instagram icon youtube icon linkedin icon

Privacy statement


The protection of your personal information, which you make available for us to process, is very important to us. In the following, we provide information about the processing of personal data when using our online services.

As part of our responsibility under data protection law, the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR"), additional obligations have been imposed on us to ensure the protection of personal data of the person affected by processing (we also hereinafter address you as the data subject as "customer", "user", "you", or "data subject").

Insofar as we decide on the purposes and means of data processing, either alone or jointly with others, this includes, in particular, the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing (cf. Art. 13 and 14 GDPR). This data protection notice informs you about the way in which we process your personal data.

Our data protection information has a modular structure. It consists of a general part covering all processing of personal data and processing situations that come into effect every time a website is accessed (A. General) and a special part, the content of which refers only to the processing situation specified therein with the name of the respective offering or product, in particular the visit to websites described in greater detail here (B. Visiting websites).


Part A General Information Always relevant.

Part B Website Relevant if you use our German website.

Part C Marketing Analytics Relevant if you use our German website

Part D Cookie Information Relevant if you use our German website. 



A. General information


1. Name und Anschrift des für die Verarbeitung Verantwortlichen

    The controller for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR is:

    proHeq GmbH
    Carl-Benz-Straße 10, 75217 Birkenfeld
    Telephone +49 7231 4885 100
    Email address:info[at]@hepp.de

    For further information about our company, please refer to the lmprint on our website https://www.hepp.de/en/imprint.


    2. Contact details of the data protection officer

      Our data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection. His contact details are:

      WMF GmbH
      Datenschutz
      WMF Platz 1
      73312 Geislingen/Steige
      datenschutz.wmf(at)groupeseb.com

      3. Requirements for the transfer of personal data to third countries

        As part of our business relationships, your personal information may be shared with or disclosed to third parties. These can also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out exclusively for the fulfilment of contractual and business obligations and for the maintenance of your business relationship with us (the legal basis is Art. 6 (1) lit. b or lit. f in each case in conjunction with Art. 44 et seq. GDPR). We will inform you about the respective details of the transfer at the relevant points below.

        By means of so-called adequacy decisions, the European Commission certifies that some third countries have data protection comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/...). In other third countries to which personal data may be transferred, however, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we make sure that data protection is sufficiently guaranteed. Please contact our data protection officer (see A.(3)) if you would like more information on this subject.

        4. No obligation to provide personal data

          We do not make the conclusion of contracts with us dependent on you providing us with personal data in advance. As a customer, you are under no legal or contractual obligation to provide us with your personal data. However, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this is intentionally the case within the scope of the products presented below and offered by us, you will be informed of this separately.

          5. Legal obligation to provide certain data

            Under certain circumstances, we may be subject to a special legal or legal obligation to provide the lawfully processed personal data to third parties, in particular public authorities (Art. 6 (1) (1) lit. c GDPR).

            6. Rights of data subjects

            6.1 Right of access
            You can request information about your personal data that we process in accordance with Art. 15 GDPR.

            6.2 Right to object
            You have the right to object for special reasons (see point 9).

            6.3 Right to rectification
            If the information concerning you is not (or no longer) accurate, you can request correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

            6.4 Right to erasure
            You can request the erasure of your personal data in accordance with Art. 17 GDPR.

            6.5 Right to restriction of processing
            In accordance with Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data.

            6.6 Right to lodge a complaint
            If you are of the opinion that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. This also includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

            6.7 Right to data portability
            In the event that the requirements of Art. 20 (1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR, but are justified pursuant to Art. 6 (1) lit. f GDPR. The requirements of Art. 20 (1) GDPR are therefore not fulfilled in this respect.

            7. Right to object pursuant to Art. 21 (1) GDPR

              You have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6 paragraph 1 lit. f GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.


              B. Visiting websites

              8. Explanation of the function

                Information about our companies and the services we offer can be found in particular under www.hepp.de including the associated sub-domains and subpages. When you visit our websites, your personal data may be processed.

                We must point out that you can decide at your own discretion whether to provide us with your data. However, if and to what extent you do not wish to provide us with the necessary data for a particular service, you will not be permitted to use or fully use the respective service. We only use the data to provide the service you have requested.

                9. Processing activities

                  When using the websites for informational purposes, the following categories of personal data may be collected, stored and further processed by us:

                  9.1 Data processed for the provision of the website and the creation of log files

                  9.1.1 What data is processed and for what purpose?

                  Each time the content of the website is accessed, data that may allow identification is temporarily stored. The following data is collected:

                  • Date and time of access
                  • IP address
                  • Hostname of the accessing computer
                  • Website from which the website was accessed
                  • Websites accessed via the website
                  • Page visited on our website
                  • Message whether the retrieval was successful
                  • Volume of data transferred
                  • Information about the browser type and version used
                  • Operating system

                  The temporary storage of the data is necessary for the course of a website visit in order to enable delivery of the website. The temporary storage of the data is necessary for the duration of a website visit in order to enable provision of the website. These purposes also constitute our legitimate interest in data processing.

                  9.1.2 On what legal basis is this data processed?
                  The data is processed on the basis of Art. 6 (1) lit. f GDPR.

                  9.1.3 Are there any other recipients of the personal data besides the controller?
                  The website is maintained by the companies 7thSense GmbH, Wilhelmstraße 25, 72764 Reutlingen, Germany, www.7thsense.de, and ideas that matters GmbH & Co. KG, Vogelsangstraße 16A, 70176 Stuttgart, Germany, www.ideas-tm.de.
                  The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany.
                  The supervising companies and the hoster receive the above-mentioned data as processors.

                  9.1.4 How long is the data stored?
                  The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. During provision of the website, this is the case when the respective session has ended. The log files are stored [..., up to a maximum of 24 hours] in a manner directly and exclusively accessible to administrators. After that, they are only available indirectly via the reconstruction of backups and are permanently deleted after [..., maximum four weeks].

                  9.2 Contact form

                  9.2.1 What data is processed and for what purpose?

                  When using the contact form, the data categories transmitted through it are "contact form data":

                  • personal & contact details
                  • address data
                  • where applicable, order and product data
                  • and the time of transmission
                  • and, where applicable, voluntarily provided data on location and telephone data

                  are processed. The purpose of the processing is to be able to contact you with questions about our products and services and, where necessary, to provide assistance.


                  9.2.2 On what legal basis is this data processed?

                  We process this data on the basis of Art. 6 (1) lit. b for the purpose of initiating or fulfilling a contract.


                  9.2.3 How long is the data stored?
                  The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is generally the case with the contact form after it has been sent to us. However, it may be stored for up to ten years due to legal obligations. As a rule, the storage period is three years.


                  9.3 Newsletter

                  We offer a subscription to our newsletter. If you sign up for our newsletter, the following "newsletter data" will be processed by us:

                  • IP address (shortened – a personal reference can be established)
                  • Page from which the page was requested (so-called referrer URL)
                  • Date and time of access
                  • Information about the browser type and version used
                  • Email address
                  • Date and time of registration and confirmation

                  The purpose of the processing is to send you the newsletter and to inform you about current products, product developments and promotions as well as to fulfil our accountability obligations and, where necessary, to be able to clarify any possible misuse of your personal data.

                  Please note that we analyse your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons or tracking pixels which constitute pixel image files that are saved on our website. For the analyses, we link the data stated in B.(9.1.1) and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. We create a user profile from the data obtained in this way in order to tailor the newsletter to your individual interests. When you read the newsletter, we therefore record which links you click on and thereby infer your personal interests. We link this data to your transactions on our website.

                  You can stop this tracking at any time by clicking on the highlighted link provided in every email or letting us know via a different contact method. This information is saved for as long as you subscribe to the newsletter. If you unsubscribe, we only save the data in anonymous statistical form. Furthermore, such tracking is not possible if you have disabled image display by default in your email programme. In such cases, the newsletter will not be fully displayed and you may not be able to use all the features. If you show pictures manually, this tracking takes place.

                  9.3.1 On what legal basis is this data processed?
                  By subscribing to our newsletter, you consent to the processing of your personal data (the legal basis is Art. 6 (1) lit. a GDPR). We use the so-called double opt-in procedure for subscriptions to our newsletter. This means that once you have registered we send an email to the given address, asking you to confirm that you want to receive the newsletter.


                  9.3.2 Are there any other recipients of the personal data besides the controller?

                  The company XQueue GmbH, Christian-Pless-Str. 11–13, 63069 Offenbach, Germany, will be used to handle the newsletter service.
                  XQueue GmbH receives the above-mentioned data as a processor.


                  9.3.3 How long is the data stored?

                  The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. With the newsletter, this is the case when you unsubscribe from the newsletter. Due to documentation requirements, the data can be stored for up to three years after you unsubscribe.

                  9.4 Use of cookies, third parties and other technologies on our website

                  9.5 Cookie

                  We use cookies on our websites. Cookies are files that are stored on your user device when you visit a website. Cookies contain information such as user preferences, login information and other data that can be used to improve the user experience.

                  We distinguish between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which means that these cookies are stored permanently beyond the individual session. We distinguish between the following cookies in terms of their function:

                  • Technical (necessary) cookies: These are strictly necessary to navigate the website, use basic features and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which websites you have visited;
                  • Functional cookies: These collect information about how you use our website, which pages you visit and whether errors occur during use of the website; they do not collect information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users;
                  • Advertising and tracking cookies: These serve to offer the website user needs-based advertising on the website or third party offerings and to measure the effectiveness of these offerings;


                  9.5.1 On what legal basis is this data processed?
                  The legal basis for cookies that are absolutely necessary to provide you with the expressly requested service is Section 25 (2) (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any use of cookies that is not absolutely technically necessary for this purpose constitutes data processing that is only permitted with your express and active consent in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) (1) lit. a GDPR. This applies in particular to the use of functional, advertising and tracking cookies. Moreover, we will only pass on your personal data processed by cookies to third parties if you have given your explicit consent to this in accordance with Art. 6 (1) (1) lit. a GDPR.

                  9.5.2 Are there any other recipients of the personal data besides the controller?
                  If you have given your consent, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, will be used as an analysis partner.
                  Google Ireland Limited receives the above-mentioned data as a processor.

                  9.5.3 How long is the data stored?

                  The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For necessary cookies, this is the case when you close the website you have visited or your browser. Due to documentation requirements, the data can be stored for up to three years after you unsubscribe. Further information on the storage period can be found in our Cookie Information. (see (D.)).

                  9.6 Cookie-Hinweise

                  For more information about what cookies we use and how you can manage your cookie settings and opt out of certain types of tracking, please see our Cookie Information (see (D)).

                  10. Embedding videos on YouTube

                    Nowadays, it is common to supplement product offerings on the Internet with media from third-party platforms. We therefore integrate our YouTube videos into our website and ask you whether you wish to load them each time you access the external content.
                    To implement privacy-friendly defaults, content is disabled by default. At first, only a blank window is displayed. The video stored on YouTube will only be played if you have consciously consented to the data transmission and thus to the processing of your data by YouTube by clicking on the button offered.
                    On the basis of this so-called two-click solution, you decide yourself whether your data is sent to YouTube. This implementation is necessary because we have no control over how YouTube processes your data. YouTube is responsible for data protection.
                    We therefore cannot obtain effective consent under data protection law for this. Above all, this would have to be done in an informed manner. However, since we have no knowledge of the purposes for which YouTube processes your data, we cannot inform you about this.
                    In addition to the IP address, YouTube may also process technical data (screen resolution, browser used, operating system, etc.). Cookies may also be used, for example, to analyse your browsing behaviour. We ourselves do not receive any information about how you use YouTube and what content you share or comment on.
                    We therefore point out that you should inform yourself in advance with YouTube about how YouTube processes your data.


                    C. Marketing Analytics

                    We use marketing analytics techniques on our websites. These are described below.

                    10.1 Google Analytics 4

                    If you have given your consent, Google Analytics 4, a web analysis service provided by Google LLC, is used on this website. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

                    10.1.1 Type and purpose of processing

                    Google Analytics uses cookies that enable us to analyse your use of our website. The information collected by cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

                    We use the User ID function. The User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.

                    With Google Analytics 4, IP address anonymisation is enabled by default. Due to IP anonymisation, your IP address will be abbreviated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and abbreviated there. According to Google, the IP address provided by your browser as part of Google Analytics will not be combined with other Google data.

                    During your visit to the website, your user behaviour is recorded in the form of "events". Events can be:

                    • Page impressions
                    • Contacts with us via contact form
                    • First visit to the website
                    • Start of the session
                    • Websites visited
                    • Your "click path", interactions with the website
                    • Scrolls (whenever a user scrolls to the bottom of the page (90%)
                    • Clicks on external links
                    • Internal searches
                    • Interactions with videos
                    • File downloads
                    • Ads seen/clicked on
                    • Language setting

                    In addition, the following are recorded:

                    • Your approximate location (region)
                    • Date and time of the visit
                    • Your IP address (in abbreviated form)
                    • Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
                    • Your Internet provider
                    • The referrer URL (from which website/advertising medium you came to this website)

                    On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

                    10.1.2 On what legal basis is this data processed?
                    The legal basis for this data processing is your consent in accordance with Art. 6 (1) (1) lit. a GDPR and Section 25 (1) (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

                    10.1.3 Are there any other recipients of the personal data besides the controller?

                    Other recipients of the data are/may be:

                    • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
                    • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
                    • Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

                    Google Ireland Limited receives the above-mentioned data as a processor. Google LLC and Alphabet Inc. receive your data from Google Ireland Limited as controller.

                    10.1.4 Transfer to third countries
                    For the United States, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified according to the EU-US Privacy Framework.

                    10.1.5 Storage period
                    The data we send and link to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.

                    10.1.6 Revocation
                    You can revoke your consent at any time with effect for the future by calling up the cookie settings [SET THE LINK TO THE SETTINGS OPTIONS OF THE CONSENT TOOL HERE] and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of consent before its revocation.

                    You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, functionality on this and other websites may be limited. You may also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by

                    1. not giving your consent to the setting of the cookie or by
                    2. downloading and installing the browser add-on to disable Google Analytics HERE.

                    You can find more information about the terms of use of Google Analytics and data protection at Google under https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de.


                    10.2 Google Ads (DoubleClick Floodlight)

                    We use DoubleClick Floodlight on our websites. DoubleClick Floodlight is a service , provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you visit our websites, Google places a cookie on your computer to generate a unique username. The content you have used is assigned to this username. For example, this helps avoid displaying an advert that you have already seen. Conversions can also be measured using the cookies. This involves establishing whether you took appropriate action after seeing or accessing a particular advert.

                    If you do not wish to receive interest-based advertising, you can disable the use of cookies by Google for this purpose by going to the page https://www.google.de/settings/ads. Alternatively, users can disable the use of cookies by third parties by going to the deactivation page for the network advertising initiative.

                    The purpose and scope of the data collection and further processing and use of the data by Google, as well as the associated rights and settings options to protect the users privacy, are contained in Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

                    D. Cookie Information

                    The cookie policy of proHeq GmbH is directly linked to the settings of the cookies. Here you will find the necessary details about the cookies used as well as the options for accepting or rejecting them. This link will take you to the cookie policy.

                    Cutlery

                    Buffet

                    Table Top

                    Service and Repair


                    Company

                    Blog and Press

                    Service

                    Contact