Information requirements pursuant to Article 13 of the General Data Protection Regulation (GDPR).

1 Obligations to provide information on our website

1.1 Who does this information apply to?

This information on data protection applies to interested parties who visit our website and use the following services:

  • Operation of the website
  • Map display with Google Maps
  • Displaying videos with YouTube
  • Contact form
  • Social media links
  • Facebook Insights

1.2 Name und Kontaktdaten des Verantwortlichen

Hildebrand und Richter & Co. Fabrik für technische Gummi- und Kunststoffspezialitäten GmbH
Einemhofer Weg 9
D-21394 Kirchgellersen (Germany)

Further information can be found in the Legal Notice.

1.3 Contact details of the data protection officer

The data protection officer of the data controller can be reached at the above address by adding "data protection officer" or by email at:  datenschutz@hiri.de 

2 Operation of the website

2.1 Type and scope of processing

We only process data that you directly provide when you access and use our website. The individual processing activities are shown below:

  • Name and URL of file(s) you retrieve/access
  • Date and time of the access
  • The amount of data transferred
  • Notification of successful access
  • Browser type and version
  • Operating system
  • Previously visited website
  • Websites that are accessed by your system via our website
  • The user's internet service provider
  • IP address and the requesting provider

The following data is processed in our Consent Management Tool:

  • Cookie duration and version

2.2 Purpose and legal basis of processing

The processing of your personal data in accordance with the legitimate interests of ourselves or third parties pursuant to Article 6 (1)(f) GDPR is carried out, inter alia, for the following purposes:

  • Enabling the use of our website.
  • Presentation of our information offering.
  • Ensuring proper operation of our website.
  • Management and verification of consents for processing activities.
  • Fulfilment of legal obligations, such as for:
    • defence against and investigation of cyber attacks
    • legally secure documentation and verifiability of consents

2.3 Recipients and recipient categories

In order to implement the above-mentioned purposes, your data will be processed by authorised employees of the data controller. We use external processors to provide our services. Your data will be disclosed in compliance with the requirements of the GDPR. The processors we commission, who may only process the data for us and not for their own purposes, are obliged to comply with the strict standards of the GDPR. This includes IT service providers (for example, external IT administration, maintenance work and hosting service providers). In addition, your data will be transmitted as needed to other third parties, such as legal advisers and law enforcement agencies, in order to implement the above-mentioned purposes.

2.4 Transfer of personal data to a third country

Data will not be transferred to countries outside the EU or the EEA (so-called third countries) unless we are obliged to do so due to official or court orders. 

2.5 Storage period

Your data will be processed for the duration of your use of the website and will be deleted 6 weeks after the end of the connection if it is no longer required for the above-mentioned purposes. The settings you have made in the Consent Management Tool will be deleted after one year.

2.6 Other

For the operation of the website, the user therefore generally has no deletion, objection or correction options. You can change the settings in the Consent Management Tool at any time by clicking on "Open Settings". The data controller does not engage in automated decision-making.

3 Map display with Google Maps and YouTube videos

Our website uses the "Google Maps" and "YouTube" services to visually display geographic information on a street map or videos of our products. When the map or the videos are accessed, the data mentioned in Section 2.1 are transmitted to the service provider so that the information can be displayed in your browser.

 

3.1 Purpose and legal basis of processing

The processing of your personal data is based on your consent pursuant to Article 6(1)(a) GDPR.

 

3.2 Recipient categories

The European representative of Google services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google may transfer the information obtained through Google services to third parties where required to do so by law, or where such third parties process the information on Google's behalf. It cannot be ruled out that Google will associate your IP address with other Google data.
It would be technically possible for Google to identify at least individual users based on the data collected. We have no influence on whether personal data and personality profiles of users of the Google website are processed for other purposes.

3.3 Transfer of personal data to a third country

Your personal data will be transferred within Google to a third country (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) based on your consent pursuant to Article 49 (1)(a) GDPR). It cannot be ruled out that, due to legal obligations, US authorities may access your data when it is transmitted to or processed at Google.

3.4 Storage period

We do not know how long Google stores the above data.

3.5 Other

You can change your consent by clicking on "Open settings / YouTube and Google Maps section".

If you have an account with Google or YouTube and are logged in there when you visit our website, the visit to our site will be assigned to your profile. If you do not want that to happen, please log out of your account.

Additional information can be found via the following links:

  • Terms of use for Google Maps
  • Information about Google Maps
  • Google Privacy Policy

4 Audience reach measurement with Matomo

We use the data protection-friendly web analysis tool Matomo (http://matomo.org) on our website. In doing so, the following data is processed:

  • IP address of the requesting computer
  • Date and time of access, time zone difference to Greenwich Mean Time (GMT)
  • Name and URL of the accessed file or content of the request (specific page)
  • Request status/HTTP status code
  • Respective volume of data transferred
  • The website from which access is made (referrer URL)
  • Browser used, operating system and its interface of your computer, language and version of the browser software
  • If necessary, the name of your access provider

From the data that your browser transmits to us, a usage profile is created under a pseudonym, which enables us to recognise your device. We use cookies, which are stored on your computer.

The data collected with Matomo technology (including your anonymised IP address) is transmitted to us and stored for the purposes of usage analysis. The variable data and recurring visits are recorded in the process.

4.1 Purpose and legal basis of processing

Statistical evaluation of the data obtained enables us to compile information regarding the use of our website and thus to continuously improve its structure and user-friendliness. These purposes also constitute the legitimate interest in processing the data pursuant to Article 6 (1)(1)(f) GDPR. Your IP address is anonymised immediately after processing and before it is saved.

The necessity of processing personal data is present because the software used is suitable for optimising our website, and your data will not be passed on to third parties for other purposes. According to our assessment, it is foreseeable for you as a user that we will measure the reach of our online offering, for example in order to design our online website in accordance with demand. To that end, there is no need for continuous recognition and ever more extensive profiling, nor is it necessary to pass on data to third parties.

The statistical information we compile provides us with sufficient information regarding general usage behaviour – so, maintenance of individual usage profiles is not necessary for the purpose of measuring reach. The adverse effect on our visitors can therefore be assessed as low. We store all data collected by means of Matomo without restriction, as this data is only available to us in anonymised form. You have the option of objecting to the processing of your personal data in the course of measuring reach (Open Settings / Statistics section). This will protect your privacy, but will also prevent us from learning from your browsing behaviour and improving the usability of our website for users. 

4.2 Recipient categories

The collected data is only processed by authorised employees and processors commissioned by us in accordance with the regulations. 

4.3 Transfer of personal data to a third country

The data will not be processed in a third country.

4.4 Storage period

We save all web analysis data collected by Matomo without restriction, because that data is only available to us in anonymised form. The cookie data will be deleted after 13 months. Several related requests are recognised during the session and deleted after the session.

4.5 Other

You can further prevent the use of Matomo by

  • adjusting the settings under "Open Settings / Statistics".
  • deactivating the "Java Script" functionality so that the software is not switched on (for example, via the Java Script blocker www.noscript.net).
  • blocking the setting of cookies and trackers, for example with the uBlock tool (www.ublock.org), which is available for various browsers or
  • by preventing the storage of cookies in your browser.

You can decide here whether a cookie may be stored in your browser in order to enable us to collect and analyse various statistical data. If you wish to opt out, click the following link to place the Matomo deactivation cookie in your browser.

You can find more information about the settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.

5 Contact form

Our contact form enables you to contact us easily and at any time. The following data is transmitted to us when using the contact form:

  • Company and personal master data, for example, company, name, address
  • Communication data, such as telephone number, fax number (optional) and email address
  • Free text, such as the issue you are contacting us about
  • Log data (consent, IP address, date and time of the contact inquiry that has been sent)

 

5.1 Purpose and legal basis for processing personal data

The collection of the user's data serves to satisfactorily answer the contact inquiry and, if desired, to assign it to our sales department for further consultation. The legal basis for processing the data after the user has used the contact form is your consent pursuant to Article 6 (1)(1)(a) GDPR. If your contact is aimed at the initiation or implementation of a contract, the legal basis for the processing is Article 6 (1)(1)(b) GDPR. The processing of the log data when using the form is carried out for verification purposes of the processing pursuant to Article 6 (1)(1)(f) GDPR. Our interest lies in the assertion, defence and implementation of legal claims by us or third parties.

 

5.2 Recipients and recipient categories

Your data will be transmitted to authorised employees within our company. In addition, processors such as IT service providers are employed, who are responsible for operation, support and maintenance.

 

5.3 Transfer of personal data to a third country

Your data will not be transmitted to a third country or to international organisations.

5.4 Storage period

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. The additional personal data collected during the sending process will be deleted after a period of one year at the latest.

5.5 Other

You have the possibility to revoke your consent to the processing of personal data at any time. If this right is exercised, it will not be possible to continue the conversation. In such cases, all personal data that was stored when contact was made with us will be deleted. Our contact form is a voluntary service that we offer you on our website. 

To transmit your contact request, you must fill in the mandatory fields and acknowledge the data protection notification.

6 Facebook Insight

We offer you additional information on our services on the Facebook fan page. We would like to point out that using the fan page and its functions is your own responsibility. This applies in particular to the use of interactive functions (for example, commenting, sharing, rating).
When you visit our Facebook page, Facebook records your IP address and other information. The information is used to provide us with statistical information regarding the use of our fan page, to analyse the visitors to the website, and to tailor our offering to target groups.
Predefined reports are used for this purpose, such as regarding the total number of page views, "Like" comments, end devices used, page activity, post interactions and reach, user activity (comments, shared content, replies), origin (country and city), language, shop views and clicks, age group, gender, education level, occupation, relationship status, clicks on telephone numbers or Facebook groups linked to our page. We use, for example, the distribution by age and gender for adapting our manner of address, and the preferred visiting times of the users for time-optimised planning of our contributions.
We can limit the time and content of the analysis, but we have no influence on the display, processing and presentation of the Insights. As the provider of the information service, we do not process any further data from your use of our service.
In accordance with the Facebook Terms of Use, which each user has agreed to as part of creating a Facebook profile, we may identify subscribers and fans of our fan page and view their profiles and other shared information from them.
The way in which Facebook uses the data from your visit to our fan page for its own purposes, such as for the analysis of your personal data and the creation of personalised advertising, for the creation of user profiles and for market research, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us.
Facebook also processes information regarding the end devices of its users (for example, as part of the "registration notification" function); this may enable Facebook to assign IP addresses to individual users. If you have a Facebook profile and are logged in to it, this storage and analysis also takes place across devices.

6.1 Purposes and legal basis of processing

For the information service we offer, we share responsibility with Facebook in accordance with Article 26 GDPR). You can find information regarding this instance here. The legal basis for processing personal data is Article 6 (1)(1)(f) GDPR. Our legitimate interest is to draw attention to our services and to be capable of contacting you.

6.2 Recipient categories

The European representative of Facebook Inc. is Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

6.3 Transfer of personal data to a third country

When you visit our fan page in a third country, your data will be transmitted to Facebook Inc., (1 Hacker Way, Menlo Park, CA 94025, USA). Facebook Inc., the US parent company, states that the transfer of your data is adequately secured on the basis of EU standard data protection clauses pursuant to Article 46 (2)(c) GDPR. In the event that your personal data is transferred to and further processed in third countries, such as the USA, it cannot be ruled out that government agencies may access your personal data and process it for their own purposes.

6.4 Duration of processing

We do not know how long Facebook stores the above-mentioned data.

6.5 Other

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is placed on your device. This enables Facebook to see your visit to this page and how you used it. This also applies to all other Facebook pages.
Since it is only Facebook that has full access to the user data, we recommend that you contact Facebook directly if you wish to make requests for information or have other questions regarding your rights as a user (for example, the right to deletion). Alternatively, we offer you support at the address mentioned in Section 1.3 for asserting your rights. You can also exercise your right of objection with Facebook.
For more information on privacy, please refer to Facebook's Data Policy. You will also find information there on how to contact Facebook and how to adjust the settings in relation to advertisements.

7 Social Media Links

Social media links from social networks (for example, Facebook or Twitter) are integrated into our website. The links are identified on our website by logos or other information. By clicking on the logos, the social media providers receive the information that you have previously been on our site. This usually involves transmission of the data listed in Section 2.1:

  • Data protection on Facebook
  • Data protection on Twitter 

8 Rights and contact details

You have various rights within the framework of the legal requirements, which you can assert using the contact details above:

Right to information

Pursuant to Article 15 of the GDPR, you have the right to obtain information regarding the personal data we process about you.

Right to rectify inaccurate data

If your data is incorrect or incomplete, you can request the correction of incorrect or the completion of incomplete data in accordance with Article 16 GDPR.

Right to deletion

Under the conditions of Article 17 GDPR, you can request the deletion of your personal data. Your right to deletion depends, among other things, on whether your data is still required by us to fulfil legal tasks or due to the legitimate interests of ourselves or third parties.

Right to restriction of processing

You may request that the processing of your personal data be restricted pursuant to Article 18 GDPR.

The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data that is stored by us, we will need time to verify that. During the verification period, you have the right to demand that the processing of your personal data be restricted.
  • If the processing of your personal data has taken/is taking place unlawfully, you can demand the restriction of data processing instead of data deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.
  • If you have filed an objection pursuant to Article 21 (1) GDPR, a balance must be struck between your interests and our interests or the interests of third parties. As long as it has not been ascertained whose interests prevail, you have the right to demand that the processing of your personal data be restricted.
  • Where processing of your personal data has been restricted, such data, apart from being stored, may be processed only with your consent, or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or a Member State.

Right to data portability

In accordance with Article 20 GDPR, you have the right to have data that is processed automatically on the basis of your consent or in fulfilment of a contract disclosed to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another data controller, this shall only occur if it is technically feasible.

Right to object to processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of
• Article 6 (1)(1)(e) GDPR (data processing in the public interest) and
• Article 6 (1)(1)(f) GDPR (data processing on the basis of a balance of interests).
This also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR. If you lodge an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
In individual cases, we will process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes. The objection does not require any forms be filled in and should be sent to the above-mentioned address.

Right to withdraw consent that has already been given

You have the right to withdraw your consent to the processing of your personal data pursuant to Article 7 (3) GDPR at any time. Withdrawal of consent does not affect the legality of processing carried out based on consent before its withdrawal .

Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence or place of work or for the place of the alleged infringement, pursuant to Article 77 of the GDPR. If there has been a breach of data protection legislation, the data subject may file a complaint with the competent supervisory authorities. The competent supervisory authority for matters related to data protection legislation is the data protection supervisor of the federal state in which our company is headquartered. A list of the data protection supervisors and their contact details can be found at the following link. The supervisory authority responsible for us is the Landesbeauftragte für den Datenschutz Niedersachsen (State Supervisor for Data Protection Lower Saxony), Prinzenstraße 5, 30159 Hanover, https://lfd.niedersachsen.de


Hamburg, 10/12/2020

powered by webEdition CMS