Data protection statement

1. What is personal data?
   
   "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. 
    

2. Our Handling of Personal Data
   
   Hauff-Technik collects necessary personal data only within the scope of the purposes permitted by you, such as when filling out the contact form. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for its own purposes.
   
   We request personal data if you send us inquiries regarding one of our products or wish to obtain quotes. At a minimum, we require your email address for this. Additional information is required if you order products online and we are to deliver products to you or provide you with a download. However, you can visit all areas of the site without disclosing personal data.
   
   In the case of a newsletter subscription, you will receive information and offers regarding our products and those of our partners. Your address will not be passed on to third parties. In some cases, opening and click behavior is recorded. This data is stored physically separate from personal data. For the rest, we refer to your rights as set out in Section 8 et seq.

   We will use the information provided by you exclusively to process the ordering process and to inform you in the future about further comparable offers, including by email. We do not pass on personal data to unauthorized third parties. 
    

3. What happens to the stored personal data?
   
   We only disclose stored email addresses to third parties if we are compelled to do so by the police or the public prosecutor's office, or if a written or electronic declaration of consent has been provided. Additional personal data that you provide to us in connection with product orders, inquiries, or downloads are stored on secure computers within Germany. We use this data exclusively for the purposes you requested and which were disclosed in advance.
   All employees of Hauff-Technik are committed to data secrecy in accordance with Section 5 BDSG and Art. 29 EU GDPR. We have implemented technical and organizational measures (TOMs) as defined in Section 9 BDSG and Art. 5 (1) (f) EU GDPR to protect your data, and we also ensure that our partners take appropriate measures to safeguard data security. However, if you are redirected to other websites via links on our pages, we cannot control the use of your data. Nevertheless, we urge all our partners to maintain the same level of data protection as we do and to take the necessary measures (technical and organizational).  
    
4. Duration of the storage of personal data
   
   The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of this period, the corresponding data are routinely deleted, provided they are no longer required for the fulfillment or initiation of a contract.
    
5. Collection of general data and information - so-called log data
   
   The website of Hauff-Technik collects a series of general data and information with every access by a data subject or an automated system. This general data and information are stored in the server's log files. The data collected may include (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the internet service provider of the accessing system, and (8) other similar data and information used for danger prevention in the event of attacks on our information technology systems.
   
   When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as the advertisements for it, (3) ensure the long-term functionality of our IT systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
   
   Therefore, this anonymously collected data and information are evaluated by us statistically and, furthermore, with the aim of increasing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
    
6. What are cookies?
   
   We use cookies to optimise the Internet presence of Hauff-Technik UK Limited. Cookies are small text files that can be stored on a website visitor's hard drive.
   
   They allow you to personalise the settings on the website. We also use cookies to analyse the use of the websites in an anonymised or pseudonymised form. In some circumstances, this data can be enriched with additional demographic data (e. g. age and gender) during online surveys. You will also be made aware of this separately during the online survey. You can use our website without cookies but you will not be able to use every function. Most browsers are set to accept cookies automatically. However, you can deactivate the saving of cookies or set your browser to inform you as soon as cookies are sent. Cookies are not programs which means that they cannot cause damage. You can automatically delete cookies by choosing "Disable cookies" or can prevent cookies from being stored on your hard drive by using "Accept no cookies" in your browser settings. This may cause functional limitations when visiting the Internet page. Cookies which are required to perform the electronic communication process or to provide certain functions you require (e. g. shopping cart function) are stored on the basis of Art. 6 I letter f) UK GDPR.
   
   Hauff-Technik UK Limited has a justified interest in storing cookies in order to provide its services optimally without technical errors. If other cookies (e. g. cookies for the analysis of your web surfing activities) are stored, these shall be covered separately in this privacy statement.
   Explanation: Pseudonymisation
   
   Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
    

7. This website uses cookies

   We use cookies to personalise content and advertisements, to offer social media functions and to analyse access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.
   
   We use cookies to personalise content and advertisements, to offer social media functions and to analyse access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.
   
   This site uses different types of cookies. Essential cookies Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

   Name	Provider	Purpose	Sequence	Type
   fe_typo_user	Hauff-Technik UK	Retains the user's statuses for all page requests. Is only used for logged-in users and/or the wish list, not for normal users.	1 month	HTTP Cookie
   htap	Hauff-Technik UK	Anonymous cookie that remembers the status of whether the target group window has been answered. The content of the cookie does not enable the creation of a user profile.	3 weeks	HTTP Cookie

   
   Preference cookies (1)

   Preference cookies allow a website to remember your preferred settings on our website. For example, your preferred language, the pages you like to visit or the region you are in.

   Name	Provider	Purpose	Sequence	Type
   hauffaccept	Hauff-Technik UK	One-time anonymous consent to save a wish list element. The content of the cookie does not enable the creation of a user profile.	6 months	HTTP Cookie
   fe_typo_user	Hauff-Technik UK	Reference to the contents of the wish list for an anonymous user who is not logged in.	1 month	HTTP Cookie

   
   Marketing Cookies (21)

   Marketing cookies follow users to the websites they visit. This makes it possible to publish precisely those adverts on these pages that are relevant and appealing to the individual user.

   Name	Provider	Purpose	Sequence	Type
   _ga	Google	Distinguishes users to calculate visitor data.	1 year	HTTP Cookie
   _ga_<ID>	Google	Maintains session state (session tracking).	1 year	HTTP Cookie
   _gcl_au	Google	Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor's online behaviour across websites.	3 months	HTTP Cookie
   sib_cuid	Brevo	If you subscribe to the newsletter, this cookie allows Hauff-Technik UK Limited to offer you personalised messages and adapt the digital communication strategy taking into account the campaigns carried out.	6 months	HTTP Cookie

    

8. Common Provisions for Google Services (Tag Manager, GA4, Google Ads)
   
   We use various services provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, on our website.
   
   Consent as a Prerequisite (Opt-In Procedure): To protect your privacy, we have configured the technical integration so that all Google services are deactivated by default. This includes Google Tag Manager, Google Analytics 4 and Google Ads:
   
   Data transfer to Google or the placement of associated cookies (e.g., _ga, ga, _gcl_au) only occurs if and when you have explicitly given your consent via our consent banner by clicking the "Accept" button. Without this active action, all scripts remain blocked and no cookies from these services are stored on your terminal device.
   
   - Google Tag Manager: Serves as a control unit to load the services mentioned below only after your consent has been obtained. Legal basis: Art. 6 (1) (a) GDPR.
   
   - Google Analytics 4 (GA4): Creates anonymized statistics about the use of our website. Your IP address is automatically anonymized in this process. Legal basis: Art. 6 (1) (a) GDPR.
   
   - Google Ads: Enables us to measure advertising success (conversion tracking). It records whether you reached us via an advertisement and perform certain actions. Legal basis: Art. 6 (1) (a) GDPR.
   
   Withdrawal of Consent: You can withdraw your consent at any time with effect for the future by adjusting your preferences in your browser settings. Data transfer to the USA is secured by Google's certification under the EU-U.S. Data Privacy Framework. Further information on data use by Google can be found in the Google Privacy Policy at: https://policies.google.com/privacy.
   
    
9. Privacy provisions regarding the deployment and use of Google AdWords
   
   The controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google advertising network. Google AdWords enables an advertiser to pre-define specific keywords, by means of which an ad is displayed in Google's search engine results only when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking the previously defined keywords into account.
   
   The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
   
   If a data subject reaches our website via a Google ad, a so-called conversion cookie is placed on the data subject's IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart of an online shop system, have been accessed on our website.
   
   The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are, in turn, used by us to determine the total number of users who were referred to us via AdWords ads—that is, to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google by which the data subject could be identified.
   
   By means of the conversion cookie, personal information, such as the websites visited by the data subject, is stored. Each time our website is visited, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data collected via the technical procedure on to third parties.
   
   The data subject can prevent the setting of cookies by our website at any time, as already described above, by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from placing a conversion cookie on the data subject's IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.
   
   Furthermore, the data subject has the possibility to object to interest-based advertising by Google. For this purpose, the data subject must access the link www.google.de/settings/ads from each of the internet browsers used and apply the desired settings there.
   
   Further information and Google's applicable privacy policy can be found at https://policies.google.com/privacy?hl=en&gl=en.
    
10. Use of the web analytics service Matomo
    
    You can register for the newsletter free of charge on this website. Hauff-Technik UK Limited uses the service of the German company Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin ("Brevo" or formerly SendInBlue) to send the newsletter. Brevo is a contract data processor - Hauff-Technik has therefore concluded a data processing agreement with Brevo.
    
    When you register for the newsletter, your personal data (e.g. e-mail address and IP address of registration and confirmation) are stored on the server and also transmitted to Brevo. The double opt-in procedure is used to register for the newsletter. This means that after registration, an e-mail is sent to the e-mail address provided to obtain your confirmation. If the registration is not confirmed, the information is blocked and automatically deleted after one month. In addition, the IP address used and the time of registration and confirmation are stored. The purpose of this procedure is to prove your registration and, if necessary, to clarify any possible misuse of personal data.
    
    When sending the newsletter, Hauff-Technik UK Limited uses various Brevo analysis and evaluation functions. Brevo uses a mechanism that makes it possible to determine whether an e-mail has been delivered. This is necessary to maintain business operations. Otherwise, the sending reputation would decrease, which in turn has a direct impact on the delivery rate of the emails sent. More information on this: https://www.brevo.com/de/blog/zustellbarkeit-email-marketing/
    
    For the e-mail analyses, the data mentioned in paragraph 5 and the delivery information are linked to your e-mail address or an individual user ID. Links received in the newsletter also contain this ID. This information can be used to adapt the service to your wishes and thus optimise the newsletter service.
    
    The use of Brevo is based exclusively on your consent. You can revoke this consent at any time. For example, by clicking on the unsubscribe link directly in the newsletter. After unsubscribing, the personal data will be deleted from our server and from the Sendinblue servers.
    
    More information about data processing can be found in Sendinblue's privacy policyhttps://www.brevo.com/de/legal/privacypolicy/ and also on the following information page:https://www.brevo.com/de/informationen-newsletter-empfaenger
     
11. Use of the newsletter analysis service Brevo
    
    On this website, you can subscribe to the newsletter free of charge. For sending the newsletter, Hauff-Technik uses the service of the German company Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin ("Brevo" or formerly SendInBlue). Brevo is a data processor – Hauff-Technik has therefore concluded a data processing agreement with Brevo.
    
    When you register for the newsletter, your personal data (e.g., email address and the IP address of registration and confirmation) are stored on the server and also transmitted to Brevo. For the newsletter registration, the double opt-in procedure is used. This means that after registration, an email is sent to the specified email address to obtain your confirmation. If the registration is not confirmed, the information is blocked and automatically deleted after one month. Furthermore, the IP address used and the time of registration and confirmation are stored. The purpose of this procedure is to provide proof of your registration (Art. 7 (1) GDPR) and, if necessary, to clarify any possible misuse of personal data.
    
    When sending the newsletter, Hauff-Technik uses various analysis and evaluation functions from Brevo. Brevo uses a mechanism that allows it to determine whether an email was delivered. This is necessary to maintain business operations. Otherwise, the sender reputation would decrease, which in turn has a direct impact on the delivery rate of email mailings. More information on this: https://www.brevo.com/en/blog/email-deliverability-best-practices/
    
    For the email evaluations, the data mentioned in paragraph 5 and the delivery information are linked with your email address or an individual user ID. Links contained in the newsletter also include this ID. With this information, the service can be adapted to your wishes, thus optimizing the newsletter service.
    
    The use of Brevo is based exclusively on your consent. You can withdraw this consent at any time. For example, by clicking the unsubscribe link directly in the newsletter. After unsubscribing, the personal data will be deleted from our server and from the Sendinblue servers.
    
    Further information about data processing can be found in Brevo's privacy policy at https://www.brevo.com/en/legal/privacypolicy/ and also on the following information page: https://www.brevo.com/en/information-for-newsletter-recipients
     
12. Use of Dealfront technology:
    
    Our website uses technologies from Dealfront (Liidio Oy as part of the Dealfront Group GmbH) ("Dealfront") to analyze visitor behavior. In this process, a visitor's IP address is processed. Specifically, the IP address is processed to help us understand which companies (B2B) are visiting our website. As part of this processing, the IP address is enriched with associated information such as the company name or industry code. For this purpose, at the beginning of the session, the website visitor's IP address and the corresponding session data are matched against an extensive whitelist of known companies.
    
    To increase the privacy of our visitors, we have enabled "IP address anonymization," so that only truncated values are stored and shared with Dealfront instead of the actual IP addresses. When this function is activated, we do not store the actual IP address anywhere in our systems, including the logs. This anonymization makes it impossible to subsequently establish a connection to external IP address information, thereby preventing the identification of an individual person.
    
    As part of this processing, so-called first-party cookies from Dealfront are used to analyze visitor behavior. Insofar as we process personal data in this context, this is done on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) in optimizing our products, services, sales, and marketing. To prevent this processing, website visitors can install and configure corresponding ad blockers or use no-script plugins in their browser.
    
    The data will be deleted as soon as they are no longer required for the intended purposes. However, statutory retention obligations may potentially lead to a longer retention period for the data in question. We have concluded a data processing agreement with Dealfront to ensure compliance with applicable data protection standards.
     
13. Application Procedure
    
    We would like to point out that we cooperate with the company Rexx-Systems. For further information, you can use the following link: https://www.rexx-systems.com/datenschutz.php
    
    Should you send documents containing personal data to us via our career page as an applicant, we ensure that this is done securely and that your data is only accessed by authorized persons.
    
    Please note that we use the personal data received only for the purpose of the application and will under no circumstances disclose it to unauthorized third parties for advertising or other purposes.
    
    Furthermore, we will only store your personal data for the duration of the application process, unless statutory regulations require retention or you yourself permit us to continue storing it, e.g., to consider you for future vacancies.
    
    The legal basis for processing is considered to be both your consent within the meaning of Art. 6 (1) (a) in conjunction with Art. 4 (11) GDPR, as well as Art. 6 (1) (b) GDPR.
    
    Naturally, you are also entitled to the rights mentioned in Section 12 of this privacy policy, as well as the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, and your rights to data portability pursuant to Art. 20 GDPR, subject to the restrictions of §§ 34, 35 BDSG-new (German Federal Data Protection Act).
     
14. Privacy Policy Supplement for our Social Media Pages
    
    In the following, we would like to inform you about the handling of your data in accordance with Art. 13 General Data Protection Regulation (GDPR).
    
    We, Hauff-Technik, operate the following social media pages:
    
    Facebook: https://www.facebook.com/haufftechnik/
    YouTube: https://www.youtube.com/user/HauffTechnik
    XING: https://www.xing.com/pages/hauff-technikgmbh-co-kg
    kununu: https://www.kununu.com/de/hauff-technik2
    LinkedIn: https://www.linkedin.com/company/hauff-technik
    Instagram: https://www.instagram.com/haufftechnik/
    
    Our contact details can be found in our legal notice (Impressum).
    
    In addition to us, there is the operator of the social media platform itself. This operator is also a separate controller who carries out data processing over which we have only limited influence. Where we can exercise influence and parameterize data processing, we work within the scope of the possibilities available to us to ensure that the platform operator handles data in compliance with data protection regulations. However, in many areas, we cannot influence the data processing by the operator and do not know exactly which data they process.
    
    Data processing by Hauff-Technik
    
    The data you enter on our social media pages, such as comments, videos, images, likes, public messages, etc., are published by the social media platform and are never used or processed by us for other purposes. We merely reserve the right to delete content should this be necessary. Where applicable, we share your content on our page if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 (1) sentence 1 (f) GDPR. Data processing is carried out in the interest of our public relations and communication.
     
15. Liability
    
    We assume no responsibility or liability for the offerings of third-party websites. However, we will in all cases endeavor to ensure that our partners consider privacy policies comparable to our own. We assume no responsibility for the content of external links.
     

16. Your Rights as a User
    
    When your personal data is processed, the GDPR grants you as a website user certain rights:
    
    Right of Access (Art. 15 GDPR):
    
    According to § 34 BDSG and Art. 15 GDPR, you have a right of access. A refusal to provide information about the origin and recipients of the data will only occur if the interest in maintaining business secrets outweighs your interest in information.
    
    You can request information about the data stored about you at any time and free of charge. The information will be provided promptly in accordance with data protection regulations and will include the data stored about you, including its origin, the recipient or categories of recipients to whom the data is disclosed, and the purpose of storage.
    
    Information is provided by our Data Protection Officer:
    RA Markus Wiese, Donnersbergstraße 9, 80634 Munich
    Tel.: 089/391019, FAX: 089/393998
    
    For questions regarding access as well as the assertion of the right to object, or for the rectification, erasure, or blocking of your data, simply send an email to: datenschutz@wieseundwiese.de. We reserve the right to provide information or answer questions electronically.
    
    If you have further questions regarding data protection, please also contact datenschutz@wieseundwiese.de. We reserve the right to change this privacy policy at any time in compliance with legal requirements.

    Right to Rectification and Erasure (Art. 16 and 17 GDPR):
    
    You have the right to demand the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.
    
    You also have the right to demand that personal data concerning you be erased immediately, provided that one of the reasons listed in Art. 17 GDPR applies, e.g., if the data is no longer required for the intended purposes.
    
    Right to Restriction of Processing (Art. 18 GDPR):
    
    You have the right to demand the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g., if you have objected to the processing, for the duration of any assessment.
    
    Right to Data Portability (Art. 20 GDPR):
    
    In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to demand the transmission of this data to a third party.
    
    Right to Object (Art. 21 GDPR):
    
    If data is collected on the basis of Art. 6 (1) (f) (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or if the processing serves the establishment, exercise, or defense of legal claims.
    
    You can object to the further use of your personal data for the future at any time. To do so, you must provide valid proof that you are the owner of the data. To assert your right to object, an email to the following address is sufficient: datenschutz@wieseundwiese.de. We will then process the objection immediately. In this case, we will include your personal data in our "advertising block list" to ensure that no further advertising occurs in the future. If erasure is explicitly requested, this can also be carried out; however, it can then not be guaranteed that you will not receive advertising if new address databases are acquired.
    
    Right to Lodge a Complaint with a Supervisory Authority
    
    According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection provisions. The right to lodge a complaint may be asserted in particular with a supervisory authority in the Member State of your place of residence, your place of work, or the place of the alleged violation.

17. Name and address of the data protection officer
    
    The data protection officer of the controller is
    
    Markus Wiese, lawyer, Donnersbergstraße 9, 80634 Munich
    Phone: 089/391019, e-mail: datenschutz@wieseundwiese.de, website: https://wieseundwiese.de/
    
    Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.