Data Privacy Statement
(As at 25. May 2018)
We are pleased that you are visiting our website and about your interest shown in our company. The protection of your personal data is important to us. On the following pages we would like to inform you, pursuant to Art. 12, 13 and 21 of the General Data Protection Regulation (GDPR) about the handling of your personal data during the use of our website www.werk-eins.net
Personal data is specific information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as the person’s civil name, address, telephone number and date of birth.
Heinrich Georg GmbH Maschinenfabrik
Langenauer Straße 12
Telephone: +49 2732 779-0
Fax: +49 2732 779-340
II. Data protection officer
Data protection officer of Heinrich Georg GmbH
– Maschinenfabrik –
Langenauer Strasse 12,
57223 Kreuztal , or at the
e-mail address: firstname.lastname@example.org
III. Purposes and legal bases of data processing
1.) Informational use of the website
You can visit our website without disclosing any personal information. In this case we will not process any personal data, with the exception of data that is sent by your browser to allow you to visit the website and information that is transmitted to us in the context of cookies used for the statistical analysis of the use of our website.
a.) Technical provision of the website
For the purpose of the technical provision of our website, it is necessary for us to process certain automatically transmitted information from you so that your browser can display our website and you can use it. This information will be automatically recorded each time our website is visited and stored in our server log files. This information relates to the system of the accessing computer. The following information will be collected:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Volume of data transmitted in each case
- Website from which the request is sent
- Operating system and its user interface
- Language and version of the browser software
- Transient cookies (see a)
- Persistent cookies (see b).
Transient cookies are deleted automatically when you close your browser. These include session cookies in particular. These cookies save a so-called session ID, which is used to assign different requests from your browser to a session. This allows your computer to be recognised when you return to our site. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. You can delete cookies at any time in your browser security settings.
We process your personal data for the technical provision of our website on the following legal bases:
- To fulfil a contract or to conduct pre-contractual measures in accordance with Art. 6 para. 1 lit. b of the GDPR, insofar as you visit our website to get information about our products; and
- To safeguard our legitimate interests in accordance with Art. 6, para. 1, lit. f of the GDPR so that we can ensure technical provision of the website to you. We have a legitimate interest in being able to provide you with an appealing, technically functional and user-friendly website, as well as to take measures to protect our website against cyber risks and prevent cyber risks that emanate from our website for third parties.
b.) Statistical analysis of the use of the website and reach increase
To enable statistical analysis of the use of our website, we use Google Analytics along with cookies, which enable your surfing behaviour to be analysed. This allows us to improve the quality of our website and its content. We learn how the website is used and can therefore continually optimise our offer.
The information obtained in the context of the statistical analysis of our website will not be merged with your other data collected in the context of the website.
We process your personal data for the statistical analysis of the use of our website on the following legal bases:
- Your consent in accordance with Art. 6 para 1 lit a) of the GDPR:
On our website we use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses “cookies”, text files that are stored on your computer and enable your use of the website to be analysed. Normally, the information generated by the cookie concerning your use of our website will be transmitted to a Google server in the USA and stored there. In case IP-anonymisation is activated on our website, your IP address will be truncated by Google beforehand within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. In exceptional cases only, the whole IP address will be transferred to a Google server in the USA and truncated there. Google will, on our behalf, use this information in order to evaluate your use of the website, put together reports on website activities and provide the website operator with other services relating to website and internet usage. Google will not associate your IP address with any other data held by Google.
On our website we use Google Analytics with the extension “_anonymizeIp()”. This ensures that IP addresses are only processed further in truncated form to prevent them being directly linked to a particular individual.
We will only use Google Analytics with your consent. You can withdraw your consent by:
- Downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout
- Clicking on this link to prevent collection by Google Analytics on our website in the future. This will place an opt-out cookie in your browser. Please note that you need to activate the opt-out cookie in every browser on every terminal you use and may also need to reactivate it if you delete all cookies in a browser.
We use Google Maps to display interactive maps and provide route descriptions. Google Maps is a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Through the use of Google Maps, information concerning the use of the website (including IP address and the (start) address entered in the context of the route planner function) may be transferred to a Google server in the USA. When you visit a page of our website containing Google Maps, your browser will establish a direct connection to the Google servers. The map content will be transmitted by Google directly to your browser and be integrated into the website by your browser. We therefore have no influence on the amount of data collected by Google in this way. According to our knowledge, this data includes at least the following:
- The date and time the page in question was visited
- The internet address or URL of the visited webpage,
- IP address, (start) address entered for route planning.
Information on the purpose and scope of the collection of data by Google, and on the further processing and use of data by Google, as well as on your rights in this connection and the setting options for the protection of your privacy can be gathered from Google’s Data Privacy Notices at https://policies.google.com/privacy?hl=de.
2.) Active use of the website
In addition to the purely informative use of our website, you can also actively use our website in order to sign up for our newsletter or get in contact with us. In addition to the above processing of your personal data in the case of purely informative use, we also process other personal data from you in this case, which we need in order to process and respond to your request.
a) User requests
In order to process and respond to your requests sent to us via the contact form or our e-mail address for example, we process the personal data disclosed by you in this context. This always includes your name and your e-mail address for the purpose of sending you a reply, as well as the other information you send to us in the context of your disclosure.
We process personal information in order to respond to user requests on the following legal bases:
- To safeguard our legitimate interests in accordance with Art. 6 Para. 1 lit. f of the GDPR; our legitimate interest consists in the appropriate response to customer requests.
b) Sending an application
We process your personal data in the context of your application, insofar as you provide us with such data. There may be special categories of personal data in the application documents.
Processing of personal data
The applicant data generally includes the following: First and last name, your academic degree (where applicable), date and place of birth, contact information (address, e-mail, telephone and/or mobile phone number), application documents (motivation letter, CV, certificates), language skills and other skills. In addition, we process the data that you provide to us in the context of e-mail contact.
We take the personal data provided by you, within the scope of legal requirements, as a basis for our decisions in the application process. For example, we use your professional qualifications to help decide whether to shortlist you for the job, or use a personal impression in an interview to help decide whether to offer you the position you have applied for.
In doing so, we process your personal data on the following legal bases:
- Data processing for the decision on the establishment of an employment relationship, Art. 88 para. 1 of the GDPR in conjunction with Section 26 para. 1 sentence 1 of the Federal Data Protection Act (BDSG).
Processing of special personal data
Special categories of personal data in accordance with Art. 9 of the GDPR include personal data revealing the racial or ethnic origin, political opinions, religious (e.g. information about religion/denomination) or philosophical beliefs or trade-union membership, as well as the processing of biometric data for unique identification (e.g. photos), health data (e.g. information on degree of disability) or data about sex life or sexual orientation. If your CV contains special categories of personal data, we will not collect such data intentionally. We specifically ask you not to send us any such data.
Should you, voluntarily and contrary to our specific request, provide us with special categories of personal data in accordance with Art. 9 para. 1 of the GDPR (e.g. your photo or information about your religion/denomination) as part of your application documents, we will save this based on your consent pursuant to Art. 88 para. 1 of the GDPR in conjunction with Section 26 para. 3 sentence 2 of the Federal Data Protection Act (BDSG). This also applies where you send us further special personal information in the course of the application procedure. By voluntarily transmitting this data, you are consenting to the storage of this special personal data in the context of the application process.
We will not take this special personal data into account for a selection decision, unless it is required to take such special personal data into account based on legal obligations. For example, it may be that people with disabilities receive preferential treatment for some job vacancies in compliance with the applicable laws. The information provided in these cases is always given on a voluntary basis and with the express consent given by you through the voluntary transmission of such data.
We process your special personal data on the following legal bases:
- In accordance with Art. 9 para. 1 of the GDPR based on your consent pursuant to Art. 88 para. 1 of the GDPR in conjunction with Section 26 para. 3 sentence 2 of the Federal Data Protection Act (BDSG).
c) Compliance with legal requirements
We also process your personal data to meet any other legal obligations that affect us in connection with the execution of the order. This includes in particular retention periods based on trade, commercial or tax law.
In doing so, we process your personal data on the following legal bases:
- In order to meet a legal obligation to which we are subject in accordance with Art. 6 para. 1 lit. c of the GDPR in conjunction with trade, commercial or tax law, insofar as we are obligated to record and retain your data.
d) Law enforcement
We also process your personal data to enable us to assert our rights and enforce our legal claims. We equally process your personal data in order to be able to defend ourselves against legal claims. Lastly, we process your personal data where necessary for the purpose of preventing or prosecuting criminal offences.
We process your personal data for this purpose on the following legal bases:
- To safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f of the GDPR, where we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences.
e) Advertising purposes, e.g. newsletters, surveys, etc..
With your consent, we will use your data for advertising purposes, such as for sending our newsletter, for advertising surveys or for inviting you to events that may be of interest. In doing so, we process mandatory information such as your e-mail address as well as information you provide to us on a voluntary basis. We use the information provided voluntarily in order to make our products and website customer-friendly for you, to address you in an individualized manner in the future, to analyse your preferences and inform you about the products that suit you best and to make advertising more useful and interesting to you. You can unsubscribe to the notifications at any time in your user account or by clicking on the unsubscribe link in the newsletter and following the instructions.
We also use existing information for this purpose, such as e-mail receipt and read confirmations, information about your computer and internet connection, operating system and platform, your order history, your request history, the date and time of your website visit and the products you have looked at. We only use this information in pseudonymised form. The analysis and evaluation of this information makes it possible for us to improve our website and our services offered, as well as to send you individual advertising.
The evaluation and analysis of this data helps us to avoid randomly sending you advertising. Instead, we send you e-mail or mail advertising (e.g. newsletters, product recommendations or invitations) that corresponds to your areas of interest. And so it is looked for example at which of our promotional emails you open in order to avoid unnecessary e-mails being sent to you. If you provided us with your e-mail address in connection with the purchase of goods or services, this address may then be used by us to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.
We use your personal data for the sending of newsletters, surveys, etc. and the personalization of the addressing on the following legal basis:
- Where you have given us your consent by double opt-in in accordance with Art. 6 para. 1 lit. a of the GDPR;
- Where you have provided us with your e-mail address in connection with the purchase of goods or services or we send you personalized advertising, in order to protect our legitimate interests in accordance with Art. 6 para. 1 lit. b of the GDPR in conjunction with Section 15 para. 3 of the German Telemedia Act (TMG) in conjunction with Section 7 para. 3 of the German Act on Unfair Competition (UWG); our legitimate interest is based on our economic interests in the implementation of advertising measures and target group oriented advertising.
f.) Use of data for e-mail advertising and your right of objection
If we receive your e-mail address in connection with the conclusion of contract and the provision of our products and you have not objected, we reserve the right to provide you with regular offers regarding similar products from our range by e-mail. You can object to this use of your e-mail address at any time by sending a message to the contact detailed below or via a designated link in the advertising mail, without incurring any costs other than the cost of transmission according to the basic rates.
Some sections of our webpages contain links to third party webpages. These webpages are subject to their own principles of data protection. We are not responsible for the operation, including data handling, of such webpages. If you are looking for information on or through any such third party webpages, you should check the data privacy statements of these pages before providing them with information that can be assigned to your person.
The website provides links to, among other things, services such as Facebook, YouTube and kununu. After clicking on the link you will be redirected to the page of the respective provider, i.e. the user information will only then be transmitted to the respective provider. Please refer to the data protection notices of other providers for information about the handling of your data when using their respective websites.
V. Categories of recipients
Initially, it is only our employees who obtain knowledge of your personal data. We also share your personal data, where legally permitted or required, with other recipients who provide services for us in connection with our website. We restrict the disclosure of your personal data to what is necessary, and in particular for the purpose of processing your order. In some cases, our service providers receive your personal data as processors and are then strictly bound to our instructions when handling your personal data. In other cases, the recipients act independently with your data which we send to them.
The categories of recipients of your personal data are listed below:
- Where appropriate, payment service providers and banks, during the execution of the payment,
- External service providers for sending invoices by post,
- Logistics service providers for delivering the goods to you,
- IT service providers for the administration and hosting of our website,
- Debt collection companies and legal advisors for the assertion of our claims
- Where appropriate, additional categories of recipients.
VI. Third-country transfer
In the context of the use of Google tools, we transfer your shortened IP address to the USA. The data transfer is based on the Implementing Decision (EU) 2016/1250 of the EU Commission from 12th July 2016 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection offered by the EU-US Privacy Shield.
Otherwise, we do not transfer your personal information to countries outside the EU/EEA or to international organisations.
VII. Duration of storage
1.) Informational use of the website
Where our website is used on a purely informative basis, we only store your personal data on our servers for the duration of your visit on our website. Once you have left our website, your personal data will be deleted immediately.
Cookies installed by us are usually also deleted after you have left our website. This does not apply to persistent cookies however. These are stored for a period of 26 months. In addition, you have the option at any time to delete installed cookies yourself.
2.) Active use of the website
Where there is an active use of our website, we initially store your personal data for the duration of our responding to your request or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.
We then additionally store your personal data until any legal claims arising from the relationship with you lapse, in order to use it as evidence where necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.
Upon the lapse coming into effect, we will delete your personal data unless there is a legal retention obligation, stipulated for example by the German Commercial Code (Sections 238, 257, para. 4 HGB) or by the German Tax Code (Article 147, paragraph 3, 4 AO). These retention obligations may range from two to ten years.
VIII. Your rights as a data subject
Under the legal prerequisites, you have the following rights as a data subject which you can assert against us:
Right of access: You are entitled at any time under Art. 15 of the GDPR to demand a confirmation from us as to whether we process personal data concerning you; if this is the case, you shall also have the right under Art. 15 of the GDPR to obtain access to such personal data as well as to receive certain other information (including purposes of processing, categories of personal data, categories of recipients, planned storage duration, the origin of the data, the use of an automated decision-making and where there is a third country transfer, the appropriate guarantees) and a copy of your data.
Right to rectification: You are entitled in accordance with Art 16 of the GDPR to demand that we rectify the personal data stored about you if it is inaccurate or incorrect.
Right to erasure: Under the prerequisites of Art. 17 of the GDPR, you have the right to demand that we delete personal data concerning you without delay. There is no right to erasure where, for example, the processing of personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) for fulfilling a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the establishment, exercise or defence of legal claims.
Right to restriction of processing: Under the prerequisites of Art. 18 of the GDPR, you have the right to demand that we restrict the processing of your personal data.
Right to data portability: Under the prerequisites of Art. 20 of the GDPR, you have the right to demand that we give you the personal data you have provided to us, in a structured, common and machine-readable format.
Right of withdrawal: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
Right to object: Under the prerequisites of Art. 21 of the GDPR, you have the right to object to the processing of your personal data, in which case we would have to stop processing your personal data. The right of objection is only possible within the limits provided for in Art. 21 of the GDPR. Moreover, our interests may stand in the way of putting an end to the processing, meaning that we would have the right, in spite of your objection, to process your personal data.
Right to lodge a complaint with a supervisory authority: Under the prerequisites of Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
State Commissioner for the Protection of Data and Freedom of Information of North Rhine-Westphalia
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
However, we recommend that you always send a complaint to our data protection officer first.
Your requests to exercise your rights should, where possible, be sent in writing to the above address or to our data protection officer directly.
IX. Scope of your obligations to provide data
You are not obligated to provide us with your personal data. However, if you do not do so, we will not be able to provide our website to you, respond to the requests you send to us or enter any contract with you. Personal data that is not essential for the above processing purposes is marked as optional with “where appropriate/necessary” or another indicator.
X. Automated decision-making / profiling
We do not use automated decision-making or profiling (automated analysis of your personal circumstances).
We reserve the right to change this data privacy statement at any time. Any changes shall be announced through publishing the amended data privacy statement on our website. Unless otherwise provided for, such changes will take effect immediately. Please therefore check this data privacy statement regularly to view the latest version.
Cookies are small text files that can be used by websites to make a user’s experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Please state your consent ID and date when you contact us regarding your consent.
Your consent applies to the following domains