Data protection declaration

a) Introduction

We take the protection of your data very seriously and strictly comply with the applicable rules of the data protection laws. Personal data are only collected on this website to the degree necessary for technical and organisational reasons. Under no circumstances are your data passed on to third parties. The following declaration provides you with an overview of how we ensure the protection of your personal data and what type of data is collected for what purpose.

To ensure the security of your data during the transfer process, we also use state-of-the-art SSL/TLS encryption methods.

b) Responsible authority, data protection officer

The responsible person in line with the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is:

Martin Höhn GmbH
Siemensstraße 13
72348 Rosenfeld
+49 (0) 742 893 84-0
info@hoehn-praezision.de
www.hoehn-praezision.de

Represented by Managing Director Reiner Höhn

Data protection officer

The data protection officer of the responsible person is:
Daniela Höhn
datenschutz@hoehn-praezision.de

Those affected can contact our data protection officer directly with all questions on data protection at any time.

c) General information on data processing

Scope of the processing of personal data

We generally only process the personal data of our users to the degree necessary in order to provide a functional website and our content and services. Processing of the personal data of our users only occurs periodically after consent has been granted by the user. An exception is made in those cases in which it is not possible to obtain consent beforehand for factual reasons and processing of the data is permitted by statutory provisions.

Legal basis for the processing of personal data

To the extent that we obtain consent of the person concerned for processing procedures of personal data, Art. 6 Para. 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data required for the fulfilment of a contract whose contractual party is the person concerned, Art. 6 Para. 1 Letter b of the GDPR serves as the legal basis. This also applies for processing procedures required in order to carry out pre-contractual measures.

To the extent that the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 Letter c of the GDPR serves as the legal basis.

Should vital interests of the person concerned or another natural person make the processing of personal data necessary, Art. 6 Para. 1 Letter d of the GDPR serves as the legal basis.

If processing is required to protect a legitimate interest of our company or third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former, Art. 6 Para. 1 Letter f of the GDPR serves as the legal basis for processing.

Deletion of data and storage duration

The personal data of the person concerned are deleted or blocked as soon as the purpose for saving them no longer exists. Saving can also occur if this is designated by European or national legislators in Union regulations, laws or other provisions to which the responsible person is subject. The data are also blocked or deleted if a storage period designated by the standards named elapses unless there is a necessity to continue saving the data for contract conclusion or contract fulfilment.

d) Creation of log files

Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the accessing computer. The access logs of the web server log those pages which were called up and at what time. They contain the following data: IP, directory protection user, date, time, pages called up, protocols, status code, data volume, referring site, user agent and called host name.
The IP addresses are saved anonymised here. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are retained for 60 days. Information on the directory protection user utilised are anonymised after one day.
Error logs, which log failed page views, are deleted after seven days. In addition to error messages, they contain the accessing IP address and, depending on the error, the calling website.

These data are not saved together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of the data and log files is Art 6 Para. 1 Letter f of the GDPR.

Purpose of data processing

The IP address is saved in log files to ensure the functionality of the website. We also use the data to optimise the website and ensure the security of our information technology systems. Evaluation of the data for marketing purposes does not occur in this context.

For these purposes, our legitimate interest in data processing is also based on Art 6 Para. 1 Letter f of the GDPR.

Duration of storage If the data are saved in log files, this is the case after no later than 90 days.

Option to object and eliminate data

The collection of data for the provision of our website and saving of the data in log files is absolutely necessary for the operation of the Internet site. Consequently, the user does not have the option to object.

e) Use of cookies

Description and scope of data processing

Our website uses cookies. Cookies are text files saved in the Internet browser or by the Internet browser on the computer system of the user. When a user calls up a website, a cookie can be saved on the operating system of the user. This cookie contains a characteristic character sequence which enables the unique identification of the browser when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our Internet site also require the calling browser to be identifiable after a page change.

On our website, we also use cookies which enable analysis of the surfing behaviour of the user. The user data collected in this way are pseudonymised using technical measures. For this reason, assignment of the data to the calling user is no longer possible. The data are not saved together with other personal data of the user.
When calling up our website, users are informed of the user of cookies for analysis purposes by an info banner and are referred this data protection declaration. Information on how the saving of cookies can be suppressed in the browser settings is also displayed in this regard.

When calling up our website, the user is informed of the use of cookies for analysis purposes and their consent to the processing of personal data used in this regard is obtained. The user is also made aware of this data protection declaration in this regard.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 Letter f of the GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 Letter f of the GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes when the consent of the user in this regard has been obtained is Art. 6 Para. 1 Letter a of the GDPR.

Purpose of data processing

The purpose of using technically necessary cookies is to simplify use of the website for the user. Some functions of our Internet site cannot be offered without the use of cookies. For these functions, it must also be possible to recognise the browser after a page change.
The user data obtained using technically necessary cookies are not used for the creation of user profiles.
The use of analysis cookies occurs for the purpose of improving the quality of our website and its content. Analysis cookies tell us how the website is being used, which enables us to continually optimise our offering.
For these purposes, it is also in our legitimate interest to process personal data as per Art. 6 Para. 1 Letter f of the GDPR.

Duration of storage, option to object and eliminate

Cookies are saved on the computer of the user and transferred from there to our site. For this reason, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, it may no longer be possible to fully utilise all the functions of the website.

Consent Management Platform

The “Usercentrics Consent Management Platform” is used for the management of cookies on the website.

This is a consent management service.

Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

Purposes of data processing

  • Compliance with statutory obligations
  • Saving of consent

Technologies used

  • Local storage
  • Cookies

Data attributes

  • Consent, “yes” or “no”
  • Log files (IP (anonymised))

Collected data
This list contains all (personal) data collected by or through the use of this service.
The requesting URLs of the website and the site path of the website are data collected via the tag logger. The tag logger is always active and keeps track of the active technologies. Users then only have access to these data if the tag logger function has been activated for it. Data are also transferred if the function is not activated.

  • Device information
  • Browser information
  • Anonymised IP address
  • Opt-in and opt-out data
  • Date and time of the visit
  • Request URLs of the website: Site path of the website
  • Geographic location

Legal basis
The required legal basis for processing personal data according to Art. 6 I 1 of the GDPR is named in the following.
Art. 6 Para. 1 Sentence 1 Letter c of the GDPR

Location of processing
European Union (consent database is located in Belgium)

Retention period
The consent data (granted consent and withdrawal of consent) are retained for 3 years. The data are exported following termination of the contract.

Data recipient
Usercentrics GmbH

Data protection officer of the processing company
The following is the e-mail address of the data protection officer of the processing company.
datenschutz@usercentrics.com

Additional information and opt-out
Click here to read the data protection provisions of the data processor https://usercentrics.com/privacy-policy/

f) Contact form and e-mail contact

Description and scope of data processing

Our Internet site features a contact form which can be used to make contact electronically. Should a user utilise this option, the data entered in the input mask are transferred to us and saved. These data include:

surname, given name, company, e-mail address and telephone number

When the message is sent, the date and time are also saved.

In order to process the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.

Alternatively, contact can be made using the e-mail address provided. In this case, the personal data of the user transferred with the e-mail are saved. Please note, however, that the confidentiality of e-mails and other electronic forms of communication on the Internet is generally not guaranteed. Should you wish to send confidential information, we recommend that you sent it by conventional post for this reason.

In this connection, the data are not passed on to third parties. The data are used solely for the purpose of the conversation.

Legal basis for data processing

The legal basis for processing the data with the consent of the user is Art. 6 Para. 1 Letter a of the GDPR.

The legal basis for processing the data transferred when an e-mail is sent is Art. 6 Para. 1 Letter f of the GDPR. If e-mail contact is targeted toward the conclusion of a contract, an additional legal basis for processing is Art. 6 Para. 1 Letter b of the GDPR.

Purpose of data processing

The processing of personal data from the input mask by us solely serves the purpose of responding to your contact initiation. Should contact be made by e-mail, we also have a required legitimate interest in processing the data here.

Other personal data processed during the sending process are utilised to prevent misuse of the contact form and ensure the security of our information-technology systems.

Duration of storage

The data are deleted as soon as they are no longer required to serve the purpose of their collection. For the personal data from the input mask of the contact form and any sent by e-mail, this is the case if the respective conversation with the user has ended. The conversation has ended when it can be established from the circumstances that the matter concerned has been conclusively clarified.

Additional personal data collected during the sending process are deleted no later than after a period of 7 days.

Option to object and eliminate

The user has the option to withdraw their consent to the processing of personal data at any time. Should the user contact us by e-mail, they can object to the saving of their personal data at any time. In such cases, the conversation cannot be continued.
The user also has the option to object to the saving of their personal data by conventional post.
All personal data saved as part of the contact-making process are deleted in this case.

g) Application form

Description and scope of data processing

Our Internet site features an application form which can be used for the electronic transmission of application documentation. Should a user utilise this option, the data entered in the input mask are transferred to us and saved. These data include:
Personal data: gender, surname, given name, street/building number, post code, city and e-mail address
A cover letter, CV and references can also be sent as an attachment.
When the message is sent, the following data are also saved:
– Date and time of contact
For the processing of data as part of the sending process, your consent is obtained and reference is made to this data protection declaration.

Legal basis for data processing

The legal basis for processing the data with the consent of the user is Art. 6 Para. 1 Letter a of the GDPR.
The legal basis for processing the data transferred when an e-mail is sent is Art. 6 Para. 1 Letter f of the GDPR. If e-mail contact is targeted toward the conclusion of a contract, an additional legal basis for processing is Art. 6 Para. 1 Letter b of the GDPR.

Purpose of data processing

The processing of personal data from the input mask by us solely serves the purpose of responding to your contact initiation. Should contact be made by e-mail, we also have a required legitimate interest in processing the data here.
Other personal data processed during the sending process are utilised to prevent misuse of the contact form and ensure the security of our information-technology systems.

Duration of storage

The data are deleted as soon as they are no longer required to serve the purpose of their collection. For the personal data from the input mask of the application form, this is the case when the application process is complete.

Option to object and eliminate

The user has the option to withdraw their consent to the processing of personal data at any time. In such cases, application processes cannot be continued.

h) Disclosure of personal data to third parties

Website analysis

Google Analytics

General procedure for use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). Usage includes the Universal Analytics mode of operation. This makes it possible to assign data, sessions and interactions to a pseudonymous user ID across multiple devices to analyse the activities of a user across devices.

Google Analytics uses so-called cookies, i.e. text files saved on your computer which enable analysis of the website use by you. Information on your use of this website generated by the cookie is generally transferred to a serer of Google in the USA and saved there.

Should IP anonymisation be activated on this website, your IP address will however be concatenated beforehand by Google within member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the entire IP address transferred to a Google server in the USA and concatenated there. The IP address transferred from your browser as part of Google Analytics is not combined with other data by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities and provide additional services related to Internet use to the website operator. We also have a legitimate interest in data processing for this purpose.

The legal basis for the use of Google Analytics is Section 15 Para. 3 of the German Telemedia Act and Art. 6 Para. 1 Letter f of the GDPR. Data sent by us which is linked to cookies, user identification or advertising identification are deleted automatically after 14 months. Data whose retention period has expired are deleted automatically once per month.
More detailed information on usage conditions and data protection can be found at https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

You can prevent the storage of cookies with a corresponding setting in your browser software. We would like to point out, however, that you may not be able to utilise the full functionality of this website in this case. You can also prevent collection of the data generated by the cookie based on your use of the website (incl. your IP address) by Google and the processing of these data by Google by downloading and installing the “Browser add-on for deactivating Google Analytics” provided by Google (https://tools.google.com/dlpage/gaoptout?hl=de).

Opt-out cookies prevent the future collection of your data when visiting this website. To prevent collection via Universal Analytics across different devices, you must opt out on all systems used. Clicking here sets the opt-out cookie: Deactivate Google Analytics

Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.

i) Deletion and management of cookies

j) Rights of the person concerned

Right to information

You can request that the person responsible provide you with confirmation of whether personal data concerning you are being processed by us.
Should such processing be carried out, you can request the following information from the person responsible:

  1. the purposes for which the personal data are being processed;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data concerning you were disclosed or are being disclosed;
  4. the planned duration of saving of the personal data concerning you or, should specific information not be possible in this regard, criteria for specification of the storage duration;
  5. the existence of a right to correction or deletion of the personal data concerning you, a right to restriction of processing by the responsible person or a right to object to this processing;
  6. the existence of a right to appeal to a regulatory authority;
  7. all available information on the origin of the data if the personal data are not being collected from the person concerned;
  8. the existence of automatic decision making, including profiling, in accordance with Art. 22 Para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and desired effects of this type of processing for the person concerned.

You have the right to request information on whether the personal data concerning you are transferred to a third country or an international organisation. In this regard, you can request information on the applicable guarantees in accordance with Art. 46 of the GDPR in connection with this transfer.

Right to correction

You have the right to correction and/or completion by the person responsible if the processed personal data concerning you are incorrect or incomplete. The responsible person must carry out the correction immediately.

Right to restriction of processing

Under the following requirements, you can request restrictions to processing of the personal data concerning you:

  1. if you are disputing the correctness of the personal data concerning you for a period of time enabling the responsible person to check the correctness of the personal data;
  2. processing is unlawful and you reject deletion of the personal data and instead request restriction of use of the personal data;
  3. the responsible person no longer requires the personal data for the purpose of processing, but you require it for the assertion, exertion or defence of legal claims or
  4. if you have entered an objection to processing in accordance with Art. 21 Para. 1 of the GDPR and it has not yet been determined whether the legitimate reasons of the responsible person outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data – irrespective of their being saved – may only be processed with your consent or for the assertion, exertion or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a member state.
If restriction of processing was restricted according to the requirements named above, you will be notified by the responsible person before the restriction is lifted.

Right to deletion

Obligation to delete

You can request that the responsible person immediately delete the personal data concerning you. The person responsible is obligated to delete these data immediately if one of the following reasons applies:

  1. The personal data concerning you are no longer required for the purposes for which they were collected or otherwise processed.
  2. You withdraw your consent upon which processing was based in accordance with Art. 6 Para. 1 Letter a or Art. 9 Para. 2 Letter a of the GDPR, and there is no other legal basis for processing.
  3. You object to processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Art. 21 Para. 2 of the GDPR.
  4. The personal data concerning you were processed unlawfully.
  5. Deletion of the personal data concerning you is required for fulfilment of a legal obligation according to Union law or the right of the member states to which the person responsible is subject.
  6. The personal data concerning you was collected with regard to offered services of the information society in accordance with Art. 8 Para. 1 of the GDPR.


Information to third parties

If the person responsible has made the personal data concerning you public and is obligated to delete it in accordance with Art. 17 Para. 1 of the GDPR, they will take appropriate measures, including of a technical nature, under consideration of the available technology and implementation costs in order to inform the person responsible for data processing who processes the personal data that you as the concerned person have requested that they delete all links to this personal data or copies or duplicates of this personal data.

Exceptions

There is no right to deletion if processing is required

  1. for exertion of the right to the free expression of opinion and information;
  2. for fulfilment of a legal obligation which requires processing in accordance with the law of the Union or the member states to which the responsible person is subject, or for the performance of a task in the public interest or in exertion of an official authority to which the responsible person was subject;
  3. for reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 Letters h and i, as well as Art. 9 Para. 3, of the GDPR;
  4. for archiving purposes, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, as well as the right named in Section “Right to deletion/Obligation to delete” is expected to make the achievement of these goals of processing impossible or severely impairs them, or
  5. for the assertion, exertion or defence of legal claims.

Right to notification

If you have asserted the right to correction, deletion or restriction of processing to the responsible person, they are obligated to report this correction or deletion of the data or restriction of processing to all recipients to whom the personal data concerning you was disclosed unless this would prove to be impossible or would be associated with excessive expenditure.
You have the right to be informed about these recipients by the responsible person.

Right to data transferability

You have the right to obtain the personal data concerning you which you have provided to the the responsible person in a structured, conventional and machine-readable format. You also have the right to the transfer of this data to another responsible person without obstruction by the responsible person to whom the personal data was provided if

  1. processing is based on consent in accordance with. Art. 6 Para. 1 Letter a of the GDPR or Art. 9 Para. 2 Letter a of the GDPR or a contract in accordance with Art. 6 Para. 1 Letter b of the GDPR and
  2. processing is carried out using automated procedures.

In exerting this right, you also have the right to cause the personal data concerning you to be transferred directly from one responsible person to another responsible person if this is technically feasible. The freedoms and rights of other persons may not be impaired by this.
The right to data transferability does not apply for the processing of personal data required for performing a task in the public interest or in exertion of an official authority transferred to the responsible person.

Right to object

You have the right to object to the processing of personal data concerning you occurring based on Art. 6 Para. 1 Letter e or f of the GDPR at any time for reasons arising from your particular situation. This also applies for profiling based on these provisions.
The responsible person will no longer process the personal data concerning you unless they are able to prove the existence of compelling, legitimate reasons for processing which outweigh your interests, rights and freedoms or the processing serves the assertion, exertion or defence of legal claims.
If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object to the processing of personal data concerning you for the purposes of this type of advertising at any time. This also applies for profiling if it is carried out in connection with such direct advertising.
Should you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of services of the information society – irrespective of Directive 2002/58/EC – you have the option to exert your right to object using automated processes for which technical specifications are used.

Right to withdraw the declaration of consent regarding data protection law

You have the right to withdraw your declaration of consent regarding data protection law at any time. Withdrawing consent does not affect the legality of processing which occurred based on consent up to the point of withdrawal.

Automated decision making in individual cases, including profiling

You have the right to not be subjected to decision making based solely on automated processing – including profiling – which affects you legally or significantly impairs you in a similar way. This does not apply if the decision

  1. is required for the conclusion or fulfilment of a contract between you and the responsible person
  2. is permissible based on legislation of the Union or member states to which the responsible person is subject and this legislation contains appropriate measures for protecting your rights and freedoms and your legitimate interests or
  3. is carried out with your express consent.

However, these decisions may not be based on special categories of personal data in accordance with Art. 9 Para. 1 of the GDPR if Art. 9 Para. 2 Letter a or g of the GDPR does not apply and appropriate measures for the protection of rights and freedoms and your legitimate interests were taken.
With regard to the cases stated in (1) and (3), the responsible person will take appropriate measures to protect the rights and freedoms and your legitimate interests, including at least the right to cause the intervention of a person on the part of the responsible person, present your own position and challenge the decision.

Right to appeal to a regulatory authority

Irrespective of another administrative or judicial legal remedy, you have the right to appeal to a regulatory authority, in particular in the member state of your residence, your workplace or the location of the suspected violation if in your view processing of the personal data concerning you violates the GDPR.
The regulatory authority to which the appeal was submitted will notify the complainant of the status and results of the appeal, including the possibility of a judicial legal remedy as per Art. 78 of the GDPR.

k) Updating of data protection information

This data protection information is continually being adapted to current functions, technologies and applicable law. This occurs at irregular intervals. The data protection declaration provided on the Internet site at the time applies.