Data Privacy Notice

Data privacy notice

Privacy Policy

Our contact details as the controller:
Hünnebeck Deutschland GmbH
Rehhecke 80
40885 Ratingen, Germany
Tel.: +49 21 02 937 – 1
Fax: +49 21 02 37 651
Email: info_de@huennebeck.com

Last modified: September 2022

We are pleased that you are visiting our website “products.huennebeck.com” and thank you for your interest in our company. The protection of your personal data, such as your date of birth, name, telephone number, address, etc., is important to us.

The purpose of this Privacy Policy is to inform you of how your personal data that we collect when you visit our site is processed. Our data protection practices are in line with the legal regulations of the EU’s General Data Protection Regulation (GDPR). The Privacy Policy below serves to meet the information obligations arising from the GDPR. These can be found in Art. 13 and Art. 14 et. seqq. GDPR, for instance.

Controller
As defined in Art. 4 No. 7 GDPR, the controller is the person or entity who, alone or together with others, decides on the purpose and means of the processing of personal data.
With regard to our website, the controller is:

Hünnebeck Deutschland GmbH
Rehhecke 80
40885 Ratingen, Germany
Email: Info_de@huennebeck.com
Tel.: +49 2102 937-1

Contact details of the Data Protection Officer
Pursuant to Art. 37 GDPR, we have appointed a Data Protection Officer. Our Data Protection Officer can be reached under the following contact details:

Rehhecke 80
40885 Ratingen, Germany
Email: Info_de@huennebeck.com

Provision of the website and the creation of log files
Whenever our website is accessed, our system records data and information concerning the accessing device (e.g. computer, mobile telephone, tablet, etc.) on an automated basis.

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and the version used
(2) The operating system of the accessing device
(3) The host name of the accessing computer
(4) The IP address of the accessing device
(5) The date and time of access
(6) Websites and resources (images, files, other page content) accessed on our website
(7) Websites from which the user’s system came to our website (referrer tracking)
(8) Messages as to whether the access was successful
(9) The data volume transferred

This data is stored in our system log files. This data is not stored together with a specific user’s personal data. It is therefore not possible to identify individual page visitors.

Legal basis for the processing of personal data
Art. 6 (1) letter f) GDPR (legitimate interest). Our legitimate interest is in ensuring that the purpose detailed below is achieved.

Purpose of data processing
The temporary (automated) storage of data is required for a properly functioning visit to the website to enable the website to be displayed. Personal data is also stored and processed to maintain the compatibility of our website for all visitors where possible and to combat misuse and eliminate faults. For this, it is necessary to log the technical data of the accessing computer to be able to react to display errors, attacks on our IT systems and/or errors in the functionality of our website as early as possible. In addition, the data allows us to optimise the website and in general ensure the security of our information technology systems.

Duration of storage
The aforementioned technical data is erased as soon as it is no longer required to ensure the compatibility of the website for all visitors, however, no later than 3 months after our website was accessed.

Objection and erasure option
You can object to the processing of data pursuant to Art. 21 GDPR and request the erasure of data pursuant to Art. 17 GDPR at any time. The rights which accrue to you and how to assert them can be found in the last few sections of this Privacy Policy.

Special functions of the website
Our site offers you a variety of functions. If you use these functions, we collect, process and store personal data. In the section below, we explain what happens with this data:

Contact form(s)

What personal data is collected and to what extent is it processed?
The data you enter in our contact forms, which you entered in the input screen of the contact form.
Legal basis for the processing of personal data
Art. 6 (1) letter a) GDPR (consent by means of a clear confirmation action or behaviour)
Purpose of data processing
We use the data collected via our contact form or our contact forms only for processing the specific contact enquiry that is received via the contact form. Please note that we may also send you emails to the address provided in order to perform your contact enquiry. The purpose of this is so that you can receive a confirmation from us that your enquiry has been correctly transmitted to us. However, we are not obliged to send you this confirmation email and serves only for your information.
Duration of storage
After your enquiry has been processed, the data collected is erased without delay provided that no statutory retention periods prevent us from doing so.
Withdrawal and erasure option
The withdrawal and erasure options are based on the general regulations concerning the right to withdrawal and right to erasure under data protection law described below in this Privacy Policy.
Requirement to provide personal data
The contact forms are used on a voluntary basis and the use thereof is neither contractually nor legally prescribed. You are not obliged to contact us via the contact form but can use the other contact options provided on our website. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required fields of the contact form, you will not be able to send the enquiry and we will unfortunately not be able to process your enquiry.

Google Tag Manager

What personal data is collected and to what extent is it processed?

On our website, we use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform to execute and manage in a bundled manner other web services and web tracking programmes using so-called “tags”. Google Tag Manager stores cookies on your computer and analyses the extent to which web tracking tools can be executed using Google Tag Manager and your surfing behaviour (so-called “tracking”). This data sent in individual tags integrated in Google Tag Manager is combined, stored and processed by Google Tag Manager under a uniform user interface, All the integrated tags are again presented individually in this Privacy Policy. Further information on the data protection of that tools integrated in Google Tag Manager can be found in the respective section of this Privacy Policy. When using our website with the integration of Google Tag Manager tags activated, data such as in particular your IP address and your user activities are transmitted to the servers of Google Ireland Limited and processed and stored outside of the European Union, e.g. In the United States. The EU Commission has determined that there can be an appropriate level of data protection in the US if the company processing the data has subjected itself to the US-EU Privacy Shield Framework and the data export to the US was structured lawfully in this manner. This is the case with Google Ireland Limited. With respect to the web services integrated by means of Google Tag Manager, the regulations in the respective section of this Privacy Policy apply. The tracking tools used in Google Tag Manager ensure, by means of source code IP anonymisation, that the IP address is anonymised by Google Tag Manager before transmission. This ensures that only an anonymised recording of IP addresses (so-called IP masking) is enabled for Google Tag Manager.

Legal basis for the processing of personal data
Pursuant to Art. 6 (1) letter a) GDPR, the legal basis for data processing is your consent to the use of cookies and web tracking in our cookie banner (consent by means of a clear confirmation action or behaviour).

Purpose of data processing
On our behalf, Google will use the information obtained through Google Tag Manager to analyse your visit to this website, compile reports about the website activities and provide us with further services related to the use of the website and the Internet.

Duration of storage
Google will store the data relevant to the function of Google Tag Manager for as long as necessary to perform the booked web service. The data is collected and stored in an anonymised manner. If it should nevertheless be possible to establish the identity of a person, the data will be erased without delay unless it is subject to statutory retention obligations. In all cases, the data will be erased after the statutory retention period has expired.

Objection and erasure option
You can prevent the collection and transmission of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or enabling the “Do Not Track” setting in your browser. In addition, you can prevent the collection of the data generated by the Google cookie related to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout. You can find Google’s security and data privacy policies under https://policies.google.com/privacy.

Google Analytics
Scope of the processing of personal data
On our website, we use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). In the context of web tracking, Google Analytics uses cookies stored on your computer that enable an analysis of the use of our website and your surfing behaviour (so-called “tracking”). We perform this analysis based on the tracking services of Google Analytics in order to continuously optimise our Internet offering and improve its availability. In the context of the use of our website data, such as in particular your IP address and your user activities, is sent to the servers of Google Ireland Limited. We perform this analysis based on the tracking services of Google in order to continuously optimise our Internet offering and improve its availability. Likewise, we require web tracking for security reasons. By means of web tracking, we can track whether third parties attack our website. Using the information obtained from the web tracker, we can take effective countermeasures and protect the personal data processed by us against such cyber attacks. By activating IP anonymisation in the Google Analytics tracking code of this website, your IP address is anonymised by Google Analytics before transfer. This website uses a Google Analytics tracking code that was extended by the operator gat._anonymizeIp() in order to enable only anonymised collection of IP addresses (so-called “IP masking”).

Purpose of data processing
On our behalf, Google will use this information to analyse your visit to this website, compile reports about the website activities and provide us with further services related to the use of the website and the Internet. Likewise, we require web tracking for security reasons. By means of web tracking, we can track whether third parties attack our website. Using the information obtained from web tracking, we can take effective countermeasures and protect the personal data processed by us against such cyber attacks.

Duration of storage
Google will store the data relevant to the provision of web tracking for as long as necessary to perform the booked web service. The data is collected and stored in an anonymised manner. If it should nevertheless be possible to establish the identity of a person, the data will be erased without delay unless it is subject to statutory retention obligations. In all cases, the data will be erased after the statutory retention period has expired.

Objection and erasure options
You can prevent the collection and transmission of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser or enabling the “Do Not Track“ setting in your browser. In addition, you can prevent the collection of the data generated by the Google cookie related to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: (https://tools.google.com/dlpage/gaoptout?hl=en-GB). You can find Google’s security and data privacy policies under https://policies.google.com/privacy?hl=en-gb.

Integration of external web services and processing of data outside of the EU
We use active content from external providers, so-called “web services”, on our website. By accessing our website, these external providers may obtain personal data about your visit to our website. This means that it may be possible for data to be processed outside of the EU. You can prevent this by installing a relevant browser plug-in or deactivating the execution of scripts in your browser. This may lead to functional restrictions of websites that you visit.
We use the following external web services:

Doubleclick
On our website, a web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is downloaded. We use this data to ensure the full functionality of our website. In this connection, your browser may transfer personal data to Doubleclick. The legal basis for this data processing is Art. 6 (1) letter f) GDPR. The legitimate interest is error-free functioning of the website. The data is erased as soon as the purpose it was collected for has been achieved. Further information on the handling of the transferred data can be found in Doubleclick’s privacy policy: policies.google.com/privacy.

You can prevent the collection and processing of your data by Doubleclick by deactivating the execution of script code in your browser or installing a script blocker in your browser.

Google
On our website, a web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is downloaded. We use this data to ensure the full functionality of our website. In this connection, your browser may transfer personal data to Google. The legal basis for this data processing is Art. 6 (1) letter f) GDPR. The legitimate interest is error-free functioning of the website. The data is erased as soon as the purpose it was collected for has been fulfilled. Further information on the handling of the transferred data can be found in Google’s privacy policy: policies.google.com/privacy.

You can prevent the collection and processing of your data by Google by deactivating the execution of script code in your browser or installing a script blocker in your browser.

YouTube
On our website, a web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: YouTube) is downloaded. We use this data to ensure the full functionality of our website. In this connection, your browser may transfer personal data to YouTube. The legal basis for this data processing is Art. 6 (1) letter f) GDPR. The legitimate interest is error-free functioning of the website. The data is erased as soon as the purpose it was collected for has been achieved. Further information on the handling of the transferred data can be found in YouTube’s privacy policy: policies.google.com/privacy.

You can prevent the collection and processing of your data by YouTube by deactivating the execution of script code in your browser or installing a script blocker in your browser.

Information on the use of cookies
Scope of the processing of personal data
We integrate and use cookies on a number of pages to enable certain website functions and to integrate external web services. So-called “cookies” are small text files that your browser can store on the device that you use to access our website. These text files contain a characteristic character string that clearly identifies the browser when you return to our website. The process of storing a cookie file is also called “placing a cookie”. This means that cookies can be placed by both the website and external web services.

Legal basis for the processing of personal data
Art. 6 (1) letter f) GDPR (legitimate interest) as well as Art. 6 (1) letter a) and Art. 9 (1) letter a) GDPR (consent).
The relevant legal basis can be seen in the cookie table shown further on in this clause.
In general, for cookies placed based on a legitimate interest, our legitimate interest is ensuring the functionality of our website and that of the services integrated therein (technically required cookies). In addition, cookies may increase user-friendliness and allow for more personalisation. In this case, we have weighed up your interests against our interests.
With the assistance of cookie technology, we can identify, analyse and track individual website visitors if the website visitor has consented to the use of cookies pursuant to Art. 6 (1) letter a) GDPR.

Purpose of data processing
Cookies are placed by our website and external web services to maintain the full functionality of our website, improve user-friendliness or to achieve the purpose you have given consent for, Cookie technology also enables us to identify individual visitors to our website through the use of pseudonyms, e.g. an individual or random ID in order for us to provide more individual services. The details are shown in this table: Cookie storage

Duration of storage
The cookies listed below are stored in your browser until they are deleted or, in the case of session cookies, until the session has ended. The details are shown in this table: Cookie storage

Objection option, withdrawal of consent and deletion
You can set your browser as you wish to ensure that the placement of cookies is in general prevented. You can then decide on a case-by-case basis whether you would like to accept the cookies or if you would like to accept the cookies in general. Cookies can be used for a variety of purposes, e.g. to identify that the device you are using for accessing the website has already been connected with our website (permanent cookies) or to store the offers last seen (session cookies). If you have given us your express permission to process your personal data, you can withdraw this consent at any time. Please note that this will not affect the lawfulness of the processing carried out on the basis of your consent until its withdrawal.

Data security and data protection, communication by email
Your personal data is protected by technical and organisational measures in the collection, storage and processing such that it is not accessible to third parties. In the event of unencrypted communication by email, we cannot guarantee complete data security on the transmission pathway to our IT systems. We therefore recommend the use of encrypted communication or the postal service for highly confidential information.

Right to information and rectification requests – Erasure and restriction of data – Withdrawal of consent – Right to object

Right to information
You have the right to request confirmation of whether we process your personal data. If this is the case, you have the right to information about the data mentioned in Art. 15 (1) GDPR provided that the rights and freedoms of other persons are not negatively affected (see Art. 15 (4) GDPR). We would be pleased to provide you with a copy of the data.

Right to rectification
Pursuant to Art. 16 GDPR, you have the right to have any incorrect personal data about you that we have stored (such as your address, name, etc.) rectified at any time. You can also request a completion of the data stored by us at any time. The data will be modified without delay.

Right to erasure
Pursuant to Art. 17 (1) GDPR, you have the right to erasure of your data by us if
•    the data is no longer needed;
•    based on the withdrawal of your consent, the legal basis of processing no longer applies in its entirety;
•    you have lodged an objection to the processing and there are no legitimate grounds for the processing;
•    your data was processed unlawfully;
•    a legal obligation requires it or collection pursuant to Art. 8 (1) GDPR has taken place.
Pursuant to Art. 17 (3) GDPR, the right does not apply if
•    processing is required to exercise the right to freedom of expression and information;
•    your data was collected based on a legal obligation;
•    processing is required in the public interest;
•    the data is required for the assertion, exercise or defence of legal rights.

Right to restriction of processing
Pursuant to Art. 18 (1) GDPR, you have the right, in individual cases, to request restriction of the processing of your personal data.
This is the case if

the correctness of the personal data is disputed by you;
the processing is unlawful and you do not consent to erasure;
the data is no longer required for the processing purpose but the collected data serves to assert, exercise or defend legal rights;
an objection against the processing pursuant to Art. 21 (1) GDPR has been lodged and it is still unclear which interests prevail.

Right to withdrawal
If you have given us your express consent to the processing of your personal data (Art. 6 (1) letter a) GDPR or Art. 9 (2) letter a) GDPR), you can withdraw this consent at any time. Please note that this will not affect the lawfulness of the processing carried out based on your consent until its withdrawal.

Right to object
Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data collected on the basis of Art. 6 (1) letter f) (in the context of a legitimate interest). You only have this right if special circumstances preventing the storage and processing apply.

How do I assert my rights?
You can assert your rights at any time by contacting us using the details below:
Hünnebeck Deutschland GmbH
Rehhecke 80
40885 Ratingen, Germany
Email: Info_de@huennebeck.com
Tel.: +49 2102 937-1

Right to data portability
Pursuant to Art. 20 GDPR, you have the right to be provided with your personal data. We provide the data in a structured, commonly used and machine-readable format. The data can be optionally sent to you or a controller named by you.

We provide you with the following data pursuant to Art. 20 (1) GDPR:

Data collected based on express consent pursuant to Art. 6 (1) letter a) GDPR or Art. 9 (2) letter a) GDPR;
Data received from you pursuant to Art. 6 (1) letter b) GDPR in the context of existing agreements;
Data processed in the context of an automated procedure.

We will transmit the personal data directly to a controller at your request to the extent this is technically feasible. Please note that we are not permitted to transmit data that interferes with the freedoms and rights of other persons pursuant to Art. 20 (4) GDPR.

Right to lodge a complaint with the supervisory body pursuant to Art. 77 (1) GDPR
If you suspect that your data has been unlawfully processed by us on our website, you can have the issue clarified by legal means at any time. In addition, every other legal option is open to you. Independently of this, pursuant to Art. 77 (1) GDPR you have the right to contact a supervisory authority. You have the right to lodge a complaint pursuant to Art. 77 GDPR in the EU Member State of your place of residence, your workplace and/or the place of the alleged violation. This means that you can choose the supervisory authority from among the places mentioned above. The supervisory authority that you lodge a complaint with will inform you of the status and results of your submission, including the possibility of judicial remedy pursuant to Art. 78 GDPR.