Privacy Policy

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and this privacy policy. You can visit this website without providing any personal data yourself. Personal data is only processed to the extent described below.

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers used are located in the Falkenstein data centre in Germany. A data processing agreement in accordance with Art. 28 GDPR is in place with our hosting provider.

When you visit this website, the web server automatically collects and stores information in server log files that your browser transmits. This data comprises:

• the IP address of the requesting device,
• date and time of the request,
• the requested page or file (URL),
• the referrer URL (the page from which you reached us),
• browser type and version,
• the operating system used,
• the amount of data transferred and the HTTP status code.

This data is processed on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, stability and security of the website, including the detection and defence of attacks. The log data is not merged with other data sources and is not used to identify you personally. Log files are deleted after 14 days at the latest. If we are investigating a specific security incident, individual entries may be kept beyond that period until the incident has been resolved.

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us. You can recognise an encrypted connection by the https prefix and the lock symbol in your browser’s address bar. When encryption is activated, the data you transmit to us cannot be read by third parties.

If you send us an inquiry via the contact form, we process the details you enter there: your name, your company, your email address, your phone number and the content of your message. We use this data exclusively to handle your inquiry and to contact you.

Providing this data is neither required by law nor by contract. However, the fields marked as mandatory are needed so that we can identify your request and reply to you. If you do not provide this information, we will not be able to process your inquiry through the form; you can of course contact us by email or phone instead.

Before you can submit the form, you are asked to confirm that you have read this privacy policy. This confirmation documents that you were informed about the processing before sending us your data. It is not a consent within the meaning of Art. 6 (1) (a) GDPR; the legal bases set out below apply regardless of it. Your confirmation is transmitted and stored together with your inquiry.

Your inquiry is sent to us by email. It is additionally stored in the form submission log of our website software so that inquiries cannot be lost for technical reasons. Besides the details you entered, this log records the IP address your inquiry was sent from, the identification your browser transmits, the page you sent the form from and the time of submission. We need this technical information to trace and stop misuse of the form. The legal basis for this processing is Art. 6 (1) (b) GDPR, insofar as your inquiry relates to the initiation or performance of a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in the effective handling of inquiries addressed to us. We delete inquiries, including the stored submissions, once they have been finally dealt with and no statutory retention obligations apply.

After you have sent the form, we automatically reply to the email address you entered so that you know your message has reached us. This acknowledgement quotes the text of your message back to you and goes to that address only.

The form is protected against automated misuse. It contains one field that stays invisible to you and is normally filled in only by automated scripts, which lets us recognise such submissions. In addition, we limit how many acknowledgements may be sent per hour for one sender and for one email address. To count these, we store a counter for one hour under a value calculated from the IP address that cannot be converted back into it. The IP address itself is not stored for this purpose. The legal basis is Art. 6 (1) (f) GDPR, our legitimate interest being to protect the form against spam and misuse.

If an inquiry cannot be delivered by email straight away because of a technical fault, it is stored on our server until delivery can be completed. Delivery is then retried automatically. Such a copy is deleted as soon as the inquiry has been delivered, and at the latest after seven days. The legal basis is Art. 6 (1) (f) GDPR, based on our legitimate interest in ensuring that inquiries addressed to us actually reach us.

If you contact us by email or phone, we process the personal data you provide (for example your name, contact details and the content of your message) for the purpose of handling your request. The legal bases are Art. 6 (1) (b) and (f) GDPR as described in section 5.

You can apply for advertised positions via the application form on our careers pages or by email. In this context we process the data you provide, in particular your name, email address, phone number, the content of your message and any documents you upload, for example your CV, certificates and references. Uploaded documents are attached to that email and are removed from our web server immediately afterwards, so that they are not kept there permanently. This data is used exclusively to conduct the application process.

The content of your application is additionally stored in the form submission log of our website software, so that applications cannot be lost for technical reasons. Besides the details you entered, this log records the IP address your application was sent from, the identification your browser transmits, the page you sent the form from and the time of submission. Uploaded documents are not part of that log.

After you have sent the form, we automatically reply to the email address you entered so that you know your application has reached us. This acknowledgement quotes the text of your message and confirms how many documents arrived. It does not attach your documents and does not send them back to you.

Before you can submit the application form, you are asked to confirm that you have read this privacy policy. This confirmation documents that you were informed about the processing before sending us your documents. It is not a consent within the meaning of Art. 6 (1) (a) GDPR; the legal bases set out below apply regardless of it. It is transmitted and stored together with your application.

The legal basis is Art. 6 (1) (b) GDPR, as the processing is necessary in order to take steps at your request prior to entering into an employment contract, supplemented by Section 26 (1) BDSG. Application documents are deleted no later than six months after completion of the application process, unless you have consented to longer storage, for example to be included in a talent pool, or statutory provisions require otherwise.

If an application cannot be delivered by email straight away because of a technical fault, the content of your application and your uploaded documents are stored on our server until delivery can be completed. Delivery is then retried automatically. This storage area is located outside the web directory and cannot be accessed over the internet. The documents are deleted as soon as the application has been delivered, and at the latest after 14 days. The legal basis is Art. 6 (1) (b) GDPR in conjunction with Section 26 (1) BDSG, supplemented by Art. 6 (1) (f) GDPR, based on our legitimate interest in ensuring that applications addressed to us actually reach us.

A cookie is a small text file that a website stores on your device. When you visit this website for the first time, a consent banner appears. It lets you decide which categories of cookies and comparable technologies may be used. Anything that is not strictly necessary is only used once you have allowed it; the legal basis is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR. Refusing is just as easy as agreeing, and nothing is preselected.

Current status: this website does not use analytics, advertising, tracking, profiling or social media services, and it does not embed content from other providers. The only cookie that is actually set is the one storing your own decision. The optional categories in the consent banner are therefore empty at present. They exist so that any service we may add later, for example website statistics or an embedded map, can only be loaded after you have allowed the matching category.

Strictly necessary cookies. These are required for the website to work and cannot be switched off. Storage of this kind is covered by the exemption in Section 25 (2) no. 2 TDDDG and does not require consent; the associated processing of personal data is based on Art. 6 (1) (f) GDPR, our legitimate interest being the secure and functional operation of this website. This category currently contains:

• moove_gdpr_popup: stores the choice you make in the consent banner, so that you are not asked again on every page. Storage period 180 days. The cookie holds only the status of the individual categories, no personal identifiers.

In addition, our website software may set a short-lived cookie while a form submission is being processed. It expires when you close your browser.

Optional categories. Both are switched off unless you switch them on:

• Statistics: would cover services that measure how this website is used, for example which pages are opened. No such service is currently in use.
• External media and marketing: would cover content loaded from other providers, such as an embedded map or video, and cookies used for marketing purposes. No such content is currently in use.

Changing or withdrawing your choice. You can open the settings again at any time using the “Cookie settings” link in the footer of every page and switch individual categories on or off. A withdrawal takes effect for the future and does not affect the lawfulness of the processing carried out beforehand (Art. 7 (3) GDPR). You can also set your browser to block or delete cookies. If you delete the cookie named above, the consent banner will appear again on your next visit.

The articles in our news section are our own posts from the MM-Offshore company page on LinkedIn. We take them over into this website at regular intervals and save both the text and the accompanying images on our own server. Reading the news section therefore does not create any connection to LinkedIn. Each article carries a link to the original post, and that link is only followed if you click it.

The same applies to the icons in the footer, which link to our company profiles on LinkedIn and Instagram. These are ordinary outbound links: the icons are stored on our own server, and no plugins, social buttons or other embedded content from these networks are used on this website. No data is transmitted to LinkedIn or Instagram while you browse our website.

Only when you click such a link and open the respective network does its provider process your data under its own responsibility. For LinkedIn this is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (privacy policy: https://www.linkedin.com/legal/privacy-policy). For Instagram this is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (privacy policy: https://privacycenter.instagram.com/policy).

All fonts, images, videos, animations and interactive 3D models on this website are hosted locally on our own web server. The interactive reference map is also rendered entirely on our own server; no map material is retrieved from Google Maps or any other external map provider. Accordingly, no connections to third-party servers, content delivery networks or external font services are established when you visit this website.

Within our company, access to your data is granted only to those persons who need it to fulfil the purposes described above. Personal data is passed on to external recipients only if this is necessary for the purposes stated, if we are legally obliged to do so, or if you have given your consent.

External recipients of this kind are our hosting provider and the technical service provider who looks after this website. Both act on our behalf as processors under Art. 28 GDPR and are bound by our instructions. If a message sent through one of our forms cannot be delivered, our technical service provider receives a fault report so that the problem can be fixed. That report can contain the subject line of the message and the file names of any documents you uploaded, but not the content of your message and not the documents themselves.

Your data is not sold. We do not transfer personal data to countries outside the European Union or the European Economic Area.

Unless a specific storage period is stated in this privacy policy, we store personal data only for as long as it is required for the respective purpose. The data is then deleted, unless statutory retention obligations under commercial or tax law require longer storage; in that case processing is restricted accordingly.

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected. To exercise any of your rights, simply contact us at [email protected].

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is: Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

We may amend this privacy policy to reflect changes to the website or amended legal requirements. The current version is always available on this page.