Privacy Policy of Hauer GmbH

Effective as of: 22.01.2019
Data protection has a particularly high priority for the management of Hauer GmbH. In principle, it is possible to use the website of Hauer GmbH without providing any personal data. However, if a data subject wishes to use our company’s special services via our website, it may be necessary to process their personal data. As a rule, if the processing of personal data is required and there is no legal basis for this, we seek to obtain the consent of the data subject.
Personal data, such as the name, address, email address and telephone number of a data subject, is always processed in accordance with the General Data Protection Regulation and in accordance with country-specific data protection requirements applicable to Hauer GmbH. By means of this Privacy Policy, our company seeks to inform the public about the nature, scope and purpose of the personal data we collect, use and process. In addition, this Privacy Policy informs data subjects of their rights.

Definitions

It is our aim that the Privacy Policy of Hauer GmbH can be readily understood by our customers and business partners and that all the terms used herein are explained. The terms are derived from the General Data Protection Regulation (GDPR), which were used by the European directive and regulatory authority at the time of adoption. All the terms used are defined below. This Privacy Policy uses the following terms (this list is not exhaustive):
a) Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter: the data subject). An identifiable natural person is someone who can be identified, directly or indirectly, in particular by association with an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of this natural person.
b) Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
c) Data processing
Data processing is any operation performed in connection with personal data, with or without the aid of automated procedures. This includes the collection, recording, organising, structuring, storage, adaptation or alteration, retrieval, querying, use, disclosure by transmission, dissemination or other form of provision, cross-checking or linking, restriction, deletion or destruction of personal data.
d) Restriction of processing
Restriction of processing refers to the marking of stored personal data, with the aim of restricting its future processing.
e) Profiling
Profiling includes any form of automated processing of personal data, consisting of the use of personal data to evaluate certain personal aspects relating to a natural person – in particular, to analyse or predict aspects concerning this natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, place of residence or changes of location.
f) Pseudonymisation
Pseudonymisation refers to the processing of personal data in such a way that it can no longer be associated with a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organisational measures which ensure that the personal data will not be associated with an identified or identifiable natural person.
g) Controller or controller responsible for the processing
The controller or controller responsible for the processing is the natural person or legal entity, authority, agency, or other body, which, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by EU law or the law of EU Member States, the controller and/or the specific criteria for their designation may also be provided for by EU law or the law of EU Member States.
h) Processor
The processor is a natural person or legal entity, authority, agency, or other body, which processes personal data on behalf of the controller.
i) Recipient
The recipient is a natural person or legal entity, authority, agency or other body, to which personal data is disclosed, regardless of whether this is a third party or not. However, authorities which may receive personal data in the context of a particular remit in accordance with EU law or the law of EU Member States are not regarded as recipients.
j) Third parties
Third parties are natural persons or legal entities, authorities, agencies or other bodies other than the data subject, controller, processor or people who, under the direct authority of the controller or processor, are authorised to process personal data.
k) Consent
Consent is any freely granted, informed and unambiguous indication of the wishes of the data subject, for a specific circumstance, in the form of a statement or another clear affirmative action, which signifies the data subject’s agreement to the processing of their personal data.

Legal basis

The General Data Protection Regulation (GDPR) protects the personal data of natural persons. The data of legal entities is not subject to this protection. Personal data is individual information about personal or factual circumstances that can be associated with you personally (for example, your name in combination with your telephone number or email address). Information that cannot be directly associated with your identity (such as items shown to you on a webpage) is not covered.

Scope

This Privacy Policy informs users about the nature, scope and purpose of the collection and use of personal data by the controller, Hauer GmbH, An der Raumfabrik 31A, 76227 Karlsruhe, Germany, on this website (hereinafter: the offering).

Your data is protected

Personal data refers to information about your identity. This includes, for example, information such as your name, address, telephone number and email address. It is not necessary for you to disclose your personal data in order to use our website and our webshop. In certain instances, however, such as when ordering items, we need your name and email address, as well as other information, to enable us to provide the services or deliveries you require.
The same applies, for example, to the dispatch of informational material/catalogues or to answering individual questions. If this data is required, we will notify you accordingly.
If you make use of our services, we will only collect the data we need to provide the respective service. This data is only processed to provide the requested services. If we ask you for additional data, this is considered to be voluntary information. Your personal data will not be disclosed to third parties without your required consent.

Non-personal data that is automatically collected

When using our website, the following data is stored for organisational and technical purposes: the names of the pages accessed, the browser and operating system used, the date and time of access, the search engines used, the names of downloaded files and your IP address.
We evaluate this technical data in an anonymised manner and only for statistical purposes, in order to be able to continuously optimise our website and make our Internet offering even more attractive. This anonymised data is stored separately from personal information, on secure systems, and does not allow any conclusions to be made about an individual person. Your personal data and privacy are protected at all times.

YouTube elements are also integrated into this Internet site. YouTube is an Internet video portal that enables video providers to post videos for free and visitors to view, comment on and rate these videos, also free of charge.

This video portal is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Every time a visitor accesses an individual website that incorporates a YouTube video, their Internet browser automatically downloads a version of the corresponding YouTube components (video or video preview) from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/. As part of this technical process, YouTube and Google obtain information about which specific subpage of our website the data subject has visited.
If the data subject is simultaneously logged into YouTube, YouTube recognises which specific subpage of our website the data subject is visiting when accessing a subpage containing a YouTube video. YouTube and Google gather this information and assign it to the data subject’s YouTube account.
The YouTube components always notify YouTube and Google that the data subject has visited our website, if they are simultaneously logged into YouTube at the time they access our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want such information to be disclosed to YouTube and Google, they can prevent this disclosure by logging out of their YouTube account before accessing our website.
The Privacy Policy published by YouTube, which is available at https://policies.google.com/privacy?hl=en&gl=de, provides information about the collection, processing and use of personal data by YouTube and Google.

Our website uses the analysis service, Google Analytics, a web analysis service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter abbreviated to: Google). Google Analytics uses “cookies”; text files that are stored on your computer and allow the analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in Ireland, where it is stored. As IP anonymisation has been enabled on this website, however, your IP address is first truncated by Google within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in Ireland, where it is then truncated. Google will use this information on behalf of the operator of this website, in order to evaluate your use of the website, compile reports about website activity and provide the website operator with other services related to website activity and Internet usage. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other Google data. You can prevent the storage of cookies by adjusting your browser software settings accordingly; we would point out, however, that in this case you may not be able to fully use all the features of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to this browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you must click this link again.

Google’s Security and Privacy Policies are available at https://policies.google.com/privacy?hl=en.

Functions of the provider Google Maps are integrated into our website, in order to present geographic information in a graphical format.

Google Maps is a map service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter abbreviated to: Google Maps). When a user accesses our website, which is equipped with a map, the website causes their browser to load a corresponding map display. When using Google Maps, data about the use of the Google Maps functions by visitors to the website is also collected, processed and used. For more information about data processing by Google, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=en

We use “cookies” at various places on our website. Cookies are small text files that are stored by the web browser on your computer or mobile device. Cookies do not cause any damage to your computer and do not contain any viruses; they are automatically deleted upon expiry. Some cookies expire when you end your Internet session, while others are stored for a certain amount of time. The cookies associated with our website do not collect any personal data. We use cookies to facilitate your visit to our website and adjust it to your needs. Of course, you can browse our website without cookies. By configuring your browser settings accordingly, you can disable the storage of cookies on your computer. You can also delete existing cookies via your browser settings. In this case, however, certain functions on our website may be limited.

Contact form

If you submit an enquiry via our contact form, the information you have provided on the contact form, including your contact details, will be stored for the purpose of processing your enquiry and in the event of follow-up questions.

Google ReCaptcha

Our website uses features of the Google ReCaptcha service, a security service for forms on websites provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. For more information about data processing by Google, please refer to Google’s Privacy Policy: https://www.google.com/policies/privacy

Privacy during recruitment and the application process

If a candidate submits their application documents via email, we electronically collect and process their personal data as part of the application process. If we conclude an employment contract with the candidate following the application process, the data transmitted is stored for the purpose of the employment relationship in accordance with the statutory provisions. If we do not conclude an employment contract with the candidate, we will delete their application documents two months after informing them of their rejection, provided this deletion is not contrary to any other legitimate interest for our company, such as evidence in proceedings in accordance with the General Equality of Treatment Act (AGG).

Children

Persons under the age of 18 should not submit any personal data to us without the consent of their parents or legal guardians. We do not solicit personal data from children and young people, do not collect such data and do not disclose it to third parties.

Security

We have implemented technical and organisational security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and all third parties involved in data processing are obligated to comply with the Federal Data Protection Act for the confidential handling of personal data.
In the case of the collection and processing of personal data, the information is transmitted in encrypted form in order to prevent misuse of the data by third parties. Our security measures are constantly revised in line with technological developments.

Amendment of our Privacy Policy

We reserve the right to change our security and data privacy practices as required in light of technical developments. In this case, we will also adjust our Privacy Policy accordingly. Therefore, please always refer to the latest version of our Privacy Policy.

Links

If you use external links offered within the framework of our website, this Privacy Policy does not extend to those links. When we provide links, we make every effort to ensure that these also comply with our data privacy and security standards. However, we have no influence over compliance by other providers with data protection and security requirements. Therefore, please inform yourself about the privacy policies of the other providers, which are available through their websites.

Legal bases for data processing

Article 6 (1a) of the GDPR serves our company as the legal basis for data processing operations in instances where we have obtained consent for a particular processing purpose. If the processing of personal data is necessary to fulfil a contract to which the data subject is a party, as is the case, for example, where data processing is necessary in order to supply goods or provide any other service or consideration, this processing will be based on Article 6 (1b) of the GDPR. The same applies to data processing needed to carry out pre-contractual measures, such as in cases of enquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, this processing will be based on Article 6 (1c) of the GDPR. In rare cases, the processing of personal data may be required in order to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises was injured and their name, age, health insurance number or other vital information would need to be disclosed to a doctor, hospital, or other third party. In such an instance, this processing would be based on Article 6 (1d) of the GDPR. Lastly, data processing operations could be based on Article 6 (1f) of the GDPR. This clause provides the legal basis for data processing operations that are not covered by any of the above-mentioned legal bases, if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that these do not outweigh the interests, fundamental rights and fundamental freedoms of the data subject. We are particularly permitted to implement such data processing operations because they have been specifically mentioned by the EU legislator. In this regard, it is considered that a legitimate interest may be assumed if the data subject is a customer of the controller (Recital 47, Clause 2 of the GDPR).

Legitimate interests in the processing pursued by the controller or a third party
If the processing of personal data has its legal basis in Article 6 (1f) of the GDPR, our legitimate interest lies in conducting our business for the benefit of all our employees and our shareholders.

Duration of personal data storage

The storage of personal data is subject to legally prescribed retention periods. Upon expiry of a retention period, the corresponding data will be deleted, unless it is needed for the purpose of fulfilling or initiating a contract. This includes legal or contractual requirements for providing personal data, the necessity for concluding a contract, obligations of the data subject to provide personal data, and the possible consequences of failing to do so.
Please be aware that the provision of personal data is sometimes required by law (such as tax regulations), or may also result from contractual clauses (such as information about the contracting party). In order to conclude a contract, it may be necessary for a data subject to provide us with personal data which we will subsequently need to process. For example, the data subject must provide us with personal information when our company enters into a contract with them. Failure to provide personal data would mean that the contract could not be concluded with the data subject. Prior to any personal data being provided by the data subject, the data subject will need to contact one of our employees. Our employee will inform the data subject, based on their individual circumstances, whether the provision of personal data is legally or contractually required, or is needed in order to conclude a contract, whether there is an obligation to provide personal data and the consequences of failing to provide personal data.

Existence of automated decision-making

No profiling or automated decision-making is used on our website.

Right to information, erasure and blocking as well as withdrawal of consent

At any time, you have the right, at no cost to you, to obtain information about your stored personal data, its origin and recipients of the data, as well as the purpose of the data processing and the right to correct, block or erase this data. In this regard and for further questions on the subject of personal data, you can contact us at any time at the address indicated in the imprint. In addition, you can withdraw your consent to the collection and storage of your personal data at any time. In all instances, please contact the following:

Hauer GmbH
An der Raumfabrik 31A
DE-76227 Karlsruhe
Germany

Tel: +49 (0)721 94 795 0
Fax: +49 (0)721 94 795 55

Or send an email to:
Email: sales@elevatorshop.de

You can contact our Data Protection Officer at:

Mr Alexander Gehring
evival Technologies GmbH & Co. KG
Hauptstraße 99
77855 Achern
Email: datenschutz@elevatorshop.de