Thank you for visiting our website. In the following, we would like to inform you which personal data we collect, for which purposes we process your personal data and which rights you are entitled to.

Definitions

Based on Art. 4 GDPR, this privacy policy is based on the following definitions:

– „Personal data“ (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person („data subject“). A person is identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. Identifiability may also result from combining such information or other additional knowledge. The way in which the information came about, its form or its embodiment is irrelevant (photos, video or audio recordings may also contain personal data).

– „Processing“ (Art. 4 No. 2 GDPR) means any operation performed on personal data, whether or not by automated (i.e. technology-based) means. This includes in particular the collection (i.e. obtaining), recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction of personal data, as well as changing the objective or purpose on which data processing was originally based.

– „Controller“ (Art. 4 No. 7 GDPR) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

– „Third party“ (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process personal data; this also includes other legal entities belonging to the same group of companies.

– „Processor“ (Art. 4 No. 8 GDPR) means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g. IT service providers). In terms of data protection law, a processor is in particular not a third party.

– „Consent“ (Art. 4 No. 11 GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Controller

Hinz GmbH
Langwiesenstraße 14
74363 Güglingen-Frauenzimmern, Germany

Phone +49 7135 97405-0
Fax +49 7135 97405-25

E-mail datenschutz@hinz-mbt.de

Data protection officer

We have appointed a data protection officer:
RA Kai Schützle
Schützle Rechtsanwaltsgesellschaft mbH
Gutbrodweg 6/3
74074 Heilbronn, Germany

datenschutz@ra-schuetzle.de

Types of data processed

Master data (name, address, etc.)

Contact data (e-mail, phone number, etc.)

Meta / communication / usage data (IP address, operating system, etc.)

Rights of data subjects

Right of access (Art. 15 GDPR)

You have the right to obtain confirmation from us as to whether we process personal data concerning you. If this is the case, you have the right of access to this personal data and to the information listed in Art. 15 (1) GDPR.

Right to rectification (Art. 16 GDPR)

If we process inaccurate personal data concerning you, you have the right to request the rectification of this inaccurate data. You also have the right to have incomplete personal data completed.

Right to erasure (Art. 17 GDPR)

If one of the grounds listed in Art. 17 (1) GDPR applies, you have the right to request the erasure of your personal data without undue delay. This does not apply if one of the grounds listed in Art. 17 (3) GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

If one of the conditions listed in Art. 18 (1) GDPR is met, you have the right to request the restriction of the processing of your data.

Right to object to processing (Art. 21 GDPR)

If we process personal data concerning you on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right under Art. 21 (1) GDPR to object to this processing on grounds relating to your particular situation.

Right to data portability (Art. 20 GDPR)

If the conditions of Art. 20 (1) GDPR are met, you have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.

Right to withdraw consent at any time (Art. 7 (3) GDPR)

You have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You may also address any complaints about the processing of your personal data to a data protection supervisory authority. The authority responsible for the controller is the

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart, Germany

Phone +49 711 615541-0
Fax +49 711 615541-15
E-mail poststelle@lfdi.bwl.de

However, you may in principle address your complaint to any data protection supervisory authority, in particular the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

Existence of automated decision-making including profiling (Art. 13 (2) (f), Art. 22 (1), (4) GDPR)

We do not use automated decision-making including profiling (Art. 13 (2) (f), Art. 22 (1), (4) GDPR).

Visiting our website

When you use the website for information purposes only, we collect, store and process the following categories of personal data:

„Log data“: When you visit our website, a so-called log data record (server log files) is stored temporarily and anonymously on our web server. It consists of:

– the page from which the page was requested (referrer URL)
– the name and URL of the requested page
– the date and time of access
– the type, language and version of the web browser used
– the IP address of the requesting computer, shortened so that it can no longer be linked to a person
– the amount of data transferred
– the operating system
– a message whether the access was successful (access status / HTTP status code)
– the GMT time zone difference

Log data is processed for statistical purposes and to improve the quality of our website, in particular the stability and security of the connection (legal basis: Art. 6 (1) sentence 1 (a) or (f) GDPR).

Storage and deletion of data

For each of the processing operations we carry out, we state below how long the data is stored and when it is deleted or blocked. Unless an explicit storage period is stated below, your personal data will be deleted or blocked as soon as the purpose or the legal basis for storage no longer applies.

However, data may be stored beyond the stated period in the event of (threatened) legal disputes with you or other legal proceedings, or if storage is required by statutory provisions to which we are subject as controller (e.g. § 257 German Commercial Code (HGB), § 147 German Fiscal Code (AO)). When the storage period prescribed by law expires, the personal data will be blocked or deleted, unless further storage by us is necessary and there is a legal basis for it.

Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies).

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

We only use technically necessary cookies on our website. The purpose of the processing is the optimal use and functioning of our website and the provision of necessary services. The legal basis for technically necessary cookies is Art. 6 (1) (f) GDPR.

Processing operations

Personal data is processed in the following operations. The provision of data is neither required by law nor by contract:

Hosting

Our website is hosted by ALL-INKL.COM, Hauptstraße 68, 02742 Friedersdorf, Germany, phone +49 35872 353-10. When you visit our website, the data listed above („Visiting our website“) is transmitted to the servers of our hosting provider.

Contact form / enquiries by phone or e-mail

If you contact us via the contact form provided on our website, the data you enter there will be processed.

The purpose of the processing is to answer your enquiry and to fulfil any (pre-)contractual obligations. The legal basis is (implied) consent pursuant to Art. 6 (1) (a) GDPR and, where applicable, Art. 6 (1) (b) GDPR.

We store the data for as long as is necessary to answer your enquiry or to fulfil (pre-)contractual or legal obligations.

The same applies accordingly to contact by phone and by e-mail.

This is a courtesy translation. Only the German version is legally binding.