Privacy Policy

This is a translation of our German privacy policy. In case of any discrepancy, the German version prevails.

Controller and Data Protection Officer

1. General information on data processing

With this privacy policy we inform you which personal data we process when you visit our website, use our online forms, subscribe to our newsletter or contact us in any other way, for which purposes this happens and on which legal basis the processing is founded.

Personal data may in particular be collected when you access this website, submit a form, subscribe to our newsletter or contact us by email, telephone or post.

1.1 Categories of personal data

We process in particular the following categories of personal data:

• Master data, e.g. names, addresses, roles and organisational affiliation;
• Contact data, e.g. email address, telephone number and, where applicable, fax number;
• Content data, e.g. text entries, messages and other content you transmit;
• Usage data, e.g. access data;
• Meta and communication data, in particular IP addresses.

1.2 Recipients or categories of recipients

Where we disclose personal data to other persons or companies, in particular processors or other third parties, or grant them access to such data, this only happens on the basis of a statutory permission, your consent, a legal obligation or — where permitted — for the performance of a contract or on the basis of our legitimate interest.

1.3 Duration of storage

We store personal data only for as long as is necessary for the respective purpose. Once the purpose no longer applies, the data is deleted or blocked unless statutory retention obligations apply. This concerns in particular the commercial and tax law retention obligations under Section 257 HGB and Section 147 AO. Once those periods have expired, the data is deleted.

1.4 Transfers to third countries

Where personal data is processed in a third country outside the European Union (EU) or the European Economic Area (EEA), or transferred there, this only happens where a corresponding legal basis exists and the requirements of Art. 44 et seq. GDPR are met. This may in particular be based on an adequacy decision, appropriate safeguards such as standard contractual clauses, or your express consent.

2. Data processing when visiting this website

Our website can generally be used in full without you having to consent to optional services. As long as you give no consent, neither the reach measurement nor optional external media are loaded. We do not use advertising or remarketing services.

2.1 Hosting and server log files

Our website is operated at an external hosting provider which processes the resulting data on our behalf and on our instructions (processing under Art. 28 GDPR).

Each time the website is accessed, the web server automatically collects in particular the following data: IP address of the requesting device, date and time of access, name and URL of the file retrieved, volume of data transferred and notification of successful retrieval, referrer URL as well as the browser used, its version and the operating system.

The processing is technically necessary in order to deliver the website and to safeguard its operation, stability and security. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted as soon as they are no longer required for these purposes; the specific retention period follows from the configuration of our hosting provider. No evaluation for advertising purposes takes place.

2.2 Transport encryption

Our website is provided exclusively over an encrypted SSL/TLS connection. The content you transmit to us, in particular form entries, is thereby protected against being read by third parties in transit.

2.3 Cookies and storage on your device

We only store information on your device, or access information stored there, where this is strictly necessary for the operation of the website or where you have consented (Section 25 TDDDG).

The website uses in particular the following technically necessary storage:

• mycon_consent: stores the privacy decision you made, the version of the consent request, the categories you selected and the time of the decision. This information is stored locally in the browser and is not transmitted to our server. Legal basis: Section 25 (2) no. 2 TDDDG and Art. 6 (1) (c) and (f) GDPR.
• mycon_news_popup_closed: remembers within the session that a notice about current news has already been shown or closed.
• Session cookie of the news area, e.g. PHPSESSID: technically necessary session cookie for the news area.

If you consent to the "statistics" category, the following cookies are additionally set:

• _ga (Google Analytics, lifetime: 2 years): used to distinguish users.
• _ga_* (Google Analytics, lifetime: 2 years): used to store the session state.

Without your consent no analytics cookies are set. We do not use advertising cookies.

Only once you load external media, or give your consent to do so, can the respective third-party providers set their own cookies or access information on your device.

2.4 Consent management

When you first visit the website you can decide whether the reach measurement ("statistics") and external media may be loaded. Optional services are not pre-selected. The options "Accept all" and "Reject non-essential" are offered with equal prominence. The website remains fully usable even if you reject.

Merely continuing to browse, scrolling or ignoring the consent notice does not constitute consent.

Your decision is stored exclusively locally in your browser. You can withdraw or change your consent at any time with effect for the future via the "Privacy settings" link in the footer. After a withdrawal the services concerned are no longer loaded; cookies already set are deleted as far as technically possible.

2.5 Google Analytics 4

On our website we use Google Analytics 4 (GA4), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only activated if you consent to the "statistics" category in the consent dialog.

The purpose of the processing is the statistical evaluation of website use, in particular which pages are accessed and which forms are submitted. The insights gained serve to improve our online offering.

When activated, Google Analytics sets in particular the cookies _ga and _ga_* on your device. Usage data such as the pages accessed, session duration, the device and browser used as well as a pseudonymised IP address are transmitted to Google.

Google processes this data on our behalf. A transfer to the USA cannot be ruled out. Where personal data is transferred to the USA, the transfer is based on the standard contractual clauses of the European Commission pursuant to Art. 46 (2) (c) GDPR and, where applicable, on the adequacy decision of the European Commission pursuant to Art. 45 GDPR (EU-US Data Privacy Framework), provided the recipient is certified.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the Privacy settings in the footer of the website.

Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy

2.6 External media

On some pages we embed third-party content. This content is only loaded once you consent to the "external media" category or activate the individual item using the button provided for that purpose. Until then a placeholder generated locally on our server is displayed and no connection is made to the respective third-party provider.

The legal basis for loading external media is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. When loading, the respective provider necessarily receives your IP address as well as information about your browser and device, and may use cookies or other identifiers.

2.7 Fonts

The fonts used on our website, Inter and Outfit, are delivered from our own server. No connection to Google Fonts or other external font providers is established for this purpose when the website is accessed.

2.8 Social media profiles and links

We maintain profiles on Instagram (Meta Platforms Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company). On our website we use simple links to these profiles only; no social media plug-ins, tracking pixels or comparable functions are embedded.

Data is only transmitted to the respective providers once you click the link and access their platform. From that point on, the privacy terms of the respective provider apply.

In the news area there may additionally be simple share links to LinkedIn and WhatsApp as well as an email link. Here too, no connection to the respective services is established in the background.

3. Data processing when you contact us

The following sections apply to the contact options offered on our website.

3.1 Contact and enquiry forms

Various forms are available on the website, in particular the general contact form, rental and test enquiries, enquiries about used devices, partnership enquiries and a callback form.

Depending on the form, we process the details you enter, in particular name, email address, telephone number, company, product or device of interest, preferred callback time and message. In addition, the page you submitted from, the language, the time of receipt and the IP address may be stored. The IP address is used exclusively to prevent spam and abusive bulk submissions.

Mandatory fields are marked in the forms. All other details are voluntary.

The form data is processed on our own server. We do not use an external form service for this. The entries are transmitted to our own endpoint, stored in an enquiry store that is not publicly reachable and additionally forwarded to our company mailbox.

Within the described form processing, no transfer of the form data to third parties or to a third country takes place.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry is directed at concluding or performing a contract. Otherwise the processing is based on our legitimate interest in answering enquiries pursuant to Art. 6 (1) (f) GDPR. Art. 6 (1) (f) GDPR likewise applies to storing the IP address to prevent abuse.

The enquiry and the associated details are stored for as long as is necessary to handle it and for any follow-up questions. Afterwards they are deleted unless statutory retention obligations apply.

3.2 Contacting us by email or telephone

If you contact us by email or telephone, we process the data you transmit, in particular your name, contact details and the content of your enquiry, in order to deal with your request.

The legal basis is Art. 6 (1) (b) GDPR where the contact serves the performance or initiation of a contract; otherwise Art. 6 (1) (f) GDPR.

3.3 Contact by post

If you contact us by post, we process the data and content you transmit in order to deal with your request. The legal basis is Art. 6 (1) (b) or (f) GDPR, depending on the purpose of the contact.

3.4 Newsletter

You can subscribe to our email newsletter on the page provided for that purpose. Registration uses the double opt-in procedure. After signing up you receive a confirmation email. Only after you click the confirmation link is your address added to the distribution list. Unconfirmed registrations are deleted after seven days.

We process in particular the email address, the language, the content of the consent as well as the time and IP address of the sign-up and the confirmation. The data is processed on our own server.

The newsletter is sent exclusively on the basis of your express consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the unsubscribe link in the newsletter or informally by email to info@mycon-germany.com.

After a withdrawal you receive no further newsletters. Evidence of the consent and of the withdrawal may be retained for as long as this is necessary to defend against possible legal claims.

3.5 Sending of our emails

The emails sent by the website, in particular form forwardings as well as confirmation and unsubscribe emails of the newsletter, are dispatched via the mail server of our hosting or mail provider. That provider processes the messages on our behalf within the scope of processing under Art. 28 GDPR.

An unencrypted email can in principle be read in transit. For particularly confidential information we recommend contacting us by a suitable alternative route.

4. Your rights

As a data subject you have, in accordance with the GDPR, in particular the following rights:

5. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website. Your enquiries are handled by our staff; no automated evaluation, rating or selection of individuals takes place.

6. Changes to this privacy policy

We may update this privacy policy, in particular if our website, the services used or the legal requirements change. The version published on this website applies in each case.

Last updated: 1 September 2026

mycon GmbH • Senner Straße 156 • 33659 Bielefeld • Germany • info@mycon-germany.com