privacy policy.

This is a courtesy translation. The German version is legally binding.

1. Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2 The controller responsible for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Jens Lohmann, Bundesstr. 7, 24857 Fahrdorf, Germany, tel.: +49 4621 5302909, e-mail: daten@mocfor.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock symbol in your browser bar.

2. Data collection when visiting our website

When you use our website for purely informational purposes — i.e. when you do not register or otherwise transmit information to us — we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (where applicable: in anonymised form)

The processing takes place pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. We reserve the right, however, to subsequently review the server log files if there are concrete indications of unlawful use.

3. Cookies

To make our website attractive to visit and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted at the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. The duration of cookie storage can be found in the overview of cookie settings of your web browser.

In some cases, the cookies serve to simplify the order process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6 (1) (b) GDPR for the performance of the contract, pursuant to Art. 6 (1) (a) GDPR in the case of consent given, or pursuant to Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Please note that you can set your browser to inform you about the setting of cookies and to decide individually about their acceptance, or to exclude the acceptance of cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. They can be found at the following links:

Internet Explorer: support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/en-us/guide/safari/sfri11471/mac
Opera: help.opera.com/en/latest/web-preferences/

Please note that the functionality of our website may be limited if cookies are not accepted.

4. Contacting us

When you contact us (e.g. via the contact form or e-mail), personal data is collected. The data collected in the case of a contact form is shown in the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry or for the contact and the related technical administration. The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6 (1) (f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted after the final processing of your enquiry, provided that the circumstances allow the conclusion that the matter at issue has been finally clarified and that no statutory retention obligations preclude this.

5) Data processing for opening a customer account and for contract execution

Pursuant to Art. 6 (1) (b) GDPR, personal data continues to be collected and processed if you provide it to us in connection with the performance of a contract or when opening a customer account. Which data is collected is shown in the respective input forms. Deletion of your customer account is possible at any time and can be carried out by sending a message to the address of the controller given above. We store and use the data you have provided for contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data, or we have reserved the right to further use of data permitted by law.

6) Data processing for order handling

6.1 To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data we collect is passed on to the transport company commissioned with the delivery in the context of contract execution, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the credit institution commissioned with the payment in the course of payment processing, insofar as this is necessary for payment handling. If payment service providers are used, we will inform you of this explicitly below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

6.2 Use of payment service providers

- Klarna
If you select a Klarna payment service, payment is processed via Klarna Bank AB (publ) [https://www.klarna.com/], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postcode, town, gender, e-mail address, telephone number and IP address) and data related to the order (e.g. invoice amount, items, delivery method) are forwarded to Klarna for the purpose of identity and credit assessment, provided you have given your express consent during the order process pursuant to Art. 6 (1) (a) GDPR. Which credit agencies your data may be forwarded to can be viewed here:
cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit assessment may include probability values (so-called score values). Where score values feed into the result of the credit assessment, they are based on a scientifically recognised mathematical-statistical procedure. Address data is one of several factors included in the calculation of the score values. The information received about the statistical probability of payment default is used by Klarna for a balanced decision on the establishment, performance or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may continue to be authorised to process your personal data if this is necessary for contractual payment processing. Your personal information will be handled in accordance with the applicable data protection regulations and in accordance with Klarna''s privacy policy for data subjects based in Germany
cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria
cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

- PayPal
For payment by PayPal, credit card via PayPal, direct debit via PayPal or — if offered — "purchase on invoice" or "instalment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the course of payment processing. The transfer takes place pursuant to Art. 6 (1) (b) GDPR and only insofar as is necessary for the payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or — if offered — "purchase on invoice" or "instalment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 (1) (f) GDPR on the basis of PayPal''s legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit assessment may include probability values (so-called score values). Where score values feed into the result of the credit assessment, they are based on a scientifically recognised mathematical-statistical procedure. Address data is one of several factors included in the calculation of the score values. For further data protection information, including the credit agencies used, please refer to PayPal''s privacy policy: www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may continue to be authorised to process your personal data if this is necessary for contractual payment processing.

7) Use of review and certification graphics

Provenexpert widget

On our website we use the seal of Provenexpert, a widget of Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin ("Provenexpert"). When you visit our website, dynamic content (current shop rating, certificate, etc.) is loaded into the widget by Provenexpert servers. Information about the website previously visited, the date and time of the call, the amount of data transferred, the browser type used, the operating system you use and the requesting provider (referrer data) may be transmitted to the Provenexpert servers. Insofar as personal data is included, processing is carried out on the basis of our overriding legitimate interest in optimising our offering pursuant to Art. 6 (1) (f) GDPR.

Further information on data protection at Provenexpert can be found at:

www.provenexpert.com/de-de/datenschutzbestimmungen/

8) Tools and other

- Google Web Fonts

For the consistent display of fonts, this site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google''s servers. This may also involve the transmission of personal data to the servers of Google LLC in the USA. In doing so, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font is used by your computer.

Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google''s privacy policy: www.google.com/policies/privacy/

9) Rights of the data subject

9.1 Applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller in respect of the processing of your personal data, about which we inform you below:

Right of access pursuant to Art. 15 GDPR: in particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, and your right to be informed which guarantees pursuant to Art. 46 GDPR exist if your data is forwarded to third countries;
Right to rectification pursuant to Art. 16 GDPR: you have the right to immediate rectification of incorrect data concerning you and/or completion of incomplete data stored by us;
Right to deletion pursuant to Art. 17 GDPR: you have the right to demand deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: you have the right to demand restriction of the processing of your personal data while the accuracy of your data, which you contest, is being verified, if you reject deletion of your data on the grounds of unlawful processing and instead demand restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, as long as it is not yet clear whether our legitimate grounds prevail;
Right to information pursuant to Art. 19 GDPR: if you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients;
Right to data portability pursuant to Art. 20 GDPR: you have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format, or to demand transfer to another controller, insofar as this is technically feasible;
Right to revoke consent given pursuant to Art. 7 (3) GDPR: you have the right to revoke consent once given to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: if you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right — without prejudice to any other administrative or judicial remedy — to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

9.2 RIGHT TO OBJECT

IF, IN THE COURSE OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME — ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION — TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. CONTINUED PROCESSING IS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and — where relevant — additionally by the respective statutory retention period (e.g. commercial and tax retention periods).

In the case of processing of personal data on the basis of express consent pursuant to Art. 6 (1) (a) GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data is routinely deleted after expiry of the retention periods, provided it is no longer required for contract performance or contract initiation and/or there is no legitimate interest on our part in continued storage.

In the case of processing of personal data on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

In the case of processing of personal data for direct marketing purposes on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 16 November 2021