Source: https://www.mtu.de/privacy-statement/
Timestamp: 2019-04-22 09:15:06+00:00

Document:
MTU Aero Engines appreciates your visit to our website and your interest in our company and products. We take the protection of your personal data seriously and want you to feel comfortable visiting our web pages. We attach great importance to protecting your privacy while processing personal data, and take it into account in our business processes. We process personal data collected during visits to our websites in accordance with the applicable data protection and data security laws. When you visit our web applications (e.g. online application), information may also be stored. For this, you will find separate privacy policies in the respective application.
Personal data are individual details about personal or factual situations of a specific or identifiable natural person (data subject). This includes information such as your name, address, phone number, date of birth, or e-mail address. Information with which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by making the information anonymous, is not personal data.
We only collect and use our users' personal data if and to the extent needed to provide a functional website as well as our contents and services. We use your personal data to provide the services you need, to answer your questions and to operate and improve our websites and applications.
Your personal data is not used for any other purpose, especially not for advertising purposes. Your personal data shall not be transferred to third parties without your consent, except in the cases described below, unless we are legally obliged to provide the data.
If we obtain the consent of the data subject to his/her process personal data, Art. 6, Section 1a, of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for processing said data. Art. 6, Section 1b, of the GDPR serves as legal basis for processing the personal data required to execute a contract to which the data subject is a party. Article 6, Section 1c, of the GDPR serves as legal basis for processing the personal data required to fulfil a legal obligation of our company.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6, Section 1f, of the GDPR shall serve as legal basis for processing.
Your personal data shall be erased or blocked as soon as the purpose of storage ceases to apply. However, the data may be stored if provided for by European or national laws or other statutory provisions to which the controller is subject. The data shall be blocked or erased at the end of a storage period prescribed by the aforementioned standards, unless the data needs to be stored further in order to conclude or implement a contract.
On our website we offer users the opportunity to register by providing personal data, for example, to receive brochures. The data are recorded in a contact form, sent to us and stored. The data are not transferred to third parties.
The registration is required to order the brochures and must, thus, be handled as quasi-contractual relationship. The personal data required for registration are used exclusively to process the order. The data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected. This is the case while registering to execute a contract or to take pre-contractual measures if the data are no longer required for the pursuit of the quasi-contractual relationship. Even after concluding the contract, it may still be necessary to store your personal data in order to fulfil contractual or legal obligations.
On our Investor Relations page we offer the possibility to register in order to receive annual reports, by providing personal data. The data are recorded in a contact form, sent to us and stored. The data are passed on to third parties for the purpose of dispatch. The following data are collected and passed on: surname, first name, company, street/house number, postcode, city, country.
Registration is required to order the annual report and is, therefore, a quasi-contractual relationship. The personal data required for registration are used exclusively to process the order. The data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected. This is the case while registering to execute a contract or to take pre-contractual measures if the data are no longer required for the pursuit of the quasi-contractual relationship. Even after concluding the contract, it may still be necessary to your personal data in order to fulfil contractual or legal obligations.
MTU Aero Engines offers you the opportunity to register for e-mail newsletters on specific topics. To register for our e-mail newsletter, we need your consent and at least your e-mail address to which the newsletter will be sent. To address you personally, we collect the subscriber's name and e-mail address. Entering a name is optional. When registering for the newsletter, the data from the input mask is forwarded to us. This voluntary information is used to address you personally, to personalise the content of the newsletter and to answer questions about your e-mail address.
The legal basis for processing data after the user is registered for the newsletter is Art. 6, Section 1a, of the GDPR. We use the so-called double-opt-in procedure to send newsletters, i.e. we will only send you the newsletter if you confirm your registration beforehand via a confirmation e-mail sent to you for this purpose from a link contained therein. This is to ensure that only you can subscribe to the newsletter as the owner of the e-mail address provided. Your confirmation must be sent shortly after receipt of the confirmation e-mail, otherwise your newsletter subscription will be automatically deleted from our database.
When registering for the newsletter, your e-mail address will be used to keep you informed until you unsubscribe from the newsletter. Other personal data are collected as part of the registration process in order to prevent a misuse of the services or the e-mail address used.
The data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected.
To unsubscribe, you can use the link at the end of the newsletter.
You can revoke your consent to the collection of other personal data collected during the registration process at any time.
The data is passed on to service providers for data processing in connection with the dispatch of newsletters. The data will be used exclusively for sending the newsletter.
MTU Aero Engines offers you the opportunity to register for IR newsletters. In addition to your consent, we require your name and e-mail address for this purpose.
The data is collected via a contact form (see below section e) "Contact forms").
When registering for the newsletter, your e-mail address will be used to keep you informed until you unsubscribe from the newsletter. Other personal data are collected as part of the registration process in order to prevent a misuse of the services or the e-mail address used. The data is passed on to third parties for storage in a database. The data will be used exclusively for sending the newsletter; they will not be used by MTU Aero Engines or the third party for any other purpose.
In this context, the data is not disclosed to third parties. The data is used exclusively for processing the conversation.
The legal basis for processing the data transmitted alongside an e-mail is Art. 6, Section 1a, of the GDPR. We process personal data from the contact form only for the purpose of processing the establishment of contact.
MTU Aero Engines offers you the opportunity to sign up for access to the media database. In the media database, you will find photos and video clips. The data are captured using a contact form, transmitted to us, and stored.
In the registration process, the following data are collected: Last name, first name, email address, telephone number.
Following activation of the account, you will be sent a password. The data captured during registration can be viewed and changed in the respective user profile; the same holds true for the password.
Registration serves to enable access to the media database and must, thus, be handled as quasi-contractual relationship. The personal data to be entered for registration are needed exclusively for access to the media database. The deletion of the account can be requested by sending an email to mtu-mediapool@melago.com, and the account will be deleted immediately.
The media database uses so-called “cookies”, which are sent by the web server to your browser during your visit to our media database and are stored on your computer for later retrieval. For the media database, a so-called session cookie is used, plus a permanent cookie for saving the current status of the categories tree. No other cookies are used here.
§ 6 Use of "Matomo"
MTU Aero Engines is constantly striving to optimise its website. This is based on statistics on the use of the website. MTU Aero Engines uses the web analysis tool "Matomo" to generate the statistics. This ensures that every visit to this website is logged and evaluated anonymously.
Matomo uses so-called "cookies". These are text files which are stored on your computer and are used to analyse the use of our website. For this purpose, the usage information generated by the cookie (including your anonymised IP address) is sent to our server and stored for usage analysis, which helps optimise our website. Your IP address is immediately made anonymous during this process, so that you as a user remain anonymous to us. The information generated by the cookie about your use of our website is not passed on to third parties (see Section 7).
If you do not agree to the storage and evaluation of the aforementioned data from your visit to our website, you can object to the storage and use at any time with effect for the future. In this case, an "opt-out-cookie" is stored in your browser, which means that Matomo shall not collect data about your visit to our website.
IMPORTANT: To set the opt-out cookie, your browser must be set to accept cookies. If you delete your cookies between two visits to our website, this means that the opt-out cookie is also deleted and you may have to reactivate it the next time you visit our website.
Note: If you have activated your browser’s tracking protection feature, Matomo will defer to the setting you have chosen.
Besides the cookies described in Section 5, paragraph f and Section 6 above, we use other cookies which are sent by our web server to your browser during your visit to our website and are stored on your computer for later retrieval. These cookies contain a characteristic character string that enables clear identification of the browser when the website is called up again.
The legal basis for processing personal data using technically necessary cookies is Art. 6, Section 1f of the GDPR. If the user has given his or her consent in this regard, the legal basis for processing personal data using cookies for analysis purposes is Art. 6, Section 1a, of the GDPR.
Most browsers are pre-set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it informs you before cookies are stored. Users who do not accept cookies may not be able to access certain areas of our websites.
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
Our website uses plugins from Google's YouTube platform. The pages are operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
If you visit any of our pages equipped with a YouTube plug-in, a connection is set up to the YouTube servers. The YouTube server is informed about our pages you have visited.
YouTube is used to make the presentation of our online offers appealing. This is a legitimate interest in the sense of Art. 6, Section 1f, of the GDPR.
This page uses the map service "Google Maps" via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to and stored in a Google server in USA. The provider of this page has no influence on this data transmission.
Using Google Maps makes the representation of our online offers appealing, and the places indicated by us on the website easy to locate. This is a legitimate interest in the sense of Art. 6, Section 1f, of the GDPR.
We undertake to protect your privacy and to treat your personal data confidentially. To prevent the loss or misuse of data stored by us, we take extensive technical and organisational safety precautions which are regularly checked and adapted to technological progress.
However, we would like to point out that due to the structure of the Internet, it is possible that the data protection rules and the above-mentioned safety measures may not be observed by other persons or institutions outside our field of responsibility. In particular, unencrypted data transmitted by e-mail, for instance, can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data provided by him/her against misuse through encryption or in any other way.
Our website contains so-called hyperlinks to other providers' websites. When these hyperlinks are activated, you are redirected from our website directly to other providers' websites. You can recognise this, for example, by the change of URL. We cannot assume any responsibility for the confidentiality of your data on these third-party websites, as we have no influence on these companies' compliance with data privacy policies. You can find out how these companies handle your personal data directly on these websites.
You can ask the controller to confirm whether your personal data are processed by us.
all available information about the origin of the data if the personal data are not collected from the data subject.
You have the right to request for information as to whether your personal data is transferred to a third country or to an international organisation. In this connection, you may request that the appropriate guarantees pursuant to Art. 46 of the GDPR in connection with the transmission of data shall be made available to you.
You may ask the controller to rectify and/or complete your personal data if your personal data are incorrect or incomplete. The controller shall make the correction without delay.
if you have filed an objection to the processing pursuant to Art. 21, Section 1, of the GDPR and it has not yet been determined whether the controller's legitimate reasons outweigh your reasons.
If the processing restriction has been limited on the above conditions, we shall inform you before the restriction is lifted.
You revoke your consent, on which the processing was based pursuant to Art. 6, Section 1a or Art. 9, Section 2a of the GDPR, and there is no other legal basis for the processing.
You file an objection against the processing pursuant to Art. 21, Section 1, of the GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21, Section 2, of the GDPR.
Deleting your personal data is necessary to fulfil a legal obligation under EU law or the law of the Member States to which we are subject.
Your personal data have been collected regarding the services offered by the information company pursuant to Art. 8, Section 1, of the GDPR.
If we have made your personal data public and are obliged to delete it pursuant to Art. 17, Section 1, of the GDPR, we shall take appropriate measures, including technical measures, considering the available technology and the implementation costs, to inform the processors of the personal data for which you as the data subject have asked for the deletion of all links thereto or of copies or replications thereof.
If you have asked us to correct, delete or restrict the processing of your personal data, we must inform all recipients of your personal data about this correction or deletion of the data or restriction on processing, unless this proves impossible or entails a disproportionate effort.
You have the right to be informed of such recipients.
processing is carried out automatically.
While exercising this right, you also have the right to request that your personal data be transferred directly from us to another controller, so far as this is technically feasible.
Other persons' freedoms and rights must not be affected by this.
The right to portability shall not apply to the processing of personal data needed to perform a task in the public interest or to exercise official authority conferred on the controller.
You have the right to object at any time, on the grounds of your particular situation, to the processing of your personal data in accordance with Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
We shall no longer process your personal data, unless we can prove protection-worthy compelling reasons for the processing, which outweigh your interests, rights and freedoms, or unless the processing is used to assert, exercise or defend legal claims.
You have the right to revoke your data protection consent at any time.
The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

§ 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17