PRIVACY POLICY | mapletable

General Information

This Privacy Policy provides detailed information about what happens to your personal data when you visit our website https://www.mapletable.de. Personal data refers to any information that can be used to identify you personally. We strictly adhere to legal requirements when processing your data, in particular the General Data Protection Regulation (“GDPR”), and place great importance on ensuring that your visit to our website is completely secure.

Data Controller

The entity responsible under data protection law for the collection and processing of personal data on this website is:

MapleTable®

Brookweg 58

21465 Wentorf

info@mapletable.de

Website: www.mapletable.de

Access Data (Server Log Files)

When you visit our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us. This data includes:

Browser type and version on your computer
Operating system used on your computer
Referrer URL (the source from which you accessed our website)
Hostname of the accessing computer
Date and time of the server request
The IP address currently being used by your computer (anonymized if necessary)

As a rule, we are unable to identify specific individuals, nor is this our intention. Such data is processed in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

To make visiting our website more appealing and to enable the use of certain features, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot execute programs or transmit viruses to your computer system.

Cookies that are necessary for the execution of the electronic communication process or for the provision of certain functions you have requested are stored on the basis of Article 6(1)(f) of the GDPR. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services. To the extent that other cookies (e.g., cookies for analyzing your browsing behavior) are stored, these are addressed separately in this Privacy Policy.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block cookies in certain cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Newsletter

If you have given your explicit consent, we will send our newsletter to your email address on a regular basis. To receive our newsletter, you must provide us with your email address and then verify it. No additional data is collected, and any further information is provided on a voluntary basis. The data is used exclusively for the purpose of sending the newsletter.

The data provided when subscribing to the newsletter is processed exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time. To revoke your consent, simply send an informal email or unsubscribe via the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.

Data entered to set up the subscription will be deleted upon unsubscription. If this data has been transmitted to us for other purposes or to other locations, it will remain with us.

Contact Form

If you contact us via email or through a contact form, the data you submit—including your contact information—will be stored so that we can process your inquiry or respond to any follow-up questions. This data will not be shared without your consent.

The processing of data entered into the contact form is based exclusively on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. To do so, simply send us an informal email. The lawfulness of data processing operations carried out prior to revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request its deletion, revoke your consent to its storage, or there is no longer any need to store the data. Mandatory legal provisions—in particular retention periods—remain unaffected.

Use and Disclosure of Data

We will neither sell nor otherwise market the personal data you provide to us, for example via email (such as your name, address, or email address), to third parties. Your personal data will be processed solely for the purpose of corresponding with you and only for the specific purpose for which you provided the data to us. To process payments, we will forward your payment details to the financial institution responsible for the payment.

Data collected automatically when you visit our website is used only for the purposes stated above. The data is not used for any other purpose.

We assure you that we will not otherwise disclose your personal data to third parties unless we are legally obligated to do so or you have given us your prior consent.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential information—such as inquiries you send to us as the website operator—our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Storage period

Personal data provided to us via our website will be stored only until the purpose for which it was entrusted to us has been fulfilled. To the extent that retention periods under commercial and tax law must be observed, the storage period for certain data may be up to 10 years.

Data Subject Rights

With regard to the personal data concerning you, as the data subject, you have the following rights vis-à-vis the controller in accordance with the statutory provisions:

Right of Withdrawal

Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw your consent to the processing of data at any time with future effect, in accordance with Art. 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal. The storage of data for billing and accounting purposes remains unaffected by a withdrawal.

Right of Access

You have the right, pursuant to Article 15 of the GDPR, to request confirmation from us as to whether we are processing personal data concerning you. If such processing is taking place, you have the right to obtain information regarding the personal data we process about you, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding the logic involved, the significance for you, and the intended consequences of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries.

Right to Rectification

You have the right, pursuant to Article 16 of the GDPR, to request at any time the immediate rectification of inaccurate personal data concerning you and/or the completion of your incomplete data.

Right to Erasure

You have the right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data if any of the following grounds apply:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been processed unlawfully.
The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

However, this right does not apply if the processing is necessary:

to exercise the right to freedom of expression and information;
to comply with a legal obligation that requires processing under Union or Member State law to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the rights of the data subject are likely to render impossible or seriously impair the achievement of the objectives of such processing; or
for the establishment, exercise, or defense of legal claims

If we have made your personal data public and are required to erase it pursuant to the foregoing, we will take reasonable measures, including technical measures, taking into account available technology and the cost of implementation, to inform the controllers processing the personal data that you, as the data subject, have requested the deletion of all links to your personal data or of copies or replicas of such personal data.

Right to Restriction of Processing

You have the right, pursuant to Art. 18 GDPR, to request the restriction of processing (blocking) of your personal data. To do so, you may contact us at any time at the address provided in the legal notice. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

If you have restricted the processing of your personal data, such data may—apart from storage—be processed only with your consent, or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the EU or a Member State.

Right to be informed

If you have exercised your right to rectification, erasure, or restriction of processing against us, we are obligated to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. Pursuant to Article 19 of the GDPR, you have the right to be informed of these recipients upon request.

Right not to be subject to a decision based solely on automated processing—including profiling

Pursuant to Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and us,
is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.

However, in the cases referred to in (1) through (3), decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

In the cases referred to in (1) and (3), we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to present your point of view, and to contest the decision.

Right to Data Portability

If the processing is based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and is carried out using automated means, you have the right, pursuant to Article 20 GDPR to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller or to request its transmission to another controller, provided this is technically feasible.

Right to Object

To the extent that we base the processing of your personal data on the balancing of interests pursuant to Article 6(1)(f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection under Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for the purposes of direct marketing (objection pursuant to Art. 21(2) GDPR).

You have the option, in connection with the use of information society services—notwithstanding Directive 2002/58/EC—to exercise your right to object by means of automated procedures that use technical specifications.

Right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

The supervisory authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98
24103 Kiel
Telefon: 04 31/988-12 00
E-Mail: mail@datenschutzzentrum.de
Internet: https://www.datenschutzzentrum.de

Validity and Changes to This Privacy Policy

This Privacy Policy is effective as of January 1, 2026. We reserve the right to amend this Privacy Policy at any time in accordance with applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to reflect changes to our website or new services offered on our website. The version available at the time of your visit applies.

Should this Privacy Policy be amended, we intend to post the changes to our Privacy Policy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be disclosed.