Privacy Statement

a) Introduction

We take the protection of your data very seriously and strictly comply with the applicable regulations of the data protection laws. On this website, personal data are only collected in the scope required for technical and organizational purposes. Under no circumstances your data will be transferred to third parties. The subsequent statement provides you with an overview how we ensure the protection of your personal data and what kind of data are collected for which purposes.

In order to ensure the security of your data during the transmission process, we also use state-of-the-art SSL/TLS encryption processes.

b) Responsible Body, Data Protection Officer

Name and Address of Responsible Body

The responsible body in the sense of the General Data Protection Regulation (Datenschutzgrundverordnung, DSGVO) and other national data protection laws of the member states as well as other privacy provisions is:

HEMA Umformtechnik GmbH & Co.KG
Östreweg 4/1
72355 Schömberg – Schörzingen
Phone: +49 7427 9476-0
Fax: +49 7427 9476-80
Email: info@hema-umformtechnik.de

Represented by the managing partner:

Dipl. Kfm. Erwin Hermann

The people concerned can directly and at any time address our data protection officer on any matters related to data protection.

Data Protection Officer

The data protection officer of the responsible party is:

Stefan Webelhaus
Management Consulting
Lessingstr. 14
58707 Menden
anfrage@webelhaus.de
internal coordinator: Mr. Horst Staiger

The people concerned can directly and at any time address our data protection officer on any matters related to data protection.

c) Data Processing - General

Scope of Processing of Personal Data

In principle, we process personal data of our users only insofar as this is required for the provision of a functional website and of our contents and services. As a rule, the processing of personal data of our users is only carried out with their consent. An exception applies in cases in which a prior obtaining of consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

Legal Basis for the Processing of Personal Data

Insofar as we request consent for the processing of personal data of the person concerned,

art. 6 para. 1 lit. a EU-Datenschutzgrundverordnung (DSGVO resp. General Data Protection Regulation) serves as the legal basis.

The legal basis for the processing of personal data required for the fulfilment of a contract whose contracting party is the person concerned is art. 6 para 1 lit. b DSGVO. This also applies to processing which is required for the execution of pre-contractual measures.

Insofar as the processing of personal data is required for the fulfilment of a legal obligation our company is subject to, art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In case vital interests of the person concerned or of another natural person requires the processing of personal data, art. 6 para. 1 lit. d DSGVO serves as the legal basis.

If the processing is required for the safeguarding of a legitimate interest of our company or of a third party, and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the interest first mentioned, art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.

Deletion of Data and Duration of Storage

The personal data of the person concerned are deleted or blocked as soon as the purpose of storage no longer exists. Beyond this, data may be stored if this was provided by the European or national legislator in European stipulations, laws or other regulations the person responsible is subject to. A deletion or cancellation of data is also carried out if a storage period prescribed by the norms mentioned expires unless it is required to further store the data for the conclusion or fulfilment of a contract.

d) Generation of Log Files

Description and Scope of Data Processing

Whenever our Internet site is visited, our system automatically records data and information about the computer system of the visiting computer.
The following data are collected:

  • browser type and version
  • the operating system used
  • the Internet service provider of the user
  • settings of resolution and color depth
  • referrer URL (the site visited before, if applicable)
  • host name / IP address of the visiting computer
  • time and date of the server request

These data are not stored together with other personal data of the user.

Legal Basis for Data Processing

Legal basis for the temporary storage of the data and log files is art. 6 para. 1 lit. f DSGVO.

Purpose of Data Processing

The storage of the IP address in log files is executed to ensure the functionality of the website. Furthermore, the data serve to optimize the website and to ensure the security of our IT systems. The data are not evaluated for marketing purposes in this context.
These purposes also constitute our justified interest in the data processing acc. art. 6 para. 1 lit. f DSGVO.

Duration of Storage

n case the data are stored in log files, this happens after 90 days at the latest.

Possibility of Contradiction and Disposal

The collection of the data for the provision of the website and the storage of the data in log files is indispensable for the operation of our Internet site. As a consequence, the user has no option to contradict.

e) Use of Cookies

Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser resp. by the Internet browser on the computer system of the user. When a user visits a website, a cookie can be stored in the operating system of the user. This cookie gets a
characteristic sequence of characters (string) that allows an unequivocal identification of the browser when the website is visited again.

Technically Essential Cookies

We use technically essential cookies on the website: The essential storage of data involves cookies that are indispensable for the functions of a website. This includes the storage of log-in-data and of the language selection by so-called session cookies. These are deleted when the browser is closed.

Not Technically Essential Cookies

Beyond that, we use cookies on our website that are designed for the analysis and improvement of our website.
The user data collected in this way are pseudonymized by technical provisions.
Thus, it is no longer possible to allocate the data to the visiting user. The data are not stored together with other personal data of the users.
When visiting our website, the users are made aware of all cookies by our consent management platform, and the respective cookies can be accepted or rejected.

Legal Basis for Data Processing

The legal basis for the processing of personal data using technically essential cookies is art. 6 para. 1 lit. f DSGVO.
The legal basis for the processing of personal data using cookies for analytic purposes is art. 6 para. 1 lit. a DSGVO if the user has given their respective consent.

Purpose of Data Processing

The purpose of the use of technically essential cookies is to simplify the use of websites for the
users. Some functions of our website cannot be provided without the use of cookies. It is necessary for them that the browser will also be recognized after a change of page.

The user data collected by technically essential cookies are not used for the creation of user profiles.

Analysis cookies are used to improve the quality of our website and its contents. By means of analysis cookies we find out how the website is used, and in this way we can continuously optimize our offer.

Duration of Storage, Possibility of Contradiction and Disposal

Cookies are stored on the computer of the user and from there transmitted to our site. For this reason, you have complete control of the use of cookies as a user. By changing the settings of your Internet browser you can deactivate or limit the transfer of cookies. Cookies alread stored can be deleted at any time. This can also be performed in automated way. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to full extent.

Cookiebot

f) Contact Form and E-Mail Contact

Description and Scope of Data Processing

There is a contact form on our website which can be used to contact us electronically. If a user takes advantage of this opportunity, the data entered into the form are transmitted to and stored by us.

At the time the message is sent the following data are also stored: Date and time

During the sending process, your consent to the data processing is requested and the privacy statement is referred to.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user that are transmitted along with the e-mail are saved. Please note, however, that as a rule the confidentiality of e-mails or other electronic means of communication on the Internet cannot be granted. Therefore, we recommend to send confidential information by mail.

In this context, the data are not transferred to third parties. The data are exclusively used to process the conversation.

Legal Basis for Data Processing

The legal basis for the processing of the data is art. 6 para. 1 lit. a DSGVO if the user has given their respective consent.
The legal basis for the processing of the data that are transmitted in the course of sending an e-mail is art. 6 para. 1 lit. 1 lit. f DSGVO. If the e-mail contact is targeted at the conclusion of a contract, art. 6 para. 1 lit. 1 lit. b DSGVO is an additional legal basis for the processing.

Purpose of Data Processing

The processing of the personal data from the entry mask exclusively serves to handle the establishment of contact. In case of an establishment of contact by e-mail this represents the required justified interest in the processing of the data.
The other personal data processed during the sending serve to prevent a misuse of the contact form and to ensure the security of our IT systems.

Duration of Storage

The data are deleted as soon as they are no longer required to serve the purpose of their collection. This applies to the personal data from the entry mask of the contact form and the data transmitted by e-mail when the respective conversation with the user is finished. The conversation is finished when the circumstances suggest the conclusion that the respective matter is definitely clarified.

The additional personal data collected during the sending are deleted after a period of seven days at the latest.

Possibility of Contradiction and Disposal

The user has the possibility to withdraw their consent to the processing of the personal data at any time. If the user contacts us by e-mail, they can contradict the storage of their personal data at any time. In such a case, the conversation cannot be continued.
In addition, the user has the opportunity to contradict the storage of their personal data by mail.
In this case, all personal data that are stored in the course of establishing the contact are deleted.

g) Application Form

Description and Scope of Data Processing

Description and Scope of Data Processing

The application form on our Internet site can be used for the electronic transmission of application documents. If a user takes advantage of this opportunity, the data entered into the entry mask are transmitted to and stored by us. These data are:

At the time the message is sent the following data are also stored:
– Date and time of establishment of contact

During the sending process, your consent to the data processing is requested and the privacy statement is referred to.

The data are not transferred to third parties in this context.

Legal Basis for Data Processing

The legal basis for the processing of the data is art. 6 para. 1 lit. a DSGVO if the user has given their respective consent.
The legal basis for the processing of the data that are transmitted in the course of sending an e-mail is art. 6 para. 1 lit. 1 lit. f DSGVO. If the e-mail contact is targeted at the conclusion of a contract, art. 6 para. 1 lit. 1 lit. b DSGVO is an additional legal basis for the processing.

Purpose of Data Processing

The processing of the personal data from the entry mask exclusively serves to handle the establishment of contact. In case of an establishment of contact by e-mail this represents the required justified interest in the processing of the data.
The other personal data processed during the sending serve to prevent a misuse of the contact form and to ensure the security of our IT systems.

Duration of Storage

The data are deleted after 6 months upon termination of the application process.

Possibility of Contradiction and Disposal

The user has the possibility to withdraw their consent to the processing of the personal data at any time. In this case, application processes cannot be continued.

i) Transmission of Personal Data to Third Parties

Website Analysis

Currently, we recommend to deactivate all third-party cookies, plugins and widgets from externa
sites!

Google Analytics

General Procedure of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; „Google“). The use comprises the operating mode Universal Analytics. In this way, it is possible to allocate data, sessions and interactions across several devices to a pseudonymous user ID and to analyze the activities of users across devices.

Google Analytics uses so-called cookies. Text files that are saved on your computer and that allow to analyze your use of the website. The information on your use of this website generated by the cookie is usually transmitted to a Google server in the USA and stored there.

However, in the case of the IP-anonymization activated on this website, your IP address is shortened beforehand by Google within the member states of the European Union or in other contracting member states of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transferred to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports about the website activities and provide further services related to the website and Internet use to the website operator. These purposes also constitute our justified interest in data processing.

The legal basis for the use of Google Analytics is § 15 para. 3 TMG resp. art. 6 para. 1 lit. f DSGVO. The data sent by us and linked to cookies, user IDs or advertising IDs are automatically deleted after 14 months. The deletion of data whose storage period expires is carried out automatically once a month.
Please find further information on terms of use and privacy under https://www.google.com/analytics/terms/de.html bzw. https://policies.google.com/?hl=de.

You can prevent the storage of cookies by a respective setting of your browser software; we point out, however, that you will not be able to use all functions of this website to full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of these data by Google by installing the “browser add-on to deactivate Google Analytics” (https://tools.google.com/dlpage/gaoptout?hl=de) provided by Google

k) Rights of the Person Concerned

Right of Information

You can request a confirmation from the body responsible whether personal data related to you are processed by us.
If such a processing exists, you can request information from the body responsible about the following information:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data which are processed;
  3. the recipient resp. the categories of recipients towards whom the respective personal data have been or will be revealed;
  4. the planned duration of storage of the personal data related to you or, if concrete information on this matter is not possible, criteria to determine the storage period;
  5. the existence of a right to correct or delete the respective personal data related to you, a right to limit the processing by the body responsible or a right to object this processing;
  6. the existence of a right of complaint with a supervisory authority;
  7. all available information on the origin of the data, if the personal data are not collected by the body concerned;
  8. the existence of an automated decision finding including profiling acc. art. 22 para. 1 and 4 DSGVO and – at least in these cases – meaningful information on the involved logic as well as the scope and intended effects of such a processing for the person concerned.

You have the right to request information if the personal data related to you are transferred to a third country or to an international organization. In this context, you can request to be informed about suitable guarantees acc. art. 46 DSGVO in connection with the transfer.

Right to Correction

You have a right to correction and/or completion vis-à-vis the body responsible if the processed personal data related to you are wrong or incomplete. The body responsible has to carry out the correction without delay.

Right to Restriction of Processing

You can demand the restriction of processing the personal data related to you under the following preconditions:

  1. if you deny the correctness of the personal data related to you for a period that allows the body responsible to check the correctness of the personal data;
  2. the processing is unlawful and you reject the deletion of the personal data and request a limitation of the use of the personal data instead;
  3. the body responsible does not require the personal data for the purposes of processing any longer but you need them for the assertion, exercise or defense of legal claims, or
  4. if you have filed an objection against the processing acc. art. 21 para. 1 DSGVO and it is still undecided if the justified reasons of the body responsible outweigh your reasons.

If the processing of the personal data related to you have been restricted, these data may – with the exception of their storage – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or one of its member states.
If the restriction of processing has been restricted according to the preconditions mentioned above, you will be informed by the body responsible before the restriction is lifted.

Right to Deletion

Duty of Deletion

You can request from the body responsible that the personal data related to you are deleted without delay, and the body responsible is obliged to delete these data without delay if one of the following reasons applies:

  1. The personal data related to you are no longer necessary for the purposes for which they have been collected or processed in any other way.
  2. You withdraw your consent on which the processing acc. art. 6 para. 1 lit. a or art. 9 para. 2 lit. a DSGVO was based, and there is no other legal basis for the processing.
  3. You object to the processing acc. art. 21 lit. 1 DSGVO while there are no overriding justified reasons for the processing, or you object the processing acc. art. 21 lit. 2 DSGVO.
  4. The personal data related to you were unlawfully processed.
  5. The deletion of the personal data related to you is required for the fulfilment of a legal obligation according to the European Union law or the right of the member states the body responsible is subject to.
  6. The personal data related to you were collected with respect to services offered by the information society acc. art. 8 para. 1 DSGVO.

Information to Third Parties

If the body responsible has published the personal data related to you and if they are obliged to delete them acc. art. 17 para. 1 DSGVO, they shall take measures, also of a technical nature, under consideration of the technologies available and the implementation costs, to inform the bodies responsible for the data processing that process the personal data that you as the person concerned have requested from them the deletion of all links to these personal data or of all copies or replications of these personal data.

Exceptions

The right to deletion does not exist insofar as the processing is required

  1. for the execution of the right to free speech and information;
  2. for the fulfilment of a legal obligation that requires the processing according to the law of the European Union or of the member states the person responsible is subject to, or for the performance of a duty that is in the public interest or in execution of public authority that has been transferred to the person responsible;
  3. for reasons of public interest in the are of public health acc. art. 9 para. 2 lit. h as well as art. 9 para. 3 DSGVO;
  4. for archiving purposes in the public interest, for purposes of scientific or historic research or for statistical purposes acc. art. 89 para. 1 DSGVO, as far as the right listed under “right to deletion / duty of deletion” presumably prevents or seriously affects the realization of the goals of this processing,
  5. or for the assertion, execution or defense of legal claims.

Right to Information

If you have asserted the right to correction, deletion or restriction of processing towards the body responsible, the latter is obliged to inform all recipients that have had access to the personal data related to you about this correction or deletion of the data or the restriction of their processing unless this proves impossible or involves an unreasonable effort.
You have the right to be informed about these recipients by the body responsible.

Right to Data Portability

You have the right to receive the personal data related to you that you have provided to the body responsible in a structured, common and machine-readable format. Furthermore, you have the right to transfer these data to another body responsible without being impeded by the body responsible the personal data have been provided, insofar

  1. as the processing is based on an approval acc. art. 6 para. 1 lit. a DSGVO or art. 9 para. 2 lit. a DSGVO or on a contract acc. art. 6 para. 1 lit. b DSGVO and
  2. the processing is executed by means of automated processes.

In execution of this right you also have the right to effect that the personal data related to you are directly transferred from one body responsible to another body responsible insofar as this is technically feasible. Freedoms and rights of other persons may not be impaired by this process.
The right to data portability does not apply to processing of personal data that is required for the performance of a task that is in the public interest or is performed in execution of public authority that has been transferred to the body responsible.

Right to Object

You have the right to object at any time to the processing of the personal data related to you for reasons that result from your special situation that is performed acc. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions. The body responsible no longer processes the personal data related to you, unless they can prove mandatory reasons for the processing that are worthy of protection and outweigh your interests, right and freedoms, or the processing serves the assertion, execution or defense of legal claims.
If the personal data related to you are processed for the purpose of direct marketing, you have the right to object to the processing of the personal data related to you for the purpose of such marketing at any time; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data related to you shall no longer be processed for these purposes.
In connection with the use of services of the information society – irrespective of the guideline 2002/58/EG – you have the opportunity to exercise your right to object by means of automated processes that use technical specifications.

Right to Withdraw the Declaration of Consent under Data Protection Law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent until the withdrawal.

Automated Individual Decision Including Profiling

You have the right to not be subject to a decision that is exclusively based on automated processing – including profiling – that becomes legally effective for you or significantly affects you in a similar way. This does not apply if the decision

  1. is required for the conclusion or fulfilment of a contract between you and the body responsible,
  2. is permitted on the basis of legal regulations of the European Union or its member states the body responsible is subject to and these legal regulations include adequate measures for the preservation of your justified interests or
  3. has been made with your explicit consent.

However, these decisions must not be based on special categories of personal data acc. art. 9 para. 1 DSGVO unless art. 9 para. 2 lit. a or g DSGVO apply and adequate measures for the protection of the rights and freedoms as well as of your justified interests have been taken.
With respect to the cases listed in (1) and (3) the body responsible takes adequate measures to safeguard the rights and freedoms as well as your justified interests which at least includes the right to effect the interference of a person on the part of the body responsible, to present one’s own point of view and to challenge the decision.

Right of Complaint with a Supervisory Authority

rrespective of a further administrative or judicial remedy, you have the right of complaint with a supervisory authority, especially in the member state of your place of residence, place of work or the place of the alleged violation, if you consider that the processing of the personal data related to you violates the DSGVO.
The supervisory authority where the complaint has been filed informs the complaintant about the state and the results of the complaint including the possibility of a judicial remedy acc. art. 78 DSGVO.

l) Updating of Privacy Statement

This privacy statement is regularly updated to the current functions, technologies and applicable law. This happens in regular intervals. The privacy statement is applicable as provided on the Internet site.