megro - Data Privacy Statement

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:

megro GmbH & Co. KG
Am Schornacker 30
46485 Wesel
Germany

Telephone: +49 (0) 281 9899-0
Website: www.megro.de
Email: info@megro.de

Data Protection Officer

You can contact our Data Protection Officer at:

AGAD Service GmbH
Dr Nils Helmke
Waldring 43–47 | 44789 Bochum

Telephone: 0234 282 533-20

datenschutz@agad.de

Newsletter Subscription

You may subscribe to our email newsletter, which we use to inform you about offers from our company.

The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by using the “unsubscribe” link in any newsletter email or by contacting the controller.

When you subscribe, we may send you a double opt-in email to verify your email address. In addition to the information entered in the subscription form, we process your IP address and the time of registration.

The data is processed solely for the purpose of sending our newsletter.

Data provided for newsletter distribution is retained until you unsubscribe. Data stored by us for other purposes remains unaffected.

If you provided your email address when purchasing goods or services, we may periodically send you information by email about goods or services similar to those you have already purchased, unless you have objected. This processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG).

Job Applications

If you apply for a position with us, we process your personal data. The legal basis is Article 6(1)(b) GDPR in connection with steps taken prior to entering into a contract. If your data is required after completion of the recruitment process to defend against legal claims, processing is based on our legitimate interest in meeting evidentiary obligations pursuant to Article 6(1)(f) GDPR, for example in connection with equal treatment legislation.

We process the data you provide with your application and the information we require to assess your suitability for the position concerned.

The purposes of processing are to manage your application, assess your suitability for the vacancy, and contact you in connection with your application or possible alternative positions.

We delete your data after six months. If you have agreed to be included in our applicant pool, we delete it after two years. If your application results in employment, we retain your data for the duration of your employment with us.

Hosting and Server Log Files

The servers hosting our website are operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have entered into a data processing agreement with the provider pursuant to Article 28 GDPR. The legal basis for using an external hosting provider is the performance of a contract with prospective and existing customers pursuant to Article 6(1)(b) GDPR and our legitimate interest in providing a secure, high-performance website pursuant to Article 6(1)(f) GDPR.

Whenever our website is accessed, our system’s web server collects information about the device used. We collect the following data:

Browser type information
The operating system of the user’s device
Date and time of access
The website from which the user accessed our website (referrer)

We collect IP addresses only in anonymised form; our log files therefore do not contain personal data within the meaning of the GDPR.

Contacting Us

You may contact us by email, telephone, contact form or post. This may involve the processing of personal data. We process your data to respond to and manage your enquiry. We will not disclose your data to third parties without your consent.

The legal basis for this processing is our legitimate interest in responding to your enquiry efficiently pursuant to Article 6(1)(f) GDPR.

If you contact us by email, we store your email address and the information contained in the email. If you use the contact form, we also record your IP address in pseudonymised form in addition to the details entered in the form. If you contact us by post, we store your return address and the content of the letter. If you contact us by telephone, we may record personal data depending on the circumstances.

We retain your data until you ask us to delete it or until the purpose of processing—responding to your enquiry—has been fulfilled.

Customer Account Registration

You may create a personal customer account in our online shop. The legal basis for processing your data is the performance of a contract or steps taken prior to entering into a contract pursuant to Article 6(1)(b) GDPR. Where additional legitimate interests apply, such as preventing misuse or fraud, we rely on Article 6(1)(f) GDPR.

When creating an account, we process the following personal data:
Required information
Optional information

The purposes of processing are to set up and manage your customer account, simplify future ordering processes, provide access to your order history, and enable the optional use of additional account-based services.

As a rule, we retain your data for the duration of the customer relationship. We then delete or anonymise it unless statutory retention obligations, particularly under commercial and tax law, require otherwise or we exceptionally need the data to establish, exercise or defend legal claims.

You may delete your customer account at any time in the account settings or email us with your deletion request. Subject to statutory retention periods, your data will then be deleted or restricted without delay.

Information marked as mandatory is required to open an account. Without it, we cannot provide a customer account. All other information is voluntary.

Social Media Profiles

We maintain profiles on the following social networks (collectively, “social media”) to communicate with customers, prospective customers and the public and to promote our services:

Instagram (Meta Platforms, Inc.)
Facebook (Meta Platforms, Inc.)
X (formerly Twitter; X Corp.)
LinkedIn (LinkedIn Ireland Unlimited Company)
Xing (New Work SE)

For information about the scope and purpose of processing, please refer to the applicable privacy policies of the respective networks:

Instagram: (https://privacycenter.instagram.com/policy)
Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
X (Twitter): (https://x.com/de/privacy)
LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)
Xing: (https://privacy.xing.com/de/datenschutzerklaerung)

Processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in maintaining a contemporary public presence. Where consent is required, processing is based on Article 6(1)(a) GDPR.

If you provide additional data to these services, such as through private messages, your consent will generally be required. Please note that we have no control over processing carried out by social media providers. If you have questions or wish to exercise your data subject rights, such as access or deletion, please contact the relevant platform operator directly.

You may follow or unfollow our social media profiles at any time. If you do not want social media service providers to collect data about your visits to our profiles, please use the deactivation options in your user account, such as logging out or blocking advertising trackers, or install appropriate browser add-ons.

Brevo

We use “Brevo” on our website to manage and evaluate email marketing campaigns. The provider is Sendinblue SAS (“Brevo”), 106 boulevard Haussmann, 75008 Paris, France. In delivering its services, Brevo uses Elastic APM, a service provided by the US-based subprocessor Elasticsearch, to monitor application performance and diagnose technical issues.

The legal basis for using Brevo is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Brevo includes your email address, IP address, browser and device information, and the date and time of email interactions. Cookies are also set.

Brevo may collect and analyse user data to create user profiles for marketing and analytics purposes.

The purpose of processing is to manage and analyse email marketing campaigns and customer interactions.

According to Brevo’s privacy policy, personal data is retained by default for the duration of the contractual relationship and for no more than three years after that relationship ends.

For further information about Brevo’s privacy practices, please visit: https://www.brevo.com/legal/privacypolicy/

Information about the cookies used is available at: https://www.brevo.com/legal/cookies/

Google Analytics

We use “Google Analytics” on our website to analyse user behaviour. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using Google Analytics is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Google Analytics includes your IP address, browser and device information, location data, the time of your visit, and information about your interaction with the website. Cookies are also set.

If you are signed in to a Google account, this data may be linked to a user profile.

The purpose of processing is to analyse and evaluate user behaviour in order to optimise the website and our marketing activities.

The default data retention period for Google Analytics is 14 months.

Personal data may be transferred to third countries that do not provide a level of data protection equivalent to that in the EU, including the USA. Google is certified under the EU–US Data Privacy Framework, which governs the secure processing of EU residents’ data in the USA. We have entered into a data processing agreement with Google to ensure that personal data is processed only on our instructions and in compliance with the GDPR.

For further information about Google Analytics privacy practices, please visit: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

Information about the cookies used is available at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking this link: https://tools.google.com/dlpage/gaoptout

Google Fonts

We use “Google Fonts” on our website to embed external fonts and improve the website’s visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using Google Fonts is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of processing is to provide an optimised and consistent display of fonts on the website.

For further information about Google Fonts privacy practices, please visit: https://policies.google.com/privacy

Information about the cookies used is available at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking this link: https://policies.google.com/privacy#infochoices

Google Tag Manager

We use “Google Tag Manager” on our website to manage website tags efficiently. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using Google Tag Manager is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Google Tag Manager includes your IP address, browser and device information, and information about your interaction with the website. Google Tag Manager itself does not set cookies, but it may trigger other services that do.

The purpose of processing is to simplify the integration and management of website tags and tracking codes used to analyse user interactions.

For further information about Google Tag Manager privacy practices, please visit: https://policies.google.com/privacy

Information about the cookies used is available at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking this link: https://tools.google.com/dlpage/gaoptout

YouTube No-Cookie

We use YouTube No-Cookie, also known as “YouTube in privacy-enhanced mode”, on our website to embed videos without using cookies that track user behaviour. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using YouTube No-Cookie is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by YouTube No-Cookie includes your IP address, device information, and information about your interaction with the video. Data is stored in your browser’s web storage.

The purpose of processing is to embed videos while minimising the use of cookies and improving user privacy.

Personal data may be transferred to third countries that do not provide a level of data protection equivalent to that in the EU, including the USA. We have entered into a data processing agreement with Google to ensure that personal data is processed only on our instructions and in compliance with the GDPR. Google is certified under the EU–US Data Privacy Framework, which governs the secure processing of EU residents’ data in the USA.

For further information about YouTube No-Cookie privacy practices, please visit: https://policies.google.com/privacy#infocollect

Information about the cookies used is available at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking this link: https://policies.google.com/privacy#infochoices

CCM19 Cloud

We use “CCM19 Cloud” on our website to manage user consent for cookies and tracking technologies in compliance with data protection requirements. The provider is Papoo Software & Media GmbH (“Papoo”), Auguststr. 4, 53229 Bonn, Germany.

The legal basis for using CCM19 is compliance with a legal obligation pursuant to Article 6(1)(c) GDPR.

Data processed by CCM19 Cloud includes your IP address, browser information, date and time of access, and consent settings. Cookies are set to store your consent preferences.

The purpose of processing is to manage user consent for cookies and tracking technologies.

For further information about CCM19 privacy practices, please visit: https://www.ccm19.de/en/datenschutzerklaerung.html

Friendly Captcha

We use “Friendly Captcha” on our website to protect against spam and automated misuse. The provider is Friendly Captcha GmbH, Am Anger 3–5, 82237 Woerthsee, Germany (“Friendly Captcha”).

The legal basis for using Friendly Captcha is our legitimate interest pursuant to Article 6(1)(f) GDPR in protecting our website against spam and misuse and ensuring its security and functionality.

Data processed by Friendly Captcha includes an anonymised IP address, browser and device information, and interactions used to solve the puzzle. The service does not set cookies.

The purpose of processing is to protect websites against spam and misuse by verifying user interactions through privacy-friendly CAPTCHA solutions.

According to Friendly Captcha’s privacy notice, log data is retained for up to 30 days. This information is available at: https://friendlycaptcha.com/legal/privacy-end-users/

For further information about Friendly Captcha’s privacy practices, please visit: https://friendlycaptcha.com/legal/privacy-end-users/

Google Ads Conversion Tracking

We use “Google Ads Conversion Tracking” on our website to measure the effectiveness of our advertising campaigns. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using Google Ads Conversion Tracking is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Google Ads Conversion Tracking includes your IP address, browser and device information, and details of your interactions with advertisements. Cookies are set to track conversions.

If you are signed in to a Google account, data generated by Google Ads Conversion Tracking may be linked to a user profile.

The purpose of processing is to measure the effectiveness of advertising campaigns and track user interactions after advertisements are clicked.

For further information about Google Ads Conversion Tracking privacy practices, please visit: https://policies.google.com/privacy

Google Analytics

We use “Google Analytics” on our website to analyse user behaviour. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for using Google Analytics is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

If you are signed in to a Google account, this data may be linked to a user profile.

The purpose of processing is to analyse and evaluate user behaviour in order to optimise the website and our marketing activities.

The default data retention period for Google Analytics is 14 months.

For further information about Google Analytics privacy practices, please visit: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

Information about the cookies used is available at: https://policies.google.com/technologies/cookies

You can prevent your data from being processed by clicking this link: https://tools.google.com/dlpage/gaoptout

Microsoft Clarity

We use “Microsoft Clarity” on our website to analyse user interactions and improve the user experience. The provider is Microsoft Ireland Operations Limited (“Microsoft”), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The legal basis for using Clarity is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Data processed by Microsoft Clarity includes your IP address, location, time of visit, device information, and information about your interaction with the website. Cookies are also set to collect this data.

The purpose of processing by Microsoft Clarity is to produce statistical analyses of user interactions and anonymised user behaviour profiles in order to optimise the website’s usability.

Microsoft Clarity retains data for a standard period of 13 months.

Personal data may be transferred to third countries that do not provide a level of data protection equivalent to that in the EU, including the USA. We have entered into a data processing agreement with Microsoft to ensure that personal data is processed only on our instructions and in compliance with the GDPR. Microsoft is certified under the EU–US Data Privacy Framework, which governs the secure processing of EU residents’ data in the USA.

For further information about Clarity’s privacy practices, please visit: https://privacy.microsoft.com/en-us/privacystatement

Rights of Data Subjects

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

Right of Access (Article 15 GDPR)

You have the right to request information about the personal data stored about you, the purposes for which it is processed, the recipients from whom it was obtained or to whom it is disclosed, and how long it is retained.

Right to Rectification (Article 16 GDPR)

You may request the prompt rectification of inaccurate personal data or completion of incomplete personal data.

Right to Erasure (“Right to Be Forgotten”) (Article 17 GDPR)

Under certain conditions, you may request the deletion of your personal data, for example if it is no longer required for the purposes for which it was collected or if you have withdrawn your consent.

Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that the processing of your personal data be restricted, for example if you contest its accuracy or if the processing is unlawful but you prefer restriction to deletion.

Right to Data Portability (Article 20 GDPR)

You may request that personal data concerning you which you have provided to us be supplied in a structured, commonly used and machine-readable format, or that we transmit this data directly to another controller.

Right to Object (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data where the processing is based on our company’s legitimate interests or on the performance of a task carried out in the public interest. Where your objection is justified, we will cease processing unless compelling legitimate grounds for the processing apply.

Withdrawal of Consent (Article 7 GDPR)

If you have given us your consent, you may withdraw it at any time, without stating reasons, with effect for the future.

Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the location of the alleged infringement.

Last updated 29/07/2026