Privacy Policy

This English translation is provided for your convenience. In case of any discrepancy, the German version (Datenschutzerklärung) is the legally binding one.

1) Introduction and contact details of the controller

1.1 Thank you for visiting our website and for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means any information by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Michael Lange, ML-resale
Neue Riedstr. 39, 99986 Niederdorla, Germany
Phone: +491624038006
E-mail: info@ml-resale.com

2) Data collected when you visit our website

2.1 If you use our website for information purposes only, we collect only the data your browser transmits to our server (so-called “server log files”). When you access our website, the following technically necessary data are collected:

• Website visited
• Date and time of access
• Amount of data sent in bytes
• Source / referrer from which you reached the page
• Browser and operating system used
• IP address used (where applicable in anonymised form)

This processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

2.2 For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Hosting

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany or within the European Union. All data collected on our website are processed on these servers. We have concluded a data processing agreement (DPA) with STRATO AG pursuant to Art. 28 GDPR, which ensures the protection of our visitors’ data.

4) Cookies and local storage

So that our website works and certain functions can be used, we store small amounts of data on your device – partly as cookies, partly in your browser’s local storage (localStorage). We distinguish between technically necessary entries required for operation (Art. 6(1)(f) GDPR) and optional analytics cookies, which we set only with your express consent (Art. 6(1)(a) GDPR). We do not set cookies for advertising or marketing purposes.

You can change or withdraw your consent at any time with effect for the future via the cookie icon at the bottom left of the website.

Specifically, the following entries are stored (analytics cookies only with your consent):

5) Contacting us

5.1 When you contact us via our contact form, personal data are collected (first name, last name, e-mail address, company, subject or requested device, message). These data are stored and used solely for the purpose of responding to your enquiry. The legal basis is Art. 6(1)(a) GDPR (consent by ticking the privacy checkbox) and, where your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR.

5.2 The contact form is submitted directly to our web server at our hosting provider based in the European Union. From there, your details are forwarded to us exclusively by e-mail and used to process your enquiry. No third-party services are used; your data are not transferred to countries outside the EU.

Your data are deleted once your enquiry has been fully processed, unless statutory retention obligations require otherwise.

6) Web analytics

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics sets cookies that enable an analysis of your use of our website. The information collected – including your IP address, which Google truncates by removing the last digits – is transmitted to and processed on Google servers. Transfers to Google LLC in the USA are also possible.

Google Analytics 4 is used exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future via the cookie button at the bottom left of the website.

We have concluded a data processing agreement with Google. For data transfers to the USA, Google has certified under the EU-US Data Privacy Framework. Data collected via Google Analytics are deleted after two months.

Further information: Google Privacy Policy.

7) Site functionality

Fonts

The fonts used on this website (Inter) are served locally from our own server. No request is made to third parties and none of your data are transmitted to external providers.

Cookie consent tool

This website uses its own cookie consent tool to obtain valid user consent for cookies that require consent. The tool is displayed when you open the site and allows you to grant or refuse consent selectively. It sets technically necessary entries to store your preferences; as a rule, no personal data are processed in doing so. The legal basis is Art. 6(1)(f) GDPR and Art. 6(1)(c) GDPR.

8) Rights of the data subject

8.1 Applicable data protection law grants you the following rights vis-à-vis the controller:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to withdraw consent pursuant to Art. 7(3) GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

8.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS.

9) Duration of storage of personal data

The storage period depends on the respective legal basis and the purpose of processing. Data processed on the basis of consent (Art. 6(1)(a) GDPR) are stored until the consent is withdrawn. Data processed on the basis of legitimate interests (Art. 6(1)(f) GDPR) are deleted as soon as your objection under Art. 21(1) GDPR takes effect or the purpose of processing no longer applies. Statutory retention obligations remain unaffected in all cases.

10) Search request (notification service)

You can submit a search request to be notified by e-mail as soon as suitable used gloveboxes become available. For this purpose we process your e-mail address and – if you provide them voluntarily – your details about the device you are looking for (e.g. model/manufacturer, atmosphere, number of glove ports, operability, budget, timeframe) and your contact details.

Registration uses a double opt-in procedure: after you sign up, we send you a confirmation e-mail. Your search request is activated only after you click the confirmation link it contains. This ensures that the registration actually originates from you. Without confirmation, no further data are processed.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. We store your data until you withdraw your consent. You can withdraw your consent at any time with effect for the future – via the unsubscribe link at the end of every notification e-mail or informally by e-mail to info@ml-resale.com.

Retention: if you do not confirm your registration within 30 days, the unconfirmed entry is deleted automatically and completely. After a withdrawal (unsubscribe), we discard your voluntary details about the requested device and your contact details; we then store only your e-mail address on a suppression list to document that you have unsubscribed and to ensure that you are not contacted again (Art. 6(1)(f) GDPR). You may request the complete deletion of this suppression entry at any time.

As proof of your consent (Art. 7(1) GDPR) we store the time of registration and confirmation together with the IP address used in each case. Your data are not passed on to third parties for advertising purposes; they are stored on our server within the European Union (see section 3).

11) Notes on AI-assisted content

Some of the images shown on this website – in particular the product photos of the devices offered and the title image (hero image) on the homepage – have been edited with AI-assisted tools for better presentation (e.g. cut-outs and background replacement, as well as optimisation of lighting, colour and sharpness). The edited photos depict the device actually offered. This notice is provided for the sake of transparency.

Texts on this website are partly created or revised with the support of AI-assisted tools. However, all content is reviewed, edited and approved by us before publication; editorial responsibility for all published texts lies with the controller named in section 1. These texts are therefore not labelled separately.

12) Embedded glovebox configurator (KeT Boxsysteme)

On the page “Configure a new glovebox” we embed a configurator for new gloveboxes provided by our partner company KeT Boxsysteme. Technically, the configurator is loaded via an iFrame from the website ketbox.de.

For data protection reasons this content is not loaded automatically. Only when you actively click the “Load configurator” button is the connection to ketbox.de established; your IP address may then be transmitted to the server used there. The legal basis for loading upon your click is Art. 6(1)(a) GDPR (consent).

If you submit a configuration or an enquiry via the configurator, the data you enter are transmitted directly to KeT Boxsysteme and processed there under their own responsibility. In this respect KeT Boxsysteme is an independent controller within the meaning of the GDPR; ML-Resale does not receive these enquiry data. The processing of your details by KeT Boxsysteme is governed by their privacy policy.

13) “Hand over a unit” form (purchase and takeover of used equipment)

If you offer us a used glovebox or laboratory device for takeover or purchase via the “Hand over a unit” form, we process the data you provide: type of unit, manufacturer/model, condition, contamination, location, preferred handover option and, where applicable, your price expectation, as well as your name, e-mail address and – voluntarily – company/institution, telephone number and any further details in your message.

The purpose of the processing is to assess and respond to your offer and to prepare a possible purchase or takeover agreement. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps taken at your request) and Art. 6(1)(a) GDPR (consent by ticking the privacy checkbox).

Your details are received on our web server at our hosting provider based in the EU (section 3) and forwarded exclusively by e-mail to our mailbox with the same provider; they are not stored in a database on the website. No third-party services are used and no data are transferred to countries outside the EU. Where necessary for the technical assessment, collection or refurbishment of your unit, we coordinate your offer with our partner company KeT Boxsysteme; personal data are passed on only to the extent required to handle your offer (Art. 6(1)(b) GDPR).

If no contract is concluded, we delete your details once your enquiry has been fully processed. If a purchase or takeover takes place, we retain the related correspondence within the scope of commercial and tax law retention obligations (6 or 10 years, Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)).

14) Our social media profiles

Under the name “Was wäre wenn?” we operate profiles on the social networks TikTok, Instagram and YouTube to provide information about our offering and to get in touch with interested parties. The legal basis is our legitimate interest in information, communication and public presentation pursuant to Art. 6(1)(f) GDPR.

When you visit one of these profiles, the respective platform operator processes your data (e.g. IP address, device information, usage behaviour and, for logged-in users, profile data) under its own responsibility – among other things to create usage profiles and for advertising purposes, including by means of cookies. We have no influence over this. We only receive anonymised statistics from the platforms about the use of our profiles (“insights”); for the collection of these statistics we are jointly responsible with the respective operator (Art. 26 GDPR). The platforms provide agreements for this purpose that govern the respective responsibilities.

The operators and their privacy notices:

• TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland – Privacy Policy. Data may be transferred to affiliated companies in third countries (including the USA, Singapore and China); TikTok relies on the EU Commission’s standard contractual clauses for this.
• Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland – Privacy Policy, joint controller agreement. Transfers to Meta Platforms, Inc. in the USA are based on the EU-US Data Privacy Framework.
• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy Policy. Transfers to Google LLC in the USA are based on the EU-US Data Privacy Framework.

If you contact us via these platforms (e.g. by comment or direct message), we process your details in order to respond to your enquiry (Art. 6(1)(b) or (f) GDPR); this communication is additionally visible to the platform operator. For confidential matters, please use e-mail or our contact form.

You may assert your data subject rights (section 8) both against us and against the respective platform operator; it is most effective to do so directly with the operator, as only the operator has access to the data stored there. Information on your settings and objection options can be found in the linked privacy notices.