Privacy Statement
1. Subject matter of this privacy statement
Thank you for visiting the Hettich website and the interest you show in our company. Protecting your personal data is important to us. For this reason we would now like to inform you in detail about data collected when you visit our website www.hettich.com and about which rights you have under data protection law.
Personal data are all data with which you personally can be identified, e.g. your name, your e-mail address or your postal address.
2. Controller for data processing and data protection officer
The controller for processing the data that are collected and processed in connection with using our website is
Hettich Holding GmbH & Co. oHG<br/> Anton-Hettich-Straße 12 – 16<br/> D - 32778 Kirchlengern<br/> Phone: + 49 5223 77 - 0<br/> info@hettich.com
You can reach our company data protection officer at
Hettich Holding GmbH & Co. oHG<br/> Data Protection Officer<br/> Anton-Hettich-Straße 12 – 16<br/> D-32278 Kirchlengern<br/> protection(at)de.hettich.com
The website has sub-pages, some of which are maintained by other Hettich Group companies ("affiliated companies"). Insofar as sub-pages are maintained by affiliated companies, these are responsible for the data collected and processed in connection with using the particular sub-page concerned. On the particular sub-page concerned you will therefore in each case be informed of which data will be collected and processed when you visit that sub-page and of which affiliated company is responsible for such.
3. Data acquired on visiting our website
You can always visit our website anonymously, i.e. without telling us who you are. When you visit our website, your browser will transfer specific data to our web server for technical reasons so that we can provide you with the information you have requested. This relates to the following data:
- Your IP address
- Date and time of opening one of our web pages
- Subject matter of the request (specific page)
- country of origin, language setting
- Operating system and its access status
- Browser and version of the browser software
- The website from which you accessed our website
- The time spent on our web pages
We process the above-mentioned data on the basis of our legitimate interest for statistical purposes as well as for enhancing the contents and functionality of our website (Art. 6 (1) f) of the GDPR).
The data are erased as soon as they are no longer needed for achieving the above-mentioned purposes, at the latest, however, three months after they are collected.
4. Use of cookies
We use cookies for our website. These are small text files that are sent from our web server to your browser when you visit our website and saved by your browser on your computer. If cookies are set, we collect and process these within the particular scope of specific user information, such as IP address values, browser and location data, access times or pages visited on our website.
Our website uses the following types of cookies:
Transient cookies<br/> Pursuant to Art. 6 (1) f) of the GDPR the data filed in transient cookies have the purpose of safeguarding our legitimate interests, providing you with unrestricted usage of our services as well as making our website as convenient as possible to use while you are visiting our Internet presence. Transient cookies are automatically deleted as soon as you close your browser.
Persistent cookies:<br/> The data stored in persistent cookies enable us to recognise your computer automatically the next time you open our website and to display information geared specifically to your interests. Persistent cookies are automatically deleted after a given duration which can differ from cookie to cookie. They are stored for a maximum of 12 months.
Cookies of third-party providers:<br/> We work with a web-analysis service provider, etracker GmbH from Hamburg, which helps us to make our website more interesting for you. For this purpose, cookies of etracker GmbH will also be stored on your computer when you visit our website (cookies from third-party providers). You will find further details on the web analysis service under clause 5 of this data privacy statement.
We only use persistent cookies and cookies of third-party providers with your prior consent (Art. 6 (1) a) of the GDPR). If you are visiting our website for the first time, it will show a request in which we ask you for your consent to the use of persistent cookies and cookies of third-party providers. If you give your consent to this, we will store relevant cookies on your computer and the request will not be shown again for as long as the cookie is stored. Thereafter, or if you actively delete the cookie beforehand, the request will be shown again the next time you visit our website, asking you to renew your consent.
You can also use our website without cookies at all. Using settings in your browser, you can completely deactivate cookies being stored, restrict such to specific web pages or configure your browser so that it automatically notifies you and requests feedback as soon as a cookie is to be set. The help menu of every browser provides a description of how to change your cookie settings. If you deactivate transient cookies you may not be able to use all of the functions provided by our web pages.
5. Web analysis service
We attach importance to optimising our website and making it attractive for our visitors. This makes it necessary for us to evaluate our web pages. For this purpose, we use the services of etracker GmbH from Hamburg, Germany (www.etracker.com).
In this context, cookies are used that permit a statistical analysis of how your visits use our website and also to display use-related contents or advertising. (for information on the term "cookie", refer to clause 4 above). 4). Cookies of etracker GmbH contain no information that makes it possible to identify a user.
The data generated with etracker are only processed and stored on our behalf by etracker in Germany and are therefore subject to stringent German and European data-protection laws and standards. etracker has been audited in this regard by an independent body, certified and awarded the Privacy Seal.<br/> (ePrivacyseal)
Data are processed on the legal basis of Art. 6 (1) f) of the GDPR (legitimate interest). Our legitimate interest lies in optimising our web presence. As our visitors' privacy is particularly important to us, the IP address is anonymised at etracker as early as possible and log-in or device IDs are converted at etracker into an unambiguous code which, however, cannot be matched to any specific person. etracker does not use data for any other purpose nor does it merge them with other data or pass them on to third parties.
You can object to the above-described processing of data at any time by clicking the following button insofar as data are being processed in relation to your person. Your objection will have no adverse consequences for you.
This is where you will find further information on data privacy at etracker. here.
6. Making contact
Personal data will be collected when you contact us (e.g. by contact form). The particular contact form shows which data will be collected when you contact us. These data will only be used for the purpose of making contact and for handling your specific request. The legal basis for processing data is our legitimate interest in handling your request in accordance with Art. 6 (1) f) of the GDPR. Once your request has been dealt with in full your data will be erased unless such is opposed by any statutory retention periods.
7. Use of your data for direct advertising (newsletter)
Our website and sub-pages give you the opportunity to register for various newsletters. On the basis of the consent you previously gave us (Art. 6 (1) a) of the GDPR), we collect and use the e-mail address you gave us on registering to send you the newsletter. The provision of further data is voluntary and is used to address you personally.
To register for our newsletter, we use the double opt-in procedure. This means that after registration, we send you a message to the e-mail address you gave us in which we ask you to confirm your registration. If you do not confirm your registration, it will be automatically deleted.
When you register for the newsletter, we store your IP address as well as the date and time of your registration in order to trace any potential misuse of your e-mail address at a later time.
With immediate effect for the future, you can at any time withdraw your consent to the newsletter being sent. You can withdraw your consent via the link provided in every newsletter or vis-à-vis the contact person specified in clause 1.
Our newsletters contain a click-tracking script. This click-tracking script is used to record a log file or analyse a log file. The embedded click-tracking script tells us whether and when you have opened an e-mail and which links in the e-mail you have clicked. Personal data collected via the click-tracking script contained in the newsletters are saved and evaluated by us in order to optimise delivery of our newsletters and match the content of future newsletter to your interests even better. You are entitled at any time to withdraw the declaration of consent you have given to receiving newsletters.
8. Social Media
We do not use any automatically activated plug-ins from social media platforms (“social media plug-ins”) on our website.
The buttons for our social media pages, such as Facebook, Twitter, Xing or Instagram, are merely links that direct users to the corresponding provider's page. Furthermore, our website contains elements known as news boxes, which link to our pages on social media platforms. These news boxes – which are marked with the logo for the corresponding social media site – are also only links.
The integration of these buttons and news boxes in our website does not mean that any personal data is sent to the provider of these social media platforms when you open our website.
You will be directed to the corresponding social media page when you click on these buttons or news boxes. In this context, we refer to Item 9 of this Privacy Statement.
9. Links to third-party websites
This website contains links to websites of third parties (e.g. our sales partners or social media providers). Once you have clicked on the link, we no longer have any influence over the way any personal data sent as a result of clicking on the third party's link (e.g. your IP address) is collected, processed and used as we have no control over the third party's conduct. We bear no responsibility for the processing of such personal data by third parties.
10. External services
We incorporate external services or contents (e.g. map service providers) on our website. If you use services of this type or if contents from third parties are displayed to you, communication data will be exchanged between you and the relevant provider for technical reasons.
The provider of the particular third-party services or contents may sometimes also process your data for further purposes of their own. To the best of our knowledge and belief, we have configured services or contents from providers who are known to process data for their own purposes in a way that either no communication takes place for purposes other than to display contents or services or in a way that any communication only takes place if you actively decide to use the service. As we have no influence on the data collected by third parties or on the way in which they process them, we cannot provide any binding information on the purpose for which and on the extent to which your data are processed.
For further information on the purpose for which and the extent to which your data are collected and processed, please therefore refer to the data privacy information given by the providers of the services and contents we incorporate and who are responsible in law for protecting data.
11. Links to third-party websites
This website contains links to websites of third parties (e.g. our sales partners). These are external websites, the contents of which are beyond our control. For this reason, we expressly exclude any liability for the content of external websites. In particular, we are not responsible for the data-protection precautions implemented by the operators of such websites.
12. Passing of your personal data on to affiliated companies and third parties
Within the Hettich group of companies only those companies gain access to your data which require them to meet contractual or legal obligations or to which we are authorised to communicate personal data on the basis of a balancing of interests.
The service providers we use may also receive data for these purposes. These are enterprises in the categories of IT services as well as telecommunications. Our service providers are carefully selected and regularly monitored by us. They only process personal data on our behalf and in strict accordance with our instructions on the basis of relevant processor contracts.
Otherwise no third party will have access to your personal data. In particular, we will neither sell them nor will we utilise them in any other way. Only if we are officially requested or obliged to do so in law will we communicate data to the government authority responsible.
13. Rights of the Data Subject
Applicable data-protection law gives you extensive rights vis-à-vis the controller (see clause 2 above) in relation to the processing of your personal data. Every data subject has the
- Right to being informed about the data we store about their person;
- Right to rectification, erasure or restriction of processing of their personal data;
- Right to object to processing (for further details, refer to clause 14)
- Right to data portability;
- Right to complain to a data-protection supervisory authority.
14. Withdrawal of consent given
If you have given your consent to personal data being processed, you can withdraw this from us at any time. This also applies to withdrawing declarations of consent that were given before the GDPR came into effect, i.e. before 25 May 2018. Please note that withdrawal will only take effect for the future. This will not apply to any processing taking place before consent is withdrawn.
15. Information on your right to object
You have the right at any time to object to your data being processed on the basis of Art. 6 (1) f) of the GDPR (processing of data on the basis of a balancing of interests) if any grounds for such arise from your particular situation. Within the meaning of Art. 4 (4) of the GDPR, this also applies to any profiling based on the above provision.<br/> If you file an objection, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.
In individual cases, we process your personal data to carry out direct advertising. You have the right at any time to file an objection to your personal data being processed for the purpose of advertising of this type; this shall also apply to profiling insofar as this is in connection with such direct advertising.
If you object to processing for purposes of direct advertising, we shall no longer process your personal data for these purposes.
The objection can be made informally using the term "Objection" and indicating your name, address and date of birth, and should be addressed to:
Hettich Holding GmbH & Co. oHG
Vahrenkampstrasse 12 – 16
D - 32778 Kirchlengern
protection(at)de.hettich.com
Effective: April 2019