Privacy Policy, as of January 2023:

We appreciate your visit to our website and your interest in our company and our products. In doing so, we ensure that your privacy and your personal data are protected by implementing and complying with the relevant data protection regulations.

1. Who is responsible for the processing of your personal data?

The contact details of the responsible person within the meaning of the EUGeneral Data Protection Regulation ("GDPR") can be found in the imprint.

You can reach our data protection officer via datenschutz@mesa-parts.com

2. storage of access data and log files

We, or our hosting provider, collects on the basis of our legitimate interests withinthe meaning of Art. 6 para. 1 lit. f. DSGVO data about each access to the server onwhich this service is located (so-called server log files). The access data includes thename of the website accessed, file, date and time of access, amount of datatransferred, notification of successful access, browser type and version, the user'soperating system, referrer URL (the previously visited page), IP address and therequesting provider.

Log file information is stored for security reasons (e.g. to clarify acts of abuse orfraud) for a maximum of 7 days and then deleted. Data whose further storage isrequired for evidentiary purposes is exempt from deletion until the final clarification ofthe respective incident.

3. cookies

A cookie is a small file that stores internet settings. Almost every website usescookie technology. Cookies are downloaded by your web browser the first time youvisit a website. Some cookies are extremely useful, as they can improve the userexperience when you revisit a website that you have already visited several times.Provided that you use the same terminal and browser as before, cookies remember,for example, your preferences in how you use a page and adapt the offers displayedmore relevant to your personal interests and needs.

Of course, you can also change your browser setting so that you only receivecookies that are absolutely necessary to perform the basic functions of the website -all other cookies would then no longer be accepted.

4. analysis tools

The tracking measures listed below and used by us are carried out on the basisof Art. 6 para. 1 p. 1 lit. f) DSGVO. With the tracking measures used, we want toensure a needs-based design and continuous optimization of our website. On theother hand, we use the tracking measures to statistically record the use of ourwebsite and to evaluate it for the purpose of optimizing our offer for you. Theseinterests are to be regarded as legitimate within the meaning of the aforementionedprovision. The respective data processing purposes and data categories can befound in the tracking tools described in more detail below.

4.1 Google Analytics

For the purpose of demand-oriented design and continuous optimization of ourpages, we use Google Analytics, a web analytics service provided by Google Inc(https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter "Google"). In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• used operating system,
• Referrer - URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on web activities and to provide further web sessions and internet usage related services for the purpose of market research and demand-oriented design of these websites. This information may also be transferred to third parties if required by law and if third parties process this data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking). You can prevent the installation of cookies by selecting the appropriate settings on your browser software.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of data by Google by downloading and installing the browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

5. social networks

Mesa Parts embeds links to Facebook, LinkedIn and Instagram on pages. The social bookmarks are only integrated as links to the corresponding services via corresponding graphics. If such a link is clicked, a forwarding to the page of the respective provider takes place. We do not process any personal data in this respect. However, when the linked page is called up via the link, data is processed by the respective page provider. How the respective provider handles this data can be seen from their respective privacy policy by calling up the corresponding link:

Facebook https://de-de.facebook.com/privacy/explanation

LinkedIn https://de.linkedin.com/legal/privacy-policy

Instagram http://instagram.com/about/legal/privacy/

6. google maps

We include links to the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If such a link is clicked on, a forwarding to the provider's page takes place. We do not process any personal data in this respect. However, when the linked page is called up via the link, data is processed by the page operator. You can read how Google handles this data in the following privacy policy: https://www.google.com/policies/privacy

7. contacting

When contacting us via the contact form, the user's details will be used to process the contact request and its handling according to Art. 6 para. 1 lit. b. (in the context of contractual / pre-contractual relations), Art. 6 para. 1 lit. f. (other requests) DSGVO processed. By using the contact form, you consent to the processing and storage of the data. This consent can be revoked in writing at any time.

We delete the requests if they are no longer necessary or the consent has been revoked. We review the necessity every two years; Furthermore, the legal archiving obligations apply. Data whose further retention is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.

8. application

We process the applicant data only for the purpose and within the scope of the application procedure in accordance with the legal requirements. The processing of applicant data is carried out for the fulfillment of our (pre)contractual obligations in the context of the application procedure in accordance with Art. 6 para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as the data processing becomes necessary for us, e.g. within the scope of legal procedures (in Germany, § 26 BDSG also applies).

The application procedure requires applicants to provide us with the applicant data. The mandatory applicant data are marked in the online form via a *. Applicant data includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, resume and the certificates. In addition, applicants can voluntarily provide us with additional information.

By submitting the application to us, applicants consent to the processing of their data for the purposes of the application process.

As far as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are voluntarily communicated within the scope of the application procedure, their processing is additionally carried out according to Art. 9 para. 2 lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) a DSGVO (e.g. health data, if this is necessary for the exercise of the profession).

Applicants can submit their applications to us using an online form on our website. The data is transmitted to us encrypted according to the state of the art.

Also, applicants can send us their applications via e-mail. However, please note that e-mails are generally not encrypted and applicants must ensure encryption themselves.

The data provided by applicants, may be processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is not successful, the data of the applicants will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

The deletion takes place, subject to a justified revocation of the applicants, after the expiration of a period of six months, so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act.

8.1. applicant pool

As part of the application process, we offer applicants the opportunity to be included in our "applicant pool for a period of two years on the basis of consent within the meaning of Art. 6 para. 1 lit. a. and Art. 7 DSGVO.

The application documents in the applicant pool will be processed solely in the context of future job advertisements and the employee search and will be destroyed at the latest after the deadline. Applicants are informed that their consent to inclusion in the applicant pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future and declare their objection within the meaning of Art. 21 DSGVO.

9. supervisory authority

You have the right, if you do not agree with our data processing, to contact the competent supervisory authority for data protection.

10. Amendment of the privacy policy

We may occasionally update this privacy statement, for example, if we make changes to our website or if legal or regulatory requirements change.