Privacy | MB DataSuite

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

This privacy policy applies to the website mb-datasuite.com in German and English. Our offer is aimed exclusively at businesses; this information applies to everyone whose data we process in this context, e.g. contact persons at customers and prospective customers.

3. Hosting and content delivery network

Hosting at Hetzner

This website is operated on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Germany. When you access the website, the server processes the connection data required for delivery, in particular your IP address (see “Server log files” in section 4).

The legal basis is our legitimate interest in providing our website securely and reliably (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

Content delivery network (Cloudflare)

We use the content delivery network (CDN) and DNS service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. All requests to this website pass through Cloudflare’s servers before they reach our server at Hetzner. Cloudflare delivers the content faster via a regionally distributed server network and protects the website against overload and attacks. In doing so, Cloudflare processes in particular your IP address, the pages accessed, the date and time of access, and browser and device information. Where Cloudflare sets cookies to fend off automated attacks, these are strictly necessary for secure operation (section 25(2) no. 2 TDDDG).

The legal basis is our legitimate interest in providing our website quickly, securely and reliably (Art. 6(1)(f) GDPR). Processing in the USA is possible. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, Cloudflare has incorporated the European Commission’s standard contractual clauses into its data processing addendum. Further information: Cloudflare privacy policy and Cloudflare’s information on the GDPR.

4. Data collection on this website

Cookies

This website uses cookies. Cookies are small text files that are stored on your device. In the cookie settings we distinguish five categories: strictly necessary, analytics, marketing (HubSpot), appointment booking (Microsoft Bookings) and videos (YouTube). Optional services are only loaded after you have actively given your consent.

Strictly necessary: These cookies are required for the basic functions of the website (e.g. storing your cookie consent itself). They are set without consent because they are essential for operation (Art. 6(1)(f) GDPR, section 25(2) no. 2 TDDDG).

cc_cookie – stores your cookie choice. Lifetime: 60 days (if rejected) or 365 days (if accepted).

Analytics (Google Analytics 4): Only set after your consent. See section 5 for details.

_ga – distinguishes individual users. Lifetime: 2 years.
_ga_* – session and campaign state. Lifetime: 2 years.

Marketing (HubSpot): Only set after your consent. See section 6 for details.

__hstc – tracking cookie for visitor identification. Lifetime: 6 months.
hubspotutk – visitor identity for forms. Lifetime: 6 months.
__hssc – session tracking. Lifetime: 30 minutes.
__hssrc – detects a new session. Lifetime: end of session.

Appointment booking (Microsoft Bookings) and videos (YouTube): These categories enable the embedding of the respective content. Any cookies are set by the providers on their own domains; see section 6 for details.

You can withdraw your consent at any time via the . The withdrawal applies to the future; the lawfulness of the processing carried out up to that point remains unaffected. If you withdraw consent for analytics or marketing, the page is reloaded so that services already loaded are stopped. The cookies covered by our consent configuration and accessible to our website are deleted. We cannot delete cookies on other providers’ domains ourselves; you can remove these via your browser settings.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.

This data is collected to provide the website securely and stably, e.g. to detect attacks and errors. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. We do not combine this data with other data sources.

Contact by email or phone

If you contact us by email or phone, your details, including the contact data you provide, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures; otherwise it is our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR). Our emails are processed via Microsoft 365 (Exchange Online) of Microsoft Ireland Operations Limited, Ireland.

Order, quotation and download forms

For orders, quotation requests and requests for the trial version, we offer forms that do not send any data to our server. When you submit a form, it prepares an email to info@mb-datasuite.com in your email program; we only receive your details once you send this email. Until then, we do not process any data from the form.

We process the details transmitted (e.g. name, company, address, email address, VAT identification number, selected edition and services) to handle your order or enquiry and to send you the download code. The legal basis is Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures). We retain invoice and contract data in accordance with the retention obligations under commercial and tax law (Art. 6(1)(c) GDPR).

Protected downloads

You download the DataSuite installation files on our download pages with a download code: prospective customers receive a demo code by email together with the trial version, customers use their CodeMeter ticket. Your browser sends the code to our server for verification. The server only holds checksums of the valid codes, without names or email addresses. In doing so, we process:

Protection against guessing: your IP address, to count failed attempts and to block them temporarily if they accumulate. We delete failed attempts and blocks after 24 hours at the latest.
Download log: for each download the time, code reference, version and a shortened IP address (IPv4 without the last part, IPv6 only the network). We delete the log automatically after twelve months.
Remember code: only if you select “Remember code on this device” does your browser store the code in its local storage (localStorage). You can delete it at any time via your browser’s site data.

The code reference allows us to link a download to the demo code or customer account we issued to you. This lets us answer queries such as “My code does not work”, detect misuse and get in touch after a demo download to help with questions about the trial version. If you have consented to statistics, the page also reports the start of a download with the code type (demo or customer) and version to Google Analytics, never the code itself.

The legal basis for providing the software is Art. 6(1)(b) GDPR (contract or pre-contractual measures at your request). Protection against guessing, the log and contacting you after a demo download are based on our legitimate interest in protecting the downloads against misuse, tracing the use of licences and supporting prospective customers (Art. 6(1)(f) GDPR); you can object to this at any time (section 8). Storing the code in your browser happens at your express request (section 25(2)(2) TDDDG).

You can subscribe to our newsletter with information on new versions and news about the DataSuite via a HubSpot form (see section 6) or via the optional field in the quotation form. We use your email address and any further voluntary details exclusively to send the newsletter. We use HubSpot to manage subscriptions and to send the newsletter. In doing so, it may be evaluated whether a newsletter has been opened and which links in it have been clicked.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time, e.g. via the unsubscribe link in every issue or by email to info@mb-datasuite.com. After you unsubscribe, you will no longer receive the newsletter; we may store your email address in a block list to prevent future mailings (Art. 6(1)(f) GDPR).

5. Analytics tools

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. For mb-datasuite.com we use a separate property (measurement ID G-FT8RP9PL15).

The library is integrated via googletagmanager.com/gtag/js (gtag.js). We do not use Google Tag Manager. Google Analytics processes, among other things, pages visited, interactions, device and browser information and pseudonymous cookie identifiers. According to Google, individual IP addresses are not stored. This does not mean that all of the data collected is anonymous. A transfer to Google LLC in the USA is possible; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TDDDG. The service is only integrated after you have actively given your consent via our cookie banner. Before that, no scripts are loaded and no cookies are set. You can withdraw your consent at any time via the cookie settings. Further information: Google privacy policy.

6. Plugins and tools

Fonts (Open Sans)

This website uses the font “Open Sans”. The font files are loaded exclusively from our own domain. No connection to third-party font services (in particular not to Google Fonts) is established, and no personal data is transferred to third parties in the process. The Open Sans font is licensed under the SIL Open Font License.

HubSpot forms

We use HubSpot, a service provided by HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, for newsletter subscriptions and for individual download forms. After your consent, HubSpot’s form script is loaded via js-eu1.hsforms.net on pages with such a form so that the form can be provided technically. The server location of the HubSpot EU region is Frankfurt am Main, Germany.

When you use the form, the following data in particular may be processed: form data entered (e.g. name, email address, company), the source of the request (page/landing page), IP address, date/time of the request, device and browser information, referrer URL and form-related interaction data. A list of the cookies set can be found in section 4.

The legal basis for embedding the form and its cookies is your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TDDDG. We process your entries for a newsletter subscription on the basis of your consent (Art. 6(1)(a) GDPR) and for a requested download pursuant to Art. 6(1)(b) GDPR. The form is only loaded after you have actively given your consent via our cookie banner. Before that, no scripts are loaded and no cookies are set. You can withdraw your consent at any time via the cookie settings.

We have concluded a data processing agreement (DPA) with HubSpot. Further information on data protection at HubSpot: legal.hubspot.com/privacy-policy and legal.hubspot.com/dpa.

Microsoft Bookings

We use Microsoft Bookings, a service provided by Microsoft Ireland Operations Limited, Ireland, to arrange consultation and demo appointments. The appointment booking buttons take you to Microsoft’s booking page, where Microsoft’s privacy information also applies. If the booking tool is embedded on a page, it is only loaded after consent to the “Appointment booking (Microsoft Bookings)” category. In doing so, Microsoft receives in particular your IP address, browser and device information and the booking page accessed. When you make a booking, the contact and appointment data you enter is processed in Microsoft 365 to organise the appointment. Microsoft may use cookies; processing outside the EU, in particular in the USA, is possible.

Embedding and optional access to your device are based on Art. 6(1)(a) GDPR and section 25(1) TDDDG. Depending on the subject, your appointment request is processed to initiate a contract pursuant to Art. 6(1)(b) GDPR or on the basis of our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. We store the appointment data for as long as it is required for processing and for any statutory retention obligations. You can withdraw your consent to embedding at any time via the cookie settings. Alternatively, you can contact us by email or phone. Further information: Microsoft privacy statement.

YouTube videos

On individual pages we embed videos from YouTube, a service provided by Google Ireland Limited, Ireland, via youtube-nocookie.com. The player is only loaded after consent to the “Videos (YouTube)” category. Even at that point, Google receives in particular your IP address, browser and device information and information about the page visited; usage data is also processed when the video is played. The privacy-enhanced mode does not prevent this data transfer. Processing outside the EU, in particular in the USA, is possible.

The legal basis for embedding and for optional storage or read access on your device is your consent pursuant to Art. 6(1)(a) GDPR and section 25(1) TDDDG. If you withdraw your consent via the cookie settings, the embedded player is removed. Alternatively, you can use the link provided to watch the video directly on YouTube. Further information on processing and storage periods: Google privacy policy.

7. Storage period and transfers to third countries

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of the processing no longer applies or you withdraw your consent. Statutory retention periods, in particular under commercial and tax law (usually six or ten years), remain unaffected; in this case, we delete the data once the period has expired.

Transfers to third countries

Some of the providers we use are headquartered in the USA or use sub-processors there. We base transfers to the USA on the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), insofar as the recipient is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

8. Your rights

You have the following rights at any time:

Access to your stored personal data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), e.g. via the cookie settings or by email.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (www.datenschutz.rlp.de).

You can contact us at any time regarding this and any other questions on data protection: info@mb-datasuite.com.

Last updated: 31 October 2026

Privacy policy