Data protection declaration

a) Introduction

We take the protection of your data very seriously and strictly comply with the applicable rules of the data protection laws. Personal data are only collected on this website to the degree necessary for technical and organisational reasons. Under no circumstances are your data passed on to third parties. The following declaration provides you with an overview of how we ensure the protection of your personal data and what type of data is collected for what purpose.

To ensure the security of your data during the transfer process, we also use state-of-the-art SSL/TLS encryption methods.

b) Responsible authority, data protection officer

The responsible person in line with the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is:

Martin Höhn GmbH
Siemensstraße 13
72348 Rosenfeld
+49 (0) 742 893 84-0
info@hoehn-praezision.de
www.hoehn-praezision.de

Represented by Managing Director Reiner Höhn

Data protection officer

The contact details of the data protection officer are as follows:
datenschutz@hoehn-praezision.de

Those affected can contact our data protection officer directly with all questions on data protection at any time.

c) General information on data processing

Scope of the processing of personal data

We generally only process the personal data of our users to the degree necessary in order to provide a functional website and our content and services. Processing of the personal data of our users only occurs periodically after consent has been granted by the user. An exception is made in those cases in which it is not possible to obtain consent beforehand for factual reasons and processing of the data is permitted by statutory provisions.

Legal basis for the processing of personal data

To the extent that we obtain consent of the person concerned for processing procedures of personal data, Art. 6 Para. 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data required for the fulfilment of a contract whose contractual party is the person concerned, Art. 6 Para. 1 Letter b of the GDPR serves as the legal basis. This also applies for processing procedures required in order to carry out pre-contractual measures.

To the extent that the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 Letter c of the GDPR serves as the legal basis.

Should vital interests of the person concerned or another natural person make the processing of personal data necessary, Art. 6 Para. 1 Letter d of the GDPR serves as the legal basis.

If processing is required to protect a legitimate interest of our company or third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former, Art. 6 Para. 1 Letter f of the GDPR serves as the legal basis for processing.

Deletion of data and storage duration

The personal data of the person concerned are deleted or blocked as soon as the purpose for saving them no longer exists. Saving can also occur if this is designated by European or national legislators in Union regulations, laws or other provisions to which the responsible person is subject. The data are also blocked or deleted if a storage period designated by the standards named elapses unless there is a necessity to continue saving the data for contract conclusion or contract fulfilment.

d) Creation of log files

Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the accessing computer. The access logs of the web server log those pages which were called up and at what time. They contain the following data: IP, directory protection user, date, time, pages called up, protocols, status code, data volume, referring site, user agent and called host name.
The IP addresses are saved anonymised here. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are retained for 60 days. Information on the directory protection user utilised are anonymised after one day.
Error logs, which log failed page views, are deleted after seven days. In addition to error messages, they contain the accessing IP address and, depending on the error, the calling website.

These data are not saved together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of the data and log files is Art 6 Para. 1 Letter f of the GDPR.

Purpose of data processing

The IP address is saved in log files to ensure the functionality of the website. We also use the data to optimise the website and ensure the security of our information technology systems. Evaluation of the data for marketing purposes does not occur in this context.

For these purposes, our legitimate interest in data processing is also based on Art 6 Para. 1 Letter f of the GDPR.

Duration of storage

If the data are saved in log files, this is the case after no later than 90 days.

Option to object and eliminate data

The collection of data for the provision of our website and saving of the data in log files is absolutely necessary for the operation of the Internet site. Consequently, the user does not have the option to object.

e) Use of cookies

Description and scope of data processing

Our website uses cookies. Cookies are text files saved in the Internet browser or by the Internet browser on the computer system of the user. When a user calls up a website, a cookie can be saved on the operating system of the user. This cookie contains a characteristic character sequence which enables the unique identification of the browser when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our Internet site also require the calling browser to be identifiable after a page change.

On our website, we also use cookies which enable analysis of the surfing behaviour of the user. The user data collected in this way are pseudonymised using technical measures. For this reason, assignment of the data to the calling user is no longer possible. The data are not saved together with other personal data of the user.
When calling up our website, users are informed of the user of cookies for analysis purposes by an info banner and are referred this data protection declaration. Information on how the saving of cookies can be suppressed in the browser settings is also displayed in this regard.

When calling up our website, the user is informed of the use of cookies for analysis purposes and their consent to the processing of personal data used in this regard is obtained. The user is also made aware of this data protection declaration in this regard.

Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 Letter f of the GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 Letter f of the GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes when the consent of the user in this regard has been obtained is Art. 6 Para. 1 Letter a of the GDPR.

Purpose of data processing

The purpose of using technically necessary cookies is to simplify use of the website for the user. Some functions of our Internet site cannot be offered without the use of cookies. For these functions, it must also be possible to recognise the browser after a page change.
The user data obtained using technically necessary cookies are not used for the creation of user profiles.
The use of analysis cookies occurs for the purpose of improving the quality of our website and its content. Analysis cookies tell us how the website is being used, which enables us to continually optimise our offering.
For these purposes, it is also in our legitimate interest to process personal data as per Art. 6 Para. 1 Letter f of the GDPR.

Duration of storage, option to object and eliminate

Cookies are saved on the computer of the user and transferred from there to our site. For this reason, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also occur automatically. If cookies are deactivated for our website, it may no longer be possible to fully utilise all the functions of the website.

Consent Management Platform

The “Usercentrics Consent Management Platform” is used for the management of cookies on the website.

This is a consent management service.

Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

Purposes of data processing

  • Compliance with statutory obligations
  • Saving of consent

Technologies used

  • Local storage
  • Cookies

Data attributes

  • Consent, “yes” or “no”
  • Log files (IP (anonymised))

Collected data
This list contains all (personal) data collected by or through the use of this service.
The requesting URLs of the website and the site path of the website are data collected via the tag logger. The tag logger is always active and keeps track of the active technologies. Users then only have access to these data if the tag logger function has been activated for it. Data are also transferred if the function is not activated.

  • Device information
  • Browser information
  • Anonymised IP address
  • Opt-in and opt-out data
  • Date and time of the visit
  • Request URLs of the website: Site path of the website
  • Geographic location

Legal basis
The required legal basis for processing personal data according to Art. 6 I 1 of the GDPR is named in the following.
Art. 6 Para. 1 Sentence 1 Letter c of the GDPR

Location of processing
European Union (consent database is located in Belgium)

Retention period
The consent data (granted consent and withdrawal of consent) are retained for 3 years. The data are exported following termination of the contract.

Data recipient
Usercentrics GmbH

Data protection officer of the processing company
The following is the e-mail address of the data protection officer of the processing company.
datenschutz@usercentrics.com

Additional information and opt-out
Click here to read the data protection provisions of the data processor https://usercentrics.com/privacy-policy/

f) Contact form and e-mail contact

Description and scope of data processing

Our Internet site features a contact form which can be used to make contact electronically. Should a user utilise this option, the data entered in the input mask are transferred to us and saved. These data include:

surname, given name, company, e-mail address and telephone number

When the message is sent, the date and time are also saved.

In order to process the data, your consent is obtained as part of the sending process and reference is made to this data protection declaration.

Alternatively, contact can be made using the e-mail address provided. In this case, the personal data of the user transferred with the e-mail are saved. Please note, however, that the confidentiality of e-mails and other electronic forms of communication on the Internet is generally not guaranteed. Should you wish to send confidential information, we recommend that you sent it by conventional post for this reason.

In this connection, the data are not passed on to third parties. The data are used solely for the purpose of the conversation.

Legal basis for data processing

The legal basis for processing the data with the consent of the user is Art. 6 Para. 1 Letter a of the GDPR.

The legal basis for processing the data transferred when an e-mail is sent is Art. 6 Para. 1 Letter f of the GDPR. If e-mail contact is targeted toward the conclusion of a contract, an additional legal basis for processing is Art. 6 Para. 1 Letter b of the GDPR.

Purpose of data processing

The processing of personal data from the input mask by us solely serves the purpose of responding to your contact initiation. Should contact be made by e-mail, we also have a required legitimate interest in processing the data here.

Other personal data processed during the sending process are utilised to prevent misuse of the contact form and ensure the security of our information-technology systems.

Duration of storage

The data are deleted as soon as they are no longer required to serve the purpose of their collection. For the personal data from the input mask of the contact form and any sent by e-mail, this is the case if the respective conversation with the user has ended. The conversation has ended when it can be established from the circumstances that the matter concerned has been conclusively clarified.

Additional personal data collected during the sending process are deleted no later than after a period of 7 days.

Option to object and eliminate

The user has the option to withdraw their consent to the processing of personal data at any time. Should the user contact us by e-mail, they can object to the saving of their personal data at any time. In such cases, the conversation cannot be continued.
The user also has the option to object to the saving of their personal data by conventional post.
All personal data saved as part of the contact-making process are deleted in this case.

g) Application form

Description and scope of data processing

Our Internet site features an application form which can be used for the electronic transmission of application documentation. Should a user utilise this option, the data entered in the input mask are transferred to us and saved. These data include:
Personal data: gender, surname, given name, street/building number, post code, city and e-mail address
A cover letter, CV and references can also be sent as an attachment.
When the message is sent, the following data are also saved:
– Date and time of contact
For the processing of data as part of the sending process, your consent is obtained and reference is made to this data protection declaration.

Legal basis for data processing

The legal basis for processing the data with the consent of the user is Art. 6 Para. 1 Letter a of the GDPR.
The legal basis for processing the data transferred when an e-mail is sent is Art. 6 Para. 1 Letter f of the GDPR. If e-mail contact is targeted toward the conclusion of a contract, an additional legal basis for processing is Art. 6 Para. 1 Letter b of the GDPR.

Purpose of data processing

The processing of personal data from the input mask by us solely serves the purpose of responding to your contact initiation. Should contact be made by e-mail, we also have a required legitimate interest in processing the data here.
Other personal data processed during the sending process are utilised to prevent misuse of the contact form and ensure the security of our information-technology systems.

Duration of storage

The data are deleted as soon as they are no longer required to serve the purpose of their collection. For the personal data from the input mask of the application form, this is the case when the application process is complete.

Option to object and eliminate

The user has the option to withdraw their consent to the processing of personal data at any time. In such cases, application processes cannot be continued.

I) Rights of the person concerned

Right to information

You can request that the person responsible provide you with confirmation of whether personal data concerning you are being processed by us.
Should such processing be carried out, you can request the following information from the person responsible:

  1. the purposes for which the personal data are being processed;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data concerning you were disclosed or are being disclosed;
  4. the planned duration of saving of the personal data concerning you or, should specific information not be possible in this regard, criteria for specification of the storage duration;
  5. the existence of a right to correction or deletion of the personal data concerning you, a right to restriction of processing by the responsible person or a right to object to this processing;
  6. the existence of a right to appeal to a regulatory authority;
  7. all available information on the origin of the data if the personal data are not being collected from the person concerned;
  8. the existence of automatic decision making, including profiling, in accordance with Art. 22 Para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and desired effects of this type of processing for the person concerned.

You have the right to request information on whether the personal data concerning you are transferred to a third country or an international organisation. In this regard, you can request information on the applicable guarantees in accordance with Art. 46 of the GDPR in connection with this transfer.

Right to correction

You have the right to correction and/or completion by the person responsible if the processed personal data concerning you are incorrect or incomplete. The responsible person must carry out the correction immediately.

Right to restriction of processing

Under the following requirements, you can request restrictions to processing of the personal data concerning you:

  1. if you are disputing the correctness of the personal data concerning you for a period of time enabling the responsible person to check the correctness of the personal data;
  2. processing is unlawful and you reject deletion of the personal data and instead request restriction of use of the personal data;
  3. the responsible person no longer requires the personal data for the purpose of processing, but you require it for the assertion, exertion or defence of legal claims or
  4. if you have entered an objection to processing in accordance with Art. 21 Para. 1 of the GDPR and it has not yet been determined whether the legitimate reasons of the responsible person outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data – irrespective of their being saved – may only be processed with your consent or for the assertion, exertion or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a member state.
If restriction of processing was restricted according to the requirements named above, you will be notified by the responsible person before the restriction is lifted.

Right to deletion

Obligation to delete

You can request that the responsible person immediately delete the personal data concerning you. The person responsible is obligated to delete these data immediately if one of the following reasons applies:

  1. The personal data concerning you are no longer required for the purposes for which they were collected or otherwise processed.
  2. You withdraw your consent upon which processing was based in accordance with Art. 6 Para. 1 Letter a or Art. 9 Para. 2 Letter a of the GDPR, and there is no other legal basis for processing.
  3. You object to processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Art. 21 Para. 2 of the GDPR.
  4. The personal data concerning you were processed unlawfully.
  5. Deletion of the personal data concerning you is required for fulfilment of a legal obligation according to Union law or the right of the member states to which the person responsible is subject.
  6. The personal data concerning you was collected with regard to offered services of the information society in accordance with Art. 8 Para. 1 of the GDPR.


Information to third parties

If the person responsible has made the personal data concerning you public and is obligated to delete it in accordance with Art. 17 Para. 1 of the GDPR, they will take appropriate measures, including of a technical nature, under consideration of the available technology and implementation costs in order to inform the person responsible for data processing who processes the personal data that you as the concerned person have requested that they delete all links to this personal data or copies or duplicates of this personal data.

Exceptions

There is no right to deletion if processing is required

  1. for exertion of the right to the free expression of opinion and information;
  2. for fulfilment of a legal obligation which requires processing in accordance with the law of the Union or the member states to which the responsible person is subject, or for the performance of a task in the public interest or in exertion of an official authority to which the responsible person was subject;
  3. for reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 Letters h and i, as well as Art. 9 Para. 3, of the GDPR;
  4. for archiving purposes, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, as well as the right named in Section “Right to deletion/Obligation to delete” is expected to make the achievement of these goals of processing impossible or severely impairs them, or
  5. for the assertion, exertion or defence of legal claims.

Right to notification

If you have asserted the right to correction, deletion or restriction of processing to the responsible person, they are obligated to report this correction or deletion of the data or restriction of processing to all recipients to whom the personal data concerning you was disclosed unless this would prove to be impossible or would be associated with excessive expenditure.
You have the right to be informed about these recipients by the responsible person.

Right to data transferability

You have the right to obtain the personal data concerning you which you have provided to the the responsible person in a structured, conventional and machine-readable format. You also have the right to the transfer of this data to another responsible person without obstruction by the responsible person to whom the personal data was provided if

  1. processing is based on consent in accordance with. Art. 6 Para. 1 Letter a of the GDPR or Art. 9 Para. 2 Letter a of the GDPR or a contract in accordance with Art. 6 Para. 1 Letter b of the GDPR and
  2. processing is carried out using automated procedures.

In exerting this right, you also have the right to cause the personal data concerning you to be transferred directly from one responsible person to another responsible person if this is technically feasible. The freedoms and rights of other persons may not be impaired by this.
The right to data transferability does not apply for the processing of personal data required for performing a task in the public interest or in exertion of an official authority transferred to the responsible person.

Right to object

You have the right to object to the processing of personal data concerning you occurring based on Art. 6 Para. 1 Letter e or f of the GDPR at any time for reasons arising from your particular situation. This also applies for profiling based on these provisions.
The responsible person will no longer process the personal data concerning you unless they are able to prove the existence of compelling, legitimate reasons for processing which outweigh your interests, rights and freedoms or the processing serves the assertion, exertion or defence of legal claims.
If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object to the processing of personal data concerning you for the purposes of this type of advertising at any time. This also applies for profiling if it is carried out in connection with such direct advertising.
Should you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of services of the information society – irrespective of Directive 2002/58/EC – you have the option to exert your right to object using automated processes for which technical specifications are used.

Right to withdraw the declaration of consent regarding data protection law

You have the right to withdraw your declaration of consent regarding data protection law at any time. Withdrawing consent does not affect the legality of processing which occurred based on consent up to the point of withdrawal.

Automated decision making in individual cases, including profiling

You have the right to not be subjected to decision making based solely on automated processing – including profiling – which affects you legally or significantly impairs you in a similar way. This does not apply if the decision

  1. is required for the conclusion or fulfilment of a contract between you and the responsible person
  2. is permissible based on legislation of the Union or member states to which the responsible person is subject and this legislation contains appropriate measures for protecting your rights and freedoms and your legitimate interests or
  3. is carried out with your express consent.

However, these decisions may not be based on special categories of personal data in accordance with Art. 9 Para. 1 of the GDPR if Art. 9 Para. 2 Letter a or g of the GDPR does not apply and appropriate measures for the protection of rights and freedoms and your legitimate interests were taken.
With regard to the cases stated in (1) and (3), the responsible person will take appropriate measures to protect the rights and freedoms and your legitimate interests, including at least the right to cause the intervention of a person on the part of the responsible person, present your own position and challenge the decision.

Right to appeal to a regulatory authority

Irrespective of another administrative or judicial legal remedy, you have the right to appeal to a regulatory authority, in particular in the member state of your residence, your workplace or the location of the suspected violation if in your view processing of the personal data concerning you violates the GDPR.
The regulatory authority to which the appeal was submitted will notify the complainant of the status and results of the appeal, including the possibility of a judicial legal remedy as per Art. 78 of the GDPR.

J) Information about other data processing procedures

Specific information about the application process

Affected data: Application information
Processing Purpose: Implementation of application process
Categories of recipients: Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union.
Duration of data storage: Application data will generally be deleted within four months after communication of the decision, unless consent has been given for a longer period of data storage.

Specific information for the processing of customer data/prospective parties’ data

Affected data: Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose: Contract execution et al Offers, orders, sale and invoicing, quality assurance.
Categories of recipients: Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years.

Specific information on the processing of employee data

Affected data: Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose: Contract execution within the employment relationship.
Categories of recipients: Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years.

Specific information for the processing of supplier data

Affected data: Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose: Contract execution, et al Inquiries, Purchasing, Quality Assurance.
Categories of recipients: Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers: As part of contractual execution, processors could also be used outside the European Union.
Duration of data storage: The duration of data storage depends on the statutory storage requirements and is usually 10 years.

Further information and contacts

In addition, you may invoke your rights to information, correction or deletion at any time, to restrict processing, to object to processing, and to data portability. Here you will find the option to contact us by E-Mail or letter. You also have the right to contact the data protection supervisory authority for complaints.

K) Updating of data protection information

This data protection information is continually being adapted to current functions, technologies and applicable law. This occurs at irregular intervals. The data protection declaration provided on the Internet site at the time applies.