MANN+HUMMEL - Data Protection
Thank you for visiting our website and your interest in our company. The protection of your personal data is an important concern for us. For this reason, compliance with the strict legal provisions on data protection is a matter of course for us. Data protection begins with transparency. It is therefore our concern that you should always know when we store which of your personal data, for what purpose we use it, but also how you can restrict or prevent its use. Our data protection regulations are designed in such a way that they comply with the applicable data protection laws.
II. Address of the Data Protection Officer
MANN+HUMMEL International GmbH & Co. KG
Schwieberdinger Strasse 126
71636 Ludwigsburg/ Germany
III. Legal basis for the processing
Personal data is only collected, processed and used by us if we are legally permitted to do so or if you have given your consent.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1a EU Data Protection Basic Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1c GDPR serves as the legal basis. As a company, we are subject, for example, to statutory storage obligations under the AO and the HGB.
If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1f GDPR serves as the legal basis for the processing.
IV. Recipient of the data
As a matter of principle, we only process personal data if we have your consent or legal permission to do so. This also applies to the transfer of data to third parties. We do not pass on your personal data to third parties for direct marketing purposes.
Your data will be processed and used within the EU/EEA. However, for certain processes, processing outside the EU/EEA is also necessary. If your data is processed outside the EU/EEA, we will take all necessary measures to ensure that the processing complies with data protection regulations in accordance with Art. 44 GDPR. We may share your personal information with the following recipients in accordance with applicable data protection laws and regulations:
- to third parties who assist us in operating the website
- within the MANN+HUMMEL Group
- within the framework of a valid legal procedure
We also take appropriate technical and organizational measures to protect personal data from theft, other loss, misuse and any unauthorized access during processing.
V. Your rights
Rights of data subjects
If your personal data is processed, you are the data subject within the meaning of the GDPR. Your rights are regulated in Chapter III of the GDPR. You have the right of access to the data processed by the controller, the right of rectification, the right to limit processing, the right of cancellation, the right of information, the right of transferability, the right to object to processing, the right to withdraw your consent and the right not to be subject to a decision based on exclusively automated processing.
To exercise your rights as a data subject, please send an e-mail to firstname.lastname@example.org.
Right of appeal to the supervisory authority
Irrespective of another regulatory or judicial redress, you have the right to file a complaint with a supervisory authority, in particular in the member state where you are a resident, where your workplace is, or where the presumed infringement has taken place when you are of the opinion that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint is filed, advises the complainant about the status and the results of the complaint including the possibility of legal action acc. to Art. 78 GDPR.
Under Art. 77 GDPR, you are free to choose the supervisory authority. For example, you can address your complaint to the supervisory authority of the state of Baden-Württemberg which is responsible for MANN+HUMMEL GmbH.
VI. Reservation of right to change
We reserve the right to adapt this data privacy in accordance with the legal regulations.
VII. MANN-HUMMEL Company Website
When you visit our website, general information about this process is automatically stored in a protocol file. This is solely made for system-related purposes. The stored usage data is not stored together with other personal data. The following data record is made each time the website is accessed:
- Anonymized IP addresses
- Date and time of the request (GMT)
- Access location
- Message indicating whether the polling was successful (status code)
- Amount of data transmitted
- Website where the access was made
- Description of the type of web browser used
- Operating system used
The above-described data are not passed on to a third party and no other analysis is made unless there is a legal obligation to do so.
When you contact us, we will store your data for the purpose of processing your enquiry and in case further correspondence is required.
Personal data is collected via our contact form for the processing of your enquiry. Mandatory information is marked with an asterisk (*). All other details are voluntary.
All data will be deleted after complete processing of your request, after the purpose no longer applies and storage is no longer necessary, or restrict processing if there are legal or otherwise prescribed storage obligations.
The legal basis for the processing of your personal data is:
- Art. 6 para. 1a GDPR, if you have given your consent
- Art. 6 para. 1b GDPR
- Art. 6 para. 1f GDPR, because it is in our legitimate interest to answer your enquiries
The MANN+HUMMEL International GmbH & Co. KG is part of the MANN+HUMMEL Group. For the processing of your inquiry, it may be necessary for us to forward your data and requests within the MANN+HUMMEL Group. The data will not be passed on to other third parties in this context. The data will only be used for the processing of your enquiry. The data are comprehensively deleted after your request has been fully processed. The exception is when the data are subject to a statutory retention period or other prescribed retention obligation.
In the course of supplier onboarding we collect company data and also the following personal contact data:
- First name, last name
- Email address
The data provided in the course of the supplier onboarding are exclusively used for the purpose of initiating the business relationship. Further data processing only takes place if an order is placed. Insofar that no business relationship is formed, your data will be blocked for further use and deleted after the retention periods according to tax law and commercial law have expired as far as you have not expressly consented to a further use of the data.
We process your personal data as far as this is necessary for the execution of the application process. You can also make your application by electronic means. We will naturally only use your data for the purpose of processing your application and will not pass on the data to a third party. Please observe that emails sent unencrypted are not transmitted with protection to access.
The categories of data we process include the following:
- Applicant master data (first name, last name, address, position)
- Qualification data (cover letter, CV/resume, previous activities, professional qualification)
- References and certificates (performance data, evaluation data, etc.)
- Login data (email, password)
If you have applied for a certain position and this position is no longer available or we consider that you are even better suited to a different position, we would like to forward your application to a different department in the company. For this we must obtain your consent.
After the application process has been concluded, your personal data will be deleted unless you actively express the desire for us to store your data for any longer specified period or you have concluded a contract. The legal basis is article 6 par. 1 letters a), b) and f) GDPR and § 26 of the German Data Protection Act (BDSG).
The following types of cookie are used by us:
- Strictly Necessary Cookies
- Performance Cookies
- Cookies for marketing purposes (marketing cookies)
- Art. 6 para. 1f GDPR
- Art. 6 para. 1a GDPR
Our website uses OneTrust's cookie-consent-technology to inform you about the cookies used.
Duration of storage, possibility of objection and removal
Use of OneTrust (cookie consent)
Our website uses OneTrust's cookie-consent-technology to obtain your consent to the storage of certain cookies in your browser and to document these in a data protection compliant manner. The provider of this technology is OneTrust, with two main offices in the United States and England: Atlanta, GA, USA (co-headquarters), 1200 Abernathy Rd NE, Building 600, Atlanta, GA 30328 United States, +1 (844) 847-7154, England (co-headquarters), 82 St Johns Street, Farringdon London, EC1M 4JN, +44 (800) 011-9778. When you enter our website, an OneTrust cookie is stored in your browser, which stores the consents you have given or the revocation of such consents.
The collected data is stored until you request us to delete it or until you delete the OneTrust cookie itself or until the purpose for which the data is stored no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of OneTrust cookies can be found in the OneTrust data protection declaration at .
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). Adobe Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. If the information generated by the cookie about your use of the website is transmitted to an Adobe server, the settings ensure that the IP address is anonymised before geolocation and replaced by a generic IP address before being saved. On behalf of the operator of this website, Adobe will use this information to evaluate the use of the website by users, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser in the context of Adobe Analytics is not merged with other Adobe data. You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) from being sent to Adobe and the processing of this data by Adobe by downloading and installing the browser plug-in available under the following link: .
On our website Java-Script code of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google) is loaded. If you have activated Java-Script in your browser and have not installed a Java-Script blocker, your browser may transmit personal data to Google. To prevent the execution of Java-Script code from Google altogether, you can install a Java-Script blocker (e.g. or ).
We use the service Google Ads. Google Ads is an online advertising program of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
This means that we place Google Ads and also use Google Remarketing and Conversion Tracking as part of this. The ads are displayed after search queries on websites of the Google advertising network. In addition, we use Ads remarketing lists for search ads. This allows us to customize search ad campaigns for users who have visited our website before. Through the services, we have the possibility to combine our ads with certain search terms or to display ads for previous visitors in which, for example, services are advertised that the visitors have viewed on our website. We can thus display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google ad" within Google Search or on other websites).
Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data protection.
You can find more information on data protection in the context of Google Ads at: .
The legal basis for accessing the information is your consent pursuant to Section 25 (1) TTDSG. The legal basis for data processing is your consent pursuant to Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time.
If you do not want your visit to be included in the user statistics, you can prevent this by preventing the storage of the cookie required for these technologies, for example, via your browser settings.
However, we and Google still receive statistical information about how many users have visited this site and when. If you do not want to be included in these statistics either, you can prevent this by using additional programs for your browser.
To ensure sufficient data security when transmitting contact and registration forms, we use the Google ReCaptcha service. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google ReCaptcha is used on our website to differentiate whether the input into forms is made by a natural person or abusively by machine and automated processing. The data processing is carried out in our legitimate interest in accordance with Art. 6 para. 1f GDPR. The Google service includes the processing of IP addresses and, if applicable, other data required by Google for the ReCaptcha service. The deviating data protection regulations of Google Inc. apply to this. Further information on the data protection guidelines of Google Inc. can be found at or .
Google Maps Plug-In
Our website uses the Google Maps service to enable you to find and view MANN+HUMMEL locations. Google Maps is a map service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transferred to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with the Google servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:
- Date and time of your visit to the website in question,
- Internet address or URL of the web page called up,
- IP address, (start) address entered during route planning
Our website uses Doubleclick, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Doubleclick is used to serve ads when you visit our website. Doubleclick uses information (but not personally identifiable information such as your name or email address) about your visits to this and other websites in order to serve ads about products and services of interest to you. If you would like more information about these practices or to know your choices about not having this information used by Doubleclick, click here: .
Social Media Link
We have included links on our website to our respective profiles on Facebook, Twitter and LinkedIn. By clicking on the respective symbol you can access our profiles on the respective social media platforms.
This linking does not transmit any data from you to the operators of the respective social media platform. If you click on one of these links, you will be redirected to the respective website of the social network and forwarded. Depending on your browser settings, this is done by opening a new tab or a pop-up. Only when you change the URL will the operator of the respective social network collect and process your data.
For more information about privacy on Facebook, follow this link:
Meta Conversion Tracking Pixel
We use the Custom Audiences service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, as part of our usage-based online advertising. For this purpose, we define target groups of users based on certain characteristics in the Meta ad manager, who are subsequently shown ads within Facebook or Instagram network. Users are selected by Meta based on the profile information they provide and other data provided through their use of Facebook or Instagram. If a user clicks on an advertisement and subsequently arrives on our website, Meta receives the information that the user clicked on the social media post via the meta pixel embedded on our website.
Basically, this generates a non-reversible and non-personal checksum (hash value) from your usage data, which is transmitted to Meta for analysis and marketing purposes. In the process, information about your activities on our website (e.g. surfing behavior, sub-pages visited, etc.) is collected. Meta uses your IP address to geographically restrict social media action posts.
Meta Custom Audiences can be used and after the filter test campaign to play out posts targeted to Facebook and Instagram profiles that had interacted with the action content.
You can make settings regarding which advertisements are displayed to you on Facebook or Instagram in the account settings of Facebook or Instagram.
The meta pixel is only set with your consent. The legal basis for accessing the information is your consent pursuant to Section 25 (1) TTDSG. The legal basis for data processing is your consent pursuant to Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time.
LinkedIn Insight Tag
We use the Insight Tag service of LinkedIn Corp. (LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale CA 94085, USA or LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) as part of our usage-based online advertising. Using this technology, we can generate reports on the performance of our advertisements as well as information on website interaction. For this purpose, the LinkedIn Insight Tag is embedded on this website, which establishes a connection to the LinkedIn server when you visit this website. We process your data to evaluate campaigns and collect information about website visitors who may have reached us through our campaigns on LinkedIn.
The LinkedIn Insight Tag is only set with your consent. The use of the tag is accordingly based on Art. 6 para. 1 lit. a DSGVO.