Privacy Statement

We, Mey GmbH & Co. KG and its affiliated companies Mey Handels GmbH and Mey Retail GmbH (hereinafter referred to as “Mey”) are delighted that you are interested in our web presence at www.meyb2b.com (hereinafter referred to as “web presence”) and take the requirements associated with protecting and securing your personal data very seriously.

Mey ensures that your privacy is secured while you are using our web presence and that any data entered remains confidential. In addition, Mey places particular importance on transparency and comprehensibility of the data handling processes. Based on the following privacy statement, we therefore wish to explain to what extent and for which purposes we collect, process and store personal data following a visit to our web presence.

The controller as defined by the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:

Mey GmbH & Co. KG
Auf Steingen 6
D-72459 Albstadt
Phone: +49 (0)7431-706-0
Fax: +49 (0)7431-706-200
Email: service@meyb2b.com

Mey GmbH’s data protection officer can be contacted at:

Mey GmbH & Co. KG
Data Protection Officer
Auf Steingen 6
D-72459 Albstadt
datenschutz@mey.com

For reasons of readability, no distinction is made between male and female designations when referring to persons.

1. PERSONAL DATA

Personal data comprises all information that can be ascribed to an individual. This includes, for example, name, address, telephone number, email address, goods ordered, payment data and other personal data that may be required for business transactions.

2. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

Our web presence enables you to find information on our latest products and attractive offers, and place a direct order for goods via our “Mey B2B Shop” online store.

We collect, process and use your personal data in connection with our web presence only to the extent that you have given consent or that this is permitted by law. The legal basis for the storage of data and log files is Art. 6 (1) lit. f of the GDPR. No further transfer of your data to third parties will take place without the relevant legal basis. We collect and process your personal data solely within the framework of utilising our web presence within the following scope and for the following purposes:

a) Visiting our web presence

In terms of purely informative use of our web presence, i.e. in the event that you do not register, sign up or otherwise transfer information in order to use the web presence, we do not collect any personal data, with the exception of data that your browser transfers in order to permit the visit to the web presence. These include: IP addresses, date and time of the inquiry, time zone difference to Greenwich Mean Time (GMT), content of the request (actual site), access status/HTTP status code, any transferred data, website from which the request came, browser, operating system and its interface, language and browser software version.

The processing and temporary storage of the IP address is necessary to enable us to output the web pages to the user’s computer. To this end, the user’s IP address is stored for the duration of the session. The log files contain IP addresses and other data that allow a correlation with the user. The log files are stored to ensure the proper functioning of the web pages. The data is also used to optimise our web pages and ensure the security of our IT systems. Personal data is processed solely for the purposes described and to the extend necessary to achieve these purposes. The data is not used for marketing, customer advice or market research purposes.

In addition to the use of our web presence for purely informational purposes, we offer additional services which may interest you. To use these services, you must generally enter further personal data in order for us to provide the service in question. If the option of entering additional voluntary information is available to you, these fields will be marked accordingly.

b) Use of our “Mey B2B Shop”

As a Mey specialist retailer “specialist retailer”), you can register at our “Mey B2B Shop” and order selected goods there directly. In order to register as a specialist retailer, you must first enter your data, including your Mey customer number, company name, title, name, address, email address, phone number and a password you have selected, in the registration screen and send this data to Mey. Moreover, Mey will also process your IP address and the date and time of the registration. Mey will then check your inquiry. You will receive an email from us following successful activation. Once you have received the email, you can log in to the “Mey B2B Shop” and finalise your registration. If you have already registered as a specialist retailer, you can easily sign up using your Mey customer number, email address and personal password. In the event that you are making your order through our “Mey B2B Shop”, we will save your data that we require in order to meet the contract, including information on payment methods. We will also store information that you have entered voluntarily. The legal basis for processing this data is Art. 6 (1) lit. b of the GDPR. The specialist retailer can withdraw their consent to the processing of personal data at any time by deactivating their user account. We will then delete the data, unless we are obligated to retain them for a longer period of time due to contractual and/or legal obligations.

You can change your login data at any time using the customer area of the Mey b2b order portal.

For further information on how we use your data for marketing purposes, please see “Use for marketing purposes”.

c) Use of the Mey Marketing Portal

As a Mey trading partner (“trading partner”), you can register with our Mey Marketing Portal to get exclusive download access to image data, advertisement templates and logo data. In order to register as a trading partner, you must first enter your data, including your Mey customer number, company name, title, name, address, email address, phone number and a password you have selected, in the registration screen and send this data to Mey. Moreover, Mey will also process your IP address and the date and time of the registration. Mey will then check your inquiry. You will receive an email from us following successful activation. Once you have received the email, you can ‘log in’ and finalise your registration. If you have already registered as a trading partner, you can easily log in using your Mey customer number, email address and personal password. The legal basis for processing this data is Art. 6 (1) lit. b of the GDPR. The specialist retailer can withdraw their consent to the processing of personal data at any time by deactivating their user account. We will then delete the data, unless we are obligated to retain them for a longer period of time due to contractual and/or legal obligations. You can change your login data in the accessible area of the Mey Marketing Portal at any time and manage the data you have saved there.

For further information on how we use your data for marketing purposes, please see “Use for marketing purposes”.

d) Use of cookies

Mey uses cookies in some areas to ensure our web presence is user-friendly and to optimally adapt it to the users’ needs. Cookies are small text files that are saved locally, either on a temporary basis (“session cookie”) or on a long-term basis (“multiple session cookies”), on your computer’s hard drive and which are then stored in order to be retrieved at a later stage.

The following data is stored and transmitted in the cookies:

Language settings
Log-in information

Cookies are used and evaluated solely for the purposes of statistical evaluation and optimising and designing our web presence as required. We primarily use session cookies, which are deleted from your hard drive once your internet browser is closed. Session cookies are used, for example, to authenticate your login and for the user-friendly design of our website. Multiple session cookies are used to save user settings that were once in place and, in doing so, to help you to use certain services in future. The legal basis for the processing of personal data through the use of cookies is Art. 6 (1) lit. f of the GDPR.

Of course, you can also access our web presence without making use of cookies. You can even set up your web browser to accept no cookies or to notify you once cookies have been saved. You can generally find more information on how to deactivate cookies under the “help” section of your internet browser. However, please note that refusing cookies may restrict the functionality of our web presence.

e) Disclosure of data to third parties

To the extent that this is required to render the various services offered in connection with our web presence, we may transmit your personal data to third parties in compliance with the applicable legal regulations, e.g. for the purpose of fulfilling contractual obligations.

In addition, Mey uses external service providers who process data on our behalf. We carefully select such service providers and commission their services based on written order confirmations. They are bound by our instructions and are regularly monitored by us.

f) Contact requests

If you have any questions regarding our web presence or the goods or services we offer, or if you would like to contact us for any other reason, please use the contact form available on our web presence. Of course, you can also get in touch using the contact details below. In order to process your contact requests as effectively as possible, we collect, process and use the personal data you have entered, such as company name, title, name, email address and any other data you may have shared with us voluntarily.

The following data will also be stored when a message is sent:

IP address of the user
Date and time of the registration

You can also contact us using the email address provided. In this case, we will store the user’s personal data transmitted together with the email. The respective legal basis for processing this data is Art. 6 (1) lit. f of the GDPR. The data is used solely to process the contact request and the following correspondence, and will not be disclosed to third parties in this context. We will seek the user’s prior consent if we intend to use this data for other purposes. The personal data obtained from the contact form input screen and the data transmitted via email are deleted once the relevant correspondence with the user is completed, i.e. once the circumstances make it clear that the matter at hand has been fully resolved. The personal data additionally collected during the sending process will be deleted after seven days at the latest.

g) Subscribing to our newsletter

You can register to receive our newsletter, which contains information on fantastic promotions, exclusive discounts and the latest Mey collections, via our web presence. We use what is known as the double opt-in process for registrations to our newsletter. Once you have entered your surname and email address in the form provided, we will send you a confirmation email with a clickable confirmation link. If you subscribe to our newsletter, Mey will process your surname and email address as well as the IP address of the accessing computer and the date and time of the subscription. In this confirmation email, you will be asked to confirm that you wish to receive the newsletter by clicking on the confirmation link. We will only add your email address to the newsletter distribution list once you have confirmed by clicking on the link. Your email address will be saved until you unsubscribe from the newsletter. It will be saved solely for the purposes of being able to send you the newsletter. The legal basis for the processing of this personal data after subscribing to the newsletter is Art. 6 (1) lit. a of the GDPR.

In order for you to receive the newsletter, you must enter your email address as well as your surname and title. Your surname and title are used to personalise the newsletter.

Your consent to have the newsletter sent to you is given voluntarily and can be revoked at any time with future effect. At the end of each newsletter and on our web presence under the heading “Newsletter”, you can find a link which you can use to unsubscribe from the newsletter at any time.

h) Use for marketing purposes

Mey only processes and uses the personal data collected from you for the purposes of advertising or market research and opinion research to the extent permitted by law. The legal basis for the processing of personal data for marketing or opinion and market research purposes is Art. 6 (1) lit. f of the GDPR.

You may revoke your consent to have your personal data processed and used for advertising purposes and for marketing and opinion research at any time.

To do so, please refer to the contact details below or send us a message using the contact form available on the web presence.

In the event that we ascertain your email address within the context of purchasing a product, we can inform you of similar products by email provided you have not withdrawn consent for the use of your email address. You may revoke consent at any time with future effect using the contact information below or by sending us a message via the contact form available on the web presence, without incurring costs other than the transmission costs at the basic rates.

3. USE OF GOOGLE ANALYTICS

Our web pages use Google Analytics by Google Ireland Limited, a service provider based at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics is a software used for the statistical analysis of user access data. We utilise this web analysis service to improve the quality of our web pages and their content. In this context, Google Analytics uses cookies (see above) that enable us to analyse the usage of our web pages. The legal basis for the processing of this data is Art. 6 (1) lit. f of the GDPR. We have a legitimate interest in analysing the behaviour of our web page users in order to allow us to optimise these pages. The web analysis can be prevented by technical means, i.e. by deactivating JavaScript and cookies in the respective web browser. Relevant details regarding the required settings can be found in the product descriptions and/or instructions published by the corresponding browser providers. Google can also be prevented from processing data by using a browser add-on to deactivate Google Analytics. Further information, as well as the add-on itself, can be found at: https://tools.google.com/dlpage/gaoptout?hl=de. Additional information regarding Google Analytics’ terms of use and data protection policy can be found at https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

4. SECURITY

Mey implements technical and organisational security measures to protect the users’ personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised third parties.

Our data processing procedures and our security precautions are adapted to the current conditions and requirements according to technological progress and are subject to continual development. Our employees are obligated to comply with data secrecy in accordance with the GDPR.

5. ACCESS

We are happy to share information held by Mey relating to you as an individual at no cost. If you would like your data to be corrected, blocked or deleted or if you have questions or suggestions on data protection and data security, we would be happy to assist you. You may also revoke any consent you have provided for further use of your personal data with effect for the future at any time.

In this case, please send an email to datenschutz@mey.com, refer to the contact details above or send us a message using the contact form available on the web presence.

6. RIGHTS OF THE DATA SUBJECT

If Mey processes your personal data, you are a ‘data subject’ according to Art. 4 No. 1 of the GDPR and have the following rights with regards to Mey as described below.

If you would like to exercise one of these rights, please contact our data protection officer at datenschutz@mey.com.

We would like to point out that we might request additional information from you in certain cases to ascertain your identity. This allows us to make sure that no information will be disclosed to unauthorised third parties, e.g. when you exercise your right of access.

6.1 Right of access

According to Art. 15 of the GDPR, you have the right to ask us to confirm whether or not we are processing personal data that concerns you. If we are processing your personal data, you can ask us for the following information:

the purposes of the processing
the categories of your personal data that we are processing
the recipients or categories of recipients to whom we have disclosed or will disclose your personal data
(where possible), the envisaged period for which we will store your personal data, or, if this is not possible, the criteria used to determine that period
the existence of the right to request the correction or deletion of the personal data concerning you or the existence of the right to restrict our processing or to object to such processing
the existence of the right to lodge a complaint with a supervisory authority
any available information about the source of the data if the personal data has not been obtained from you
the existence of automated decision-making, including profiling (Art. 22 (1) and (4) of the GDPR), and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you

You have the right to request information about whether or not personal data concerning you is being transferred to a third country or to an international organisation. In this context, you have the right to be informed about the appropriate safeguards applied in connection with the transfer according to Art. 46 of the GDPR.

6.2 Right to rectification

According to Art. 16 of the GDPR, you have the right to obtain from us the rectification and/or completion of inaccurate personal data concerning you.

6.3 Right to erasure

According to Art. 17 of the GDPR, you have the right to obtain from us the immediate erasure of your personal data. We are obliged to delete your data without undue delay if one of the following grounds applies:

your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed
you withdraw your consent on which the processing is based according to Art. 6 (1) lit. a or Art. 9 (2) lit. a of the GDPR, and where there is no other legal ground for the processing
you object to the processing pursuant to Art. 21 (1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2)
your personal data has been unlawfully processed
your personal data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject
your personal data has been collected in relation to the offer of information society services referred to in Art. 8 (1) of the GDPR

Where we have made your personal data public and are obliged pursuant to Art. 17 (1) of the GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you, as the data subject, have requested these controllers to erase any links to, or copy or replication of, your personal data.

The right to deletion does not apply to the extent that the processing is necessary:

for exercising the right to freedom of expression and information
for compliance with a legal obligation to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us
for reasons of public interest in the area of public health (Art. 9 (2) lit. h and i as well as Art. 9 (3) of the GDPR)
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) of the GDPR in so far as the right referred to is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims

6.4 Right to restriction of processing

You shall have the right to obtain from us restriction of processing of your personal data in accordance with Art. 18 of the GDPR, where one of the following applies:

if you contest the accuracy of your personal data for a period that enables us to verify the accuracy of the personal data
if the processing is unlawful and you oppose the deletion of the personal data and request a restriction of the use of the personal data instead
if we no longer need your personal data for the purposes of the processing, but you require this data in order to establish, exercise or defend legal claims, or
if you have objected to processing pursuant to Art. 21 (1) of the GDPR pending the verification whether our legitimate grounds override those of you

Where the processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted under the above-mentioned circumstances, you will be informed by us before the restriction of processing is lifted.

6.5 Right to be informed

If you have asserted your right to request from us the rectification, erasure or restriction of processing, we are required by Art. 19 of the GDPR to communicate this to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to ask us to inform you about these recipients.

6.6 Right to data portability

You shall have the right according to Art. 20 of the GDPR to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Additionally, you have the right to transmit this data to another controller without hindrance from us, where:

the processing is based on consent (Art. 6 (1) lit. a of the GDPR or Art. 9 (2) lit. a of the GDPR) or on a contract pursuant of Art. 6 (1) lit. b of the GDPR, and
the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transmitted directly from us to another controller, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

6.7 Right to object

You shall have the right in accordance with Art. 21 of the GDPR to object, on grounds relating to your particular situation, at any time to the processing of the personal data concerning you which is based on Art. 6 (1) lit e or f of the GDPR, including profiling based on those provisions. We shall then no longer process your personal data unless we can demonstrate compelling legitimate grounds for our processing which override your interests, rights and freedoms, or the processing is used in order to establish, exercise or defend legal claims.

6.8 Right to withdraw consent according to data protection regulations

If you have provided your personal data to us based on your consent, you have the right at any time to withdraw the consent that you have provided to us under data protection regulations. The withdrawal of consent shall not affect the lawfulness of the processing based on the consent provided until such withdrawal.

6.9 Automated individual decision-making including profiling

You shall have the right according to Art. 22 of the GDPR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

is necessary for entering into, or the performance of, a contract between you and us;
is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
is based on your explicit consent.

6.10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, especially in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider our processing of your personal data to be in violation of the GDPR.

The supervisory authority responsible for Mey is:

The Baden-Württemberg State Commissioner for Data Protection and Freedom of Information

PO Box 10 29 32

70025 Stuttgart, Germany

Phone: +49 (0)711 / 61 55 41 – 0

Email: poststelle@lfdi.bwl.de

7. DELETION OF DATA

Your data is stored for the period of time necessary to provide our services, or to the extent that it is required for legal or legislative purposes.

If the provision of the websites involves data processing, this data will be deleted when the respective session has ended. If personal data is stored in logfiles, this data will be deleted within seven days at the latest. There may be additional storage if users’ IP addresses have been deleted or modified beforehand so that a correlation to the visiting client is no longer possible.

8. AMENDMENTS TO THE PRIVACY STATEMENT

This privacy statement is only applicable to the content of our web pages. Other data protection and data security regulations apply to any linked third-party content. The entity responsible for this offering can be found in the respective legal notice. It may become necessary to adjust the contents of this privacy statement due to the enhancement of our web pages or the implementation of new technology. We therefore reserve the right to make changes at any time. We will also publish the amended version of the privacy statement at this point. For this reason, please read the privacy statement on a regular basis while visiting our web presence.

9. LAST REVISED

This privacy statement was last revised in January 2020.

CONTACT DETAILS

Mey GmbH & Co. KG
Auf Steingen 6
72459 Albstadt
Germany

Mey B2B Shop customer service

Tel: +49 (0)7431 706-0
Fax: +49 (0)7431/ 706 – 200
Email: service@meyb2b.com

Press contact

Email: marketing@mey.com

Address:	Mey GmbH & Co. KG Auf Steingen 6 72459 Albstadt
Company Director:	Matthias Mey Roland Kull Markus Mey Florian Mey
Commercial Register:	Stuttgart HRA 400118 General Partner: Mey Verwaltungs-GmbH Handelsregister Stuttgart HRB 400762
VAT ID:	DE 144843563
Tax number:	53089/02456

WELCOME TO OUR MEY B2B PORTAL

LOGIN for already registered retailers!

What's this?

ARE YOU NEW? RETAILERS - REGISTRATION.