Privacy Policy

MITOWI > Privacy Policy

Our company attaches great importance to the protection of personal data and respects your wish for privacy. In the following, we inform you about the collection of personal data when using our website. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer.

Legal basis of our data processing

The processing of personal data can be based on various legal grounds. If we need your data to fulfill a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 (1) p. 1 lit. b DSGVO. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1. p. 1 lit. a DSGVO. We carry out some data processing on the basis of our legitimate interest, always weighing your interests worthy of protection against our legitimate interests. The legal basis here is Art. 6 para. lit. f DSGVO. Insofar as processing is necessary for the fulfillment of a legal obligation to which we are subject, the legal basis is Art. 6 (1) lit. c DSGVO.

Below, we explain how we process personal data via our website.

Data processing when calling up the website

During the mere informational use of the website, i.e., if you do not register or otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

  • Operating system of the end device with which you visit our website
  • browser (type, version & language settings)
  • the amount of data retrieved
  • the current IP address of the end device with which you visit our website
  • date and time of access
  • the URL of the previously visited website (referrer)
  • the URL of the (sub)page you are accessing on the website
  • the Internet service provider of the accessing system

The collection of this data is technically necessary to display our website to you and to ensure stability and security. We regularly do not know who is behind an IP address. We do not combine the data listed above with other data.

The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.


When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f DSGVO. Insofar as we request input via our contact form that is not required for contacting you, we have always marked this as optional. This information serves us to specify your request and to improve the processing of your request. A communication of this information is expressly on a voluntary basis and with your consent, Art. 6 para.1 lit. a DSGVO. Insofar as this involves information on communication channels (for example, e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. You can, of course, revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels (e.g. our contact form) or the postal service.

Your rights

We will gladly provide you with information as to whether and which of your personal data is processed by us and for what purposes (Art. 15 DSGVO). In addition, you have the right to rectification (Art. 16 DSGVO), the right to restriction of processing (Art. 18 DSGVO), the right to erasure (Art. 17 DSGVO) and the right to data portability (Art. 20 DSGVO) under the respective legal conditions.

You have the right to object to processing under the legal conditions (Art. 21 DSGVO).

To exercise your above rights, please contact us by e-mail at The exercise of your above rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 DSGVO).
The supervisory authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit, Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf.

Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.


You can apply to our company electronically, e.g. via e-mail. Please note that unencrypted e-mails will not be transmitted with access protection.

Your information will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is Section 26 (1) in conjunction with. Abs. 8 S.2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p.1 lit. f DSGVO. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 (1) BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the described use.

Your personal data will be deleted after completion of the application process after 6 months at the latest, unless there are other legitimate interests on our part that prevent deletion or you have not given us permission to store the data for a longer period. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

What are cookies?

Cookies are data that are stored on your computer by a website you visit and enable your browser to be reassigned. Through cookies, information is transmitted to the site that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, that you have to re-enter required form data each time you use the site. The information stored in cookies can also be used to recognize preferences and to tailor content according to areas of interest.

There are different types of cookies: Session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. For example, these cookies are used by marketing companies.

The legal basis for possible processing of personal data using cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art.6 para.1 p.1 lit.a DSGVO. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art.6 para.1 p.1 lit.f DSGVO. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and – with your consent – to tailor our services to preferred areas of interest. We use both transient cookies and persistent cookies for this purpose.

You can delete cookies already stored on your terminal device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your Internet browser. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.
Website analysis

For the purpose of analyzing and optimizing our websites, we use various services, which are described below. We use these services to analyze how many users visit our site, what information is most in demand or how users find the offer. We also collect data on the Internet page from which a user came to our website (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. This helps us to design our offers in a user-friendly way, to find errors and to improve our offers, and this is also our legitimate interest in using these tools. The data collected in this process is not used to personally identify individual users. We take a data-saving approach: Anonymous or at most pseudonymous data is collected. The legal basis for this data processing is Art. 6 para. 1 lit. a DSGVO.

Data transfer and recipients or categories of recipients

As a matter of principle, your data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously expressly consented to the transfer of your data.
External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery, will only receive your data insofar as this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data and process it on our behalf in accordance with instructions, we ensure within the scope of commissioned processing pursuant to Art. 28 DSGVO that they comply with the provisions of the data protection laws in the same manner. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of third-party services, whereby we check, within the scope of reasonableness, that the services comply with the legal requirements.

Data transfer and intended data transfer to a third country or an international organization

As a matter of principle, your data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your express consent to the transfer of your data.

Duration of storage

Personal data that we collect will be deleted when the purpose of the processing ceases to apply or within the statutory retention periods.

Information about provision of the data subject

When using our website, you are not subject to any legal or contractual obligation to provide.

Existence of automated decision-making including profiling.

An automated decision-making including profiling according to Art. 22 DSGVO does not take place.

Person responsible

The responsible party within the meaning of the General Data Protection Regulation (DSGVO) is: