DATA PROTECTION DECLARATION
We are pleased that you have decided to visit our website and are interested in what we are offering. The protection of your personal data is extremely important to us. In this data protection declaration, we explain how and why we collect your personal data, what we do with it, and the legal grounds on which we do this, as well as your associated rights and entitlements.
1. Name and Address of Controller
The controller, in accordance with the General Data Protection Regulation and other member state national data protection regulations, as well as other data protection regulations, is as follows:
HYDRO Systems KG
General partner: HYDRO Management GmbH
Managing directors: Barbara Huttegger, Thomas Elsner
Tel.: +49 7835 787-0
Fax: +49 7835 787-8888
Data protection officer:
Dr.-Ing. Christian Scharff
Tel. +49 89 9034 000
2. Collection and Storage of Personal Data and Type and Purpose of Its Use
2.1 Website Provision
2.1.1 Description and Scope of Data Processing
When you visit our website, we store certain information regarding the browser and operating system that you use, the date and time of the visit, the access status (e.g., whether you were able to access a page or received an error message), the use of functions on the website, any search terms you may enter, how often you visit individual pages, the name of files accessed, the data volume transferred, the website you came to our website from, and the website that you visit after our website, whether that is by clicking on links on our website or by entering a domain directly in the address bar of the same tab (or the same window) in your browser where you visited our website. For security reasons, in particular to prevent and detect attacks on our website or attempted fraud, we also store your IP address and the name of your Internet service provider for seven days.
2.1.2 Other Personal Data
We store other personal data only if you provide this data to us, e.g., during registration, in a contact form, during a chat, in a survey, in a competition, or to perform a contract, and even in those cases only if we are permitted to do so based on your consent or in accordance with the applicable legal regulations (further information is provided in the section “Legal Basis for Data Processing” below). 2.1.3 Limitations if Data Is Not Provided You are under no legal or contractual obligation to provide your personal data. However, certain functions on our website may depend on the provision of personal data. If you do not provide personal data in these cases, those functions may not be available or may be limited.
2.2 Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.
2.3 Purpose of Data Processing
We use the personal data that we collect when you visit our website to make the website as user-friendly as possible and to protect our IT systems against attacks and other illegal activity.
If you provide additional personal data to us, e.g., during registration, during a chat, in a contact form, in a survey, in a competition, or to perform a contract, we will use this data for the specified purposes, for the purposes of customer management and – where necessary – for the purposes of processing and settling any business transactions, to the extent necessary in each case.
For other purposes (e.g., displaying tailored content or advertising based on your usage behavior), we and, where applicable, selected third parties use your data to the extent that you have given your consent (= agreement) for us to do so in our consent management system.
In addition, we use personal data to the extent that we are legally obliged to do so (e.g., storage in order to fulfill retention obligations under commercial or tax law, disclosure in accordance with an official or court order, e.g., to a law enforcement agency).
2.4 Duration of Storage
The data is deleted as soon as it is no longer required in order to achieve the purpose of its collection. In the case of the collection of data used for the provision of the website, this moment is when the corresponding session is terminated.
2.5 Objection and Rectification Options
The collection of the data used for the provision of the website, as well as the storage of the data in log files, is absolutely necessary in order for the website to work. Accordingly, the user does not have any options for objecting to it.
3. Transfer of Personal Data to Third Parties; Social Plug-ins; Use of Service Providers
Our website may also contain third-party offers. If you click on one of these offers, we will transfer the data required to the relevant provider (e.g., the information that you found this offer on our website and any other applicable information that you may have already provided on our website in relation to this offer).
When you click on the link to an offer or activate a social plug-in, personal data may be transferred to providers in countries outside of the European Economic Area which, from the European Union’s (EU) perspective, do not guarantee an “adequate level of protection” for the processing of personal data in accordance with EU standards. Please bear this in mind before clicking on a link or activating a social plug-in and in doing so triggering the transfer of your data.
We also use qualified service providers (e.g., IT service providers, marketing agencies) for the operation, optimization, and protection of our website. We transfer personal data to these service providers only if required for the provision and use of the website and its functions, to pursue legitimate interests, to fulfill legal obligations, or if you have consented to such data transfers (see Section 7). Further information on the recipients is provided in our consent management system.
4.1 Description and Scope of Data Processing
Cookies may be used when you visit our website. Technically, these are HTML cookies and similar software tools such as web/DOM storage or local shared objects (commonly known as “flash cookies”), which we refer to collectively as cookies.
Cookies are small files that are stored on your desktop, laptop, or mobile device when you visit a website. They make it possible to determine whether the device concerned has already been used to visit the website, to take into account your preferred language or other settings, to offer you certain functions (e.g., product finder), or to identify your interests based on usage. Cookies may also contain personal data.
5. Legal Basis for Data Processing
If you have given your consent for us to process your personal data, this consent is the legal basis for the data processing (Article 6(1)(a) of the GDPR).
For the processing of personal data for the purposes of initiating or performing a contract with you, Article 6(1)(b) of the GDPR is the legal basis.
Insofar as the processing of your personal data is required to fulfill our legal obligations (e.g., to retain data), we are authorized to do this in accordance with Article 6(1)(c) of the GDPR.
We also process personal data for the purposes of our legitimate interests and the legitimate interests of third parties in accordance with Article 6(1)(f) of the GDPR. Such legitimate interests include maintaining the functionality of our IT systems, the (direct) marketing of our own and third-party products and services (to the extent that this is not done with your consent), and the legally required documentation of business contacts. When weighing the relevant interests as required in each case, we take into account in particular the type of personal data, the processing purpose, the processing circumstances, and your interest in the confidentiality of your personal data.
6. Email Contact
6.1. Description and Scope of Data Processing
Our website features an option for contacting us by email that can be used to contact us electronically. If this option is used, the user’s personal data that is transmitted by email will be stored. The data is not disclosed to third parties within this context. The data is used exclusively to handle the conversation.
6.2 Duration of Storage
The data is deleted as soon as it is no longer required in order to achieve the purpose of its collection. For the personal data from the contact form input screen, as well as for personal data sent by email, this moment is when the corresponding conversation with the user has ended. The conversation will be considered to have ended if the relevant circumstances make it possible to deduce that the corresponding matter has been definitively clarified. If the contact leads to a business lead or to entering into a contract, the data will be deleted once it is no longer required in order to perform the contract. Even after the contract is entered into, it may be necessary to store personal data concerning the contracting party in order to be able to meet contractual or legal obligations, e.g., retention obligations. Based on the nature of the contract, this requirement exists during the contract duration and for a subsequent period of 10 years.
6.3 Objection and Rectification Options
If the user contacts us by email, they can object to the storage of their personal data at any time. In this case, it will not be possible to continue the conversation. You can send your objection to email@example.com at any time. All personal data stored during the contact process will be deleted in this case.
7.1 Description and Scope of Data Processing
Our website offers the option of subscribing to a free newsletter. When a user subscribes to this newsletter, the data from the input screen is transmitted to us.
- Title (optional)
- First name, last name (optional)
- Company (optional)
- Email address *
In addition, the following data is collected during subscription:
- Date and time of subscription to newsletter
During the subscription process, your consent to the processing of the data will be obtained and a reference to this data protection declaration will be made.
If you give us your consent, we will analyze your user behavior on our websites and within the newsletter sent by us and assign it to your email address/your user profile within our database.
With regard to the newsletter sent to you, we will receive delivery and read receipts, among other information, as well as information regarding the links on which you have clicked in our newsletter. We will store information indicating the areas you have visited within our website. Our intent when creating a personal user profile is to align our marketing with your interests and optimize the offerings on our website for you.
7.2 Legal Basis for Data Processing
The legal basis for the processing of data following a user’s subscription to the newsletter is Article 6(1)(a) of the GDPR.
7.3 Duration of Storage
The data is deleted as soon as it is no longer required in order to achieve the purpose of its collection.
7.4 Purpose of Data Processing
The user’s data is collected in order to deliver the newsletter. The other personal data processed during the sending process is used to prevent misuse and ensure the security of our IT systems.
7.5 Objection and Rectification Options
The user can cancel their subscription to the newsletter at any time. A link is included in each newsletter for this purpose. The subscription to the newsletter can also be canceled by sending an email to firstname.lastname@example.org.
8. Analysis Tools
8.1 Tools Used
8.1.1 Google Analytics
126.96.36.199 Description and Scope of Data Processing
For the purposes of tailoring our website to requirements and optimizing it on an ongoing basis, we use Google Analytics, a web analytics service provided by Google Inc. (https://about.google/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”). We also use tracking measures in order to gather statistics on the use of our website and to analyze the optimization of what we offer.
Google Analytics creates pseudonymized usage profiles for us. The information generated by the Google Analytics cookie regarding your use of this website, such as
- browser type/version
- operating system used
- referrer URL (the site visited beforehand)
- host name of the accessing computer (IP address)
- time of the server request,
is sent to a Google server in the USA and stored there. This information is used to analyze use of the website, to prepare reports on website activities, and to provide other services related to use of the website and the internet for the purposes of market research and ensuring that this website meets user requirements. This information may be passed on to third parties if required by law or if third parties are processing this data on behalf of Google. Under no circumstances will your IP address be combined with other data held by Google. The IP addresses are anonymized, so assignment is not possible (IP masking).
You can prevent the installation of cookies at any time by configuring the appropriate settings in your browser software, even if you have previously given consent. Please note, however, that in this case some of the functions of this website may not be available to their full extent.
You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser add-on available from this link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on, in particular for browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set, which prevents your data from being captured during future visits to this website. The opt-out cookie is effective only in that particular browser and only for our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Further information on data protection in relation to Google Analytics is available in the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).
Google has self-certified under the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
8.1.2 Lead Forensics
Lead Forensics collects, processes, and stores data about companies and decision-makers. This data is limited to the first name, last name, email address, social profiles (LinkedIn only), and business IP address of the person concerned. Other business-related data may also be processed, e.g., company name, function, sales, and business address. Once the data reconciliation process has been completed, Lead Forensics anonymizes the IP address.
Lead Forensics then sends us the information from their database that could be linked to the relevant IP address. This tells us who is interested in our products and services and gives us the option of contacting our website visitors directly.
We have a legitimate interest in the data processing described above. The data processing is therefore justified in accordance with Article 6(1)(f) of the GDPR.
8.1.3 SalesViewer® Technology
On this website, data is collected and stored using SalesViewer® technology from SalesViewer® GmbH on the basis of legitimate interests pursued by the website operator (Article 6(1)(f) of the GDPR) for marketing, market research, and optimization purposes.
You may object to this data collection and storage at any time with effect for the future by clicking on this link HERE to prevent SalesViewer® from collecting data within this website in the future. An opt-out cookie for this website will be stored on your device to do this. If you delete the cookies in this browser, you will need to click on this link again.
8.2 Legal Basis for Data Processing
The legal basis for the data processing is Article 6(1)(f) of the GDPR.
8.3 Purpose of Data Processing
This service enables us to analyze the activities of users on our website.
8.4 Duration of Storage
The collected data is deleted automatically after a period of 26 months.
8.5 Objection and Rectification Options
You can prevent cookies from being stored on your device by configuring the corresponding settings in your browser. If your browser has cookies disabled, it is not guaranteed that you will be able to access all the functions on this website without limitations.
In addition, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link will take you to the corresponding plug-in: https://tools.google.com/dlpage/gaoptout?hl=en. For more information on how Google Inc. uses data, visit: https://support.google.com/analytics/answer/6004245?hl=en
9. Use of YouTube
On the basis of Article 6(1)(1)(f) of the GDPR, we use services provided by service provider Google LLC on our website in order to make the website more appealing to you as a user. The underlying marketing purpose is to be viewed as a legitimate interest in accordance with the GDPR. The service provider is responsible for guaranteeing data-protection-compliant operation.
Our website uses plug-ins from the YouTube site, which is operated by third-party service provider Google LLC. The operator of the sites is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information on how user data is handled, visit the YouTube data protection declaration at: https://policies.google.com/privacy?hl=en You can disable the described data processing at the following link: https://adssettings.google.com/authenticated.
10. Data Subject Rights
10.1 Data Subject Rights
If personal data concerning you is processed, you are a data subject as defined in the GDPR and have the following rights with respect to the controller:
You have the right:
- Pursuant to Article 15 of the GDPR, to request information about the personal data concerning you that we process. In particular, you can request information about the processing purposes; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned storage duration; the existence of the right to rectification, erasure, restriction of processing, or objection; the existence of the right to lodge a complaint; the source of your data if it is not collected by us; and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved.
- Pursuant to Article 16 of the GDPR, to request for incorrect personal data concerning you that is stored with us to be corrected and incomplete personal data concerning you that is stored with us to be completed without undue delay.
- Pursuant to Article 17 of the GDPR, to request the erasure of personal data concerning you that is stored with us, provided that the processing is not required in order to exercise the right of freedom of expression and information; due to public interest reasons; or for the establishment, exercise, or defense of legal claims.
- Pursuant to Article 18 of the GDPR, to request for the processing of your personal data to be restricted, provided that you contest the accuracy of the data; the processing is unlawful and you oppose its erasure; we no longer need the data but it is required by you for the establishment, exercise, or defense of legal claims; or you have objected to processing pursuant to Article 21 of the GDPR.
- Pursuant to Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request for this data to be transmitted to another controller.
- Pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time. If you do so, we will no longer be allowed to continue the data processing based on said consent.
- Pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. Normally, you will be able to contact the supervisory authority corresponding to your habitual residence, place of work, or our headquarters for this purpose.
10.2 Right to Object
If your personal data is processed on the basis of legitimate interests in accordance with Article 6(1)(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data on grounds relating to your particular situation or when the objection is against direct marketing. In the latter case, you have a general right to object, and we will implement the objection without the need for information concerning a particular situation.
If you want to make use of your right to withdraw consent or your right to object, sending an email to email@example.com will suffice.
11. Data Security
For website visits, we use the popular SSL (Secure Sockets Layer) protocol in conjunction with the highest encryption strength supported by your browser. Normally, this will be a 128-bit v3 technology. To determine whether an individual page of our website is transmitted in encrypted form, look for the key or lock icon in your browser’s status bar – if it is “locked,” the page is being transmitted in encrypted form.
We also use a series of appropriate technical and organizational security measures in order to protect your data from random or intentional tampering, partial and complete loss, destruction, and unauthorized access by third parties. These security measures are being continuously improved in line with technological developments.