Privacy policy

 

1. data protection at a glance

 

General information

The follo­wing infor­ma­tion provides a simple over­view of what happens to your personal data when you visit this website. Personal data is any data that can be used to iden­tify you perso­nally. Detailed infor­ma­tion on the subject of data protec­tion can be found in our data protec­tion decla­ra­tion listed below this text.

 

Data collection on this website

 

Who is responsible for data collection on this website?

Data proces­sing on this website is carried out by the website operator. You can find the operator’s contact details in the “Infor­ma­tion on the controller” section of this privacy policy.

 

How do we collect your data?

On the one hand, your data is coll­ected when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is coll­ected auto­ma­ti­cally or with your consent by our IT systems when you visit the website. This is prima­rily tech­nical data (e.g. internet browser, opera­ting system or time of page view). This data is coll­ected auto­ma­ti­cally as soon as you enter this website.

 

What do we use your data for?

Some of the data is coll­ected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

 

What rights do you have regarding your data?

You have the right to receive infor­ma­tion about the origin, reci­pient and purpose of your stored personal data free of charge at any time. You also have the right to request the correc­tion or dele­tion of this data. If you have given your consent to data proces­sing, you can revoke this consent at any time for the future. You also have the right to request the rest­ric­tion of the proces­sing of your personal data under certain circum­s­tances. Further­more, you have the right to lodge a complaint with the compe­tent super­vi­sory authority.

You can contact us at any time if you have further ques­tions on the subject of data protection.

 

Analysis tools and tools from third-party providers

When you visit this website, your surfing beha­viour may be statis­ti­cally evaluated. This is mainly done with so-called analysis programmes.

Detailed infor­ma­tion on these analysis programmes can be found in the follo­wing privacy policy.

 

2. hosting

We host the content of our website with the follo­wing provider:

 

Mittwald

The provider is Mitt­wald CM Service GmbH & Co. KG, Königs­berger Straße 4–6, 32339 Espel­kamp (herein­after referred to as Mittwald).

Details can be found in Mittwald’s privacy policy: https://www.mittwald.de/datenschutz.

The use of Mitt­wald is based on Art. 6 para. 1 lit. f GDPR. We have a legi­ti­mate inte­rest in displaying our website as reliably as possible. If a corre­spon­ding consent has been requested, the proces­sing is carried out exclu­si­vely on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to infor­ma­tion in the user’s terminal device (e.g. device finger­prin­ting) within the meaning of the TTDSG. Consent can be revoked at any time.

 

Order processing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protec­tion law, which guaran­tees that it processes the personal data of our website visi­tors only in accordance with our instruc­tions and in compli­ance with the GDPR.

 

3 General notes and mandatory information

 

Data protection

The opera­tors of these pages take the protec­tion of your personal data very seriously. We treat your personal data confi­den­ti­ally and in accordance with the statu­tory data protec­tion regu­la­tions and this privacy policy.

When you use this website, various personal data is coll­ected. Personal data is data that can be used to iden­tify you perso­nally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data trans­mis­sion over the Internet (e.g. when commu­ni­ca­ting by e‑mail) may be subject to secu­rity vulnerabi­li­ties. Complete protec­tion of data against access by third parties is not possible.

 

Note on the responsible body

The controller respon­sible for data proces­sing on this website is

Hagel Auto­ma­tion GmbH
Schlierer Street 51
88287 Grünkraut

Phone: +49 751 56082–0
E‑mail: info@hagel-automation.de

The controller is the natural or legal person who alone or jointly with others deter­mines the purposes and means of the proces­sing of personal data (e.g. names, email addresses, etc.).

 

Storage duration

Unless a more specific storage period has been speci­fied in this privacy policy, your personal data will remain with us until the purpose for data proces­sing no longer applies. If you assert a justi­fied request for dele­tion or revoke your consent to data proces­sing, your data will be deleted unless we have other legally permis­sible reasons for storing your personal data (e.g. reten­tion periods under tax or commer­cial law); in the latter case, dele­tion will take place after these reasons no longer apply.

 

General information on the legal basis for data processing on this website

If you have consented to data proces­sing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special cate­go­ries of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third count­ries, data proces­sing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to infor­ma­tion in your end device (e.g. via device finger­prin­ting), the data proces­sing is also carried out on the basis of Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required to fulfil a contract or to carry out pre-contrac­tual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Further­more, we process your data if this is neces­sary to fulfil a legal obli­ga­tion on the basis of Art. 6 para. 1 lit. c GDPR. Data proces­sing may also be carried out on the basis of our legi­ti­mate inte­rest in accordance with Art. 6 para. 1 lit. f GDPR. Infor­ma­tion on the rele­vant legal bases in each indi­vi­dual case is provided in the follo­wing para­graphs of this privacy policy.

 

Data Protection Officer

We have appointed a data protec­tion officer.

External data protec­tion officer pursuant to Art. 37 GDPR in conjunc­tion with Section 38 (1) BDSG-new:
Maxi­mi­lian Musch M.A.
German data protec­tion law firm
Richard-Wagner-Strasse 2
88094 Oberteuringen

 

E‑mail: musch@ddsk.de

 

Note on data transfer to the USA and other third countries

Among other things, we use tools from compa­nies based in the USA or other third count­ries that are not secure under data protec­tion law. If these tools are active, your personal data may be trans­ferred to these third count­ries and processed there. We would like to point out that a level of data protec­tion compa­rable to that in the EU cannot be guaran­teed in these count­ries. For example, US compa­nies are obliged to disc­lose personal data to secu­rity autho­ri­ties without you as the data subject being able to take legal action against this. It can ther­e­fore not be ruled out that US autho­ri­ties (e.g. secret services) may process, analyse and perma­nently store your data on US servers for surveil­lance purposes. We have no influence on these proces­sing activities.

 

Revocation of your consent to data processing

Many data proces­sing opera­tions are only possible with your express consent. You can with­draw your consent at any time. The lega­lity of the data proces­sing carried out until the revo­ca­tion remains unaf­fected by the revocation.

 

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCES­SING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCES­SING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELA­TING TO YOUR PARTI­CULAR SITUA­TION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVI­SIONS. THE RESPEC­TIVE LEGAL BASIS ON WHICH PROCES­SING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONS­TRATE COMPEL­LING LEGI­TI­MATE GROUNDS FOR THE PROCES­SING WHICH OVER­RIDE YOUR INTE­RESTS, RIGHTS AND FREE­DOMS OR THE PROCES­SING SERVES THE ESTAB­LISH­MENT, EXER­CISE OR DEFENCE OF LEGAL CLAIMS (OBJEC­TION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKE­TING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCES­SING OF PERSONAL DATA CONCER­NING YOU FOR THE PURPOSE OF SUCH MARKE­TING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKE­TING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSE­QUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKE­TING (OBJEC­TION PURSUANT TO ART. 21 PARA. 2 GDPR).

 

Right to lodge a complaint with the competent supervisory authority

In the event of infrin­ge­ments of the GDPR, data subjects have the right to lodge a complaint with a super­vi­sory autho­rity, in parti­cular in the Member State of their habi­tual resi­dence, place of work or place of the alleged infrin­ge­ment. The right to lodge a complaint is without preju­dice to any other admi­nis­tra­tive or judi­cial remedies.

 

Right to data portability

You have the right to have data that we process auto­ma­ti­cally on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is tech­ni­cally feasible.

 

Information, correction and deletion

Within the frame­work of the appli­cable legal provi­sions, you have the right at any time to free infor­ma­tion about your stored personal data, its origin and reci­pient and the purpose of the data proces­sing and, if neces­sary, a right to correc­tion or dele­tion of this data. You can contact us at any time if you have further ques­tions on the subject of personal data.

 

Right to restriction of processing

You have the right to request the rest­ric­tion of the proces­sing of your personal data. You can contact us at any time to do this. The right to rest­ric­tion of proces­sing exists in the follo­wing cases:

  • If you dispute the accu­racy of your personal data stored by us, we gene­rally need time to check this. For the dura­tion of the review, you have the right to request that the proces­sing of your personal data be restricted.
  • If the proces­sing of your personal data was/is unlawful, you can request the rest­ric­tion of data proces­sing instead of erasure.
  • If we no longer need your personal data, but you need it for the exer­cise, defence or asser­tion of legal claims, you have the right to request the rest­ric­tion of the proces­sing of your personal data instead of its erasure.
  • If you have lodged an objec­tion in accordance with Art. 21 (1) GDPR, a balance must be struck between your inte­rests and ours. As long as it has not yet been deter­mined whose inte­rests prevail, you have the right to request the rest­ric­tion of the proces­sing of your personal data.

If you have rest­ricted the proces­sing of your personal data, this data – apart from its storage – may only be processed with your consent or for the estab­lish­ment, exer­cise or defence of legal claims or for the protec­tion of the rights of another natural or legal person or for reasons of important public inte­rest of the Euro­pean Union or of a Member State.

 

SSL or TLS encryption

This site uses SSL or TLS encryp­tion for secu­rity reasons and to protect the trans­mis­sion of confi­den­tial content, such as orders or enqui­ries that you send to us as the site operator. You can reco­g­nise an encrypted connec­tion by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryp­tion is acti­vated, the data you transmit to us cannot be read by third parties.

 

4. data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either tempo­r­a­rily for the dura­tion of a session (session cookies) or perma­nently (perma­nent cookies). Session cookies are auto­ma­ti­cally deleted at the end of your visit. Perma­nent cookies remain stored on your end device until you delete them yourself or they are auto­ma­ti­cally deleted by your web browser.

Cookies may origi­nate from us (first-party cookies) or from third-party compa­nies (so-called third-party cookies). Third-party cookies enable the inte­gra­tion of certain services from third-party compa­nies within websites (e.g. cookies for proces­sing payment services).

Cookies have various func­tions. Many cookies are tech­ni­cally neces­sary, as certain website func­tions would not work without them (e.g. the shop­ping basket func­tion or the display of videos). Other cookies can be used to analyse user beha­viour or for adver­ti­sing purposes.

Cookies that are required to carry out the elec­tronic commu­ni­ca­tion process, to provide certain func­tions that you have requested (e.g. for the shop­ping basket func­tion) or to opti­mise the website (e.g. cookies to measure the web audi­ence) (neces­sary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is speci­fied. The website operator has a legi­ti­mate inte­rest in the storage of neces­sary cookies for the tech­ni­cally error-free and opti­mised provi­sion of its services. If consent to the storage of cookies and compa­rable reco­gni­tion tech­no­lo­gies has been requested, the proces­sing is carried out exclu­si­vely on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in indi­vi­dual cases, exclude the accep­tance of cookies for certain cases or in general and acti­vate the auto­matic dele­tion of cookies when closing the browser. If cookies are deac­ti­vated, the func­tion­a­lity of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

 

Consent with Borlabs Cookie

Our website uses Borlabs Cookie consent tech­no­logy to obtain your consent to the storage of certain cookies in your browser or to the use of certain tech­no­lo­gies and to docu­ment these in compli­ance with data protec­tion regu­la­tions. The provider of this tech­no­logy is Borlabs GmbH, Rüben­kamp 32, 22305 Hamburg, Germany (herein­after referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the cons­ents you have given or the revo­ca­tion of these cons­ents are stored. This data is not passed on to the provider of Borlabs Cookie.

The data coll­ected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Manda­tory statu­tory reten­tion periods remain unaf­fected. Details on data proces­sing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs cookie consent tech­no­logy is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

 

Server log files

The provider of the pages auto­ma­ti­cally coll­ects and stores infor­ma­tion in so-called server log files, which your browser auto­ma­ti­cally trans­mits to us. These are

  • Browser type and browser version
  • Opera­ting system used
  • Referrer URL
  • Host name of the acces­sing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

This data is coll­ected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legi­ti­mate inte­rest in the tech­ni­cally error-free presen­ta­tion and opti­mi­sa­tion of its website – the server log files must be recorded for this purpose.

 

Contact form

If you send us enqui­ries via the contact form, your details from the enquiry form, inclu­ding the contact details you provide there, will be stored by us for the purpose of proces­sing the enquiry and in the event of follow-up ques­tions. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is neces­sary for the imple­men­ta­tion of pre-contrac­tual measures. In all other cases, the proces­sing is based on our legi­ti­mate inte­rest in the effec­tive proces­sing of the enqui­ries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its dele­tion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfil­ling your request). Manda­tory statu­tory provi­sions – in parti­cular reten­tion periods – remain unaffected.

 

Enquiry by e‑mail, telephone or fax

If you contact us by e‑mail, tele­phone or fax, your enquiry inclu­ding all personal data (name, enquiry) will be stored and processed by us for the purpose of proces­sing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is neces­sary for the imple­men­ta­tion of pre-contrac­tual measures. In all other cases, the proces­sing is based on our legi­ti­mate inte­rest in the effec­tive proces­sing of the enqui­ries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Manda­tory statu­tory provi­sions – in parti­cular statu­tory reten­tion periods – remain unaffected.

 

5. plugins and tools

 

YouTube with extended data protection

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protec­tion mode. Accor­ding to YouTube, this mode means that YouTube does not store any infor­ma­tion about visi­tors to this website before they watch the video. However, the transfer of data to YouTube part­ners is not neces­s­a­rily excluded by the extended data protec­tion mode. For example, YouTube estab­lishes a connec­tion to the Google Double­Click network regard­less of whether you watch a video.

As soon as you start a YouTube video on this website, a connec­tion to the YouTube servers is estab­lished. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing beha­viour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Further­more, YouTube can store various cookies on your end device after starting a video or use compa­rable reco­gni­tion tech­no­lo­gies (e.g. device finger­prin­ting). In this way, YouTube can obtain infor­ma­tion about visi­tors to this website. This infor­ma­tion is used, among other things, to record video statis­tics, improve user-friend­li­ness and prevent attempts at fraud.

After the start of a YouTube video, further data proces­sing opera­tions may be trig­gered over which we have no influence.

The use of YouTube is in the inte­rest of an appe­aling presen­ta­tion of our online offers. This consti­tutes a legi­ti­mate inte­rest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corre­spon­ding consent has been requested, the proces­sing is carried out exclu­si­vely on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to infor­ma­tion in the user’s terminal device (e.g. device finger­prin­ting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further infor­ma­tion about data protec­tion at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

 

6. eCommerce and payment providers

 

Processing of customer and contract data

We collect, process and use personal customer and contract data to estab­lish, orga­nise the content of and amend our contrac­tual rela­ti­onships. We collect, process and use personal data about the use of this website (usage data) only insofar as this is neces­sary to enable the user to use the service or to bill the user. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The customer data coll­ected will be deleted after comple­tion of the order or termi­na­tion of the busi­ness rela­ti­onship and expiry of any exis­ting statu­tory reten­tion periods. Statu­tory reten­tion periods remain unaffected.

 

7. own services

 

Handling applicant data

We offer you the oppor­tu­nity to apply to us (e.g. by e‑mail, post or online appli­ca­tion form). In the follo­wing, we inform you about the scope, purpose and use of your personal data coll­ected as part of the appli­ca­tion process. We assure you that your data will be coll­ected, processed and used in accordance with appli­cable data protec­tion law and all other statu­tory provi­sions and that your data will be treated in strict confidence.

 

Scope and purpose of data collection

If you send us an appli­ca­tion, we process your asso­ciated personal data (e.g. contact and commu­ni­ca­tion data, appli­ca­tion docu­ments, notes during inter­views, etc.) insofar as this is neces­sary for the decision on the estab­lish­ment of an employ­ment rela­ti­onship. The legal basis for this is § 26 BDSG under German law (initia­tion of an employ­ment rela­ti­onship), Art. 6 para. 1 lit. b GDPR (general contract initia­tion) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in proces­sing your application.

If the appli­ca­tion is successful, the data submitted by you will be stored in our data proces­sing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of imple­men­ting the employ­ment relationship.

 

Data retention period

If we are unable to make you a job offer, you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have submitted on the basis of our legi­ti­mate inte­rests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the appli­ca­tion process (rejec­tion or with­drawal of the appli­ca­tion). The data will then be deleted and the physical appli­ca­tion docu­ments destroyed. The reten­tion serves in parti­cular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6‑month period has expired (e.g. due to an impen­ding or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

Data may also be stored for longer if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statu­tory reten­tion obli­ga­tions prevent deletion.