Privacy Policy
Controller within the Meaning of Data Protection Law
Makery GmbH
Franz Prinz zu Hohenlohe
Löwengrube 18
80333 München
Phone +49 176 51473010
Email: franz.hohenlohe@makery-group.com
Makery GmbH (hereinafter “Makery”) is represented by its legal representatives (Managing Directors).
Data Protection Officer
Makery’s Data Protection Officer is
Christian Schmoll
Attorney-at-law, Certified Specialist in IT Law
CIPP/E, CIPM, FIP, DSB (TÜV)
ISO 27001 Lead Auditor
E-Mail: datenschutz@atania.com
Compliance.One GmbH
Ledererstraße 19, 80331 München
Compliance.One ist zertifiziert nach ISO 27001
Categories of Personal Data Processed and Sources of Data Makery processes the following personal data
Personal master data (e.g. salutation, title, first name, last name);Business partners or third parties you choose to connect with through the Services.
Contact data (e.g. address, email address, telephone number, mobile number, fax number where applicable);
Company-related data (e.g. company name and address);
Information required for the proper execution of the engagement.
If you have not provided the above data directly to Makery, it may have been obtained in connection with the engagement, for example from your employer. If Makery obtains your personal data from other sources, you will be informed accordingly unless Makery is exempt from doing so under applicable law.
Purposes of Data Processing
We may share your information with:
Service providers who assist us with hosting, analytics, customer support, payments, and other operations.
Business partners or third parties you choose to connect with through the Services.
Professional advisors, such as auditors or legal counsel, where necessary.
Third parties as required by law or to protect our rights and the safety of our users.
In connection with a business transaction such as a merger, acquisition, or sale of assets.
Legal Bases for Data Processing
The legal bases for data processing are:
Art. 6(1) subparagraph 1 lit. b GDPR for the performance of an engagement contract or pre-contractual measures, in conjunction with Art. 9(2) lit. f or i GDPR where special categories of personal data are processed; Business partners or third parties you choose to connect with through the Services.
Art. 6(1) subparagraph 1 lit. c GDPR for compliance with legal and professional obligations;
Art. 6(1) subparagraph 1 lit. f GDPR where processing is necessary for the purposes of legitimate interests, in particular contract performance, communication with contacts, and self-promotion;
Art. 6(1) subparagraph 1 lit. a GDPR where you have given consent for specific purposes (e.g. receiving publications).
Recipients of Data
Makery may transfer personal data to:
Public authorities (e.g. tax authorities, courts, social security institutions, supervisory authorities, law enforcement authorities)Art. 6(1) subparagraph 1 lit. c GDPR for compliance with legal and professional obligations;
Bundesanzeiger Verlag GmbH;
Banks, insurance companies, professional associations
Internal departments involved in the engagement (e.g. IT & security)
Service providers (e.g. IT providers within or outside the Makery Group)
Other entities within or outside Makery or the Makery Group (e.g. information security departments)
Other Makery entities, subject to a separate release from confidentiality
Additional recipients depending on the specific engagement and in coordination with clients or data subjects
Transfer of Data to Third Countries
Personal data is transferred to countries outside the EU/EEA only where necessary for contract performance, internal administration, or where you have given consent, or where otherwise legally permitted. Such transfers are carried out only after careful assessment and only if an adequate level of data protection is ensured (Art. 45 et seq. GDPR) or appropriate safeguards are in place, or an exception applies (Art. 49 GDPR). For further information, you may contact Makery’s Data Protection Officer.
Retention Period
Personal data is stored only as long as necessary for the relevant purpose or to comply with statutory retention obligations. Typically, data is retained for ten years plus an additional two-year buffer period. After expiry, Makery assesses whether further retention is required (e.g. based on consent or legal claims).
Data Subject Rights
You have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
You may withdraw any consent at any time with effect for the future.
If processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation. You may object to direct marketing at any time without providing reasons. To exercise your rights, an informal notification (e.g. by email to info@makery.de) is sufficient.
You also have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular at your place of residence, work, or the place of the alleged infringement. The competent authority at Makery’s registered office is: Bavarian State Office for Data Protection Supervision Promenade 27, 91522 Ansbach, Germany
Further information can be obtained from Makery’s Data Protection Officer.
Obligation to provide data
In principle, there is no statutory or contractual obligation towards Makery under which you would be required to provide your personal data to Makery. However, should you be or become a direct contractual partner of Makery, the provision of your personal data is regularly required in order to enter into and perform the contract with you. If the required data is not provided to Makery, this may result in a mandate relationship either not being able to be established or not being legally permitted to be established, or in Makery being unable to fulfill its obligations arising from the mandate relationship, whether in whole or in part.