Privacy Policy
§ 1 Information about the collection of personal data
Below we inform you about the processing of personal data when using our website. Personal data are all data that can be personally related to you, e.g., name, address, email addresses, user behavior. Through this, we want to inform you about our processing activities and at the same time comply with legal obligations, especially those arising from the EU General Data Protection Regulation (GDPR).
The controller according to Art. 4 para. 7 GDPR is:
HS-Group GmbH
Porschestraße 12
63512 Hainburg
Germany
Website: www.hsg-vacuum.com
Tel. +49 6182 - 93 51 0
Fax +49 6182 - 93 51 11
E-Mail: info@hs-group-gmbh.de
You can reach our Data Protection Officer at:
datenschutzbeauftragter@vonardenne.com or at our postal address with the addition "the Data Protection Officer".
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your name, first name, position and your telephone number, company) will be stored by us in order to answer your questions. The data collected in this context will be deleted if the inquiry is assigned to a contract, after the periods for the contract duration, otherwise after the storage is no longer necessary, or the processing will be restricted if there are legal retention obligations.
If we use commissioned service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail below about the respective processes.
§ 2 Your Rights
You have the following rights towards a controller regarding your personal data:
- Right to information,
- Right to correction or deletion,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The competent supervisory authority for data protection matters is the supervisory authority in the state where the controller has its registered office:
The Hessian Commissioner for Data Protection and Freedom of Information
Prof. Dr. Alexander Roßnagel
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
§ 3 Processing of personal data when visiting our website
When using the website for informational purposes, i.e., merely viewing without registration and without providing us with any other information, we process the personal data that your browser transmits to our server. The data described below are technically necessary for us to display our website to you and to ensure stability and security, and therefore must be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR:
- IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (visited page),
- Access status/HTTP status code,
- Amount of data transferred each time,
- Previously visited page,
- Browser,
- Operating system,
- Language and version of the browser software.
§ 4 Recipients or categories of recipients
Your personal data is processed by the controller and, if necessary, transmitted to companies affiliated with the controller (within the meaning of §§ 15 et seq. of the German Stock Corporation Act) if the affiliated companies require this data to fulfill contractual and legal obligations or to implement our legitimate interests. Otherwise, data is only passed on to third parties if this is necessary to fulfill the purpose for which the user provides their personal data. Such third parties are also obligated by the controller through agreements to observe the users' data protection.
§ 5 Additional functions and offers
In addition to the purely informational use of our website, we offer various services that you can use if interested and employ other common functions for the analysis or marketing of our offerings, which are explained in more detail below. For this, you usually have to provide additional personal data, or we process such additional data that we use to carry out the respective services. The principles of data processing mentioned above apply to all data processing purposes described here.
(1) KONTAKTAUFNAHME:
If you send us inquiries via email or contact form, the information you provide, including the contact details you enter there (email address, name, telephone number), will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent or compelling legal reasons.
The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a) GDPR). You can revoke this consent at any time. A simple notification by email to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
(2) APPLICANT DATA
We collect and process the personal data of applicants for the purpose of handling the application process. The processing can also be carried out electronically. This is particularly the case when an applicant submits corresponding application documents electronically, for example by e-mail or via a web form on the website. The processing of your data is based on Art. 6 para. 1 lit. b) GDPR and on your given consent according to Art. 6 para. 1 lit. a) GDPR. The consent can be revoked at any time by sending a message to the person responsible. Your personal data will only be passed on within our company to persons involved in processing your application. If the application is successful, the data you submitted will be stored in our data processing systems based on § 26 BDSG and Art. 6 para. 1 lit. b) GDPR for the purpose of carrying out the employment relationship. The transmitted data for the purpose of handling the employment relationship is stored in compliance with legal regulations.
If no employment contract results from the application, the application documents will be deleted six months after the position has been filled, provided that there are no other legitimate interests of the controller opposing deletion. Other legitimate interests in this sense include, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG). With the applicant's consent, the data may also be stored for a longer period.
(3) YOUR VISIT
During your visit to one of our locations, we process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for documenting your visit or legal obligations exist.
RESPONSIBLE ENTITIES IN TERMS OF DATA PROTECTION LAW
For your visit to HS-Group GmbH:
HS-Group GmbH
Porschestraße 12
63512 Hainburg
Germany
PURPOSES AND LEGAL BASES OF PROCESSING DURING YOUR VISIT
If you give us explicit consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent according to Art. 6 para. 1 lit. a GDPR. A given consent can be revoked at any time with effect for the future.
The processing of your personal data takes place to protect our legitimate interests as well as to defend and assert legal claims in accordance with Art. 6 para. 1 lit. f GDPR. We have an interest in knowing which persons are present in our company, when, and for what reason, in order to ensure security in our company and to be able to pursue any criminal offenses.
As a company, we are obliged by EU regulations and other applicable sanctions and export control regulations to check business contacts, among other things, for matches with names on sanctions lists. The processing of your data takes place to protect our legitimate interests according to Art. 6 para. 1 lit. f GDPR as well as due to a legal obligation to which we as a company are subject according to Art. 6 para. 1 lit. c GDPR.
CATEGORIES OF PERSONAL DATA
We only process data that is related to your visit. These are usually general data about you or persons in your company (name, first name, nationality, company, contact details, time, and in the case of foreign nationals: identification and address data, date of birth, activities, nationalities) as well as any other data you provide to us during the visit.
SOURCES OF DATA
We process personal data that you provide during your visit or that you send to us via email or contact form.
RECIPIENTS OF THE DATA
We only share your personal data within our corporate group with the departments and individuals who need this data to document your visit or to implement our legitimate interests as well as to comply with legal requirements.
We may transfer your personal data to affiliated companies (within the meaning of §§ 15 et seq. of the German Stock Corporation Act) insofar as this is permissible within the purposes and legal bases set out under item 3 of this data protection information sheet.
Your personal data is processed on our behalf based on data processing agreements pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet services as well as providers of customer management systems and software.
Data transfer to recipients outside the company or group otherwise only takes place insofar as legal provisions permit or require this, the transfer is necessary for the processing of your visit, we have your consent, or we are authorized to provide information. Under these conditions, recipients of personal data may include, for example:
- Public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office) in the presence of a legal or official obligation;
- Recipients to whom the transfer is directly necessary for asserting possible claims for damages (e.g., lawyers, courts);
- Service providers (reception service);
- Recipients for export control and sanctions lists.
DURATION OF DATA STORAGE
Your data will be deleted as soon as it is no longer necessary for the aforementioned purpose.
Furthermore, we are subject to various retention and documentation obligations, which arise, among other things, from the Commercial Code (HGB) and the Fiscal Code (AO). The prescribed periods for retention or documentation there range from two to ten years.
Finally, the storage duration is also determined by the statutory limitation periods, which, for example, according to §§ 195 ff. of the Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
(4) GOODS SHIPMENT:
For the processing of your delivery to/from HS-Group, we cooperate with various shipping service providers who assist us in the execution of concluded contracts. To these service providers, name, first name, position/function, address, contact details, as well as possibly other personal data in accordance with the following information, are transmitted exclusively for the purpose of processing the delivery. The data you provide will be passed on to the transport company commissioned with the pickup as part of the contract processing, insofar as this is necessary for the delivery of the goods to us. The legal basis for the transfer is Art. 6 para. 1 lit. b) GDPR.
(5) SOCIAL MEDIA:
LinkedIn:
This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers will be established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "recommend" button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website with you and your user account.
We would like to inform you that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.
For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy
§ 6 TRANSFER TO A THIRD COUNTRY
Unless otherwise described, the transfer of your data to a third country beyond our group and affiliated companies (within the meaning of §§ 15 ff. AktG) is not intended.
§ 7 Duration of storage of personal data
The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
§ 8 Use of analysis tools
Matomo:
The web analysis service Matomo is used on our website. This is an open-source software which statistically evaluates the accesses of the website visitors. Matomo is operated as a self-hosted version on the controller's own web server. No data is transmitted to a third party. Furthermore, Matomo is configured to work without cookies in accordance with data protection regulations. The IP address is anonymized immediately after processing and before storage.
§ 9 Objection or withdrawal against the processing of your data
If you have given your consent to the processing of your data, you may withdraw this consent at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have expressed it to us. The permissibility of the processing of your data up to the time of your withdrawal remains unaffected.
Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When you lodge such an objection, we will ask you to explain the reasons why we should not process your personal data in the way we have done. In the event of your objection, we will review the situation and either cease or adapt the data processing or show you our compelling legitimate grounds for continuing the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. The best way to send us your objection to advertising is to contact us using the contact details provided above.