1. Controller
MJ Empire Holding GmbH
Marthastraße 4
40629 Düsseldorf
Germany
Email: info@mj-empire.de
Managing Director: Masoud Enayat
2. General purposes of processing
- Provision and operation of the website
- Processing contact and business enquiries
- Pre-contractual communication with business partners
- Compliance with legal obligations
- Ensuring technical security and stability
Depending on the processing activity, Art. 6(1)(b), (c) and (f) GDPR may apply; where consent is required, Art. 6(1)(a) GDPR applies. The precise allocation must be checked against the live setup.
3. Hosting and server log files
The website is intended to be hosted on Hostinger. When the website is accessed, technically required connection data may be processed, such as IP address, date and time, requested resource, referrer, browser and operating system information and technical log data. Retention periods and any processor relationship must be aligned with the final hosting contract.
4. Email and contact form
When you contact us by email or using the contact form, we process the information you provide to handle your enquiry. This may include name, company, email address, telephone number, subject and message content. Processing for pre-contractual measures is based in particular on Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR may apply due to our legitimate interest in orderly business communication.
5. Holding logos and external links
Logos of the holdings are hosted locally. No connection to their websites is created merely by loading this page. Their websites are contacted only after you actively click an external link.
6. Cookies and comparable technologies
Technically necessary session and storage functions may be used where required for expressly requested website functions or secure operation. Optional statistics or marketing technologies are not activated by default and may only be loaded after legally required consent.
7. Analytics and marketing
No external analytics provider such as Google Analytics is active by default. After consent to the Statistics category, the website can use its own first-party statistics endpoint to record page path, language, device category, browser, operating system, screen dimensions, referrer domain and a locally generated visitor identifier stored only as a hash. For an approximate country/region/city assignment, the server may perform a short-lived IP geolocation lookup; the raw IP address is not stored in the statistics database. Where the hosting or proxy already provides coarse geolocation headers, these may be used instead. If external analytics or marketing services are added later, this privacy information must be extended before activation.
8. Map (Google Maps)
The contact and location sections contain an embedded Google Maps map that loads automatically when the page opens. Your IP address and browser information are transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and may be processed on servers of Google LLC in the USA. The applicable data-protection legal basis and the requirements for any third-country transfer must be reviewed against the final setup before launch. Further information: policies.google.com/privacy
9. Fonts and external resources
All fonts used on this website are stored on our own web server and delivered from there. No connection to Google Fonts or another external font provider is established. The same applies to stylesheets, scripts and images: apart from the map described above, this website loads no resources from third-party servers when it opens.
10. Recipients
- Hosting, IT, database and email service providers where technically required
- Professional advisers where necessary
- Banks and payment service providers within concrete business processes
- Authorities where legally required
11. Retention
Personal data is stored only for as long as required for its respective purpose or statutory retention obligations.
12. Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent for the future (Art. 7(3) GDPR)
- Complaint with a competent supervisory authority
13. Data security
The website uses HTTPS, access restrictions, secure credentials and data-minimising processes. Administrative access is protected by sessions, CSRF protection and brute-force limiting.
14. Automated decisions
No solely automated decision-making producing legal or similarly significant effects is planned for this website.
15. Status
As at August 2026. This policy is updated whenever the technical setup of the website changes.
