I. Who is the responsible body (“controller” in terms of the GDPR) and how can I contact the data protection officer?
Hotset GmbH, Hueckstraße 16, 58511 Lüdenscheid, firstname.lastname@example.org
You can contact our data protection officer which is JURANDO GmbH (https://www.jurando.de) under email@example.com or by postal letter to our address; in the latter case, please add: “Att. data protection officer”.
II. Which are the rights you are entitled to?
You are entitled to the following rights which you can assert against us with respect to the personal data concerning you:
- Right to information/access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to the processing (Art. 21 GDPR).
In addition, you have the right to lodge a complaint about us with a supervisory authority according to Art. 77 GDPR.
Where you have consented to the processing, you have the right to withdraw the consent at any time; however, the withdrawal of consent will not affect the lawfulness of processing based on the consent before its withdrawal.
III. For what purposes do we process personal data and what is the legal basis for the processing?
When you visit our website
When you visit our website for mere information purposes, i.e. when you do not register or otherwise transfer or disclose information to us, we only collect those personal data which your browser transfers to us. This includes (to be agreed with the person in charge of your website)
- IP address
- Date and time of access
- Details of the query (specific page accessed)
- Access status/HTTP status code
- Size of our server response in bytes
- Website from which the query is made (so-called “referrer”)
- Operating system and its surface
- Language and version of the browser software.
We also store this data including the IP address as log files.
We require this data for technical reasons to be able to display our website, ensure stability and security and optimize our presentation.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the afore-mentioned purposes.
We erase this data after seven days at the latest. We will only store data beyond that time after the personal data has been erased or anonymized. In the case of IP addresses, anonymization can be procured by appropriate shortening of the IP address.
We use transient and persistent cookies on our website. Transient cookies are deleted automatically when you close the browser. These comprise in particular session cookies. They store a so-called session ID which enables several queries from your browser to be allocated to one and the same session. This enables us to recognize your computer when you visit our website again. The session cookies are deleted when you log out from our website or close the browser. Persistent cookies are deleted automatically after expiry of a pre-defined validity which can vary, depending on the cookie used from time to time. You can delete the cookies at any time in the security settings of your browser.
You can set your browser as you wish, and you may, for instance, refuse to accept third-party cookies or even all cookies. However, please be aware that, if you do so, you might be unable to use all features and functions of this website.
When you use our contact form, we will use the data you have transferred to us; the only information you must necessarily disclose to us is a valid email address, all other information is disclosed to us voluntarily to enable us to answer your request. The information you disclose to us may be stored in a Customer Relationship Management System ("CRM system") or similar software.
Data processing for the purposes of communication is based on Art. 6 subs. 1 b) GDPR if and to the extent that your request pertains to the performance of contractual duties or initial approaches for contract conclusion (“taking steps prior to entering into a contract”). In other cases, the legal basis is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above.
The personal data we collect when you use the contact form are deleted automatically after your request has been settled unless we are required by law to retain the data or we need the data for contract performance. You may also at any time object to the processing when the processing is based on a legitimate interest.
When you contact us via the email addresses we have indicated for such purpose, we will store the personal data you have transferred to us in order to answer your requests. The information you have provided to us might be stored in a Customer Relationship Management System ("CRM system") or similar software.
In the course of transporting or delivering your e-mail, log data is also generated on a regular basis, which, for example, also contains the IP address of the e-mail server you are using. These log data are necessary for ensuring the proper operation of our e-mail server and also serve as proof of server problems or security incidents.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above. Where the email by which you contact us is aimed at contract conclusion or when you send us an email in the context of an existing contractual relationship, the legal basis is Art. 6 subs. 1 b) GDPR.
The data is deleted after the request has been finally settled unless we are required by law to retain the data or we need the data for contract performance. You can also at any time object to the processing when the processing is based on a legitimate interest.
To our distribution partners we offer the possibility to register as a user by disclosing personal data. For this purpose the data needs to be entered in an input mask, will afterwards be transmitted to us and stored. A passing to third parties will not take place. The following mandatory data will be collected in the registration process: firm, first name, last name and user name. Optionally the phone number can be collected.
The possibility to create a customer account is only offered to our distribution partners. They will gain access to certain contents after the registration process.
The legal basis for this is Art. 6 subs. 1 f) GDPR.
The data will be deleted, should you delete your customer account.
This website uses Google Analytics, a web analysis service provided by Google Inc. (”Google”). Google Analytics uses so-called “cookies” which are small text files which are stored on your computer and enable us to analyse how you use the website. The information generated by the cookie about how you use this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address is shortened within the European Union Member States or other countries party to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there. Google, on instruction and on behalf of the operator of this website, uses this information to analyse how you use the website, to compile reports on the website activities and render further services to the website operator relating to the use of the website and the use of the Internet.
The IP address which is transferred by your browser in the context of Google Analytics services is not combined or pooled with other data of Google.
You can set your browser software to prevent the storage of cookies; However, in this case, please be aware that you might possibly be unable to use all features and functions of this website without restrictions. You can also prevent the collection and transfer to Google of the data generated by the cookie about your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.
This website uses Google Analytics with the supplementary feature called “_anonymizeIp()”. This makes sure that only shortened IP addresses are processed further which prevents IP addresses from being allocated to specific persons. This means that, if and to the extent the data collected from you refer to you personally, allocation of the data to you personally is prevented right from the beginning and the personal data is thus deleted immediately.
We use Google Analytics to analyse and continuously improve the use of our website. The statistics we gain thereby help us improve our presentation and services and offer you as the user a more interesting design. As to the exceptional cases where personal data is transferred to the USA, Google joined the EU-US Privacy Shield, www.privacy-shield.gov/EU-US-Framework .
The legal basis for the use of Google Analytics is Art. 6 subs. 1 sentence 1 f) GDPR. Our legitimate interest consists in the optimization and marketing purposes for which we use the results obtained via Google Analytics. Where you have consented to the use of your data, the legal basis is Art. 6 a) GDPR.
Information provided by the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
General information on privacy: www.google.com/intl/de/analytics/learn/privacy.html
This website uses MyFonts Counter, a web analytics service provided by MyFonts Inc., 500 Unicorn Park Drive, Woburn, MA 01801 USA. The service runs a page-view-tracking by counting the number of visitors of the website for statistical purposes and transmitting them to MyFonts. MyFonts only collects anonymized data for this purpose. The data is passed to MyFonts by activation of java-script-code in your browser if necessary. To prevent the execution of java-script-code by MyFonts in general, you can install a java-script-blocker (e.g. www.noscript.net). For further information about MyFonts Counter visit their website concerning data protection notes under www.myfonts.com/info.terms-and-conditions/.
The legal basis for the usage of MyFonts Counter is Art. 6 subs. 1 f) GDPR. We use the results we obtain by MyFonts for optimization and maketing purposes which constitute a legitimate interest. In case you agreed to the usage, the legal basis is Art. 6 subs. 1 a) GDPR.
We use the services of Google Maps on our website. This enables us to show you interactive maps directly on our website and thus enables you to comfortably use the maps feature.
When you access the website, Google is informed that you have accessed the relevant page of our website. The data collected during your visit to our website is transferred, too. This happens regardless of whether Google provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data is directly allocated to your account. If you do not want your data to be allocated to your Google profile, you have to log out before you activate the button. Google stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to provide customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object, and thus prevent, the preparation of these user profiles; if you want to exercise your right to object, you have to address your objection to Google.
Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the provider’s privacy policies which also contain further information on your rights and the possible settings to protect your privacy: www.google.de/intl/de/policies/privacy . Google processes your personal data also in the USA and joined the EU-US Privacy Shield, www.privacy-shield.gov/EU-US-Framework .
The legal basis for the use of Google Maps is Art. 6 subs. 1 f) GDPR. Our legitimate interest consists in the afore-mentioned marketing purposes.
On this website data are collected by usage of the SalesViewer-technology by the CONCEPTPARTNER GmbH for marketing, market research and optimization purposes.
Based on said data, user profiles under a pseudonym can be created. Therefore we use so called trackingscripts, which serve to collect company-related data. The data compiled with these technologies will not be used to personally identify the visitor of the website or to link personal data with the carrier of the pseudonym unless permission is granted separately by the person in question.
You can object to the collection and storage of data on our website by the SalesViewer at any time going into effect for the future by visiting this link www.salesviewer.com/opt-out. By clicking the link, an opt-out-cookie for our website will be placed on your device.
The legal basis for this is Art. 6 subs. 1 f) GDPR. The legitimate interests we pursue are the above mentioned marketing purposes.
When you transfer your application to us, we will process the transferred data to perform our (pre-) contractual duties in the context of the application procedure. If your application is successful, we further process the data for the purpose of handling and executing the employment relationship.
The legal basis is Art. 6 subs. 1 b) GDPR as well as § 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). If you voluntarily transfer to us special categories of personal data such as health data or religion, also Art. 9 subs. 2 b) GDPR serves as legal basis.
If your application is not successful, we will delete your data after six months at the latest.
Until that time, the data is stored to answer any possible queries relating to the application procedure and to comply with our documentation duties under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG). If you withdraw your application, we will delete your data immediately.