This Privacy Policy also applies to our social media profiles.
For definitions of key terms such as “personal data” and “processing,” please refer to Article 4 GDPR.

1. Controller

Multiple Solution Services
P.O. Box 120420
27518 Bremerhaven, Germany
Managing Director: Alexander Sascha Walter Jakusin
E‑Mail: info@mss-services.com

The above party is the “Controller” as defined in Art. 4(7) GDPR.

2. Types of Data We Process

Depending on how you use our website and services, we may process the following categories of personal data:

• Usage data (e.g., access times, visited pages)
• Basic data (e.g., name, address)
• Contact data (e.g., phone number, e‑mail address)
• Contract data (e.g., contract subject, duration)
• Content data (e.g., text entries, uploaded files, photos, videos)
• Communication data (e.g., IP address)
• Other data you voluntarily provide

3. Purposes of Processing

We process personal data for the following purposes, in accordance with Article 13 GDPR:

• Fulfilling and managing contracts
• Ensuring proof and documentation
• Technical and economic optimization of our website
• Making our website easy to access
• Fulfilling contractual and legal obligations
• Responding to legal complaints
• Meeting statutory retention requirements
• Statistical analysis and continuous improvement of our services
• Supporting commercial use of the website
• Improving user experience
• Providing user‑friendly website features
• Operating the website securely and efficiently
• Marketing, sales, and advertising activities
• Preventing spam and misuse
• Managing application processes
• Customer service and customer care
• Responding to inquiries
• Implementing security measures
• Ensuring uninterrupted and safe website operation

4. Categories of Affected Individuals

We process the personal data of the following individuals:

• Website visitors and users
• Customers
• Prospective customers
• Job applicants
• Employees
• Employees of customers or suppliers

All of the above are collectively referred to as users.

5. Legal Bases for Processing

We process personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR)
• Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR)
• Compliance with legal obligations (Art. 6(1)(c) GDPR)
• Protection of vital interests (Art. 6(1)(d) GDPR)
• Legitimate interests, provided your rights do not override them (Art. 6(1)(f) GDPR)

6. Disclosure of Personal Data to Third Parties

We do not share your data with third parties unless:

• You have given consent
• It is necessary for contract performance (e.g., payment providers)
• A legal obligation or court order requires it
• It is necessary for law enforcement, security, or the protection of intellectual property

We also work with data processors (e.g., hosting providers).
These processors are carefully selected and bound by contracts according to Art. 28 GDPR.

7. Data Transfers to Non‑EU Countries

As a rule, your data is processed within the EU/EEA.

If data is transferred outside the EU/EEA, the recipients must meet the requirements of Art. 44 ff. GDPR, such as:

• EU adequacy decision
• Standard Contractual Clauses (SCCs)

If data is transferred to the United States based on your explicit consent, we must inform you of the potential risk of secret access by U.S. authorities and limited legal remedies.

8. Data Deletion and Storage Duration

We delete or block personal data when:

• The purpose for processing no longer applies
• You withdraw your consent
• Storage is no longer necessary

Exceptions apply if statutory retention periods require longer storage, e.g.:

• Commercial records: 6 years (§ 257 HGB)
• Tax records: 10 years (§ 147 AO)

After retention periods expire, data is deleted unless it is still needed for contract performance.

9. Automated Decision‑Making

We do not use automated decision‑making or profiling.

10. Provision of Website & Server Logfiles

When you visit our website, we automatically collect:

• IP address
• Internet service provider
• Date and time of access
• Browser type, version, and language
• Accessed content
• Time zone
• HTTP status code
• Referrer URL
• Operating system

This data ensures a secure and reliable website experience.

Legal basis: Art. 6(1)(f) GDPR
Storage duration: as long as you are a member (unless needed for security or evidence)

11. Cookies

We use cookies to improve website functionality and user experience.

Types of cookies used:

• Essential cookies (for basic functionality)
• Session cookies (deleted when browser closes)
• Persistent cookies (for login status, analytics, marketing)
• Third‑party cookies (e.g., advertising providers)

You can manage or delete cookies at any time in your browser settings.

12. Blog Comments

If you comment on our blog:

• You may use a pseudonym
• Your e‑mail is required
• We store your IP address for 7 days for security
• Legal basis: Art. 6(1)(b) and (f) GDPR

We may remove unlawful or disputed comments.

13. Contact via Form, E‑Mail, Fax, or Post

When you contact us, we process your data to respond to your inquiry.

Legal bases:

• Consent (Art. 6(1)(a) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Contract initiation (Art. 6(1)(b) GDPR)

Data is deleted once no longer needed.

14. Contact via Telephone

If you call us:

• Your phone number may be temporarily stored
• Purpose: processing your request, safety, documentation
• Legal basis: Art. 6(1)(f) GDPR

15. Google reCAPTCHA

We use Google reCAPTCHA to prevent spam and abuse.

Data may be transferred to the USA.
Legal basis:

• Consent (Art. 6(1)(a) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)

For more information:
https://policies.google.com/privacy

16. Social Media Profiles

We operate profiles on social networks.
When you visit these profiles, the respective platform’s privacy policies apply.

Data may be used for:

• Communication
• Advertising
• Market research
• Usage analytics

We recommend asserting data protection rights directly with the respective provider.

17. Applicant Data

Applicant data is processed for the application process.

Legal bases:

• Art. 6(1)(b) GDPR
• § 26 BDSG

We request that you do not submit special categories of data (Art. 9 GDPR), except for voluntary disclosure of a disability.

Rejected applications are deleted after 6 months.

18. Your Rights as a Data Subject

You have the right to:

• Withdraw consent at any time
• Object to processing
• Access your stored data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Lodge a complaint with a data protection authority

To exercise your rights, contact:

Multiple Solution Services
P.O. Box 120420
27518 Bremerhaven, Germany
E‑Mail: privacy@mss-services.com

19. Data Security

We use technical and organizational measures to secure your data.
All data transmitted between your browser and our server uses SSL encryption.