Data privacy policy
Version 07/2020
We process personal data (hereinafter “data“) of the users only insofar as this is necessary to provide a functional and comfortable website and our content and services.
As “processing“ the collection, use, disclosure and / or storage applies. As “personal data“ According to the General Data Protection Regulation (hereinafter “GDPR“), all data with which a natural person can be identified apply. The exact definitions of the terms are set out in Art. 4 GDPR.
The following statements inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, we decide on the purposes and means of processing alone or together with others About the third-party components that we may use for optimization and quality of use and that process data on their own responsibility:
_________________________________________
A) Information on the person responsible
B) Rights of the user
C) Information on data processing
_________________________________________
A) Information about the person responsible
The person responsible (hereinafter “provider“) within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
Heinrich Hofsäß GmbH & Co. KG
Schloßstraße 77
DE-75223 Niefern
Telefon: +49(0)7233 9618-0
Telefax: +49(0)7233 9618-50
E-Mail: vertrieb@hhn.de
The data protection officer serving the controller is:
DSB Datenschutz
Dipl.-Betriebswirt (FH) Fabian Henkel
Kantstraße 14
71277 Rutesheim
Tel: +49 (0) 7152 564 773
Fax: +49 (0) 7152 564 771
Mobil: +49 (0) 176 327 441 72
E-Mail: info@externer-datenschutzbeauftragter-stuttgart.de
Web: externer-datenschutzbeauftragter-stuttgart.de
B) Rights of the user
With regard to the processing of his personal data reproduced below by the provider, the user has the right to
1. to request a confirmation as to whether the data concerning him will be processed and for precise information about this data as well as for further information and copies of the data in accordance with Art. 15 GDPR;
2. the immediate correction of inaccurate data concerning him or the completion of these data in accordance with To request Art. 16 GDPR;
3. to demand that the data concerning him or her in accordance with Art. 17 GDPR can be deleted immediately, alternatively, if, for example, further processing in accordance with Art. Art. 17 Para. 3 GDPR it is necessary to request a restriction of the processing of the data in accordance with Art. 18 GDPR;
4. that he receives the data concerning him and provided by him in accordance with the provisions of Art. 20 GDPR and to request their transfer to other responsible parties;
5. to submit a complaint to the supervisory authority according to Art. 77 GDPR if the user is of the opinion that the processing of his data by the provider violates the GDPR.
_________________________
6. In principle, the user can object to the future processing of the data concerning him, which is carried out by a person responsible on the basis of Art. 6 Para. 1 lit. f GDPR, contradict at any time in accordance with Art. 21 GDPR. The objection can in particular be made against processing for direct marketing purposes.
_________________________
7. The provider is also obliged to notify all recipients of the data of any correction or deletion of personal data or a restriction on processing that is based on Article 16 GDPR, Article 17 Paragraph 1 GDPR and Article 18 GDPR the data was disclosed by him. The obligation does not exist in the event that this notification proves to be impossible or is associated with disproportionate effort. The customer has the right to information about these recipients.
C) Information on data processing
If no detailed information is provided below about the individual data processing, the user's data processed by the provider will be deleted or blocked as soon as the purpose of the storage is no longer applicable and the deletion does not conflict with any statutory retention requirements.
Server data
For communication and security reasons, during the visit to the website, among other things, The following data, which the internet browser of the user transmits to the provider or to his web space provider, is collected (so-called server log files):
- Browser type and version;
- Operating system used;
- Website from which the user switched to the provider's website (referrer URL);
- Website that the user is visiting;
- Date and time of access;
- Internet protocol (IP) address of the user.
The data are also stored temporarily. This data is not stored together with other personal data of the user. The legal basis for the temporary storage is Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in improving the stability, functionality and security of the website.
After seven days at the latest, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible or only possible with a disproportionately large amount of effort To draw conclusions about a specific or identifiable natural person. The anonymized data are processed exclusively "for statistical purposes" in order to optimize the website. Data, the further storage of which is necessary for evidence purposes, are excluded from anonymization until the respective incident has been finally clarified.
Cookies
a) „Session“-Cookies
The provider uses technically required session cookies on its website.
Cookies are small text files or other storage technologies that the Internet browser used by the user stores and saves on the device. These cookies process certain information of the user on an individual basis, such as browser and location data and IP address values.
The processing allows the provider to make his website more user-friendly, more effective and more secure.
If these cookies process personal data for the purpose of contract initiation or contract execution, the legal basis for processing is Art. 6 Para. 1 lit. b GDPR.
If the processing does not aim to initiate or process a contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Art. 6 Para. 1 lit. f GDPR.
The cookies used by the provider are deleted when the user closes his browser.
b) Third-party cookies
If necessary, third-party cookies are also used on the provider's website. These third-party providers are partner companies with which the provider cooperates for the purpose of advertising, analysis or the functionality of the website. If this is the case, the purposes and legal bases of the corresponding processing are given in the following explanations.
c) Elimination possibility
The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. &Nbsp; If the user prevents or restricts the installation of cookies, this may mean that not all functions of the website can be used to their full extent.
Contact requests / Appointment requests / Call back service
If the user makes contact, requests an appointment or requests a call back, the personal data provided by the user on this occasion will be used to process the request. The details of the data are required to answer the request or the call back, without the provision of the data, an answer is not possible or only possible to a limited extent.
The legal basis for this processing is Art. 6 Para. 1 lit. b GDPR.
The user's data will be deleted, provided that the user's request has been finally answered and there are no statutory retention requirements, such as in the event of a subsequent contract processing.
Job applications
In the case of job applications, the application data is electronically collected and processed by the provider for the purpose of handling the application process. This also includes the transfer of the applicant profile to the third party named in the job offer, if the provider advertises the position for a partner company.
The legal basis for the processing is § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If your application is followed by the conclusion of an employment contract, the transmitted data can be stored in the personnel file for the purpose of the usual organizational and administrative process, in compliance with the relevant legal regulations.
The legal basis for the processing is § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If the job application is rejected, the data transmitted will be deleted automatically two months after the rejection has been announced. This does not apply if, due to legal requirements (burden of proof under the General Equal Treatment Act, AGG), longer storage of up to four months or the conclusion of legal proceedings is necessary.
The legal basis for this is Art. 6 Para. 1 lit. f GDPR or § 24 para. 1 no. 2 BDSG.
The legitimate interest of the provider exists in legal defense.
If you have given your express consent to a longer storage of the data in a prospect database, the data will be further processed on the basis of the consent and deleted after 12 months at the latest.
The legal basis is Article 6 Paragraph 1 lit. a GDPR. The consent to this can be revoked for the future at any time in accordance with Art. 7 Para. 3 GDPR by sending a message to the provider.
Matomo
This website uses the software“Matomo“to analyze website visits. The processing takes place on behalf of the provider via ITOGETHER GmbH&Co. KG, Steigstraße 49, 73101 Aichelberg.
The following visitor information is processed:
- Anonymized IP address;
- Operating system;
- Browser type;
- Language;
- Website accessed;
- Time spent on the website;
- Frequency of visits to the website in the last 24 hours.
In order to capture this data, the software uses the device fingerprinting method -“Device Fingerprinting“- a. The data of the device is processed anonymously and changed every 24 hours.
The legal basis for this is Art. 6 Para. 1 lit. f GDPR. The legitimate interest of the provider consists in the analysis and optimization of the website.
If the user does not agree to this processing, there is the possibility of analyzing his / her visit to the website by means of the so-called “opt-out“ to end. By confirming the link
Klick here to activate the Matomo Opt-out-Cookie
a cookie is placed on the user's device, which prevents the analysis from being saved in the future.
Please note: If the user should delete the cookies in their browser settings, the opt-out cookie will usually also be deleted and may have to be reactivated by the user.