WE PROTECT YOUR DATA
1. DATA PROTECTION AT A GLANCE
GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
DATA COLLECTION ON OUR WEBSITE
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator, whose contact details can be found in the legal notice of this website.
How do we collect your data?
Your data is collected firstly by you providing it to us. This could, for example, be data you enter on a contact form. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the website functions properly. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. For this purpose, as well as further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. Details can be found in the privacy policy under “Right to restriction of processing”.
ANALYSIS TOOLS AND TOOLS FROM THIRD PARTIES
When you visit our website, your browsing behaviour may be statistically evaluated. This mainly happens with cookies and analysis programs. The analysis of your browsing behaviour is usually anonymous, i.e. the browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options for objection can be found in the following privacy policy.
2. GENERAL AND MANDATORY INFORMATION
PRIVACY
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data against access by third parties.
INFORMATION ON THE DATA CONTROLLER
The controller for data processing on this website is:
Herbrig & Co. GmbH
Müglitztalstrasse 10-12
01773 Altenberg OT Bärenstein
Phone 035054 22331
Email info@herbrig.com
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
STATUTORY DATA PROTECTION OFFICER
We have appointed a data protection officer for our company.
IfDDS GmbH – Institut für Datenschutz und Datensicherheit
Strehlener Straße 14
01069 Dresden
Phone 0351 27579057
Email drehteile-herbrig@ifdds.eu
REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. To do so, an informal email to us is sufficient. The legality of the data processing performed prior to the revocation remains unaffected by the revocation.
RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AS WELL AS TO DIRECT ADVERTISING (ARTICLE 21 GDPR)
If data processing is based on Article 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims (objection pursuant to Article 21(1) GDPR). If your personal data is processed to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Article 21(2) GDPR).
RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of breaches of the GDPR, the data subjects have a right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged breach. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.
SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser’s address line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
INFORMATION, BLOCKING, DELETION AND CORRECTION
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing and, if necessary, a right to have this data corrected, blocked or deleted. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.
RIGHT TO RESTRICT PROCESSING
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the legal notice. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have filed an objection pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
OBJECTION TO ADVERTISING EMAILS
The use of contact data published within the scope of the legal notice obligation to send advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.
3. DATA COLLECTION ON OUR WEBSITE
COOKIES
Some parts of our website use cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit. You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions you desire (e.g. shopping cart function) are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your browsing behaviour) are stored, they will be treated separately in this privacy policy.
SERVER LOG FILES
The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:
- • Browser type and version
- • Operating system used
- • Referrer URL
- • Host name of the accessing computer
- • Time of the server request
- • IP address
No merging of this data with other data sources is carried out. This data will not be combined with data from other sources. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be recorded for this purpose.
CONTACT FORM
If you send us enquiries via the contact form, we will store your details from the enquiry form, including the contact details you provided there, for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form is thus based exclusively on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. To do so, an informal email to us is sufficient. The legality of the data processing operations performed prior to the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
ENQUIRY BY EMAIL, PHONE OR FAX
If you contact us by email, phone or fax, we will store and process your enquiry including all resulting personal data (name, enquiry) for the purpose of handling your request. We do not pass on this data without your consent. The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of enquiries addressed to us. The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
PROCESSING OF DATA (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only insofar as it is necessary to establish, design the content of or change the legal relationship (master data). This is done on the basis of Article 6(1)(b) GDPR, which allows the processing of data to fulfil a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only insofar as it is necessary to enable the user to utilise the service or to bill for it. The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
4. ANALYTICS TOOLS AND ADVERTISING
GOOGLE ANALYTICS
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its web offering and its advertising.
Browser plugin
You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: www.tools.google.com/dlpage/gaoptout?hl=en.
Objecting to data collection
You can prevent Google Analytics collecting your data by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data on future visits to this website: Disable Google Analytics. For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: www.support.google.com/analytics/answer/6004245?hl=en.
Order processing
We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
5. PLUGINS AND TOOLS
GOOGLE WEB FONTS
This site uses web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer. More information about Google Web Fonts can be found at www.developers.google.com/fonts/faq and in Google’s privacy policy: www.policies.google.com/privacy?hl=en.
GOOGLE MAPS
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the features of Google Maps, it is necessary for your IP address to be saved. This information is generally transmitted to a Google server in the US and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of attractive presentation of our online offers and easy location of the places we indicate on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. More information on the handling of user data can be found in Google’s privacy policy: www.policies.google.com/privacy?hl=en
6. OWN SERVICES
APPLICATIONS
We offer you the opportunity to apply to us (e.g. by email, post or via the online application form). Below we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.
Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the new Federal Data Protection Act (BDSG-neu) under German law (initiation of an employment relationship), Article 6(1)(b) GDPR (general contract initiation), and – if you have given consent – Article 6(1)(a) GDPR. Consent can be revoked at any time. Your personal data is shared within our company solely with individuals involved in processing your application. If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG-neu and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.
Data retention period
If we cannot make you a job offer, you decline a job offer, withdraw your application, revoke your consent to data processing or request deletion of your data, the data you have provided, including any remaining physical application documents, will be stored or retained for a maximum of 6 months following the conclusion of the application process (retention period) to understand the details of the application process in case of discrepancies (Article 6(1)(f) GDPR). YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OUTWEIGH OUR INTERESTS. After the retention period has expired, the data will be deleted unless there is a legal obligation to retain it or another legal reason for further storage. If it is apparent that the retention of your data will be necessary after the end of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other statutory retention obligations remain unaffected.
7. DATA PROTECTION WHEN VISITING OUR SOCIAL MEDIA CHANNELS
DATA PROCESSING BY SOCIAL NETWORKS
We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below. Social networks such as Facebook, Twitter, etc. can generally analyse your user behaviour extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-relevant processing operations. In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, data collection occurs, for example via cookies stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. This way, interest-based advertising can be shown to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or have been logged in. Please note that we cannot track all processing activities on social media portals. Depending on the provider, additional processing operations may be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
LEGAL BASIS
Our social media sites are intended to ensure as comprehensive a presence on the internet as possible. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds to be specified by the operators of the social networks (e.g. consent in the sense of Article 6(1)(a) GDPR).
DATA CONTROLLER AND ASSERTION OF RIGHTS
When you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (access, correction, deletion, restriction of processing, data portability and complaint) in principle both against us and against the operator of the respective social media portal (e.g. against Facebook). Please note that despite the shared responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are determined largely by the company policy of the respective provider.
STORAGE DURATION
The data we collect directly via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer pertains. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected. We have no control over the duration of your data being stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
With the following data protection information, we (data controller in the sense of the General Data Protection Regulation) explain which personal data we collect about you when you visit our company’s Facebook presence www.facebook.com/Drehteile.Herbrig. Personal data is all data with which you can be personally identified. Our company’s Facebook presence www.facebook.com/Drehteile.Herbrig (fan page) serves as an information platform for a broad public and for targeted communication with interested visitors. We perform data processing exclusively to the extent that you provide us with this information using the interactive options available. We point out that you use this Facebook page and its functions voluntarily and under your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
Data processing by Facebook
Herbrig & Co. GmbH is also present on Facebook. Herbrig & Co. GmbH has no influence on the privacy settings of this third-party platform. However, the European Court of Justice (Judgment of 05/06/2018 – C-210/16) has determined in one case that alongside Facebook itself, the operator of Facebook fan pages is also the (co-)controller for data processing. Therefore, we inform you here in accordance with the EU General Data Protection Regulation (GDPR) about data processing in connection with Facebook, as far as we know these data processing operations and can influence them. When you visit our Facebook company presence, Facebook collects your IP address and other information available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides us as the page operator with the following data (anonymised and grouped) for evaluation purposes:
- Age
- Gender
- Place of residence (nation and region or city)
For overall usage, the following are recorded anonymously:
- Time of use
- Interactions in the context of posts (e.g. reactions, comments, click rate, views, shares)
- Video viewing duration
- Devices, operating systems, software used
- Usage history (referring web offers)
- Language
- Interests/topics
- Location of use
Facebook provides further information at the following link: www.en-gb.facebook.com/help/pages/insights. The data is processed on the basis of Article 6(1)(1)(f) GDPR. The operators of Facebook process your data to operate and optimise their services and to pass on the data – possibly for commercial purposes. It is expressly pointed out that Facebook also sets cookies that enable the company Facebook to track user behaviour on other websites and apps of the group as well as on certain websites and apps that integrate Facebook technologies. This is especially true if you are already registered on Facebook. More details can be found in the privacy information of the third-party platform. The data is collected using the standard criteria and filtering functions of Facebook. Herbrig & Co. GmbH has no influence on these criteria. The data collected in this context about you is processed by Facebook and may also be transferred to countries outside the EU. What information Facebook receives and how it is used is described by Facebook in general terms in its data usage guidelines. There you will also find information about options for contacting Facebook and the settings for advertisements. The data policy is available at the following link: www.en-gb.facebook.com/about/privacy or www.en-gb.facebook.com/full_data_use_policy. How Facebook uses the data from visits to Facebook pages for its own purposes, the extent to which activities on the Facebook page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the company’s Facebook presence is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. When you access a company’s Facebook presence, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about users’ devices (e.g. as part of the “login notification” function). This may allow Facebook to associate IP addresses with individual users. If you are currently logged in to Facebook as a user, there is a cookie on your device with your Facebook ID. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. If you want to avoid this, you should log out of Facebook or disable the “stay logged in” function, delete the cookies on your device and restart your browser. This way, Facebook information that can directly identify you will be deleted. This allows you to use our company’s Facebook presence without revealing your Facebook identifier. Provided the respective legal requirements are met, you have the right to correction in accordance with Article 16 GDPR, deletion according to Article 17 GDPR, restriction of processing according to Article 18 GDPR, objection to processing according to Article 21 GDPR, and to lodge a complaint with a supervisory authority according to Article 77 GDPR. Please note, however, that Herbrig & Co. GmbH does not process any personal data of yours, but purely statistical data. If necessary, please contact the operator of the third-party platform. Information on how to manage or delete information about you can be found in the above-mentioned data policy (www.en-gb.facebook.com/about/privacy or www.en-gb.facebook.com/full_data_use_policy).
YOUTUBE
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details about their handling of your personal data can be found in YouTube’s privacy policy: www.policies.google.com/privacy?hl=en.
USE OF SALESVIEWER® TECHNOLOGY:
On this website, data is collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology from SalesViewer® GmbH based on the legitimate interests of the website operator (Article 6(1)(f) GDPR). A JavaScript-based code is used for this purpose, to collect company-related data and related usage. The data collected with this technology is encrypted via a non-reversible one-way function (“hashing”). The data is immediately pseudonymised and not used to personally identify the visitor to this website. The data stored within the framework of SalesViewer will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. You can object to data collection and storage at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting within this website in the future.
In doing so, an opt-out cookie for this website will be placed on your device. If you delete your cookies in this browser, you must click this link again.