Privacy Information


Müller-BBM VibroAkustik Systeme GmbH takes the protection of personal data seriously. Therefore, we conduct our business in compliance with applicable laws on data protection and data security. We want you to know when we collect data and how we use it.


1. General

Personal data is data relating to your identity. This includes, for example, information such as your name, address, telephone number and email address. Your personal data is processed in accordance with German and European data protection regulations.

We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and any third parties involved in data processing must comply with the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act and the confidential handling of personal data. If personal data is processed via our website the information is transferred in an encrypted form to avoid misuse by third parties. Our security measures are regularly updated in accordance with technological developments.


2. The processing of data on our website

a) Access to Internet Services

Any access to our website is stored in a log file. In the log file the following data will be stored up to 14 days:

  • Browser type and version
  • Operating system
  • URL of the referring website
  • Host name of the accessing computer
  • Time of access
  • IP address of the accessing host system
  • Status code and size of the response
  • IP or hostname of intermediate forwarding proxy
  • Username: see 2. c)

This data is used to optimize our website and is stored separately from other data you enter when using our website. It is not possible for us to allocate this data to a particular person.

You are under no legal or contractual obligation to provide your access data. However, please note that you cannot use our website without providing your access data.

The legal basis for temporary storage of your access data is Art. 6 (1) f) GDPR. Our legitimate interest is providing you access to our website and the continued optimisation of our website.


b) Cookies

We use cookies to collect information on how you use our website. Cookies are small text files which are stored on your computer when you visit our website. Cookies help us to determine how often our website is used and by how many users. It also makes it as convenient and efficient as possible for you to use our website.

We only use cookies that are required for our website to function properly ("required cookies"). Such required cookies make a website usable by providing basic functions of the website. The required cookies that we use for the provision of this website include cookies for the protection against cross-site request forgery attacks, persistent or temporary session login, whether the cookie notice has been closed, and certain user-specific preferences.

Please note that certain functionalities of our website and services may not be accessible to you if you disable the use of certain cookies. The legal basis for the processing of personal data using required cookies is Art. 6 (1) f) GDPR. Our legitimate interest is provision of basic functions of the website and the continued optimisation of our website.


c) Account registration and login

When you register for a user account for the PAK cloud, we collect the following personal data from you as part of the registration process:

  • Username
  • First name and surname
  • Company Name
  • Email address
  • Password

We process the above data ("registration data") to (1) verify that you meet the requirements for a PAK cloud account (2) to manage your account, (3) to comply with the Website Terms of Use and (4) with any rights and obligations contained therein and to communicate with you by sending technical information, updates, security notices, support and administration messages, answering your questions and providing customer service.

If you log into the PAK cloud website, we will use your login information (username and password) to check and confirm your authorization and provide you with access to and administer the PAK cloud website and, if applicable, other online services by Müller-BBM VibroAkustik Systeme GmbH or by third parties. We will also use further information regarding the use of the PAK cloud service for analytical testing and security purposes.

The registration data will only be stored as long as this is necessary for the performance of the agreement on the use of PAK cloud concluded between Müller-BBM VibroAkustik Systeme GmbH and the respective user. Thereafter, the registration data will be deleted unless there are legal obligations to retain such data (e.g. commercial and tax law retention obligations).

The legal basis for the processing of your registration data is Art. 6 (1) b) GDPR.


3. Disclosure of personal data

We disclose your personal data in accordance with applicable data protection law to the following recipients or categories of recipients:

  • Provider of the PAK cloud server
  • Provider of the web hosting for the PAK cloud website
  • Service Provider for security testing/ penetration tests of our PAK cloud service

To the extent the above listed recipients act as processors on our behalf or as joint controller we have appropriate agreements in place as required by applicable data protection law.


4. Transmission of personal data to third countries

As far as your personal data is transferred to recipients in third countries outside of the European Union or the European Economic Area, where it is not always possible to assume that the level of data protection is comparable to that of the European Union, we take care that the required level of data protection is ensured in the third country concerned or at the recipient in the third country. This may take the form of an "adequacy decision" of the European Commission which ensures that an adequate level of data protection has been ascertained overall for a certain third country. Alternatively, we can also transfer data on the basis of "EU standard contractual clauses" or, to recipients in the USA that have a valid EU-US Privacy Shield certification, on the basis of compliance with the principles of the EU-US Privacy Shield.

We would be pleased to provide further information on the suitable and appropriate safeguards for compliance with an adequate level of data protection on request; the contact details can be found at the bottom of this data privacy statement. Information on the participants of the EU-US Privacy Shield can be found under www.privacyshield.gov/list.


5. Your rights when your personal data is processed

Subject to statutory legal requirements, you have certain rights in accordance with applicable data protection provisions – in particular the GDPR and the relevant provisions in the applicable law of a Member State of the European Union:

  • You have the right of access to your personal data.
  • You have the right to demand rectification of any inaccurate personal data.
  • You have the right to demand erasure or to restrict the processing of your personal data.
  • You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation on the basis of Art. 6 (1) e) or (1) f) GDPR, including profiling based on those provisions.
  • You have the right to receive the personal data you have provided in a structured, commonly-used and machine-readable format.

If you have given us your consent, you also have the right to withdraw your consent at any time with effect for the future.

You are entitled to assert the abovementioned rights against us, e.g. by notifying us via one of the methods of contact listed at the end of this data protection statement.

You may also contact the competent authority if you have a complaint about how your personal data is handled.


6. Contact information

If you have any further questions relating to our information on data protection and the processing of your personal data, please do not hesitate to contact us at any time. We are available at any time to answer information requests, or if you have any suggestions or complaints.

The controller responsible for the processing of your personal data on this website is

Müller-BBM VibroAkustik Systeme GmbH
Robert-Koch-Straße 13, 82152 Planegg, Deutschland
E-Mail: info.de@mbbm-vas.com

Müller-BBM VibroAkustik Systeme GmbH has appointed a data protection officer. This data protection officer can be contacted at the following address:

Datenschutzbeauftragter der Müller-BBM VibroAkustik Systeme GmbH
c/o activeMind AG
Potsdamer Str. 3
80802 München
Tel. +49 89 418560170
E-Mail: datenschutz(at)mbbm-vas.com