Data policy -

––––––––––––––––––––

Data policy

––––––––––––––––––––

1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data refers to any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Marvin Fischer, MFTesting, Schöppenkampstrasse 33, 58540 Meinerzhagen, Germany; Phone: +49 (0) 176 899 11 778; E-Mail: info@mftesting.eu

The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 A data protection officer has not been appointed, as the statutory requirements for doing so (Art. 37 GDPR, § 38 BDSG) do not apply to MFTesting. For inquiries regarding data protection, please use the contact details provided above.

2) Data collection when visiting our website
2.1 When using our website for purely informational purposes—i.e., if you do not register or otherwise transmit information to us—we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Volume of data transmitted in bytes
Source/reference from which you arrived at the page
Browser used
Operating system used
IP address used (in anonymized form, if applicable)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to retrospectively review the server log files should concrete evidence point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., inquiries sent to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

2.3 Embedded Fonts (Web Fonts)

Fonts are hosted locally (no contact with external servers): To ensure a uniform display of fonts, this website uses “web fonts” that are embedded locally on our own server. No connection is made to Google servers or those of other third-party providers, and no data is transmitted to third parties.

3) Hosting & Content Delivery Network
To host our website and display its content, we use a provider that delivers its services—either directly or through selected subcontractors—exclusively on servers located within the European Union.

All data collected on our website is processed on these servers. We have entered into a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies
To make visiting our website appealing and to enable the use of certain functions, we use cookies—small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period, allowing site settings to be saved (so-called “persistent cookies”). In the latter case, you can view the storage duration in your web browser’s cookie settings. Information is stored on and accessed from your end device only with your consent or, where permitted by law, based on the exceptions set out in Section 25(2) of the TDDDG (Telecommunications-Digital Services-Data Protection Act, formerly TTDSG).

If personal data is processed via specific cookies used by us, such processing takes place in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been granted, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a customer-friendly, effective user experience.

You can configure your browser to notify you when cookies are set and decide whether to accept them on a case-by-case basis, or to exclude the acceptance of cookies for specific cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we employ, as well as the associated consents. You can find details on how “Real Cookie Banner” works at https://devowl.io/de/rcb/datenverarbeitung/.

The legal bases for processing personal data in this context are Art. 6(1)(c) and Art. 6(1)(f) of the GDPR. Our legitimate interest lies in managing the cookies and similar technologies used and the associated consents.

Providing personal data is neither contractually required nor necessary for the conclusion of a contract. You are under no obligation to provide personal data. If you do not provide the personal data, we will be unable to manage your consents.

5) Contacting us
Personal data is collected when you contact us (e.g., via a contact form or email). The data collected when using a contact form is evident from the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed. This occurs when the circumstances indicate that the matter in question has been conclusively resolved and provided there are no statutory retention obligations to the contrary. 6) Tools and Other Items
Cookie Consent Tool

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this process.

If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR. This is based on our legitimate interest in implementing legally compliant, user-specific, and user-friendly consent management for cookies, and thus in ensuring our website is designed in a legally compliant manner. A further legal basis for the processing is Art. 6(1)(c) GDPR. As the data controller, we are subject to a legal obligation to make the use of cookies that are not technically necessary conditional upon the user’s consent. 7) Rights of the Data Subject
7.1 Applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention); please refer to the cited legal basis for the respective conditions for exercising these rights:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to be informed pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR
7.2 Right to object

If we process your personal data based on our overriding legitimate interest within the scope of a balancing of interests, you have the right to object to this processing at any time—with effect for the future—on grounds relating to your particular situation.

If you exercise your right to object, we will cease processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and fundamental freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You may exercise this right to object as described above. If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes.

8) Duration of storage of personal data
The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing, and—where applicable—any relevant statutory retention periods (e.g., retention periods under commercial and tax law).

When personal data is processed based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

When personal data is processed based on Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for direct marketing purposes based on Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR. Unless otherwise stated in the other sections of this policy regarding specific processing situations, stored personal data will be deleted when they are no longer required for the purposes for which they were collected or otherwise processed.

As of: July 24, 2026

Website visited
Date and time of access
Volume of data transmitted in bytes
Source/reference from which you arrived at the page
Browser used
Operating system used
IP address used (in anonymized form, where applicable)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to retrospectively review server log files should concrete evidence point to unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser bar.