Storage, transport and
process containers out of stainless steel.

+49 7623 969 0
BACK TO MÜLLER GROUP

Principles of data processing at Müller DrumTec GmbH.

You have come to this page via a link because you want to find out how we handle (your) personal data.

The following information provides you with an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail depends largely on the type and scope of the existing business relationship. Please also pass this information on to the current and future authorized representatives and contact persons in your company

In order to fulfill our information obligations in accordance with Art. 12 ff. of the General Data Protection Regulation (GDPR), we are pleased to provide you with our information on data protection below.

1 Who is responsible for data processing?

The controller within the meaning of data protection law is

Müller DrumTec GmbH
Industrieweg 5
79618 Rheinfelden
- Germany -

You will find further information about our company, details of the authorized representatives and other contact options in the imprint of our website: https://www.mueller-group.com/impressum.html.

Our data protection officer

You can reach our data protection officer using the contact details provided in the legal notice or by email at  datenschutz(at)mueller-group.com

We expressly point out that if you use this e-mail address, the content will not be viewed exclusively by our data protection officer. If you wish to exchange confidential information, we therefore ask you to first contact us directly via this e-mail address.

2 Which of your data do we process? And for what purposes?

The purpose of our company is the manufacture and sale of stainless steel storage, transport and process containers as well as all related technical and commercial services. If we have received data from you, we will only process it for the purposes for which we have received or collected it .
Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.

As part of the initiation and execution of the business relationship, we process in particular the following categories of data of our business partners or their contact persons, which we have received directly from them or from other companies of the Müller Group or from other third parties (e.g. Schufa) in a permissible manner (e.g. to fulfill contracts or on the basis of consent given). On the other hand, we process data that we have legitimately collected from publicly accessible sources (e.g. commercial register, press, internet):

 

Interested parties, analysts, investors, shareholders and other business partners

  • Personal/contact data (e.g. first name, surname, company, address, (mobile) telephone number, fax, e-mail)
  • Communication data in connection with correspondence (e-mails, correspondence)

Customers, suppliers and service providers

  • Personal/contact data (e.g. first name, surname, company, (mobile) telephone number, fax, e-mail, license plate number when accessing our factory premises)
  • Contract and billing data (e.g. bank details, goods ordered, invoice data)
  • Communication data in connection with correspondence (e-mails, correspondence)
  • Identification data (e.g. identity documents), authentication data (e.g. signature sample), Schufa score
  • when accessing or using our IT applications: Log data (e.g. user ID, time stamp, type of access)

Visitors to the Rheinfelden site

  • Personal/contact data (e.g. first name, surname, company, address, (mobile) telephone number, e-mail)
  • Time of visit

Website

3 What is the legal basis for this?

The legal basis for the processing of personal data is generally - unless there are specific legal provisions - Art. 6 GDPR. The following options in particular come into consideration here

  • Consent (Art. 6 para. 1 lit. a) GDPR)
  • Data processing for the performance of contracts (Art. 6 para. 1 lit. b) GDPR)
  • Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
  • Data processing for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c) GDPR)

If personal data is processed on the basis of your consent, you have the right to withdraw your consent from us at any time with effect for the future.

Examples:

  • Newsletter or other advertising measures via electronic mail (email)
  • Telephone contact in the context of advertising measures

In order to fulfill contracts with our customers, suppliers and service providers, personal data is processed in accordance with Art. 6 para. 1 lit. b GDPR. This also includes the implementation of pre-contractual measures at the request of the business partner.

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.

Examples:

  • Examination and optimization of procedures for needs analysis and direct customer contact
  • for internal administrative purposes within the group of companies, including group events
  • Advertising or market and opinion research, provided you have not objected to the use of your data
  • Assertion of legal claims and defense in legal disputes
  • Ensuring IT security and IT operations Prevention of criminal offenses
  • Video surveillance for property protection as well as for the prevention and prosecution of criminal offenses and to safeguard domiciliary rights
  • Measures for building and system security (e.g. access control, access authorization)

The processing of personal data to display your name and company on our electronic display board in the reception area as well as visiting times as a visitor in our visitor book is based on a balancing of interests (Art. 6 para. 1 lit. f) GDPR).

One of our interests is to ensure security on our premises, including by registering access, and to obtain an overview of the people present on the premises.

In addition, we process personal data on the basis of legal requirements (Art. 6 para. 1 c) GDPR) in order to fulfill various legal obligations, i.e. legal requirements, e.g. tax regulations, to which we are subject as a company.

4 How long is the data stored?

We process and store your personal data for as long as is necessary to fulfill the purposes mentioned in section 3.

Insofar as statutory retention obligations exist - e.g. in commercial law or tax law - the relevant personal data will be stored for the duration of the retention obligation. After the retention obligation has expired, we will check whether there is any further need for processing. If it is no longer necessary, the data will be deleted.

At the end of a calendar year, we generally review data with regard to the need for further processing. Due to the volume of data, this review is carried out with regard to specific data types or purposes of processing.

We retain your personal data from visitor registration to monitor security on our premises. Visitor data is routinely deleted at the end of the following year, unless it needs to be kept longer as evidence of a specific crime or claim or to identify a potential perpetrator, victim or witness.

You can, of course, exercise your rights as a "data subject" at any time (see below) regarding the data we have stored about you and, if it is not necessary, request that the data be erased or processing be restricted.

5 To which recipients will the data be passed on?

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permitted on the basis of a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to pass on the data or if you have given your consent.

Under these conditions, recipients of personal data may be

  • Public bodies and institutions (e.g. tax authorities) in the event of a legal or official obligation
  • Processors to whom we transfer personal data in order to carry out the business relationship with you (e.g. support/maintenance of IT systems, data destruction, payment transactions, accounting)
  • those entities for which you may have given us your consent to transfer data
  • those subsidiaries or service providers that are involved in the fulfillment of the contract

Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary for the performance of the contract and/or required by law, if you have given us your consent or as part of order processing. If service providers are used in third countries, an appropriate level of data protection is guaranteed.

6 Where is the data processed?

Your personal data is processed by us in data centers in the Federal Republic of Germany or in the EU/EEA (Switzerland).

7 Your rights as a "data subject"

You have the right to information about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

For this purpose, it may also be necessary for us to ask you for further information or a copy of the front of your identity card.

Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.

You also have the right to object to processing within the scope of the legal requirements. You also have the right to data portability within the framework of the data protection regulations.

In particular, you have the right to object to the processing of your data in connection with direct advertising in accordance with Art. 21 (1) and (2) GDPR if this is based on a balancing of interests.

8 Right to lodge a complaint

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

The supervisory authority responsible for us is the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information.

9 Is there an obligation on your part to provide data?

As part of our business relationship, you must provide the personal data that is necessary for the establishment and execution of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect.

10 s there automated decision-making (including profiling)?

No automated decision-making or profiling is used.

 

Status: September 30, 2025