Privacy policy

Controller

The controller responsible for data processing on this website is media:meets GmbH, Schnabelstraße 1, 45134 Essen, Germany.

Email: datenschutz@mediameets.de. Further details are available in our legal notice.

Data minimisation

We process personal data solely within the limits of the applicable law (GDPR, German BDSG and TDDDG). This service is deliberately data-frugal: without your consent we set no analytics or advertising cookies. You can enable optional audience measurement with Google Analytics yourself in the cookie banner; we use no advertising networks.

No account is required to use the free generator.

Legal bases

Where we obtain consent, Art. 6(1)(a) GDPR is the legal basis. Processing to perform a contract or pre-contractual measures relies on Art. 6(1)(b) GDPR, processing to meet legal obligations on Art. 6(1)(c) GDPR, and processing to safeguard legitimate interests on Art. 6(1)(f) GDPR.

Website delivery and server log files

When you access this website, our hosting provider automatically records information in what are known as server log files, transmitted by your browser: IP address, date and time of access, the page requested, the browser and operating system used, and the previously visited page (referrer).

This data serves only the technical delivery, security and stable operation of the service and is not combined with other data sources. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted after a short period.

Cookies

We use strictly necessary cookies only. A session cookie keeps your session alive (for example while you are signed in), a further cookie stores your chosen language, and a consent cookie (cookie_consent) stores your choice in the cookie banner for about six months. These cookies are required to operate the website; no consent is needed for them (Section 25(2) TDDDG).

The cookie banner additionally offers an “Analytics” category. If you agree, Google Analytics sets cookies for audience measurement (details in the following section). This analysis happens only with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” in the footer; the related cookies are then removed. We do not use advertising or marketing cookies.

Web analytics with Google Analytics

Only if you consent to the “Analytics” category in the cookie banner do we use Google Analytics (GA4), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how the website is used so we can improve it.

It sets cookies (such as _ga and _ga_*) that recognise returning use. The IP address is truncated or processed anonymously by Google Analytics 4. Data may be transferred to Google servers, including in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is solely your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer; the cookies set are then deleted. Without your consent no analysis takes place.

• Google: policies.google.com/privacy

Creating GARAN labels

To create a label you enter three values: the guarantee duration, the brand and the model identifier. These inputs are processed solely to render the requested label and are not stored in a database.

The rendered label files are cached to speed up repeated requests (on Amazon Web Services in the production environment). They are stored content-addressably via a checksum, which allows no conclusions about your identity. To prevent abuse we limit the number of requests per IP address (Art. 6(1)(f) GDPR).

Registration and user account

You may optionally create an account. In doing so we process your name, your email address, your preferred language and – when you register with a password – your password, which is stored in encrypted form only. The processing serves to provide and manage your account (Art. 6(1)(b) GDPR).

After registering with email and password we send you an email to confirm your address. We store your account data until you delete your account.

Sign-in with Google and LinkedIn

Alternatively you can sign in with Google or LinkedIn. When you click the relevant button you are redirected to the respective provider and sign in there. We then receive your name, your email address and a unique user identifier from the provider, which we associate with your account.

We store neither access tokens nor your profile picture. The providers are Google Ireland Limited and LinkedIn Ireland Unlimited Company. Data may be transferred to servers in the USA; the providers are certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR together with your consent (Art. 6(1)(a) GDPR).

• Google: policies.google.com/privacy
• LinkedIn: linkedin.com/legal/privacy-policy

Email

Within an account we send functional emails only: the confirmation of your email address and, on your request, a link to reset your password. We do not send promotional emails or newsletters.

Your rights

Under the GDPR you have the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of a given consent with effect for the future (Art. 7(3) GDPR)

Right to complain

To exercise your rights, a message to datenschutz@mediameets.de is enough. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Retention and deletion

We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention periods. Account data is removed when you delete your account; server log files after a short period.

Changes to this privacy policy

We update this privacy policy whenever changes to our services or the legal situation make it necessary. The version published on this page at any given time applies.