Data protection

Table of contents

1. Introduction
2. Controller
3. Contact Person for data protection
4. Data processing operations
4.1 Server-Log-files
4.2 Contact form
4.3 Google Analytics
4.4 Videos
5. General information on third country transfer
6. Your rights
7. Miscellaneous
Modification and updating of data information

1. Introduction

We take the protection of your personal data very seriously. With the following data protection information, we would like to inform you about the type of personal data (hereinafter also referred to as „data“) we process for which purpose and to what extent when you visit our website.

2. Controller

The responsible party pursuant to Art. 4 (7) of the General Data Protection Regulation (hereinafter referred to as GDPR) for the following data processing is:
MIRA GmbH
Rather Straße 49c
40476 Düsseldorf
E-Mail-Address: info@mira-mobility.com

3. Contact Person for data protection

If you have any questions regarding data protection, please contact:
Mira GmbH
Datenschutz
Rather Straße 49c
40476 Düsseldorf
E-Mail-Address: info@mira-mobility.com

4. Data processing operations

In the following, we would like to show you in detail what processing takes place on our website:

4.1 Server-Log-files

When our website is called up, data is automatically transmitted which is technically necessary, among other things, in order to be able to access our website. In addition, our hoster creates so-called server log files, which collect and store data when the website is called up.

The following personal data are processed:

    • IP address (technically necessary to access the website)
    • Called paths

The processing of personal data is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR for the following purposes:

    • Provision of the website
    • Correct displayability of the contents
    • Maintaining and securing system integrity
    • Optimization of our systems

We have a legitimate interest in presenting our company to a broad target group online. In addition, we have an interest in protecting our systems from misuse.

The server log data is stored for a period of 3 months.

The recipient of this data is xame GmbH, Garching b. Munich, with whom we have concluded an order processing contract. Our provider uses NORIS AG, Aschheim b. Munich with data center Munich East as sub-service provider.

Right to object:

You may object to the processing operations based on the legitimate interest on grounds relating to your particular situation in accordance with Article 21 of the GDPR. To exercise your right to object, please contact the following email address: info@mira-mobility.com.

You are under no legal or contractual obligation to provide the data. However, failure to provide it would possibly result in you not being able to use the service or not being able to use it to its full extent.
Automated decision-making does not take place, nor are profiles created from the data (so-called profiling).

4.2 Contact form

We offer you the possibility to contact us via an electronic contact form. If you use this, various input fields are to be filled out, which include personal data.

We process the following personal data as mandatory data:

    • E-Mail-Address
    • Message text

In addition, you have the option to provide further optional information:

    • First and last name

When you send your request, the following data will also be processed:

    • IP-Address
    • Timestamp of the sending

The processing of personal data is based on our legitimate interest according to Art. 6 para. 1 lit. f) GDPR or due to contract initiation/fulfillment according to Art. 6 para. 1 lit. b) GDPR for the following purposes:

    • Processing your contact request and establishing contact
    • Protection against misuse of the contact form

The specific processing of personal data also depends on which message text you send to us.

We have a legitimate interest in processing data in order to be able to handle your contact request. In addition, we have an interest in maintaining our system integrity.

The data is stored until the specified processing purpose has been achieved.

Data processing when sending is based on our legitimate interest according to Art. 6 para. 1 lit. f) GDPR. Our interest lies in maintaining system integrity and preventing misuse of our contact form.

The recipient of this data is xame GmbH, with whom we have concluded an order processing contract. Our provider uses NORIS AG as a sub-service provider with data center Munich East.

Right to object:

You may object to the processing operations based on the legitimate interest on grounds relating to your particular situation in accordance with Article 21 of the GDPR. To exercise your right to object, please contact the following email address: info@mira-mobility.com.

You are under no legal or contractual obligation to provide the data. However, failure to provide it would possibly result in you not being able to use the service or not being able to use it to its full extent.
Automated decision-making does not take place, nor are profiles created from the data (so-called profiling).

4.3 Google Analytics

We use the analysis service „Google Analytics“ of Google LLC., 1600 Am-phitheatre Parway, Mountain View, CA 94043, USA on our website. This service is only started once you have given us your consent.

Google Analytics is a so-called analysis service that uses various techniques to record user behavior on a website. Google uses so-called cookies for this purpose. These are small text files that are stored on your terminal device.

The exact use of cookies can be found on our cookie overview: https://www.XXXXXXXXX.

The data generated by the use of Google Analytics may be transferred to Google’s servers in the USA and possibly stored there. Likewise, the data may be transferred to other third countries or passed on to other parties.

For further information on the use of Google Analytics and the handling of your data by Google, please visit: https://policies.google.com/privacy?hl=de&fg=1&utm_source=ucbs.

We process the following data:

    • XXXAnalyse des Nutzungsverhaltens auf unserer Webseite
    • XXXXOptimierung der Webseite anhand des Nutzungsverhaltens
    • XXXXVerbesserung unseres Angebotes

Google Analytics is used with IP anonymization (so-called „anonymize IP“ function). Google shortens your IP address as soon as technically possible, IPv4 addresses are shortened by the last octet and the last 80 bits of an IPv6 address are converted to 0. Google does not store IP addresses.

You can find further information here: https://support.google.com/analytics/answer/2763052?hl=de

The processing of personal data is based on your explicit consent pursuant to Art. 6 (1) a) GDPR for the following purposes:

    • Analysis of user behavior on our website
    • Optimization of the website based on user behavior
    • Improvement of our offer

The transfer to Google on servers in the USA takes place on the basis of your express consent pursuant to Art. 49 para. 1 p.1 lit. a) GDPR.

The data will be stored for a period of XXXX days/months.

It is not excluded that your data will be transferred by Google to a third country. We have concluded a contract with Google for commissioned data processing.

Right of revocation:

You can revoke your consent at any time. Hierzu klicken Sie bitte auf …..

Right of objection:

You may object to the processing operations based on the legitimate interest on grounds relating to your particular situation in accordance with Article 21 of the GDPR. To exercise your right to object, please contact the following email address: info@mira-mobility.com.

4.4 Videos

The videos we provide are hosted by us, so that when a video is accessed, only the same personal data is processed as when you visit our website. You can find more information in section 4.1 Server log data.

5. General information on third country transfers

Processing operations of personal data may be carried out with the help of service providers that are not located within the European Union (so-called third country). Please refer to the individual processing operations in section 4 to find out which service provider we use for which processing operation.
The GDPR provides that the receiving company in the third country must ensure sufficient protection for your personal data. For this purpose, the GDPR provides various instruments to ensure protection.

In the case of a so-called adequacy decision, the European Commission determines that the third country offers protection comparable to European data protection law.

Alternatively, a comparable level of protection can be ensured at the receiving service provider in the third country by means of appropriate safeguards, e.g., internal binding rules, standard contractual clauses specified by the EU, approvals by the supervisory authority, etc.

If a transfer to a third country takes place, you will find the necessary information within the respective processing procedure under section 4.

Standard Contractual Clauses:

Your personal data is processed by our Google LLC, 1600 Am-phitheatre Parway, Mountain View, CA 94043, USA. We have concluded the standard contractual clauses stipulated by the European Commission with this service provider. The transfer to the recipient country is based on the following standard contractual clauses:

The recipient of the data is

    • Google LLC.

The transfer to the recipient country is based on the following standard contractual clauses:
Annex to the COMMISSION IMPLEMENTING DECISION on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679.

6. Your rights

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

Right to information (Art. 15 GDPR): In accordance with the legal requirements, you have the right to request information about whether and to what extent we process your personal data.

Right to rectification (Art. 16 GDPR): In accordance with the legal requirements, you have the right to request the completion or correction of incomplete or incorrect data concerning you.

Right to erasure (Art. 17 GDPR): In accordance with the legal requirements, you have the right to request that your personal data be deleted without delay. Note: An immediate deletion of your data may be precluded by legal storage obligations or other legitimate storage reasons.

Right to restriction of processing (Art. 18 GDPR): In accordance with the legal requirements, you have the right to request restriction of the processing of your personal data

Right to data portability (Art. 20 GDPR): In accordance with the legal requirements, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format and – if technically feasible – to request its transfer to another controller.

Right of objection (Art. 21 GDPR): In accordance with the legal requirements, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, provided that the data processing is carried out for the purposes of legitimate interests (Art. 6(1)(e) or (f) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to such processing for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

Right of withdrawal of revocation (Art. 7 para. 3 GDPR): You have the right to revoke given consent at any time without giving reasons with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

To exercise your rights, please contact:
MIRA GmbH
Rheinmetall Platz 1
40476 Düsseldorf

Right to complain to a supervisory authority (Art. 77 (1) GDPR: In accordance with the legal requirements, you have the right to lodge a complaint with a data protection supervisory authority of your choice, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

7. Miscellaneous

Modification and updating of data information
We reserve the right to adapt this data protection information if changes to the legal situation or the data processing carried out by us make this necessary.
The most recently published data protection information will always apply. We will inform you if any changes require your cooperation (e.g. renewed consent) or other individual notification.
If we provide addresses and contact information of other companies and organizations in this data protection information, please note that the addresses may change over time.
The terms used herein are not gender-specific.
Status of this data protection information: June 14, 2022