Last updated: 18 September 2026
1. Controller
mylantech GmbH, Schorner Straße 1 a, 82065 Baierbrunn, Germany. Email: info@mylantech.de
2. Data Protection Officer
Our external Data Protection Officer is:
Marvin Schmidt, DSEV Consulting & Akademie GmbH, Am Mittleren Moos 53, 86167 Augsburg, Germany
Phone: +49 (0) 821 999 639 10, Email: beratung@dsev.online
You may contact our Data Protection Officer at any time with questions concerning data protection.
3. Hosting and provision of the website via Framer
This website is provided using Framer. The provider is Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands.
When you access our website, technically necessary data is processed. This may include in particular:
– IP address
– browser type and browser version
– operating system and device information
– date and time of access
– pages and content accessed
– referrer URL
– technical information relating to the connection and use of the website
This data is processed in order to provide the website securely, reliably and efficiently and to identify technical errors and security risks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically sound provision of our online services.
Framer uses a globally distributed hosting and content delivery infrastructure to provide the website. Where personal data is processed outside the European Economic Area, transfers are carried out in accordance with the legal requirements applicable to international data transfers.
The fonts used on this website are provided through the website's and/or Framer's infrastructure. No direct connection to Google Fonts is established for the display of fonts.
4. Scope
This Privacy Policy explains the processing of personal data in connection with the use of our website, contacting us, and the communication and appointment-booking options we provide.
Personal data means any information relating to an identified or identifiable natural person.
5. Legal bases for processing
We process personal data only where there is a legal basis for doing so. Depending on the nature and purpose of the processing, the following legal bases may apply in particular:
– Art. 6(1)(a) GDPR - where you have given us consent to specific processing.
– Art. 6(1)(b) GDPR - where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract.
– Art. 6(1)(c) GDPR - where processing is necessary for compliance with a legal obligation.
– Art. 6(1)(f) GDPR - where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests.
6. Processing of data when visiting our website
6.1 Technically necessary data
When you visit our website, technical information required for the provision and security of the website may be processed automatically.
This may include IP address, browser information, device information, time of access and content accessed.
Processing takes place in particular to provide the website, ensure technical stability and IT security, identify and resolve technical errors, and prevent abusive or harmful access.
The legal basis is Art. 6(1)(f) GDPR.
Where technical data is stored in server or security logs, it is retained only for as long as necessary for the relevant purposes, unless legal obligations require longer retention.
6.2 Contacting us
If you contact us by email, contact form or another communication channel, we process the information you provide.
This may include in particular:
– name
– email address
– company
– telephone number, if provided
– content of your message
– other information you provide voluntarily
Processing takes place for the purpose of handling and responding to your enquiry and, where applicable, communicating with you further.
Where your enquiry relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.
In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in appropriately handling and responding to enquiries.
The data is generally stored only for as long as necessary to process the relevant enquiry. Statutory retention obligations remain unaffected.
6.3 Appointment booking via Microsoft Bookings
We use Microsoft Bookings, a Microsoft service, for online appointment scheduling.
If you use the link provided on our website to book an appointment, you will be redirected to a booking page provided by Microsoft.
In connection with the appointment booking, the following data may be processed in particular:
– name
– email address
– requested appointment date and time
– information about the booked service or purpose of the appointment
– messages or additional information you provide voluntarily
– technical data generated when accessing the Microsoft service
The data is processed to schedule, confirm and manage the requested appointment and, where applicable, to send appointment-related confirmations, changes or reminders.
Where the appointment booking is intended to initiate or perform a contractual relationship, processing is based on Art. 6(1)(b) GDPR.
Microsoft Bookings is part of Microsoft 365. When Microsoft Bookings is used, data is processed within the infrastructure provided by Microsoft.
Where personal data is processed outside the European Economic Area, transfers are carried out in accordance with the legal requirements applicable to international data transfers.
7. Cookies, similar technologies and consent management
Our website uses cookies, local storage technologies and comparable technical methods.
7.1 Technically necessary technologies
Technically necessary technologies may be used without prior consent where they are required for the operation, security or provision of essential functions of our website.
Where personal data is processed in this context, processing is based on the applicable legal basis, in particular Art. 6(1)(f) GDPR.
Our legitimate interest lies in particular in the secure, stable and functional provision of our website.
7.2 Technologies requiring consent
Where technologies are used that require prior consent, they are generally used only after you have provided the relevant consent.
The legal basis for the associated processing of personal data is Art. 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future.
7.3 Consent management with Usercentrics
To manage and document your consent choices, we use the Consent Management Platform provided by:
Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany
Usercentrics enables us to record, store and document your choices concerning technologies on our website that require consent.
The following information may be processed in particular:
– your consent or refusal decision
– date and time of the decision
– information about the selected services or categories
– technical device and browser information
– information required to demonstrate and manage your consent
Processing serves in particular to implement your privacy choices and document the granting or refusal of consent in accordance with legal requirements.
Where processing is necessary to comply with our legal obligations to demonstrate consent, it is based on Art. 6(1)(c) GDPR.
Cookies or local storage technologies that are necessary for the functioning of consent management may be used to store your privacy settings.
You may change or withdraw your consent choices at any time via the privacy settings available on our website.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8. Transfers of data to third countries
Where personal data is transferred to recipients outside the European Union or European Economic Area, or processed there, this takes place only in accordance with the legal requirements governing international data transfers.
Such a transfer may in particular be based on an adequacy decision of the European Commission or on appropriate safeguards such as the Standard Contractual Clauses adopted by the European Commission.
Where a valid adequacy decision applies to a recipient, the transfer may be based on that decision.
9. Retention periods
We generally retain personal data only for as long as necessary for the relevant purpose of processing.
Personal data may also be retained where we are required to do so under statutory retention and documentation obligations, or where continued storage is necessary for the establishment, exercise or defence of legal claims.
Once the relevant purpose no longer applies and there are no statutory or other legitimate grounds for continued storage, the data concerned will be deleted.
10. Recipients of personal data
In the course of our business activities, personal data may be transferred to service providers and processors where this is necessary for the relevant processing purposes.
These may include providers in the areas of hosting and website infrastructure, consent management, communications, appointment management, IT and technical services.
Where service providers process personal data on our behalf, this takes place in accordance with the statutory requirements governing processing on behalf of a controller.
11. Rights of data subjects
Subject to the applicable legal requirements, you have the following rights in particular:
– Right of access pursuant to Art. 15 GDPR
– Right to rectification pursuant to Art. 16 GDPR
– Right to erasure pursuant to Art. 17 GDPR
– Right to restriction of processing pursuant to Art. 18 GDPR
– Right to data portability pursuant to Art. 20 GDPR
– Right to object pursuant to Art. 21 GDPR
– Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future
To exercise your rights, please contact us at: datenschutz@mylantech.de
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.
The supervisory authority responsible for us is: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, Email: poststelle@lda.bayern.de
13. Personal data breaches
If a personal data breach occurs, we assess it in accordance with the applicable legal requirements.
Where notification to the competent supervisory authority is required, it will be made within the legally prescribed period.
Where a personal data breach is likely to result in a high risk to the rights and freedoms of affected individuals, those individuals will be informed in accordance with the applicable legal requirements.
14. Data security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, destruction, unauthorised access and unauthorised disclosure. Where appropriate in the relevant context, these measures include in particular:
– SSL/TLS encryption
– access controls
– permissions management
– two-factor authentication
– backups
– technical security measures
– measures to protect our IT systems and infrastructure
Our security measures are reviewed and adapted in line with technological developments and the relevant risks.
15. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the services we use, our data processing activities or the applicable legal requirements change.
The current version published on this website applies.
Last updated: 14 September 2026