Privacy Policy

Thank you for visiting our website. Below, we explain which personal data we collect, how we process it and for what purposes.

1. Data Controller and Data Protection Officer

The controller responsible for the processing of personal data within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is Mitteldeutsche Hartstein-Industrie AG.

Senefelderstraße 14
63456 Hanau

Phone:  +49 6181 6676-0
Fax:  +49 6181 6676-10
Email: datenschutz@mhigruppe.de

Represented by the Executive Board:
Christoph A. Hagemeier (Spokesman), Marco Meurer und Jörg Rasch

The company's Data Protection Officer can be reached at the above address, by email at datenschutz@mhigruppe.de and by phone at +49 69 24 70 97-35.

2. Purposes of Data Processing and Legal Bases

2.1 Visiting the Website

When you access the website www.aspha-min.com, the browser you use automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information may be collected and stored until it is automatically deleted:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

We process the above data to ensure a smooth connection and user-friendly use of the website, to ensure network and information security, to evaluate system security and stability, and for administrative purposes.

The legal basis for the data processing is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest follows from the purposes listed above. We do not use the data to draw conclusions about you personally.

In addition, we use cookies and tracking services on the website. Further details can be found in Sections 7 and 8 of this Privacy Policy.

2.2 Newsletter Subscription

If you have consented to receive our newsletter, invitations to events and other information relevant to you (Art. 6(1), first sentence, point (a) GDPR), we use your name and email address to send you this information electronically.

You may withdraw your consent at any time with effect for the future and unsubscribe. To do so, you can either use the link at the end of each newsletter or contact us at the email address provided above. As a result, we will discontinue any data processing based on this consent with effect for the future and delete the data, unless there is another legal basis or statutory retention obligations apply.

2.3 Use of Our Contact Form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. A valid email address is required so that we know who the inquiry is from and can respond to it. Further information may be provided voluntarily.

Data processing for the purpose of contacting us is based on your consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

The personal data we collect through the contact form will be deleted once your inquiry has been dealt with, unless there is another legal basis or statutory retention obligations apply.

2.4 Application Portal

If you apply to us online via our application portal and voluntarily provide us with personal data for this purpose, this is done on the basis of your consent (Art. 6(1), first sentence, point (a) GDPR). We use the data you submit to process your application and to get in touch with you. You may withdraw your consent at any time with effect for the future. To do so, use the email address or postal address given above. As a result, we will no longer proceed with your application and will delete the data within six months, unless there is another legal basis or statutory retention obligations apply.

2.5 File Uploader

We provide a file uploader for uploading or downloading larger amounts of data. If you transmit personal data, please ensure that the data processing is lawful and that you have obtained the consent of the individuals concerned or that another legal basis exists. We use the data you submit for the purpose you specify and delete the data as soon as that purpose has been fulfilled, unless there is another legal basis or statutory retention obligations apply.

2.6 Performance of Contracts

To perform contracts with you or to take steps at your request prior to entering into a contract, we process the following personal data:

  • Master data (salutation, first name, last name, email address, postal address, telephone and, where applicable, fax number)
  • Contract data
  • Information necessary to assert and defend rights under the contract

The legal basis for the data processing is Art. 6(1), first sentence, point (b) GDPR. The data is processed in order to identify you as a contractual partner, to properly fulfil contractual obligations, to correspond with you, for invoicing, and to handle or assert any claims.

We also process data to safeguard our own legitimate interests or those of third parties pursuant to Art. 6(1), first sentence, point (f) GDPR, provided that these interests are not overridden by the data subject's interests requiring protection or fundamental rights and freedoms. Our legitimate interests include, in particular, security measures to ensure the security of our operational facilities, buildings and IT systems, reviewing and optimising procedures for analysing customer needs for the purpose of direct customer contact, measures to further develop our services, and advertising purposes.

We store personal data for as long as is necessary to provide the services. We then delete the data unless its further, purpose-limited storage is required to fulfil retention obligations under commercial and tax law or to preserve evidence within the statutory limitation periods pursuant to Sections 195 et seq. of the German Civil Code (BGB). Retention periods under commercial and tax law are up to ten years. Limitation periods can be up to 30 years, with the regular limitation period being three years.

3. Disclosure of Personal Data

We only pass on your personal data to third parties if:

  • you have given us your consent pursuant to Art. 6(1), first sentence, point (a) GDPR,
  • the disclosure is necessary pursuant to Art. 6(1), first sentence, point (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in preventing the disclosure of your data,
  • there is a legal obligation to disclose the data pursuant to Art. 6(1), first sentence, point (c) GDPR, or
  • this is legally permissible and necessary pursuant to Art. 6(1), first sentence, point (b) GDPR for the performance of contractual relationships with you.

Where necessary to fulfil our contractual and legal obligations or to provide our services, your personal data will be passed on to third parties. These include, in particular, external parties engaged by us to perform services, such as subcontractors and service providers in the fields of IT and telecommunications, logistics, consulting, marketing and sales, including our affiliated companies.

If we process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this will only take place if it is necessary to fulfil our contractual or pre-contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests, and if the European Commission has confirmed an adequate level of data protection for the third country concerned (adequacy decision) or appropriate safeguards within the meaning of Art. 44 et seq. GDPR are in place.

A risk remains that a level of data protection comparable to that of the EU is not guaranteed in third countries, in particular due to access rights of public authorities and more limited legal remedies.

4. Rights of Data Subjects

You have the right:

  • pursuant to Art. 15 GDPR, to request access to the personal data we process about you. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR, to obtain, without undue delay, the rectification of inaccurate personal data or the completion of incomplete personal data held by us;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
  • pursuant to Art. 7(3) GDPR, to withdraw the consent you have previously given us at any time. As a result, we may no longer continue the data processing based on this consent in the future; and
  • pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or of our registered office.

You have the right to contact the data protection supervisory authority responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, P.O. Box 3163, 65021 Wiesbaden, Phone: 0611/1408-0, Email: poststelle@datenschutz.hessen.de.

5. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1), first sentence, point (f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, provided that there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honour without requiring you to specify any particular circumstances.

If you wish to exercise your right of withdrawal or objection, please send an email to the email address given above.

6. Data Security

During your visit to the website, we use the SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

7. Cookies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your computer, laptop, tablet, smartphone, etc. when you visit our website. Cookies store information relating to the specific device used. The use of cookies serves to make using our services more convenient for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted when you leave our site. In addition, to optimise user-friendliness, we use temporary cookies that are stored on your device for a specified period. If you visit our website again, it is automatically recognised that you have already been with us and which entries and settings you made, so that you do not have to enter them again.

We also use cookies to record the use of our website statistically and to evaluate it using tracking tools for the purpose of optimising our services for you. These cookies enable us to automatically recognise that you have already visited our site when you return. These cookies are automatically deleted after a defined period.

For all non-essential cookies and comparable tracking technologies, we obtain your explicit consent via our consent management tool (cookie banner) before they are activated. You can withdraw your consent at any time with effect for the future or change your settings via the "Adjust cookie settings" link in the footer of our website. Further information on the individual cookie categories and the services used can be found in the respective detailed descriptions in this Privacy Policy.

Technically necessary cookies are permitted on the basis of our legitimate interest pursuant to Art. 6(1), first sentence, point (f) GDPR and Section 25(2) No. 2 of the German Telecommunications and Telemedia Data Protection Act (TTDSG). The data processed by cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties. The legal basis for setting and reading non-essential cookies is Art. 6(1), first sentence, point (a) GDPR in conjunction with Section 25(1) TTDSG.

8. Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6(1), first sentence, point (f) GDPR. With these tracking measures, we aim to ensure that our website is designed to meet users' needs and is continuously optimised. We also use tracking measures to record the use of our website statistically and to evaluate it for the purpose of optimising our services for you. These interests constitute legitimate interests within the meaning of Art. 6(1), first sentence, point (f) GDPR.

8.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will first truncate your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with further services related to website and internet use.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout

This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are processed further in truncated form, so that they cannot be linked to an individual. To the extent that the data collected about you can be linked to an identifiable individual, this link is immediately eliminated and the personal data is deleted without delay.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has committed to the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/Program-Overview. The legal basis for the use of Google Analytics is Art. 6(1), first sentence, point (f) GDPR.

Third-party provider information:: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use: www.google.com/analytics/terms/de.html,
Privacy overview: www.google.com/intl/de/analytics/learn/privacy.html,
and Privacy policy: www.google.de/intl/de/policies/privacy.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

9. Social Media Plug-Ins

On the basis of Art. 6(1), first sentence, point (f) GDPR, we use social plug-ins from social networks on our website. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The respective providers are responsible for ensuring that their services are operated in compliance with data protection law.

We currently use the following social media plug-ins:

  • Facebook,
  • Instagram,
  • X,
  • Xing und
  • LinkedIn.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the plug-in providers. You can identify the provider of the plug-in by the marking on the box showing its initial letter or logo. We give you the option of communicating directly with the plug-in provider via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding page of our website. In addition, the data listed in Section 2 of this Privacy Policy will be transmitted. In the case of Facebook and Xing, according to the respective providers, the IP address is anonymised immediately after collection in Germany. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the USA in the case of US providers). Since the plug-in provider collects data particularly through cookies, we recommend that you delete all cookies via your browser's security settings before confirming (by clicking on the greyed-out box).

We have no influence on the data collected and the data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or designing its website to meet users' needs. Such an evaluation is carried out in particular (including for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6(1), first sentence, point (f) GDPR.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you is directly assigned to your existing account with the plug-in provider. If you press the activated button and, for example, share a link to the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help prevent your activities from being associated with your profile held by the plug-in provider.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights in this regard and settings options for protecting your privacy.

Addresses of the respective plug-in providers and URLs of their privacy notices:

  • Facebook (Meta Platforms Ireland Ltd.), Privacy policy: https://www.facebook.com/privacy/policy
  • Instagram (Meta Platforms Ireland Ltd.), Privacy policy: https://privacycenter.instagram.com/policypolicy/de
  • X (X Corp.), Privacy policy: https://x.com/de/privacy
  • Xing (New Work SE), Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
  • LinkedIn (LinkedIn Ireland Unlimited Company), Privacy policy: https://www.linkedin.com/legal/privacy-policy

Platform operators may also process personal data in a third country (i.e. in countries outside the EU or EEA), in particular in the USA. The transfer of such data is based either on the European Commission's standard contractual clauses (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en) or, if the respective provider is certified accordingly, on the EU-US Data Privacy Framework (DPF) (https://www.dataprivacyframework.gov). Further details can be found in the respective privacy notices of the providers.

10. Social Media Platforms

We use the following platforms:

  • Facebook (Meta Platforms Ireland Ltd.), Privacy policy: https://www.facebook.com/privacy/policy
  • Instagram (Meta Platforms Ireland Ltd.), Privacy policy: https://privacycenter.instagram.com/policy
  • LinkedIn (LinkedIn Ireland Unlimited Company), Privacy policy: https://www.linkedin.com/legal/privacy-policy
  • TikTok: TikTok Technology Limited, Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de
  • X (X Corp.), Privacy policy: https://x.com/de/privacy
  • Xing (New Work SE), Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
  • YouTube: Google Ireland Ltd., v: https://policies.google.com/privacy

For more detailed information on the data protection provisions of the above platforms, please refer to the privacy notices of the respective providers. The legal basis for the use of the above platforms is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest lies in providing effective information to and communicating with users and interested parties.

For processing activities on these platforms, we and the respective platform operator are generally joint controllers pursuant to Art. 26 GDPR. Where possible, corresponding agreements have been concluded with the platforms. The key provisions of these agreements and information on data processing can be found in the privacy policies of the respective providers.

Please note that you can exercise your data protection rights both against us and directly against the respective platform operator. In certain circumstances (e.g. where the platform operator has complete technical and organisational control), your request can only be conclusively handled by the platform operator.

11. Google Maps

On our website, we use Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to visually display geographical information and directions. When you use Google Maps, data about your use of the map functions may be transmitted to Google, in particular your IP address and location data. The legal basis for the use of Google Maps is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest lies in the appealing presentation of our locations and in making it easier to find us. Further information on data protection at Google can be found at: https://policies.google.com/privacy

12. Online Surveys

We conduct online surveys via our partner SurveyMonkey. The legal basis for the data processing is Art. 6(1), first sentence, point (f) GDPR. Our legitimate interest lies in improving our services. SurveyMonkey's privacy policy and security statement apply, available at https://de.surveymonkey.com/mp/legal/privacy and https://de.surveymonkey.com/mp/legal/security. SurveyMonkey may process personal data in a third country (i.e. outside the EU or EEA), in particular in the USA. For further information, please refer to SurveyMonkey's privacy notices mentioned above. We do not publish the survey results. They are used exclusively for internal analysis to improve our services.

13. Validity and Amendment of this Privacy Policy

This Privacy Policy is currently valid and was last updated in March 2026. Due to the further development of our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. We therefore recommend that you review this Privacy Policy at regular intervals.