Privacy policy

1. Controller

MEBCON International Trading FZCO
IFZA Business Park, DDP
PO Box 342001
Dubai, United Arab Emirates

Data protection contact: Andreas Kirchhof, Agnesdorfer Straße 15, 06536 Südharz, Germany
Email: webmaster@goldland-agentur.de

2. Principles

We process personal data only to the extent necessary to operate this website, answer your enquiries or perform contracts. The legal basis is the General Data Protection Regulation (GDPR), in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests). For privacy-friendly visitor statistics we use – only with your consent – an analytics tool that runs exclusively on our own server (see section 4). We do not use advertising services and we do not sell data.

3. Hosting and server logs

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Each time a page is accessed, the server automatically stores: IP address, date and time, the address accessed, the referring page, browser and operating system. This data is used to provide the website securely and to defend against attacks (Art. 6(1)(f) GDPR) and is deleted after no more than 14 days. A data processing agreement is in place with the provider.

4. Visitor statistics

To find out which content is of interest and to improve the website, we use the WordPress plugin “Independent Analytics”. It runs entirely on our own server at ALL-INKL.COM. No data is transmitted to the plugin’s developer or to any other third party. No cookies are set and no information is stored on your device. The statistics are only activated once you consent in the privacy settings.

The plugin records the pages visited, date and time, the referring page, links and downloads clicked, device type, browser and operating system, and the approximate country and city derived from the IP address. To count visits, the plugin creates a checksum (hash) from the IP address, the browser identifier and a random value; the IP address cannot be recovered from it. The random value is renewed every 24 hours, so returning visitors are not recognised across several days.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via the “Privacy settings” link in the footer. The statistics data is deleted after 12 months.

5. Cookies and local storage

Without your consent, this website only stores technically necessary information in your browser:

• pll_language remembers your chosen language (expires after 1 year).
• WordPress login cookies are only set when you log in to the internal area and are deleted when you log out or close the browser.
• mebcon_einwilligung (in your browser’s local storage, not a cookie) stores your choice in the privacy settings so that you are not asked again on every visit (expires after 12 months).

The legal basis is Section 25(2) of the German TDDDG in conjunction with Art. 6(1)(f) GDPR. No consent is required for these cookies.

6. Contact form, email and phone

If you contact us via the contact form, by email or by phone, we process your details (name, email address, company and phone number if provided, content of your message) in order to answer your enquiry. Messages from the form are sent to us by email and are not stored on the website. The legal basis is your consent (Art. 6(1)(a) GDPR) or the initiation or performance of a contract (Art. 6(1)(b)). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply. To protect against spam, your browser solves a small computing task in the background while you fill in the form (the “ALTCHA” method); no connection to third parties is made and no cookie is set. We also store a checksum (hash) of your IP address for one hour to limit the number of messages per sender. The legal basis for this is our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR).

7. Internal area

For the internal area we create user accounts for staff and partners (name, email address, encrypted password). This data is used solely to control access to internal documents (Art. 6(1)(b) and (f) GDPR) and is deleted as soon as access is no longer required.

8. YouTube videos

We embed videos using YouTube’s privacy-enhanced mode (youtube-nocookie.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are only loaded when you click the “Play video” placeholder; no connection to YouTube is made before that. Clicking establishes a connection to Google’s servers, transmitting among other things your IP address and the page visited, and data may also be transferred to the USA (Google is certified under the EU-US Data Privacy Framework). The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); it applies only to that video. More information: https://policies.google.com/privacy

9. Map

On the “Map” page we show an interactive map (“Open User Map” plugin). The map tiles come from OpenFreeMap, operated by Hyperknot Software Kft., Hungary; the provider may use Cloudflare’s content delivery network for this, in which case data may also be transferred to the USA. The map is only loaded when you click “Load map” or consent in the privacy settings; no connection to the provider is made before then. When the map loads, your IP address is transmitted to the provider. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Privacy settings” in the footer. Further information: https://openfreemap.org/privacy/ If you add a location to the map yourself, we store the information you enter in order to display it on the map (Art. 6(1)(a) GDPR); you can request its deletion at any time.

10. Fonts and files

Fonts, images, animations and PDF documents are stored on our own server. No fonts are loaded from Google or other third parties.

11. External links

Links to other websites, for example to our manufacturing partner Steinkraft, lead to services of other providers. Their data processing is governed by the privacy notices of the respective website.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent at any time with effect for the future. Please contact us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work (Art. 77 GDPR).

13. Changes

We will update this privacy policy if the website or the legal situation changes. The version published here applies.