves to fulfill regulatory obligations (Money Laundering Prevention), it may involve a transfer of data to the USA or other jurisdictions. Further information relating to the activities Diligent can be found online https://www.diligent.com/privacy/.
Data transfer to third countries
In some cases, we transfer personal data to a third country outside the EU. When doing so, we always ensure that there is an adequate level of data protection:
In the case of Google Analytics (USA) the adequate level of data protection results from the company’s corresponding participation in the Privacy Shield Framework (Art. 45 Para. 1 GDPR).
Our websites sometimes use “cookies” to ensure that you have an user-friendly visit. Cookies are small text files which are stored on your end device and can be read. There are different kinds of cookies. “Session cookies” are deleted as soon as you close your browser, while “persistent cookies” are stored for longer than one session. Cookies can contain data which makes it possible to recognize the device being used. In some cases, cookies also contain information on certain settings; this information is not of a personal nature.
We use both session and persistent cookies on our websites.
Processing is carried out on the basis of Art. 6 Para. 1 Clause 1 lit. f GDPR.
Note on the Google Analytics analysis tool
The information generated by the cookie concerning your use of this website is generally transmitted to a Google server in the USA, where it is stored. Activation of the IP anonymization function on this website means that Google will, however, truncate your IP address within European Union member states or other states party to the Agreement on the European Economic Area before transferring the data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (Google’s participation in the so-called “Privacy Shield Framework” ensures an adequate level of data protection as specified by Art. 45 Para. 1 GDPR) and truncated there. In addition to this, we have concluded a data processing contract with Google (USA) in accordance with Art. 28 GDPR. Working on behalf of this website’s operator, Google will use this information strictly for the purpose of analysing your use of the website; compiling reports on website activities and providing other services associated with the use of the website and the Internet for the website operator. Google may also transmit this information to third parties insofar as this is required by law or insofar as third parties process this data on behalf of Google. Google will not bundle the IP address transmitted from your browser in connection with Google Analytics with other data. For more information about how Google uses data which is generated when using its partners’ websites and apps, visit www.google.de/policies/privacy/partners.
You can object to processing at any time. To do so, please make use of one of the following options:
You can block installation of cookies by selecting the corresponding setting in your browser software; please, however, note that you will not be able to use all the functions of this website to their full extent if you choose to do so.
Over and above this, you can block the gathering of the data generated by the cookie and relating to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
In addition to this, you can block the gathering of data by Google Analytics by clicking the following link. This will install an opt-out cookie which prevents future gathering of your data when visiting this website:
Browser add-on to deactivate Google Analytics
As an alternative to the browser add-on or when using a mobile device browser, please click the following link to prevent future gathering of your data by Google Analytics when visiting this website (the opt-out only functions in the browser and only for this domain). When you do so, an opt-out cookie will be installed on your device. Should you delete cookies in your browser, then you will need to click the link again.
Opt-out link to prevent data gathering by Google Analytics
We have implemented technical and organizational measures to ensure that your data is protected as comprehensively as possible against undesired access. We use an encryption procedure on our sites. Your computer will use TLS encryption to transmit your data to our server via the Internet and vice versa. This is indicated by the locked padlock symbol in your browser status bar and the address line beginning with https://.
Your rights as a user
Under the terms of the GDPR, you have the following rights as a so-called “data subject” – the right to information (Article 15 GDPR); the right to rectification (Article 16 GDPR); the right to erasure (Article 17 GDPR); the right to restriction of processing (Article 18 GDPR); the right to object (Article 21 GDPR) and the right to data portability (Article 20 GDPR). Your rights to information and erasure are subject to limitations in accordance with Sect. 34 and 35 BDSG (German Federal Data Protection Act). In addition, you have a right to lodge a complaint with a supervisory authority (Article 77 GDPR in conjunction with Sect. 19 BDSG).
Right to object (Art. 21 GDPR)
Should data be gathered on the basis of Art. 6 Para. 1 lit. f (data processing for the purposes of legitimate interests), then you have the right to object to processing at any time on grounds relating to your particular situation. Should you do so, then we will no longer process your personal data unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
Under the terms of Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes data protection law regulations. You can assert this right in particular with a supervisory authority in the member state of your habitual residence; place of work or the place of the alleged infringement.
Data Protection Coordinator’s contact details
Our company Data Protection Coordinators will be pleased to provide you with any information you require, or respond to any feedback you have, concerning data protection:
Company: Mabanaft Limited
Data Protection Team
Telephone: 0207 802 3300
Online job applications
We will process your personal data in accordance with applicable data protection regulations based on Sect. 26 BDSG amended (German Federal Data Protection Act). Any data which you provide to us within the scope of your online job application will be processed solely for the purpose of selecting a candidate. No data will be processed for other purposes.
You yourself define the extent of the data which you wish to provide to us within the scope of your online job application. Online applications are transferred electronically to our Human Resources department, where they are processed as quickly as possible. All data transmission is encrypted. As a rule, applications are forwarded to the heads of our company’s relevant specialist departments. Your data will not be forwarded to anyone else. Our company will treat your data as confidential. Should your application be unsuccessful, then your documents will be erased after 6 months.
We reserve the right to update this data protection declaration at any time, either with or without prior notice. By using our website(s) you are declaring your agreement to these data protection regulations.
You can revoke your consent by clicking here and choosing the respective option.
The usage profile made by Matomo contains:
- Anonymized IP address by deleting the last 2 Bytes (e.g. 22.214.171.124 instead of 198.51.100.54)
- Pseudo-anonymized approximate location/region (based on the anonymized IP address)
- Date and time
- Title of the accessed site
- URL of the accessed site
- URL of the previously accessed site (if permitted)
- Screen resolution
- Local time
- Data clicked and downloaded
- External links
- Duration of the page load
- Country, region, city (with low accuracy due to IP addresses)
- Main language of the browser
- Used browser
- Interaction with forms (but not their content)
- Operating system
The mentioned usage profiles will only be stored pseudonymized. This way we are able to recognize returning visitors, to count them as such and measure the reach and interest in our website.