Privacy Policy

We take the protection and security of your (hereinafter the “user”) personal data (hereinafter “pd”) as defined by Art. 4 no. 1 General Data Protection Regulation (hereinafter “GDPR”) seriously. Consequently, we comply with the statutory provisions to ensure adequate protection of the pd of every single user. We would like to inform you hereinafter about the nature, scope and purpose of the processing of pd:

Muehlhan AG (hereinafter “Muehlhan”) processes pd exclusively within the limits of the GDPR and within the limits of the provisions referred to in Art. 95 GDPR in combination with §§ 11-15a Telemediengesetz (German Telemedia Act – “TMG”).

The present Privacy Policy (hereinafter „PP“) provides the information regarding the general use of the website according to Art. 13 GDPR.


1. Contact data of the controller (Art. 13 subs. 1 a) GDPR)

The controller responsible for the operation of the website and thus for the handling of pd is Muehlhan AG, Schlinckstraße 3, 21107 Hamburg, Germany.


2. Contact data of the data protection officer (Art. 13 subs. 1 b) GDPR)

The data protection officer responsible for Muehlhan is 

RA Georg Baumann
c/o Georg Baumann Informationssysteme GmbH
Eichholzer Str. 80
50389 Wesseling
Phone: 02236 92920


3. Types of personal data

a. Website access / free downloads
Every time a user accesses the website as well as in the case of a download of documents in the freely accessible area of the website, the following log files of the respective user are collected automatically:
(1) Information on the browser type and the browser version used
(2) Operating system of the user
(3) Address of the website visited before
(4) IP address of the user
(5) Date and time of access
(6) Status and data volume transferred in the context of the query

b. Email contact
When the user makes use of the possibility to contact Muehlhan by email under, the email address including all technically related data as well as the content of the message are stored. It is particularly important to know that the email address, if personalised, may constitute pd in terms of Art. 4 no. 1 GDPR; the same is the case with the content of the message or parts thereof.
The email addresses of all groups affiliated with Muehlhan are also available on the website The entire communication which the user enters into with these affiliated groups via the said email addresses is also stored on a server in the EU. However, Muehlhan does not know whether any further data processing takes place at the registered office of the respective affiliated group and whether such data processing is required under the national legislation of the affiliated group; in case of doubt, the user must inform him-/herself by addressing an appropriate information request to the affiliated group in question. 

c. Filing of application documents
Application documents can also be transmitted by email to (see sub-page “career”). The data which is processed in this context constitutes pd in terms of Art. 4 no. 1 GDPR.


4. Purposes of pd collection and storage (Art. 13 subs. 1 c) GDPR)

a. Website access / free downloads
The log files are processed to ensure proper functioning of the website. In addition, the data serves to optimise the website and ensure the security of the information technology systems. The data is not analysed for marketing purposes.

b. Contact
The data provided by the user for communication purposes is processed for no purposes other than handling the user’s request. 

c. Application documents
The data is processed for the purpose of determining the qualification and aptitude of the applicant for the vacancy to be filled by Muehlhan. 


5. Recipients/Third parties/Transfer to third countries (Art. 13 subs. 1 e) and f) GDPR)

Not only Muehlhan but also third parties that process the data on behalf of Muehlhan or can access the data in the context of the services they render to Muehlhan, may receive the data (e.g. IT service providers).
We do not transfer the user data to third parties (Art. 4 no. 10 GDPR) except when the user explicitly consents to the transfer.
All data is stored on servers and/or computers in the European Union, the data is not transferred to a third country and there is no intention to do so either.
Any other transfer of pd, e.g. to government bodies or authorities, is made only within the limits of the law.


6. Analysis tools

a. Google Analytics
Muehlhan uses Google Analytics which is a web analysis service of Google Inc. (”Google”). Google Analytics uses cookies (see above) which enable to analyse how the user uses the website. The information generated by the cookie about how the website is used is transferred to a server in the USA and stored there. When the IP anonymisation is activated on this website, your IP address, prior to the transfer, will be shortened by Google within the European Union Member States and other countries party to the Agreement on the European Economic Area. Google, acting on instruction and on behalf of Muehlhan, uses this information to analyse the use of the website, to compile reports on the website activities and to render further services to Muehlhan that are related to the use of the website and the use of the Internet. The IP address which is transferred from the user’s browser in the context of Google Analytics is not combined or pooled with other data of Google.
The users can prevent data collection by Google Analytics by clicking the link below. In this case, an opt-out cookie is set which prevents any future collection of your data when you visit this website.;

More detailed information on the terms of use and data protection and privacy is available under and .

b. Google AdSense

In addition, Muehlhan uses Google AdSense which is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and which enables advertisements to be integrated in websites/ Internet pages. Google AdSense uses cookies, too. The storage of cookies on the user’s computer enables Google to analyse how the website is used. In addition, Google AdSense uses so-called web beacons which are invisible graphic images. They enable Google to analyse information such as the clicks on this website or the website traffic.
The said information, the IP address of the user and the delivery of advertisement formats are transferred to Google servers in the USA and stored there. Google may possibly transfer the entire afore-mentioned information to third parties if this is required by law or where third parties are engaged by Google to process the data as described above. However, Google does not combine or pool the IP address with other data of the user.
The users may also prevent the storage of the said cookies on their computers. For such purpose, they must set their Internet browser to prevent the storage.

Further information on data protection and privacy is available under


7. Legal basis for the data processing (Art. 13 subs. 1 c) DSGVO)

a. Website access / free downloads
The legal basis for the processing of data by means of cookies, analysis tools and log files is Art. 6 subs. 1 f) GDPR.

b. Email contact 
The legal basis for the processing of the data which the user transfers to us in the context of an email transmission is Art. 6 subs. 1 f) GDPR when the sender is not our customer yet or does not otherwise maintain a business relationship with us. If there is already a contractual relationship with the user or such a relationship is intended to be immediately established on the sender’s initiative, the legal basis for the data processing is Art. 6 subs. 1 b) GDPR.

c. Filing of application documents 
The legal basis for the processing including but not limited to the storage of the data contained in the application documents is § 26 BDSG (German Federal Data Protection Act (new version).


8. Storage duration (Art. 13 subs. 2 a) GDPR)

The data is stored until it is no longer required for fulfilling the purpose of the data collection or until any consent given to the processing is withdrawn, which is in each case subject to the restrictions of Art. 17 subs. 3 GDPR.
The data is stored as described in the following:
- Log files: maximum storage duration: 14 days.
- Free download: upon completion of the download.
- Contact by contact form / email: for one month after the request has been answered unless further correspondence on the same issue has taken place before the expiry of the said period or the data is still required for the purposes of a contractual relationship (for the performance/ execution of a contract) or must be retained for the duration of the statutory retention periods that must be observed. 
- Application documents: for one year after the application has been rejected. The documents of the applicants who are employed by Muehlhan will be transferred into a personnel file. 
- Analysis tools: see above.


9. Rights of the user (Art. 13 subs. 2 b) – e), Art. 7 subs. 3 GDPR)

The user, subject to the statutory conditions being fulfilled, has the right at any time to request information which data relating to him or her we have stored, Art. 15 GDPR, as well as the right to rectification of this data, Art. 16 GDPR, the right to restriction of the processing, Art. 18 GDPR, and the right to erasure of his or her data, Art. 17 GDPR.
Where the user has asserted a right to rectification, erasure or restriction of the processing against Muehlhan, Muehlhan will communicate any such rectification or erasure of data or restriction of processing to each recipient to whom the relevant pd has been disclosed, unless this proves impossible or involves disproportionate effort.
Moreover, the user has the right to withdraw any consent he/ she has given (Art. 7, Art. 6 subs. 1 a) GDPR), see Art. 7 subs. 3 GDPR. The withdrawal of consent does however not affect the lawfulness of processing based on consent before its withdrawal.
In addition, the user has the right to object, on grounds relating to his or her particular situation, at any time to processing of pd concerning him or her which is based on Art. 6 subs. 1 e) or f) GDPR, see Art. 21 GDPR.
Moreover, the user has the right to receive the pd concerning him or her, which he or she has provided to Muehlhan, in a structured, commonly used and machine-readable format provided that the statutory conditions are fulfilled (right to data portability, Art. 20 GDPR)
When the user wants to exercise any of the aforesaid rights, he/she must address to the bodies/ persons designated in sec. 1 or 2.
In all other respects, the user has the right to lodge a complaint with a supervisory authority provided that the statutory conditions are fulfilled, see Art. 77 GDPR.