Data protection declaration

and at the same time information for affected parties in accordance with Article 13 and Article 14 of the EU General Data Protection Regulation

General information

Information about the responsible body

Company:
HÜFRA GmbH + Co. Technische Federfabrik KG

Legal representatives:
Klaus Hüttelmeyer, Oliver Hüttelmeyer, Michael Feil

Address:
Franken 1, 95163 Weißenstadt

Contact data data protection officer:
datenschutz@huefra-federn.de

General data processing information

Data affected:
Personal data are only collected if you voluntarily provide this information. Apart from this, no personal data are collected. Any processing of your personal data beyond the scope permitted by law only takes place based on your express consent.

Processing purpose:
Execution of the agreement.

Categories of recipients:
Public bodies in case of overriding legal requirements. External service providers or other contractors. Other external parties insofar as the data subject has given their consent or transmission is permitted for reasons of legitimate interest.

Transfers to third countries:
Data processors outside the European Union may be used as part of the execution of the agreement.

Duration of data storage:
The duration of the data storage is based on the statutory storage periods and is generally 10 years.

Specific information about the website

Use of Google Analytics 4

This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables your use of our website to be analysed.

By default, 4 cookies are set by Google Analytics when you visit the website, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude a direct personal reference.

The information is transferred to Google servers and processed there. Transmission to Google LLC, based in the USA, is also possible. Google uses the information collected to analyse the use of the website. These reports on website activity are compiled for the purpose of providing other services relating to website activity and internet usage. The data collected as part of the use of Google Analytics 4 is stored for a period of two months (set or change if necessary) and then deleted. All processing described above, in particular the setting of cookies on the end device used, is only carried out with your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google. (Data Privacy Framework) Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special function “demographic characteristics” and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals will be used on this website to generate cross-device reports. If you have activated personalised ads and have linked your devices to your Google account, Google can analyse your usage behaviour across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR. We only receive statistics from Google. If you wish to stop the cross-device analysis, you can deactivate the “Personalised advertising” function in the settings of your Google account. To do this, follow the instructions on this page:https://support.google.com/ads/answer/2662922?hl Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function will be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analysed across devices. Data transfers to the USA are based on the EU-US Data Privacy Framework.

Use of own “cookies”
This website uses its own “cookies” in order to enhance user-friendliness (“cookies” are data records that are sent by the web server to the browser of the user and saved there for subsequent retrieval). No personal data are saved in our own “cookies”. You can prevent the use of “cookies” by prohibiting the storage of “cookies” in your browser.

Cookie consent with Borlabs Cookie
Our website uses Borlabs Cookie’s cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs). When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the Borlabs cookie provider. The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at:https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. The legal basis is based on your consent (Art. 6 para. 1 lit a) GDPR). You can find more information on the handling of user data in Google’s privacy policy:https://www.google.de/intl/de/policies/privacy/.

Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. For more information about Google reCAPTCHA and Google’s privacy policy, please see the following links:https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Information on further data processing procedures

Specific information on the recruitment process

Data affected:
Application details

Processing purpose:
Implementation of the recruitment process

Categories of recipients:
Public bodies in the case of prevailing legal provisions. External service providers or other contractors. Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest.

Transfers to third countries:
Data processors outside the European Union may be used as part of the execution of the agreement.

Duration of data storage:
Application data will generally be deleted within four months of notification of the decision, unless consent has been given for longer data storage.

Specific information on the processing of customer and prospect data

Data affected:
Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Processing purpose:
Contract execution.

Transfers to third countries:
Data processors outside the European Union may be used as part of the execution of the agreement.

Duration of data storage:
The duration of the data storage is based on the statutory storage periods and is generally 10 years.

Specific information on the processing of employee data

Data affected:
Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Processing purpose:
Contract execution.

Categories of recipients:
Public bodies in case of overriding legal requirements. External service providers or other contractors. Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest.

Transfers to third countries:
Data processors outside the European Union may be used as part of the execution of the agreement.

Duration of data storage:
The duration of the data storage is based on the statutory storage periods and is generally 10 years.

Specific information on the processing of supplier data

Data affected:
Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.

Processing purpose:
Execution of the agreement.

Categories of recipients:
Public bodies in case of overriding legal requirements. External service providers or other contractors.
Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest.

Transfers to third countries:
Data processors outside the European Union may be used as part of the execution of the agreement.

Duration of data storage:
The duration of the data storage is based on the statutory storage periods and is generally 10 years.

Specific information on the use of video conferencing/webinar software

Data affected:
Data provided for the use of the video conference software or the webinar software (in particular first name, surname, email address; optional: audio transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conference software

Processing purpose:
Conducting video conferences and webinars.

Categories of recipients:
Public bodies in case of overriding legal requirements. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies insofar as the data subject has given their consent or transmission is permitted for reasons of overriding interest.

Transfers to third countries:
Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly.

Duration of data storage:
Video conferences will only be recorded with the prior documented consent of the participants. The technical data is deleted if it is no longer required. The duration of data storage is otherwise based on the statutory retention obligations and is generally 10 years.

Further information, contacts and rights

In addition, you can assert your rights to rectification or erasure or to restriction of processing or to exercise your right to object to processing as well as the right to data portability at any time. Here you will find the possibility to contact us by e-mail or letter. You also have the right to lodge a complaint with the data protection supervisory authority.