This is our Privacy Policy in which we explain who we are, how we handle personal data, what rights you have if you are affected by the processing of personal data and how you can contact us.
We are MPB GmbH and operate under the trade name MPB. Our contact details and further information can be found at the end of this statement. We are responsible for the processing of all personal data processed in accordance with this Privacy Policy (unless this Privacy Policy states otherwise).
We operate a platform at https://www.mpb.com/en-ie where we buy and sell used digital camera equipment and related accessories (“Platform”).
You can contact our data privacy officer at:
MPB GmbH, Bülowstraße 56/57, 4th floor, 10783 Berlin, Federal Republic of Germany
Email: [email protected]
We may be legally or contractually obliged to process your personal data. The processing of your personal data may also be necessary when entering into and executing an agreement with you to buy, sell or trade Products. In these cases, we can only provide our services if you provide us with the necessary personal data.
We collect and process personal data as follows:
When you visit our Platform
Data collection on the Platform
When using the Platform for purely informational purposes, only personal data that your browser transmits to our servers is collected.
These are the following categories of personal data:
IP address
Date and time of the visit
Time zone difference to GMT
Particular website of the visit
Access status/http status code
Data volume transmitted
Website from which the request comes
Type of browser
Operating system and its interface
Language and version of the browser
This data is processed by us to enable us to display the Platform to you and to optimise the Platform, improve user experience and to ensure the stability and security of the Platform. The legal basis for this is article 6 (1) (1) (b) and (f) GDPR. We have a legitimate interest in ensuring the stability and security of the Platform.
As far as necessary, we may transfer your personal data to external parties strictly necessary for the operation of the Platform. As far as these recipients act as data processors for us, the transfer of personal data to these recipients is based on article 28 GDPR. We have bound these recipients to process your personal data only in accordance with our instructions and to the extent permitted by law.
Cookies
Our Platform may use our own cookies as well as cookies from third parties. Details of this data processing can be found in our Cookie Policy which is available on the Platform.
When you open a user account
When you open an account on our Platform, you must register with your first and last name, your e-mail address and a password of your choice. We use a so-called double opt-in procedure for registration. This means that your registration will only be completed successfully once you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose.
In your user account, you can voluntarily enter additional information such as your mobile phone number and address. You can change or delete this data which you have voluntarily provided at any time in the "Settings" section of your user account.
By providing us with your details, you enable MPB to provide you with the services you select. This data is processed by us to enable you to use our area for registered users. The legal basis for this data processing is article 6 (1)(1)(a) and (b) GDPR.
If you want to sell, buy and/or trade cameras or related accessories with us
If you wish to sell, buy and/or trade cameras or related equipment to us, we will collect information which we will process including your full name, email address, address, details of the equipment you wish to sell, buy and/or trade and your payment details. We process this data in order to conclude a contract with you and to perform this contract. The legal basis for this is article 6 (1)(1)(b) GDPR. If necessary, we will transmit your personal data to the following categories of recipients for the aforementioned purpose:
external service providers engaged in the operation of the Platform and shipping service providers,
payment service providers (except PayPal, see below).
As far as these recipients act as data processors for us, the transfer of personal data to these recipients is based on article 28 GDPR. These recipients will process your personal data only in accordance with our instructions and to the extent permitted by law.
PayPal
We offer payment via the online payment service PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you select PayPal as your payment method, you will be redirected to the PayPal website and the personal data you enter will be transmitted to PayPal in encrypted form. This usually includes your name, address, telephone number, IP address, email address or other information necessary to process your order, including information about your order.
Personal data is processed by PayPal as a controller. The legal basis for processing in connection with PayPal is article 6 (1)(1)(b) and (f) GDPR. We have a legitimate interest in offering you extended payment options and outsourcing the processing of payments.
Insofar as this is necessary for the fulfilment of the order, data may also be passed on to third parties by PayPal. Furthermore, personal data may be transmitted to credit agencies by PayPal for the purpose of identity and credit assessment.
For more information on data processing by PayPal, please visit https://www.paypal.com/ie/legalhub/privacy-full?locale.x=en_IE.
When you contact us
If you contact us by e-mail or via the contact form on our Platform, your name, e-mail address and the content of your request will be processed. If you contact us by telephone, we will collect information about you which we will process, including your name, the contact information you provide us with for processing and information about your request. In addition, we will also collect personal information from you when you correspond with us. Please note that phone calls will on occasion be recorded for security, training and development purposes.
We do this in each case in order to be able to process enquiries in connection with the contracts concluded between you and us. Furthermore, we have a legitimate interest in being able to offer a smooth customer service. The legal basis for data processing is article 6 (1)(1)(b) and (f) GDPR.
How We Use your Information
We will use the information we collect from you to:
Manage and fulfil your orders to buy, sell or trade items with us, to facilitate delivery, and to provide after-sales services;
Manage our accounts and records;
Deal with your enquiries and requests;
Send service related communications, including announcements and administrative messages such as order confirmation;
Identify products and services we think you might be interested in based on your information, such as your purchase history and your previous interactions with us;
Send you marketing communications (including e-mails and social media audience matching) relating to us and other third party partners and that we think may be of interest to you where we have a legitimate basis to do so (please see the “If we send you advertising, marketing information or promotional material” section below for further information about how you can control these updates);
Conduct market research so that we can continuously improve the services we provide to our customers;
Undertake credit checking, prevention of fraud and other prohibited or illegal activities as part of our efforts to keep our Platform and services secure; and
Understand how our Platform is used so that we can continuously improve our Platform and services and other offerings.
Where you have agreed to a particular use of your information, we process it on the basis of your consent. You may withdraw that consent at any time (for example, for us to send you marketing communications) by contacting us (see the section headed “Contact us” and “Your data protection rights” below). We also process your information where this is necessary for the performance of a contract with you or where it is necessary for our legitimate interests of operating, protecting and improving our business.
If we send you advertising, marketing information or promotional material
E-mail marketing with newsletter subscription
If you register for our newsletter, we will process the e-mail address you provide to regularly send you our newsletter with news and offers. The legal basis for this is your consent in accordance with article 6 (1)(1)(a) GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or by using a link provided for this purpose in every newsletter. After cancellation, we will not send any further newsletters to the e-mail address you have provided.
Text Message Communications
If you register with your telephone number to receive text messages from us or from our courier as part of any shipping service, we and/or our shipping service may process your telephone number to inform you about the status of your order. You may occasionally receive information by text message about offers from us. The legal basis for this is your consent pursuant to article 6 (1)(1)(a) GDPR. You can unsubscribe your telephone number at any time free of charge by replying to a text message with the word "Stop".
You can change your marketing preferences at any time within your user account.
As far as necessary, we will transfer your personal data to external service providers engaged in the operation of the Platform for the above-mentioned purposes. As far as these recipients act as a data processor for us, the transfer of personal data to these recipients is based on article 28 GDPR. We have bound these recipients to process your personal data only in accordance with our instructions and to the extent permitted by law.
If you are our service provider or business partner or work for them
We process the personal data of our service providers and business partners as well as their employees. In doing so, we collect, among other things, contact data and financial information so that we can get in touch with you as our contact person or with your employer in relation to the contract concluded (e.g. in relation to the administration and provision of goods). This serves the execution of the respective contract. The legal basis for this is article 6 (1)(1)(b) and (f) GDPR. We have a legitimate interest in getting in touch with you as our contact person and with your employer in relation to the contract concluded.
If necessary, the data is also passed on to lawyers, auditors and other consultants. The legal basis in these cases is article 6 (1)(1)(f) GDPR. We have a legitimate interest in legal defence, auditing and other consulting services required for our business.
Credit assessment & ID Verification for Fraud Prevention Purposes
For the conclusion of individual contracts, it may be necessary to check your creditworthiness or to check ID for the purpose of fraud prevention. Should this be necessary, we will inform you about this when we collect your personal data and provide you with further information. If necessary, we will transmit your personal data to credit agencies for the aforementioned purpose, in order to assess your solvency or creditworthiness, if this is necessary in connection with (potential) entering into an agreement with you. In this case, the legal basis for data processing is article 6 (1)(1)(b) or (f) GDPR. We have a legitimate economic interest in checking the solvency and the verifying identity of customers and our business partners in order to reduce the economic risk of default.
Where appropriate and to the extent necessary to provide our services, we share personal information with our affiliated companies inside and outside the EU. For example, if you purchase products from us which are offered for sale either by our affiliated company MPB Europe Limited in the UK or by our affiliated company MPB US LLC in the US, personal data (your name and address and the products you have ordered) may be transferred to the extent necessary to enable our service partner who manages our UK or US circular commerce centre to deliver the relevant products. The legal basis for this is article 6 (1) (1) (b) GDPR. We have a legitimate interest in the smooth provision of our services. You will find more detailed information on securing transfers to third countries in the section "Where we process your personal data".
We do not share personal information about you with other people or non-affiliated companies except under the following circumstances:
In the event that we sell our company, or a substantial part of our company or other assets, to a third party. Should such a sale occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy.
To third party providers for the purposes of providing online and other payment services, handling credit checks and fraud prevention, and any other services required in order for us to use your information for the purposes specified in this Privacy Policy;
To law enforcement agencies and courts for the purposes of combating fraud and crime.
To other companies, individuals or government agencies when we are required by law to disclose your personal information or to protect the rights, property or safety of our business or others.
The legal basis for this is in each case our legitimate interest in further developing our company or ensuring the security of our company and our users, article 6 (1)(1)(f) GDPR or article 6 (1)(1)(c) GDPR if we are legally obliged to transfer the data.
In general, we process your personal data only in the UK or a Member State of the EU or another signatory State to the Agreement on the European Economic Area (EEA). However, some of the recipients of your personal data mentioned in this Privacy Policy may also be located outside the EU, the EEA or the UK.
We have implemented standard contractual clauses to ensure adequate safeguards are in place to protect your information where it is transferred to our affiliated companies in the UK and US. Where we share your information with a third party service provider we contractually obliged the third party service provider to implement adequate safeguards to protect your information.
Please note that data processed in other countries may be subject to foreign law and may be accessible to the governments, courts, law enforcement and regulatory authorities of those countries. However, if your personal data is transferred to third countries, we will take appropriate measures to adequately secure your data.
Unless an adequacy decision has been made by the European Commission for the recipient’s country, the transfer of your data to a third country will only take place if the requirements of Art. 44 et seq. GDPR are fulfilled. In particular the transfer is protected by standard EU contractual clauses (article 46 (2)(c) GDPR) or binding internal data protection guidelines (so-called Binding Corporate Rules). Otherwise, a transfer will only take place if an exception under article 49 GDPR is fulfilled.
We want you to feel confident about using our Platform, and we are committed to protecting the personal information we collect. We limit access to personal information about you to employees who reasonably need access to it, to provide products or services to you or in order to do their jobs. We have appropriate technical and organisational physical, electronic, and procedural safeguards to protect the personal information that you provide to us against unauthorised or unlawful processing and against accidental loss, damage or destruction which corresponds to the risk associated with data processing. However, where we ask you to choose a password in order to access certain parts of our Platform, you are responsible for selecting a secure password and keeping that password confidential. You should choose a password which you do not use on any other site, and you should not share it with anyone else. Unfortunately, the transmission of information on the internet is never completely secure. Although we do our best to protect your personal data, the security of your data transmitted to our Platform cannot be fully guaranteed.
We and our service providers process your personal data only to the extent and for as long as it is necessary for the respective processing purpose and in particular to protect ourselves in the event of a legal claim. Afterwards the data will be deleted or anonymised by us. Something else only applies if we must store the data for a longer period of time in order to comply with legal obligations we are subject to (e.g. to comply with storage obligations under tax law). The duration of the storage of your personal data then depends on the relevant legal storage periods.
Depending on the specific circumstances of the case, you have the following rights in relation to your personal data that we process:
The right to refuse your consent to the processing of your personal data or to revoke it at any time, without prejudice to the lawfulness of the data processing carried out prior to the revocation,
the right to obtain information about your data processed by us and to get access to your personal data
the right to have incorrect personal data rectified or incomplete personal data completed,
the right to erasure of your personal data ("right to be forgotten")
the right to restriction of processing of your personal data,
the right to receive your personal data in a structured, commonly used and machine-readable format, provided that the processing is carried out by automated means and is based on your consent or on a contract ("right to data portability")
the right to complain to a supervisory authority about the processing of your personal data by us.
To exercise your rights (including the revocation of relevant consent or the right of access to your personal data), you should contact us as described below.
You also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out pursuant to article 6 (1)(1)(e) or (f) GDPR. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You have the right to object at any time to the processing of your data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
Our contact details are:
MPB GmbH
Bülowstraße 56/57, 4th floor
10783 Berlin
Federal Republic of Germany
Any changes we make to our Privacy Policy in the future will be published on this Platform. Please check this Platform regularly to see updates or changes to our privacy policy.
This privacy policy was last updated on 27 August 2024.