I. General information and legal foundations
The following declaration informs you of which type of personal data is collected by us as the responsible body on this website, for which purpose, and to what extent this data is made available to third parties.
1. Competent body:
HARTMANN TRESORE AG
Telephone: +49 (0)5251 1744-410
Entered in the commercial register of the Paderborn local first instance court Register no. of the Paderborn local first instance court HR B 9008
Board of management:
Christoph Hartmann (Chief Executive Officer)
Chairman of the supervisory board:
Data protection officer:
Rechtsanwaltskanzlei Sieling Carola Sieling (Law firm Carola Sieling)
Klingenderstraße 5, 33100 Paderborn
Tel: +49 (0)5251-142 87 42
2. Legal foundations of the processing
The processing of personal data requires a legal basis, which we would like to present to you below.
For the processing of personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 letter a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis. For the processing of personal data which is necessary for the fulfilment of a contract, where its party to the contract is the data subject, Article 6 paragraph 1 letter b of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis. This includes processing operations necessary to perform pre-contractual measures.
If the processing of personal data is necessary for the fulfilment of a legal obligation, which our company is subject to, Article 6 paragraph 1 letter c of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first interest stated, then Article 6 paragraph 1 letter f GDPR shall serve as the legal basis for processing. The legitimate interest of our company is in the conduct of our business activities as well as in the analysis, optimisation and maintenance of the security of our online offer.
II. Log files, hosting
In the server statistics, such data is automatically stored, which the browser transmits to us within the scope of our legitimate interest in performing analysis and for security reasons (so-called "logfiles").
This comprises the following data:
We usually cannot assign this data to specific individuals. This data will not be merged with other sources of data. The data is additionally deleted within 7 days following a statistical evaluation. Data the further retention of which is required for evidentiary purposes shall be exempted from the deletion until the final clarification of the respective incident.
We make use of hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security and technical maintenance services to maintain the operation of this online offer.
In this process, we or our hosting provider process stock data, contact data, content data, contractual data, usage data, meta and communication data of customers, interested parties and visitors of online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual processing
The personal data provided by you for contractual purposes e.g. in the case of requests for quotations such as the name, address or e-mail address shall only be used internally to respond to your requests, to process your orders or to provide you with access to certain contractual information.
When you contact us by e-mail or using the contact form we will save your information to answer your questions.
A transfer to third parties shall fundamentally not take place, unless valid data protection regulations justify a transfer or we are obliged to do so by law. You can withdraw your consent that you have granted with effect for the future at any time. In case of cancellation your data shall be immediately deleted if no statutory exception necessitating its further processing applies. Your data will otherwise be deleted if we have processed your request or the purpose of the storage no longer applies and there are no other contrary statutory exceptions. You can always inform yourself about the data stored about you.
You can, of course, also use our website without accepting cookies. You can also configure your browser settings in accordance with your wishes and in overall terms, e.g. refuse acceptance of third-party cookies or all cookies, or delete cookies that have already been stored. If you do not accept cookies, please note that our offer may not work faultlessly in this case.
You can find out which function on our website places cookies further below in the area of the individual functions.
VI. Passing on of data to third parties
We only pass on data to third parties if this is necessary to fulfil the contract and/or we are statutorily obliged and/or entitled to do so in an individual case.
In some cases we make use of external service providers in accordance with our legitimate interests with regard to analysis, optimisation and economical operation of the online content. This always requires that the third-party providers of this content access the IP address of the users, due to the fact they could not send the content to their browsers without the IP address. The IP address is thus necessary for the presentation of this content. Third party providers may also use so-called pixel tags (invisible graphics, also called "web beacons") for statistical or marketing purposes. Using “Pixel Tags” information such as user traffic can be evaluated on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, among other things, technical information similar to the logfiles. We have listed our service providers below.
If your data is to be used for other purposes, we will inform you beforehand and use the data only if you have explicitly declared your consent to this.
1. Google service provider
We use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, ("Google") in accordance with our legitimate interests in the analysis, optimisation, and economic operation of our website.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
a. Google Analytics
This website uses Google Analytics as a website analysis service. Google Analytics uses so-called “Cookies”, text files, which are stored on your computer and make it possible to analyse your use of the website. The information produced by the cookie concerning your use of this website (including your IP address) will be transmitted to a Google server in the United States and stored there.
We would like to point out that this website uses Google Analytics with the "_anonymizeIp()" extension and therefore IP addresses will be shortened before transfer by Google within the European Union or in other contractual states of the agreement on the European Economic Area to rule out direct personal references. Only in exceptional cases will the complete IP address be transmitted to a Google server in the United States and abbreviated there.
By order of the provider Google will use this information to evaluate your use of the website to compile reports concerning the website activities for the website operators and to render additional services linked with the use of the website and the Internet. Google will also transfer this information to third parties if necessary if this is statutorily stipulated or if third parties process this data on behalf of Google. Google will under no circumstances link your IP address with other Google data. You can prevent the cookies from being installed by means of an appropriate setting of your browser; however, we should point out that in that case you will certainly not be able to use all the functions of this website.
To obtain information about the purpose and scope of the data collection, and the additional processing and use of the data by Google as well as your rights and setting options in relation to this for the protection of your private sphere please consult the data protection guidelines of Google at http://www.google.de/intl/de/policies/privacy/?hl=de and specifically for Google Analytics at https://www.google.com/policies/privacy/partners/?hl=de and at https://support.google.com/analytics/answer/6004245?hl=de.
You declare your agreement to the processing of the data collected about you by Google as described above and for the aforementioned purpose by using this website.
You can object to the data collection and storage by Google for the respective device at any time becoming effective for the future in connection with use under this link. http://tools.google.com/dlpage/gaoptout?hl=de
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set, which prevents the future collection of your data when visiting this website with this device:
Deactivate Google Analytics
Notice: If you delete your cookies, this will result in the deactivation cookie being deleted as well and you needing to store it once more.
b. Google Maps
We use services of the social network Facebook.com in accordance with our legitimate interests in the analysis, optimisation, and economic operation of our website, which are operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
b. Facebook Custom Audiences and Website Custom Audiences
Our website uses the advertising tools Custom Audiences and Website Custom Audiences provided by Facebook Here, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes on its social platform and stored in the United States.
The Facebook pixel is integrated when accessing our website directly through Facebook and can store a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook in the logged-in state, your visit of our website will be recorded in your profile. The data collected about you are anonymous to us, so do not enable us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we should send data to Facebook for comparison purposes, they will be encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is solely performed for the purpose of establishing a comparison with the data that have likewise been encrypted by Facebook.
To obtain additional information about the purpose and scope of the data collection and the additional processing and use of the data by Facebook and your rights and setting options in relation to this for the protection of your private sphere please consult the data protection guidelines of Facebook at http://www.facebook.com/about/privacy/, and specially for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/.
If you wish to oppose the use of Facebook Website Custom Audiences, you can also do this at https://www.facebook.com/ads/website_custom_audiences/. You must log into your Facebook account to do this.
In order to prevent the collection of your data through the Facebook pixel on our website, please click the following link: Facebook-Opt-Out
If you click on the link, an "opt-out" cookie will be saved on your device. If you delete the cookies in this browser, then you will have to click on the link again. Moreover, the opt-out only applies within the browser used by you and only within our web domain in which the link was clicked.
3. Our social media presences
You will find us in the online presences in social networks and platforms. We would like to use these presences to communicate with our active customers there, prospective customers and users, and to inform them in this way about our services and our company.
The processing of the personal data of users active there is performed on the basis of our legitimate interests in the form of the communication and passing on of information to and with the users. If, within the framework of the respective social platform, consent to data processing has been provided by the users, the processing is performed on the basis of this consent.
When you visit one of our social media sites, we, together with the social platform operator, are responsible for the data processing operations triggered during this visit. In principle you can assert your rights (information, rectification, deletion, limitation of processing, data portability and complaints, see the following point "Rights of the data subject") both towards us and towards the operator of the respective social platform.
We would like to point out that we do not have complete influence over the data processing operations of the social platform despite our joint responsibility and, if necessary, forward the rights request to the respective operator to ensure the improved processing of the data subjects’ rights. Our options are fundamentally based on the company policy of the respective provider.
Depending on the social platform named below, the data processing of the users can also occur outside the territory of the European Union. US providers certified under the Privacy Shield have undertaken to comply with the EU privacy standards.
The users’ data is usually processed by the platforms for market research and advertising purposes. Usage profiles can thus be created from the user behaviour and the resulting interests of the users. The usage profiles can in turn be used for instance to place advertisements inside and outside the platforms that are supposedly in line with the users' interests. To this end cookies are stored as a rule on the computers of the users in which the user behaviour and the interests of the users are stored. Data independent of the devices used by the users can also be stored in the usage profiles. This occurs in particular if the users are members of the respective platforms and are logged in to them.
For a detailed description of the respective processing and the appeal options, we refer you to the information of the provider linked below.
- Facebook (pages, groups)
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
This is based on an agreement on the joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
- Google/ YouTube
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
(Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
(Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
(XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland)
VII. Zendesk Chat
We use the Zendesk ticketing system, a customer service platform provided by Zendesk Inc., 989 Market Street # 300, San Francisco, CA 94102 to handle customer queries.
Zendesk is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
If you have any questions, you can also contact Zendesk’s Data Protection Officer directly: firstname.lastname@example.org
VIII. Rights of the data subject
You have a right to information about the personal data stored by us. According to the statutory provisions you are also entitled to the correction of incorrect data, blocking, data portability and deletion of your personal data. To do so please send an email to us with the subject line "Privacy".
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the law.
If you have provided your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing performed on the basis of the consent until the revocation is received.
You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.
IX. Storage duration of the personal data
We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection continues to apply. Following the expiry of the retention deadline, the data will be routinely deleted, unless there is a need to initiate a contract or fulfil the contract. Unless the users' data is deleted because they are required for other and legally permissible purposes, their processing will be restricted insofar as this is possible. The data is blocked accordingly if possible and not processed for other purposes. This applies, for instance, to data of users which must be stored for commercial or fiscal law reasons.
X. Security information
We make every effort to store your personal data by making use of all the technical and organisational options available in such a way that the provisions of the data protection acts are observed and thus to protect this data. Our website or the communication via our website with us is encrypted via HTTPS.