Privacy statement pursuant to GDPR
I. Name and address of data controller
The data controller pursuant to the General Data Protection Regulation, other national data protection laws of the member states and other data protection regulations is:
Hirschmann Laborgeräte GmbH & Co. KG
Hauptstraße 7 – 15
74246 Eberstadt
Germany
Tel.: +49 (0)7134/5110
E-Mail: info@hirschmannlab.de
Website: www.hirschmannlab.de
II. Name and address of Data Protection Officer
The Data Protection Officer of the data controller is:
Thorsten Franz FranzX
Organisation & IT
Panoramastr. 20
74336 Brackenheim
Germany
Tel.: +49 (0)7135/9909010
E-Mail: datenschutzbeauftragter@franzx.de
Website: www.franzx.de
III. General information on data processing
1. Scope of personal data processing
On principle, we only process personal data relating to our users if this is necessary to provide a functional website and our contents and services. Regular processing of personal data relating to our users only occurs after consent is obtained from the user. An exception applies in those cases where prior consent cannot be obtained for factual reasons and processing of data is permitted by law.
2. Legal basis for processing of personal data
WITH CONSENT
In so far as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis
FOR FULFILMENT OF A CONTRACT
Art. 6 (1) lit. b GDPR serves as the legal basis in the case of processing of personal data required for performance of a contract to which the data subject is a party. This also applies to processing procedures which are necessary to implement pre-contractual measures.
FOR FULFILMENT OF A LEGAL OBLIGATION
Art. 6 (1) lit. c GDPR serves as the legal basis in so far as processing of personal data is required to fulfil a legal obligation to which our company is subject.
FOR PROTECTION OF VITAL INTERESTS
Article 6 (1) lit. d GDPR serves as the legal basis in the event that vital interests of the data subject or another natural person require the processing of personal data.
FOR PROTECTION OF LEGITIMATE INTERESTS
Art. 6 (1) lit. f GDPR serves as the legal basis for processing in so far as processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest.
3. Data deletion and storage duration
Personal data of the data subject is deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by European or national legislators in EU regulations, laws or other provisions which govern the data controller. Data is also blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is required for the conclusion or fulfilment of a contract.
IV. Provision of website and creation of log files
1. Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing Computer. The following data is collected in this respect:
(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP address
(5) Date and time of accessing
(6) Websites from which the user’s system accesses our website
(7) Websites accessed by the user’s system via our website
Data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
Art. 6 (1) lit. f GDPR is the legal basis for temporary storage of data and log files.
3. Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose. Storage in log files occurs to ensure the functionality of the website. In addition, the data enables us to optimise the website and ensure the security of our information technology systems. Evaluation of data for marketing purposes does not occur in this context. For these purposes, our legitimate interest also lies in the processing of data pursuant to Art. 6 (1) lit. f GDPR.
4. Storage duration
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data recorded for provision of the website, this is what occurs when the respective session is terminated. If data is stored in log files, it is deleted after 28 days at the latest. Further storage above and beyond this is possible. In this case, the IP addresses of users are deleted or distorted so that assignment of the accessing client is no longer possible.
5. Objection and disposal option
The collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, no possibility of objection exists on the part of the user.
V. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system. A cookie may be stored on the user’s operating system if a user accesses a website. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be also identifiable after a page change. The following data is stored and transmitted in cookies:
(1) Language settings
(2) Session cookie for page status
2. Legal basis for data processing
The legal basis for processing of personal data using cookies is Art. 6 (1) lit. f GDPR.
3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. It is necessary that the browser be also identifiable after a page change for this purpose. We need cookies for the following applications:
(1) Holding the session
(2) Accepting language settings
User data collected by technically necessary cookies is not used to create user profiles. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 (1) lit. f GDPR.
4. Duration of storage, objection and disposal options
Cookies are stored on the user’s computer and transmitted from this to our website. Consequently, you as the user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that are already saved can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to the full extent.
VI. Contact form and email contact
1. Description and scope of data processing
A contact form is provided on our website which can be used for electronic contact. Data entered in the input mask is transmitted to us and stored if a user takes advantage of this option. This data is:
(1) Last name
(2) First name
(3) Email
(4) Message
(5) Other voluntary details, if applicable
The following data is also stored at the time the message is sent:
(1) The user’s IP address
Reference is made to the page with the contact form for data processing and also to this privacy statement for details.
Alternatively, contact is also possible via the email address provided. The user’s personal data transmitted by email is stored in this case.
No data is forwarded to third parties in this context. Data is used exclusively for processing of the conversation.
2. Legal basis for data processing
The legal basis for processing of data is Art. 6 (1) lit. f GDPR. If the aim of the enquiry is to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.
3. Purpose of data processing
Processing of personal data from the input mask only assists us in processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing of data. Other personal data processed during the transmission process serves to prevent abuse of the contact form and ensure the security of our information technology systems.
In the event of an enquiry due to the initiation of a legal transaction, we may pass on your data to one of our registered dealers, to our registered field service for enquiries in Germany and to the nearest registered dealer in your country for international enquiries. If there is no registered dealer from our network in your country, we will select a dealer suitable for your needs. You can find the list of registered dealers on the website under “Contact”.
4. Storage duration
Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the input mask of the contact form and that which was sent by email, this is the case when the respective conversation with the user is ended. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been conclusively clarified.
Additional personal data collected during sending is deleted after a period of seven days at the latest.
5. Objection and disposal option
The user has the possibility to revoke his or her consent to processing of personal data at any time. If the user contacts us by email, he or she can object to storage of his or her personal data at any time. The conversation cannot be continued in such a case. Please contact us by telephone for this purpose. We will otherwise store personal data again in the absence of such a revocation or objection. All personal data stored during contacting is deleted in this case.
VII. Google Analytics
On our website, we ask at the beginning whether you agree with the use of your personal data to optimise our website.
If you answer yes, Google Analytics is activated and saves cookies. If you answer no, Google Analytics remains inactive. You can revoke your consent at any time and block cookies from Google Analytics via your browser.
The following information applies to you if Google Analytics is confirmed by you:
1. Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). („Google“).
Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and allow analyse of your use of the website.
The information generated by the cookie about your use of the website, such as the browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) or time of server request, are transmitted to a Google server and stored there.
The IP address transmitted from your browser in the context of Google Analytics is not combined with other Google data. We have also expanded Google Analytics on this website through the addition of the “anonymizeIP” code. This ensures masking of your IP address so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.
We also use Google Analytics to analyse data from double-click cookies and AdWords for statistical purposes.
2. Legal basis
Use occurs through consent on the basis of Art. 6 (1) Clause 1 lit. a) GDPR.
3. Legitimate interest
Google uses this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide other services related to website and internet usage for the website operator.
4. Recipients in third countries
Data is usually transmitted to a Google server in the United States and stored there.
5. Storage Duration
Data is deleted automatically after the shortest storage times available at Google.
VIII. Rights of the data subject
The following list includes all rights of the data subject pursuant to the GDPR. Rights which are not relevant for our own website need not be mentioned. The list may be shortened in this respect.
If personal data is processed by you, you are the data subject in terms of the GDPR and have the following rights with regards to the data controller:
1. Right to information
You can request confirmation from the data controller as to whether personal data relating to you is processed. If such processing takes place, you can request the following information from the data controller:
(1) The purposes for which personal data is processed;
(2) The categories of personal data that are processed;
(3) The recipients or categories of recipients to whom personal data relating to you has been or is to be disclosed;
(4) The planned storage duration for personal data relating to you or, if specific details on this are not possible, criteria for determining the storage duration;
(5) The existence of a right to correction or deletion of personal data relating to you, a right to limitation of processing by the data controller or a right to object to this processing;
(6) The existence of a right of appeal to a supervisory authority;
(7) Any available information on the origin of data if personal data is not collected from the data subject;
(8) The existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether personal data relating to you is transmitted to a third country or an international organisation. You may demand to be informed about the appropriate guarantees pursuant to Art. 46 GDPR relating to transmission in this context.
2. Right to correction
You have a right with regard to the data controller to correction and/or completion if the personal data processed relating to you is incorrect or incomplete. The data controller must realise the correction without delay.
3. Right to limitation of processing
Under the following conditions, you may request that processing of personal data relating to you be restricted if:
(1) you dispute the accuracy of personal data relating to you for a period of time that enables the data controller to verify the accuracy of the personal data;
(2) processing is unlawful and you refuse to delete the personal data and, instead, request that use of the personal data be restricted;
(3) the data controller no longer needs the personal data for the purposes of processing, but you require it to assert, exercise or defend legal claims, or
(4) if you have filed an objection to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.
If processing of personal data relating to you has been restricted, this data may (apart from its storage) only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or a member State.
If the processing restriction has been limited according to the above conditions, you will be informed by the data controller before the restriction is lifted.
4. Right to deletion
(1) Obligation to delete
You may request that the data controller delete personal data relating to you without delay, and the data controller is then obliged to delete this data without delay if one of the following reasons applies:
(a) Personal data relating to you is no longer required for the purposes for which it was collected or otherwise processed.
(b) You revoke your consent on which processing was based pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and no other legal basis for processing exists.
(c) You file an objection against processing pursuant to Art. 21 (1) GDPR and no overriding legitimate reasons for processing exist, or you file an objection against processing pursuant to Art. 21 (2) GDPR.
(d) Personal data relating to you has been processed unlawfully.
(e) Deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of member states to which the data controller is subject.
(f) Personal data relating to you has been collected in relation to information society services provided pursuant to Art. 8 (1) GDPR.
(2) Information to third party
If the data controller has made personal data relating to you public and is obliged to delete it pursuant to Art. 17 (1) GDPR, the data controller shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs to inform data processors responsible for processing the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
(3) Exceptions
The right to cancellation does not exist in so far as processing is necessary
(a) to exercise the right to freedom of expression and information;
(b) to fulfil a legal obligation requiring processing under the law of the Union or member states to which the data controller is subject, or for the performance of a task in the public interest, or in the exercise of official authority conferred on the controller;
(c) for reasons of public interest in the area of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, in so far as the right referred to under a) is likely to make attainment of the objectives of such processing impossible or seriously impair it, or
(e) for the assertion, exercise or defence of legal claims.
5. Right to information
If you have exercised the right to have the data controller correct, delete or limit processing, the data controller is obliged to inform all recipients to whom personal data relating to you has been disclosed of this correction or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right with regard to the data controller to be informed of these recipients.
6. Right to data portability
You have the right to receive the personal data relating to you that you have provided to the data controller in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another controller without obstruction by the data controller to whom the personal data was provided, in so far as
(1) processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or a contract pursuant to Art. 6 (1) lit. b GDPR and
(2) processing is realised with the aid of automated methods.
In exercising this right, you also have the right to request that personal data relating to you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data required for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
7. Right of objection
You have the right to object at any time for reasons emanating from your particular situation to processing of personal data relating to you that arises under Art. 6 (1) lit. e or f GDPR. This also applies to profiling based on these provisions.
The data controller no longer processes personal data relating to you, unless the data controller can prove that compelling reasons relating to protection exist for processing which outweigh your interests, rights and freedoms, or that processing serves to assert, exercise or defend legal claims. If personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data relating to you for the purpose of such advertising. This also applies to profiling if it is associated with such direct marketing. If you object to processing for direct marketing purposes, personal data relating to you will no longer be processed for these purposes. Notwithstanding Directive 2002/58/EC, you have the possibility to exercise your right of objection with regard to use of information society services through automated procedures employing technical specifications.
8. Right to revoke data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. Revocation of consent does not affect the legality of processing realised on the basis of consent until revocation.
9. Automated decision-making in individual cases, including profiling
No profiling or automated decision-making occurs.
10. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, particularly in the member state where you reside, work or suspect an infringement if you believe that processing of personal data relating to you represents a breach of the GDPR. The supervisory authority where the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.