Data protection information for customers and interested parties in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation
MT Logistik GmbH is responsible for the processing of your personal data in terms of data protection. In accordance with the General Data Protection Regulation (GDPR), you as the data subject have certain rights under Articles 12 ff. GDPR, which we as a company must uphold. Which specific data is processed and how it is used depends on the specific relationship with you. Further information on the purposes of data processing can be found in the respective contract documents, forms, any declaration of consent and other information provided to you (e.g. in the context of using our website). This data protection information is updated regularly.
Responsible for data protection
MT Logistik GmbH
Henri-Duffaut-Straße 1
35578 Wetzlar
Represented by the managing director Jan Mädel
T: +49 (0) 6441 210 13 0
M: info@mt-logistik
Contact details of the data protection officer
We have appointed a data protection officer. You can contact them at:
RPA Datenschutz + Compliance GmbH
Hauser Gasse 19b
35578 Wetzlar
T: +49 (0)6421 301570-0
M: info@rpa-datenchutz.de
Principles of processing
The processing of your data may be based on various legal grounds. This depends on your relationship with us and the type of service to be provided.
Possible legal bases are as follows:
Art. 6 (1) (b) GDPR – Contract or contract initiation
Processing is possible within the framework of a contract with you or any pre-contractual relationships. Without processing your personal data, we cannot fulfil our (pre-)contractual obligations.
In this context, your data is processed primarily to fulfil our contractual obligations in accordance with your orders and requests. This includes all related services, measures and activities. In particular, this includes contract-related communication with you, documentation for the verifiability of transactions, orders and agreements, and quality assurance measures.
It also includes goodwill arrangements, the management and optimisation of our business processes, compliance with statutory due diligence obligations, and internal management and control by affiliated companies. Further purposes include statistical evaluations for corporate management, cost accounting and controlling, internal and external reporting, the billing and tax assessment of operational services ( ), risk management, and the enforcement or defence of legal claims.
In addition, processing serves to ensure IT and general security – this includes, among other things, building and facility security as well as measures to protect domestic rights, for example through access controls. It also includes the protection of the integrity, authenticity and availability of data, the prevention and investigation of criminal offences, and control by internal or external audit and supervisory bodies.
Art. 6(1)(f) GDPR – Legitimate interests of us or third parties
In addition, processing may be necessary to safeguard our legitimate interests or those of third parties, provided that your legitimate interests do not override these.
In this context, personal data is processed in particular for the following purposes:
1. Corporate communications and marketing
- External presentation of our company, in particular through photo and video recordings at events for marketing and advertising purposes
- Sending direct advertising for our own similar products, provided there is no objection
- Carrying out statistical evaluations and market analyses for sales promotion and customer communication
2. Product and company development
- Further development of existing products, services, systems and internal processes
- Enrichment and maintenance of our databases, including through research of publicly available information
3. Risk management and information exchange
- Obtaining information and transferring data to credit agencies, insofar as this is necessary to secure our economic risk
- Assertion and defence of legal claims, including outside existing contractual relationships
4. Security and protective measures
- Measures to prevent and investigate criminal offences, insofar as these do not serve exclusively to fulfil legal obligations
- Building and facility security, e.g. through access controls and video surveillance, beyond general duties of care
- Exercising domiciliary rights, in particular through video surveillance to protect customers and employees and to secure evidence in the event of criminal offences
5. Data storage and archiving
- Restricted storage of personal data if complete deletion is not possible due to technical circumstances or disproportionate effort
6. Disclosure in a business context
- Data transfer within the scope of our business activities, provided that this is done to fulfil legitimate business interests
Art. 6(1)(a) GDPR – Consent
If you have consented to the processing of your personal data – for example, for use for marketing purposes – this consent (in addition to other legal bases, where applicable) constitutes the legal basis for the corresponding data processing.
You can revoke your consent at any time with effect for the future. You will be informed separately in the relevant consent text about the specific processing purposes and the consequences of revoking or withholding consent.
Art. 6 (1) (e) GDPR – Compliance with legal requirements
Like any economically active company, we are also subject to a variety of legal and regulatory obligations. These include, in particular, commercial and tax law requirements, social law provisions and, where applicable, regulatory and other official requirements.
In this context, the processing of personal data may serve the following purposes:
- Identity and age verification
- Measures to prevent fraud and money laundering
- Fulfilment of tax law recording, control and reporting obligations
- Archiving obligations within the framework of data protection and data security requirements
- Audits by financial or supervisory authorities
In addition, in individual cases, the disclosure of personal data may be necessary in the context of official or legal proceedings – for example, to preserve evidence, prosecute criminal offences or enforce civil law claims.
The categories of data we process, insofar as we do not receive personal data directly from you, and their origin
To the extent necessary for the provision of our services, we process personal data lawfully obtained from other companies or other third parties (e.g. credit agencies, address publishers). In addition, we process personal data that we have lawfully obtained, received or acquired from publicly accessible sources (such as telephone directories, commercial and association registers, registration registers, debtor registers, land registers, the press, the internet and other media) and are permitted to process.
This may include the following categories of personal data in particular:
1. Personal master and contact data
- First name and surname
- Date and place of birth
- Nationality
- Marital status
- Occupation and industry
- Residential address, telephone number, email address
2. Address and registration details
- Current and previous registered addresses
- Comparable publicly available address information
3. Financial and payment data
- Information on financial situation, in particular creditworthiness data (including scoring to assess economic risk)
- Payment information and, where applicable, confirmation of coverage for bank or credit card payments
4. Contract and communication history
- Information on previous customer relationships and completed or ongoing transactions
5. Usage and interaction data
- Data on the use of our digital offerings (e.g. websites, apps, newsletters), in particular:
- Times of access
- Pages visited and functions used
- Links clicked and entries made
6. Image and video data
- Recordings, e.g. in the context of events or access controls, to the extent permitted by law
Recipients or categories of recipients of your personal data
1. Internal recipients
Within our company, only those departments and organisational units that need your personal data to fulfil contractual and legal obligations or to protect legitimate interests have access to it.
2. External recipients
Your data will only be passed on to external parties in the following cases:
- To fulfil a contract or with your express consent, for example to handle business processes
- To fulfil legal obligations, such as information, reporting or disclosure obligations to authorities, or if the data transfer is in the public interest
- On the basis of a legitimate interest, whether our own or that of a third party, provided this is permissible under data protection law
3. Commissioned service providers (processors)
We use external service providers who process personal data on our behalf. These service providers are contractually obliged to comply with data protection regulations in accordance with Art. 28 GDPR. Typical categories of such processors include, for example:
- IT and data centre service providers
- System and application support (e.g. maintenance, hosting, archiving)
- Printing and shipping service providers (e.g. lettershops, courier services, logistics companies)
- Customer service and call centres
- Data processing (e.g. validation, destruction, plausibility checks)
- Marketing, media and communications service providers
- Auditors, tax advisors, credit institutions
- Companies for data disposal or technical support
In all cases, we ensure that external recipients only receive the data necessary for the task at hand and process it exclusively for the intended purposes.
4. No further data transfer
Your data will not be transferred to third parties beyond this. If third parties are involved in order processing, they are subject to the same data protection and security standards as our company.
Storage period
We store your personal data for the duration of the entire business relationship. This includes both the initiation of a contractual relationship (pre-contractual phase) and the execution and processing of the contract.
In addition, we are bound by statutory storage and documentation obligations, in particular those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). These stipulate storage periods of up to ten years beyond the end of the business or contractual relationship.
In individual cases, longer storage may also be necessary – for example, to secure evidence within the framework of statutory limitation periods. According to Sections 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years; in certain cases, however, periods of up to 30 years may apply.
As soon as your data is no longer required for the aforementioned purposes, it will be deleted on a regular basis – unless further processing is necessary for a limited period of time to safeguard our overriding legitimate interests. Such a legitimate interest may exist, for example, if immediate deletion is technically impossible or only possible with disproportionate effort and, at the same time, suitable technical and organisational measures ensure that the data is not processed for other purposes.
Your rights as a data subject pursuant to Art. 15 ff. GDPR
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), which you can assert against us at any time:
Right of access (Art. 15 GDPR)
You have the right to know whether we process personal data about you. If this is the case, you will receive information about the data concerned, the purposes of the processing, its origin, recipients and the planned storage period.
Right to rectification (Art. 16 GDPR)
You may request the immediate rectification of inaccurate or incomplete personal data.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data if, for example, the data is no longer necessary for the original purposes or you have withdrawn your consent and there is no other legal basis for the processing.
Right to restriction of processing (Art. 18 GDPR)
You may request that the processing of your data be restricted if certain conditions are met – for example, if you dispute the accuracy of the data or have objected to the processing.
Right to data portability (Art. 20 GDPR)
You have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format. Upon request, this data can also be transmitted directly to another controller, where technically feasible.
Right to object (Art. 21 GDPR)
You may object to the processing of your personal data at any time for reasons arising from your particular situation. Your data will then no longer be processed unless there are compelling legitimate grounds for the processing or the processing serves to assert, exercise or defend legal claims.
Right not to be subject to automated decisions (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if such a decision is necessary for the conclusion or performance of a contract, is permitted by law or is made with your express consent. In these cases, we will take appropriate measures to protect your rights and freedoms.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
If you believe that the processing of your personal data violates applicable data protection law, you can lodge a complaint with a data protection supervisory authority. This can be done with the supervisory authority at your place of residence, workplace or the place of the alleged violation.
As of November 2025