Legal
Data protection.
Last updated: November 2026
1. Controller
MB-Smart GmbH, Wildeshäuser Straße 24, 27239 Twistringen, Germany. Email: info@mb-smart.de, telephone: +49 4243 6069500.
2. Hosting
The website, database and private file storage are operated via the Lovable platform (Lovable Cloud, based on Supabase). The data is stored in the United States. Each visit involves technically necessary connection data: IP address, time, requested address, browser information and error data. This serves to deliver the pages and keep them secure (Article 6(1)(f) GDPR).
3. Contact and quote forms
Depending on the form, we process: company, name, email address, optional telephone number, message and details of your requirements (device category, quantity, condition, location, dismantling, any automatically transmitted industry classification, interest in a buyback price guarantee, or the requested device, model and period). Required fields are marked *. We use this data only to handle your enquiry and prepare a possible order (Article 6(1)(b) GDPR; for enquiries made on behalf of a business, Article 6(1)(f) GDPR). The quote form lets you upload a device list as an Excel, CSV or PDF file of up to 10 MB. The file is stored privately, is not publicly accessible and can be opened internally only via time-limited links.
4. Email communication
When you submit a form, we receive a notification at info@mb-smart.de and you receive an automatic confirmation of receipt. Both emails are sent via Lovable Emails from the sender notify.mb-smart.de. Delivery is handled technically by the Mailgun service (USA), which Lovable uses for this purpose. Our mailbox is operated via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); this also applies if you email us directly. The legal basis is Article 6(1)(b) or (f) GDPR.
5. Retention
Enquiries that do not lead to an order, including uploaded files, are deleted automatically after 12 months. If an order is placed, statutory retention periods apply.
6. Protection against misuse
The forms use a hidden field against automated submissions and limit the number of enquiries per email address; the address is not stored in plain text for this purpose (Article 6(1)(f) GDPR).
7. Cookies and tracking
We do not use cookies or analytics/marketing services that require consent. Fonts and images are served locally.
8. Transfers to third countries
Website and form data is stored and processed by Lovable in the United States, a third country outside the European Economic Area. With Google, processing outside the European Economic Area cannot be ruled out; it is based on the EU standard contractual clauses or the EU-US Data Privacy Framework.
9. Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20), and the right to object to processing based on legitimate interests (Article 21). You may withdraw consent at any time with effect for the future. To do so, write to info@mb-smart.de. You may also lodge a complaint with the Data Protection Commissioner of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover.
10. Required information and automated decisions
We cannot handle an enquiry without the required information; all other details are voluntary. No automated decision-making, including profiling, takes place.