Declaration of Data Protection
1. A summary of data protection
General
According to legal regulations, users of this web site must be informed of the nature, scope and purpose of recording and the use of personal data on this web site. The fol-lowing information is intended to provide a simple summary of what happens to your personal data when you visit our web site. With regard to the terms used here, we re-fer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR)
What are personal data?
Personal data are understood to be all information that refers to an identified or identi-fiable natural person (affected party), thus all information that can personally identify you. If you want more detailed information on data protection you can read about the subject in this Declaration of Data Protection.
What does data processing mean?
Processing is understood to be every procedure executed, with or without the help of automated processes, particularly to record, to store, to use, to change or to delete data.
What type of data are recorded on this web site?
Inventory data (e.g. name/address), contact data (e.g. e-Mail/telephone number), us-age data (e.g. pages visited/time of access) and communication data (e.g. IP ad-dress/device information) can be recorded on this web site.
Who records the data on this web site?
Data are recorded on this web site by the operator. The operator’s contact data can be found in the details below on the responsible office or in the Imprint for the web site.
How are your data recorded?
Your data are recorded in that you disclose these to us, for example. It could be that you transmit the data by e-Mail or enter them in a form.
However, there are other data that are recorded automatically by our IT systems when you visit the web site (e.g. data transmitted by your computer or Smartphone). These primarily concern technical data, such as the browser you are using on the in-ternet, which operating system you deploy and the date and time that you visit our web site. These data are recorded automatically as soon as you are connected with the web site.
What are your data used for?
The greater part of the data is recorded to find out what you use on our web site. This enables us to ensure that the web site is presented without errors. Another part is re-quired to establish the sections of the web site that you have visited and what inter-ests you. If you have provided us with your contact data, this information is required to get in touch and communicate with you.
What rights do you have with regard to the data you transmit?
With regard to the personal data saved about you, you have the right at all times to receive free-of-charge information on the origins, recipients and purpose of these da-ta. You can furthermore demand that these data be corrected, blocked or completely or partially deleted. If you have any questions concerning data protection, you can get in touch with us at any time, particularly with the responsible office stated below or at the address stated in the Imprint. You are furthermore free to complain to the re-sponsible supervisory authority.
What are analysis tools and other third-party tools?
Your surfing behaviour on our web site can be evaluated as soon as you visit our site. This primarily happens with the help of cookies and possibly using certain analysis pro-grams. As a rule, your surfing behaviour is analysed anonymously and it cannot be traced back to you. In this case, you have the option of objecting to the analysis or you can prevent the use of certain tools. More detailed information and instructions on this can be found below.
2. Compulsory information and further notices
a. Data protection
We, as the operator of the web site, take the protection of your personal data very seriously. The personal data that you disclose to us are treated in confidence in accordance with the legal regulations on data protection and this Declaration of Data Protection. The use of this web site triggers various personal data to be rec-orded. Personal data are data that can identify you. This Declaration of Data Pro-tection is intended to explain which data are recorded about you and what they are used for. In addition, the purpose of this is explained to you.
We wish to point out that data transmissions via the internet (such as communica-tion by e-Mail) are basically not secure in all respects. Unfortunately, it is not pos-sible to completely protect data from third-party access in every single case.
b. Legal basis
In accordance with Art. 13 GDPR, we would like to tell you the legal basis under which we process data. Unless a particular legal basis is stated in this Declaration of Data Protection, the following applies:
Art. 6 Para. 1 Letter. a) and Art. 7 GDPR allow your consent for data processing to be obtained. The legal basis for us to process your data in order to provide ser-vices and to answer your questions is Art. 6 Para. 1 Letter b) GDPR. The provision in Art. 6 Para. 1 Letter c) GDPR is the basis for processing the data to fulfil the le-gal obligations to which we are subject and Art. 6 Para. 1 Letter f) GDPR allows us to process your data to safeguard our justified interests.
c. Responsible office
The following office is responsible for processing data on this web site:
Friedrich Höppe GmbH, Stephanopel 87, 58675 Hemer, Germany, Phone: +49 (0) 23 72 - 8 00 34, E-Mail: info@friedrich-hoeppe.de
The aforesaid legal entity is the responsible office. This decides upon the purposes and means of processing personal data either alone or together with others.
d. Changes or updates to the Declaration of Data Protection
We will update the Declaration of Data Protection as soon as changes in the pro-cessing of data we perform make it necessary. You are therefore requested to find out about the contents of this Declaration of Data Protection on a regular ba-sis.
e. Right to information
Art. 15 GDPR gives you the right to demand confirmation from us of whether data concerning you have been processed by us. In addition, this provision gives you the right to receive information about these data and to receive a copy of the data.
f. Right to correction
Art. 16 GDPR gives you the right to demand the completion and/or the correction of the data concerning you.
g. Right to deletion
Under Art. 17 GDPR, you have the right to demand that data concerning you are deleted without delay.
h. Right to restrict processing
Art. 18 GDPR stipulates that you can demand that we restrict the processing of your data.
i. Right to data portability
Under Art. 20 GDPR, you have the right to have the data you have provided transmitted to you or to a third-party in a common format able to be read by ma-chine. If you demand that the data be transmitted directly to another responsible office, this can only be done insofar as it is technically feasible.
j. Right of revocation
Your specific consent is required for many data processing procedures. Once is-sued, you can revoke consent at any time in accordance with Art. 7 Para. 3 GDPR. In principle, notification in no particular form suffices (such as an e-Mail to us). The legality of data processing remains unaffected by any revocation as a matter of principle.
k. Right of objection
You have the right under Art. 21 GDPR to object to data concerning you being pro-cessed by us in future. The objection can also be lodged against processing by us for the purpose of direct advertising.
l. Right to complain to a supervisory authority
If you believe that the regulations of data protection laws have been violated, you have the right to complain to the responsible supervisory authority. The superviso-ry authority responsible for questions of data protection law is the State Officer for Data Protection of the state in which we are based; namely North Rhine/Westphalia. A list of the officers for data protection and their contact data can be found under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
m. SSL and TLS encryption
This web site uses SSL and TLS encryption for reasons of security and to protect the transmission of confidential content. You can recognise an encrypted connec-tion in that the address starts with https:// in the address line of your browser, or you can see a lock in the browser address line. When such encryption is activated, the data you transmit to us cannot be read by third parties.
3. Deletion of data
The data provided by you and processed by us are deleted or restricted in their pro-cessing on the basis of Art. 17 and 18 GDPR. Unless specifically stated otherwise in this Declaration of Data Protection, when such data are deleted, we point out here that they are deleted as soon as the purpose of processing has been achieved and this is not contradicted by any duties of retention under law. In the latter case, the data are restricted in their processing. This particularly applies to data that must be retained for reasons of commercial or fiscal law. A duty of retention exists for these under § 257 Para. 1 HGB of six years (e.g. for commercial ledgers, inventories, opening balance sheets, annual financial accounts, commercial letters, booking vouchers etc.) and un-der § 147 Para. 1 AO of ten years (e.g. for ledgers, records, situation reports, book-ing vouchers, trade and business letters, documents of relevance to taxation etc.).
4. Recording data on our web site
a. Server log files
Our web site is stored on servers. The provider of these servers automatically saves information on visits to our web site. This concerns so-called log files that are transmitted automatically by the browser you use. In particular, the following information is transmitted:
- Language
- Type and version of the browser
- Time of the server request
- IP address
- Error codes
- The operating system used
- The referrer URL.
These data are not merged with other data sources as a matter of principle.
The legal basis for recording and processing these data is Art. 6 Para. 2 Letter f) GDPR. This legal basis forms our justified interest in the fulfilment of a contract or the implementation of contractual measures.
b. Cookies
Our web site partly deploys cookies. Cookies serve to make the range of our pag-es more user-friendly, efficient and reliable. Cookies are small files that are saved on your computer and stored for later call-up.
We deploy session cookies. These are only saved for the duration of your current visit to our web site. They are deleted automatically at the end of your visit to our web site.
If you do not want cookies to be saved on your computer, you will need to de-activate the relevant option in your browser’s system settings. Cookies that have already been saved can also be deleted again in the system settings. If you never-theless do not want any cookies to be saved, this could impair the proper function-ing of this web site.
If cookies are deployed that are required to perform electronic communication procedures or to provide certain functions requested by you, these are saved and processed on the basis of Art. 6 Para. 1 Letter f) GDPR. We, as the operator of the web site, have a justified interest in saving cookies to ensure that the web site can be operated without technical errors.
This Declaration of Data Protection informs you separately of the deployment of cookies. These, for example, are saved to analyse your surfing behaviour.
c. Contact forms/e-Mail
If you choose to send inquiries to us through the contact forms on the web site, the information from the form (including the contact data you state there) is saved for the purpose of processing the inquiry and in case further questions arise. These data are not forwarded without your specific consent.
The data entered by you in contact forms are therefore processed particularly on the basis of your consent given under Art. 6 Para. 1 Letter a) GDPR. You can re-voke the consent issued at any time. Notification in no particular form suffices (such as an e-Mail to us). The legality of the data processing procedures per-formed until revocation remains unaffected as a matter of principle. In case you get in contact without issuing your specific consent (e.g. by e-Mail), the data are processed on the basis of Art. 6 Para. 1 Letter b) GDPR in order to process and answer the contact inquiry.
All the data you provide remain with us, until you demand that they be deleted or revoke your consent to their storage, or if there is no longer any purpose for sav-ing the data. In the latter case, for example, this is when the processing of your inquiry has been concluded. Necessity is reviewed every two years. In the case of legal duties of archiving, your data are deleted after the respective period has ex-pired. It goes without saying that overriding legal provisions, particularly legal peri-ods of retention (6-years under commercial law and 10-years under fiscal law) remain unaffected.
5. Plug-ins and tools
a. Google Analytics
The functions of the web analysis service Google Analytics are deployed on this web site. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics deploys cookies. The data concerning your use of this web site generated in this way are usually transmitted to a Google server in the USA, where they are stored.
The data generated by Google Analytics is stored and processed on the ba-sis of Art. 6 Para. 1 Letter f) GDPR. We, as the operator of the web site, have a justified interest in analysing your usage behaviour, in order to op-timise both our range of advertising and our services.
Google is certified under the Privacy Shield Treaty and hereby offers a guarantee that European data protection law will be upheld (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). We only deploy Google Analytics with active IP anonymisation. IP anonymisation means that the IP addresses of the respective users of Google within the Member States of the European Union or in other contractual states of the treaty beyond the European Economic Area are abbreviated. The full IP ad-dress is transmitted to a Google server in the USA and abbreviated there only in exceptional cases.
Working on our behalf, Google uses this information to evaluate your use of our web site, in order to summarise the activities within our online presence and to provide further services connected with the use of the online range to us as the operator of the web site. Google does not merge the IP ad-dress transmitted by your browser with other data.
You can prevent cookies being stored by setting the relevant option in the system settings of your browser. However, it is pointed out to you that, in this case, you may not be able to use all the functions offered by this web site. Moreover, it is possible that you can prevent the data created by the cookie referring to your use of our web site, including your IP address, be-ing processed by Google. To do so, download and install the browser opt-out plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can furthermore prevent your data being recorded by Google Analytics by de-activating the link to Google Analytics. This prevents your data being recorded on visits to this web site in future because an opt-out cookie is set.
Our web site uses the “Demographic Features” function offered by Google Analytics. Reports can be compiled with this function, which contain details of the site visitor’s age, gender and interests. These data are transmitted out of Google’s interest-related advertising and visitor data are transmitted to third-party providers. It is not possible to assign these data to a certain person. You can de-activate this function at any time via the settings in your Google account.
Further information on the use of data by Google, possible settings and op-tions of revocation can be found on Google’s web pages: https://www.google.com/intl/en/policies/privacy/partners and in Google’s privacy poli-cy: https://support.google.com/analytics/answer/6004245?hl=en.
Lastly, we point out to you that we have concluded a contract with Google concerning order processing and thereby implement the strict rules of Ger-man data protection directives completely in our use of Google Analytics.
b. Google Maps
Our web site uses the data service Google Maps via an application pro-gramming interface (API). The operator of the site is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
It is necessary to store your IP address to use the functions of Google Maps. As a rule, this information is transmitted to a Google server in the USA, where it is saved. The provider of this page (us) has no influence on this data transmission.
Google Maps is used to depict our online presence in a meaningful and ap-pealing way. It makes the places stated by us on the web site easy to find. This represents a justified interest under Art. 6 Para. 1 Letter f) GDPR.
Further information on how user data are handled can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=en&gl=en
Hemer, May 2018