Privacy Policy MULTI-BOX GmbH

Dated: 13.08.2021


Thank you for your interest in our website. The protection of your personal data is very important for us. With this data protection declaration we would like to inform you in which extent and purpose personal data is processed in our company.


We observe the legal provisions of the EU Data Protection Ordinance (EU-DSGVO), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and other data protection regulations. You can trust us with your personal data. They are encrypted by digital security systems and transmitted to us. Our website is protected against damage, destruction or unauthorized access.



1. Personal Data


1.1 Definition of personal data

Personal data is defined as information about an identified or identifiable natural person. This includes all information about your identity, such as your name, e-mail address or postal address. Information that cannot be associated with your identity (such as statistical information or number of users of a website) is not considered as personal information.

You can use our website without disclosing your identity or personal data. Then we will only collect general information about your visit. For some of the services offered, personal data is collected from you. These data will then only be processed by us for the purposes of using this website, in particular for providing the desired information. When collecting personal data, only the data that is absolutely necessary must be provided. Further information may also be provided on a voluntary basis. We point out in each case whether it concerns obligation fields or voluntary. We will inform you about the concrete details in the corresponding section of this data protection declaration. An automated decision making based on your personal data does not take place in connection with the use of our website.


1.2 Processing of personal information

Your data will be stored by us on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or distribution by unauthorized persons. Access to your data is only possible for a few authorized persons. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks a complete protection against all risks is not possible. Your personal data is transmitted in encrypted form over the Internet. We use SSL encryption (Secure Socket Layer) for data transmission.


1.3 Disclosure of personal data to third parties

We only use your personal information to provide the services you have requested. Insofar as external service providers are used by us within the scope of the provision of services, their access to the data also takes place exclusively for the purpose of the provision of services. Through technical and organizational measures, we ensure compliance with data protection regulations and also oblige our external service providers to do so.  Furthermore, we will not pass the data on to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you have consented to the data being passed on or if we are entitled or obliged to do so, on the basis of legal regulations and/or official or court orders. In particular, this may involve providing information for law enforcement, security purposes or the enforcement of intellectual property rights.


1.4 Legal basis of data processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) DSGVO serves as the legal basis for data processing.

Insofar as we process your personal data because this is necessary to fulfil a contract or within the framework of a contract-like relationship with you, Art. 6 Para. 1 lit. b) DSGVO serves as the legal basis for data processing.

Insofar as we process your personal data to fulfil a legal obligation, Art. 6 para. 1 lit. c) DSGVO serves as the legal basis for data processing.

Art. 6 para. 1 lit. f) DSGVO may also be used as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests. Fundamental rights and freedoms do not require the protection of personal data.

Within the framework of this data protection declaration, we always point out the legal basis on which we base the processing of your personal data.


1.5 Data erasure and storage time

We always delete or block your personal data if the purpose of storage ceases to apply. However, data may also be stored if this is provided by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such a case we delete or block your personal data after the end of the corresponding specifications.



2. Use of our online services


2.1 Information about your computer

Each time you access to our website, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded within the scope of this request. We also collect product and version information about the browser and operating system of the computer used. We also record the website from which our website was accessed. The IP address of your computer is only stored for the time of use of our website and is subsequently deleted or made anonymous by shortening it. The remaining data is stored for a limited period of time. We use this data for the operation of the website, in particular to detect and eliminate errors, to determine the utilization of the website and to make adjustments or improvements. This includes our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f) DSGVO.


2.2 Use of cookies

Cookies are used on our website, as on many websites. Cookies are small text files which are stored on your computer and which store certain settings and data for exchange with our website via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier. Cookies enable us to recognize your computer and to make any settings available immediately. Cookies help us to improve our online offer and to offer you a better and even more customized service. This also includes our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f) DSGVO. The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session. Cookies with a longer storage period can also be used so that your preferences can still be taken into account the next time you visit our website. Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser that it informs you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved using the browser settings. Please note that you may only be able to use our website to a limited extent or not at all if you refuse the storage of cookies or delete necessary cookies.

We divide cookies into the following categories:

Type 1: Cookies that are absolutely necessary
These cookies are essential for websites and their functions to function properly. Without these cookies, services such as the contact form, for example, cannot be provided.

Type 2: Functional cookies
These cookies make it possible to improve the comfort and performance of websites and provide various functions. For example, language settings can be stored in function cookies.

Type 3: Performance cookies
These cookies collect information about how you use websites. Performance cookies help us, for example, to identify particularly popular areas of our Internet offering. This enables us to tailor the content of our websites more specifically to your needs and thus improve our offer for you. The information collected with these cookies is not personal.

Type 4: Third party cookies
These cookies are set by third parties, e.g. social networks. They are primarily used to integrate social media content such as social plugins on our site.

The following cookies are currently used on our website:

Cookie CONSENT / Type 1 / Storage period: 18 years
This cookie documents whether the use of cookies has been agreed to.

Cookie 1P_JAR / Type 4 with purpose marketing / Storage duration: 1 day
This Google cookie is used to optimize advertising, to deliver ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. 

Cookie IDE / Type 4 with purpose marketing / Storage period: 1 year
Used by Google DoubleClick to register and report the user's actions on the web page after viewing or clicking on one of the provider's ads for the purpose of measuring the effectiveness of an advertisement and displaying targeted advertising to the user.

Cookie NID / Type 4 / Storage period: 6 months
This cookie is contained in requests sent by browsers to Google sites. The NID cookie contains a unique ID that Google uses to store your preferred settings and other information, including your preferred language (e.g., English), how many search results you want to see per page (e.g., 10 or 20), and whether you want Google SafeSearch Filter enabled.

Cookie OGPC / Type 4 / Storage period: 1 month
These cookies are set as soon as a user accesses the MULTI-BOX page via a Google Adwords advertisement. These cookies are set directly by Google and are in no way used by MULTI-BOX.

Cookie _ga / Type 4 with purpose statistics / storage period: 2 years
This cookie is used for Google Analytics to distinguish users when collecting information about page views. We use this cookie to find out which areas of the website need improvement. The _ga cookie does not allow us to personally identify users, as no personal data is collected.

Cookie _gat / Type 4 with purpose statistics / storage duration: 1 minute
This cookie is used by Google Analytics to monitor the demand rate on company servers. With this cookie we find out in which areas of the website there is room for improvement. The _gat cookie does not allow us to personally identify users, as no personal data is collected.

Cookie _gid / Type 4 with purpose statistics / storage duration: 1 day
This cookie is used for Google Analytics to distinguish between users.


2.3 Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Further information can be found at or (general information on Google Analytics and data protection). Due to the protective measures taken (anonymization and the possibility of objection) data processing for the optimization of our website is to be regarded as a legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) DSGVO.


2.4 Retargeting and remarketing

Retargeting or remarketing refers to technologies in which users who have previously visited a certain website are still shown suitable advertising even after leaving this website. For this it is necessary to recognize Internet users beyond their own website, for which cookies of the corresponding service provider are used; in addition, the previous usage behavior is taken into account. For example, if a user looks at certain products, these or similar products can later be displayed as advertisements on other Internet pages. It is personalized advertising adapted to the needs of individual users. For this personalized advertising, it is not necessary for the user to be identified beyond recognition. The data used for retargeting or remarketing is therefore not combined with any other data. We use such technologies to place advertisements on the Internet. We use third-party providers for the placement of advertisements. Among other things, we use offers from Google, which enables automatic display of products of interest to Internet users. This function is implemented by cookies. For more information about this technology, please see Google's privacy policy at The installation of cookies for Google Remarketing and Google AdWords Conversion Tracking can be prevented by setting the respective browser software by accessing the website and changing the corresponding setting. The placement of advertising is our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) DSGVO.


2.5 FAST Tracking / Google Ad's

We use FAST to correctly assign the success of an ad. The data is automatically deleted after 90 days. No profiling takes place. FAST uses a unique key that third parties cannot assign and therefore users cannot be traced. Personalised advertising is not possible with FAST. FAST establishes a connection between a click on an advertising medium, e.g. an advertisement, and an action, e.g. a purchase or registration. The information transmitted to us is used solely for the purpose of correctly allocating the success of an advertising medium and the corresponding billing. FAST does not store any cookies or cookie-like data on your end device. When generating the device fingerprint, only non-personal parameters are combined (browser settings, time zone, CPU class, colour depth, browser language, etc.). Personal data such as name, telephone number or address are explicitly not collected or stored. The processing of the device fingerprint takes place on our server. Insofar as an integration via Google Tag Manager takes place, then the device fingerprint processing takes place via the Smarketer Host-Europe server in Strasbourg. The software is set in such a way that no profiling takes place. The legal basis for the processing of the user's data is Art. 6 (1) lit. f DSGVO. The information transmitted to us serves the sole purpose of correctly allocating the success of an advertising medium and the corresponding billing and is justified with our legitimate interests according to Art. 6 para. 1 p. 1 lit. f DSGVO.


2.6 Google Maps

We use maps on the Google Maps website. Google Maps is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). When you access the contact pages, your web browser is instructed to load the necessary functions and map data directly from the Google server. These servers can be located in the USA or other countries of the world. We have no control over this and do not receive any information from Google as to whether you have access to corresponding map information when you visit our site.



3. Order processing


3.1 Storage and forwarding of data for orders

For order processing, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. We will pass on your address data (company name and address) to the respective transport company that delivers the ordered products to you. The legal basis for this is Art. 6 para. 1 lit. b) DSGVO. The processing of your personal data is necessary to fulfil the contract with you. The data will be stored as long as it is necessary to fulfil the contract. In addition, we store this data for the fulfilment of post-contractual obligations and on the basis of commercial and tax retention periods for the legally prescribed period. As a rule, this retention period is 10 years to the end of the respective calendar year.


3.2 Credit assessment and credit default insurance

We use your address data to carry out a credit check manually, depending on the project. The credit assessment is carried out on behalf of MULTI-BOX primarily via Coface Deutschland, Isaak-Fulda-Allee 1, DE-55124 Mainz. Credit agencies will use your data to check whether you are already listed in the database of the credit agencies and whether there is existing data, e.g. about previous payment defaults. We receive information regarding your payment history and creditworthiness. We use the information from credit agencies alone in order to protect ourselves against possible payment defaults, our justified interest within the meaning of Art. 6 Para. 1 (f) DSGVO. We store the data we have received from the credit agencies for the duration of the business relationship in order to reduce queries to the credit agencies. We use the data of the registration according to § 28 Abs. 1 S. 1 Nr. 1, 2 as well as § 28b BDSG a. F.; Art. 6 Abs. 1 b and f DSGVO. The credit agencies act in accordance with § 28b BDSG old version, Art. 6 para. 1 f DSGVO in conjunction with § 31 BDSG new version.



4. Applications


4.1 Online or Email applications

We collect various types of data as part of an application process. This includes in particular your personal contact details as well as information about your education, work experience and skills. We do not require any information from you that is not usable under the General Equal Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also do not ask you to provide information on illness, pregnancy, ethnic origin, political opinions, philosophical or religious beliefs, membership of a trade union, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, press law or general rights of third parties). Upon receipt of an application, your documents will be forwarded to the responsible employees in our company. If you have applied for an advertised position, the documents will be automatically deleted twelve months after completion of the recruitment procedure, provided there are no other legitimate interests to the contrary. Such legitimate interests in this sense are for example duties of proof in a procedure according to the General Equal Treatment Act (AGG). In case of an application without reference to an advertised position (unsolicited application), the application is kept for as long as there is the possibility that the application may be of interest. You have the option of requesting the deletion of your application at any time, even before the intended retention periods have expired. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. In all other cases, the legal basis for storing your applicant data is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO.



5. Communication with us


5.1 Contact form

If you wish to use the contact form on our website, we record the personal data you enter in the contact form, in particular your name, company name and e-mail address. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your inquiry or your request. You can decide for yourself what information you want to send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) DSGVO. After we have dealt with the matter, the data will initially be stored in the event of any queries. A deletion of the data can be requested at any time.


5.2 Newsletter

When you subscribe to our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. You will receive regular information on current topics and e-mails on special occasions. The E-mails can be personalized and individualized based on our information about you. We use the software solution of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. We evaluate technical information, such as information about your browser and system, the device and mail client used, as well as your IP address and time of access to our newsletter. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened, which links are clicked and whether the E-mails were delivered successfully. The evaluations serve us to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users. If you have not given us your written consent to subscribe to our newsletter, we will use the so-called double opt-in procedure, i.e. we will not send you a newsletter by e-mail until you have expressly confirmed to us before that we should activate the newsletter dispatch. We will then send you a notification e-mail and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this e-mail. The legal basis for the processing of your data is your consent pursuant to Art. 6 para. 1 lit. a) DSGVO, if you have expressly registered for the newsletter. Within the framework of legal requirements, it may also be possible for you to receive our newsletter without your expressed consent, because you have ordered goods or services from us, we have received your e-mail address in this connection and you have not objected to receiving information by e-mail. In this case, our legitimate interest in transmitting direct mail pursuant to Art. 6 para. 1 lit. f) DSGVO is to be regarded as the legal basis. Within the scope of displaying the newsletter and calling up individual links from the newsletter, information is collected and evaluated, which is transmitted automatically. For this purpose, a cookie with unlimited duration is set the first time a link is called up from the newsletter. If the cookie has been deleted in the meantime or you use another browser, the cookie is saved again. With the help of cookies you are recognized and your user behavior can be evaluated on our Internet pages. The data collected is used to create personal user profiles. In this way we try to constantly improve the service for you and to inform you even more individually about suitable offers and promotions. The links in the newsletter contain a random but unique identification number. We or external service providers who work for us may collect and store this number when you access these links from your computer to retrieve additional information from our website. The number in the links will not be merged with your name and other personally identifiable information without your express consent. You can only object to the collection and evaluation of the use of links described above by unsubscribing from the newsletter (please click on the "unsubscribe" link at the end of the respective newsletter). If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic tariffs. Simply use the unsubscribe link contained in each newsletter or send a message to us ( or our data protection officer.



6. Social Media


6.1 Use of YouTube

Our website includes videos for which we use a plugin of the Google-operated service YouTube ("YouTube"). The service is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit an online site that includes a video, you are connected to YouTube's servers. YouTube informs the server which websites you have visited. If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. You can find further information on the handling of user data in Google's data protection declaration at, which also applies to YouTube. We use YouTube so that we can show you videos and thus convey more about us and our services to you; this is also the legitimate interest within the meaning of Art. 6 para. 1 lit. f) DSGVO.



7. Your rights and contact


7.1 Rights of the persons concerned

You have extensive rights regarding the processing of your personal data. First of all, you have a comprehensive right to information and can request the correction and/or deletion or blocking of your personal data if necessary. You may also request a limitation of the processing and have a right of objection. You also have a right to data transferability with regard to the personal data you have provided to us. If you wish to assert one of your rights and/or receive more detailed information on this, please contact our data protection officer.


7.2 Revocation of consent and objection

Once you have given your consent, it can be freely revoked at any time with effect for the future. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. The contact person for this is our data protection officer. If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of data processing. You will be informed of the results of the review and - if data processing is nevertheless to be continued - we will provide you with more detailed information as to why data processing is permissible.


7.3 Data Protection Officer and Contact

Please do not hesitate to contact us if you have any questions regarding our handling of personal data or further information on data protection issues:


Responsible in the sense of the law is



Wallücker railway embankment 7

32278 Kirchlengern

Phone: 0049 (0)5223-49107-0

Fax: 0049 (0)5223-49107-28




Responsible data protection officer


Mr. Olaf Scmidt



7.4 Complaints

If you believe that we are not processing your personal data in accordance with this Privacy Policy or the applicable privacy policy, you may complain to our Data Protection Officer. The Data Protection Officer will then examine the matter and inform you of the result of the examination. You also have the right of appeal to a supervisory authority.



8. Further Information and Changes


8.1 Links to other websites

Our website may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also inform yourself about the respective data protection declarations on other websites.


8.2 Changes to this data protection declaration

The status of this data protection declaration is indicated by the date. We reserve the right to change this data protection declaration at any time with effect for the future. Changes are made in particular in the event of technical adjustments to the website or changes to data protection regulations. The current version of the data protection declaration can always be accessed directly via our website. We recommend that you inform yourself regularly about changes to this data protection declaration.