HeMaTech Prüftechnik GmbH & Co. KG

Privacy Policy

We are very pleased that you are interested in our company. Data protection is a top priority for the management of HeMaTech Prüftechnik GmbH & Co. KG. In general, you can use the HeMaTech Prüftechnik GmbH & Co. KG website without providing any personal data. However, if a data subject wishes to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to HeMaTech Prüftechnik GmbH & Co. KG. Through this Privacy Policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.

As the data controller, HeMaTech Prüftechnik GmbH & Co. KG has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data processed through this website. However, internet-based data transmissions may inherently involve security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide personal data to us through alternative means, such as by telephone.

1. Definitions

The privacy policy of HeMaTech Prüftechnik GmbH & Co. KG is based on the terminology used by European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this Privacy Policy, we use the following terms, among others:

a) personal data

Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b) data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of disclosure, the matching or linking, the restriction, erasure, or destruction.

d) Restriction of processing

Restriction of processing refers to the marking of stored personal data with the aim of limiting its future processing.

e) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data is not attributed to an identified or identifiable natural person.

f) Data Controller or Controller

The controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

g) Data processor

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

h) Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.

i) Third party

A “third party” is a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

j) Consent

Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or other unambiguous affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

2. Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws in force in the Member States of the European Union, and other provisions relating to data protection is:

HeMaTech Prüftechnik GmbH & Co. KG
Siemensstr. 7
71409 Schwaikheim
Germany

Phone: +49 7195 1369-0
Email: [email protected]
Website: www.hematech-at.de

3. Collection of General Data and Information

Every time our website is accessed, a range of general data and information is collected. This general data and information is stored in the server’s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as the referrer), (4) the subpages on our website accessed via an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol (IP) address, (7) the Internet service provider of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems. 

When using this general data and information, HeMaTech Prüftechnik GmbH & Co. KG does not draw any conclusions about the data subject. Rather, this information is needed to (1) correctly deliver the content of our website, (2) optimize the content of our website and the advertising on it, (3) ensure the ongoing functionality of our information technology systems and the technology of our website, and (4) provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyberattack. HeMaTech Prüftechnik GmbH & Co. KG therefore evaluates this anonymously collected data and information both for statistical purposes and with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject and is automatically deleted on a daily basis.

4. Contact options via the website

In accordance with legal requirements, our website contains information that enables you to quickly contact our company electronically and communicate directly with us, including a general electronic mail (email) address. If you contact the data controller via email or through a contact form, the personal data you provide will be automatically stored for the purpose of processing your inquiry or establishing contact. This personal data will not be disclosed to third parties.

5. Legal Basis for Data Processing

The legal basis for data processing pursuant to Article 6(1), first sentence, of the GDPR is:

  • consent provided by you (lit. a);
  • the processing of data for the purpose of fulfilling a contract or entering into a contract (lit. b);
  • compliance with a legal obligation (lit. c);
  • Data collection is based on our company's legitimate interest (lit. f);

6. Cookies

We use cookies to provide our website. Cookies are small text files that are placed and stored on a computer system via a web browser; in other words, the cookies are stored on your device and are used to recognize your device.

By using cookies, we can provide you with more user-friendly services that would not be possible without them. Cookies allow us to optimize the information and content on our website to better suit the user’s needs. As mentioned earlier, cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to navigate our website. For example, a user of a website that uses cookies does not have to re-enter their login credentials every time they visit the website, because this information is retrieved by the website from the cookie stored on the user’s computer system.

When you visit our website, you will be informed about the use of cookies, and your consent to the processing of personal data used in this context will be obtained with reference to this Privacy Policy. You may revoke or modify your consent at any time by clicking the “Privacy Settings” link at the bottom of the website.
You can prevent our website from setting cookies at any time by adjusting the settings in your web browser, thereby permanently objecting to the use of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers. If you disable cookies in the web browser you are using, you may not be able to use all features of our website to their full extent.

7. Privacy Policy Regarding the Use of the Following Services

Usercentrics

We use the Usercentrics consent management tool from Usercentrics GmbH (Rosenthal 4, 80331, Munich; “Usercentrics”) on our website. This tool allows you to grant consent for data processing via the website—in particular, the use of cookies—and to exercise your right to revoke consent that has already been granted. The purpose of this data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations. Cookies may be used for this purpose. In this context, the following information, among other things, may be collected and transmitted to Usercentrics: the date and time the page was accessed, information about the browser and device you are using, an anonymized IP address, and opt-in and opt-out data. This data is not disclosed to any other third parties. Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR. Proof of the revocation of previously granted consent is retained for a period of three years. For more information on data protection at Usercentrics, please visit:https://usercentrics.com/privacy-policy/.

Using Google Tag Manager

We use Google Tag Manager from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller. Google Tag Manager itself does not process any personal data and does not set any cookies. It is used exclusively to manage tags, which in turn can trigger other services. However, personal data may still be transferred to the United States in connection with the triggered services. In such cases, the respective privacy policies of the integrated services apply.

Use of Google Analytics with the anonymization feature

We use the web analytics service Google Analytics, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), on our website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data.
Data processing is carried out for the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage.

The following information, among other things, may be processed: IP address, date and time of the page view, click path, information about the browser and device used, pages visited, referrer URL, and location data.
Google Analytics uses cookies and similar technologies. The information generated by these technologies regarding your use of this website is generally transmitted to Google’s servers and stored there.

Data processing is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. Personal data may be transferred to the United States. Google bases this data processing on the European Commission’s Standard Contractual Clauses in accordance with Article 46 of the GDPR.

For more information: https://policies.google.com/privacy

Use of Google Inc.'s remarketing or "Similar Audiences" feature

We use the remarketing or “Similar Audiences” feature provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google affiliate responsible for processing your data and complying with applicable data protection laws. The purpose of this feature is to analyze visitor behavior and interests.

Google uses cookies to analyze website usage, which serves as the basis for creating interest-based ads. These cookies track visits to the website and collect anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website on the Google Display Network, you will see ads that are highly likely to be based on the product and information sections you previously viewed. Your data may be transferred to the United States.

Data processing, in particular the use of cookies, is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
For more information about Google Remarketing and the associated privacy policy, please visit: https://www.google.com/privacy/ads/

Use of Google Ads and Conversion Tracking

We use Google Ads and conversion tracking provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on this website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller.

When you click on an ad served by Google, a conversion tracking cookie is set. These cookies are not used to identify you personally and do not contain any personally identifiable information. If you visit certain pages on our website and the cookie is still valid, Google and we can recognize that you clicked on an ad.

Data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. Personal data may be transferred to the United States. Google bases this data processing on the European Commission’s Standard Contractual Clauses in accordance with Article 46 of the GDPR.
For more information: https://policies.google.com/privacy

Use of Google Maps

We use Google Maps, provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), to display maps and locations. When you access Google Maps, information about your use of the website (including your IP address) may be transmitted to and stored on Google’s servers.
This use is based on Article 6(1)(f) of the GDPR (legitimate interest in an appealing presentation and easy locatability of our locations). Personal data may be transferred to the United States. Google bases this data processing on the European Commission’s Standard Contractual Clauses pursuant to Article 46 of the GDPR. Further information: https://policies.google.com/privacy

8. Your Rights and Exercising Your Rights

You may exercise the following rights with respect to us:

a) Right of Access

  • personal data is stored;
  • For what purpose is the data processed;
  • What categories of data are processed;
  • To whom has the personal data been disclosed or will it be disclosed, in particular to recipients in third countries or to international organizations?
  • How long will the personal data be stored? If this is not possible, what are the criteria for determining this period?;
  • What rights do you have?

b) Right to Rectification

You have the right to request that we correct any inaccurate personal data we have stored about you. Furthermore, taking into account the purposes of the processing, you have the right to request that we complete any incomplete personal data—including by means of a supplementary statement.

c) Right to erasure (right to be forgotten)

You may request that we delete your personal data if any of the following grounds apply and provided that the processing is not necessary:
  • The personal data was collected or otherwise processed for purposes for which it is no longer necessary;
  • You withdraw your consent to data processing, and there is no other legal basis for the processing;
  • You object to the processing, and we have no overriding legitimate grounds for the processing;
  • the personal data was processed unlawfully;
  • the erasure of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject;
  • You are under 16 years of age.

d) Right to restriction of processing

You have the right to request that processing be restricted if any of the following conditions are met. In such cases, the data will be marked as restricted and will not be further processed:
  • The accuracy of the personal data is disputed for the duration of our review;
  • the processing is unlawful, and you object to the erasure of your personal data and instead request that the use of your personal data be restricted;
  • we no longer need your personal data for the purposes of processing and would normally have to delete it, but you still need it to assert, exercise, or defend legal claims;
  • You have objected to the processing, and it has not yet been determined whether the controller’s legitimate grounds outweigh yours.

e) Right to Object

If the processing of your personal data is based on our legitimate interests, you may object to the processing for reasons arising from your particular situation.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, or the processing is necessary for the establishment, exercise, or defense of legal claims.

f) Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time.
If you wish to exercise your right to withdraw your consent, you may contact a representative of the data controller at any time or send an email to [email protected]. Alternatively, you may do so in writing by sending a letter to the mailing address listed at the beginning of this statement. If you object to the storage of your personal data, the conversation cannot continue.

9. Data Protection for Job Applications and During the Hiring Process

The data controller collects and processes applicants’ personal data for the purpose of conducting the application process. Processing may also be carried out electronically. This is particularly the case when an applicant submits the relevant application documents electronically, for example via email. If the data controller enters into an employment contract with an applicant, the submitted data will be stored for the purpose of administering the employment relationship in accordance with legal requirements. If the data controller does not enter into an employment contract with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this context include, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

10. Right to File a Complaint with the Data Protection Authority

You have the right to file a data protection complaint with the supervisory authorities. The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg. The complaint may be filed with any supervisory authority, regardless of jurisdiction.
10695 - HeMaTech Prüftechnik GmbH & Co. KG - Download