The protection of your personal information, which you make available for us to process, is very important to us. In the following, we provide information about the processing of personal data when using our online services.
As part of our responsibility under data protection law, the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR"), additional obligations have been imposed on us to ensure the protection of personal data of the person affected by processing (we also hereinafter address you as the data subject as "customer", "user", "you", or "data subject").
Insofar as we decide on the purposes and means of data processing, either alone or jointly with others, this includes, in particular, the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing (cf. Art. 13 and 14 GDPR). This data protection notice informs you about the way in which we process your personal data.
Our data protection information has a modular structure. It consists of a general part covering all processing of personal data and processing situations that come into effect every time a website is accessed (A. General) and a special part, the content of which refers only to the processing situation specified therein with the name of the respective offering or product, in particular the visit to websites described in greater detail here (B. Visiting websites).
Part A General Information Always relevant.
Part B Website Relevant if you use our German website.
Part C Marketing Analytics Relevant if you use our German website
Part D Cookie Information Relevant if you use our German website.
1. Name und Anschrift des für die Verarbeitung Verantwortlichen
The controller for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR is:
proHeq GmbH
Carl-Benz-Straße 10, 75217 Birkenfeld
Telephone +49 7231 4885 100
Email address:info[at]@hepp.de
For further information about our company, please refer to the lmprint on our website https://www.hepp.de/en/imprint.
2. Contact details of the data protection officer
Our data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection. His contact details are:
WMF GmbH
Datenschutz
WMF Platz 1
73312 Geislingen/Steige
datenschutz.wmf(at)groupeseb.com
3. Requirements for the transfer of personal data to third countries
As part of our business relationships, your personal information may be shared with or disclosed to third parties. These can also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out exclusively for the fulfilment of contractual and business obligations and for the maintenance of your business relationship with us (the legal basis is Art. 6 (1) lit. b or lit. f in each case in conjunction with Art. 44 et seq. GDPR). We will inform you about the respective details of the transfer at the relevant points below.
By means of so-called adequacy decisions, the European Commission certifies that some third countries have data protection comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/...). In other third countries to which personal data may be transferred, however, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we make sure that data protection is sufficiently guaranteed. Please contact our data protection officer (see A.(3)) if you would like more information on this subject.
4. No obligation to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data in advance. As a customer, you are under no legal or contractual obligation to provide us with your personal data. However, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this is intentionally the case within the scope of the products presented below and offered by us, you will be informed of this separately.
5. Legal obligation to provide certain data
Under certain circumstances, we may be subject to a special legal or legal obligation to provide the lawfully processed personal data to third parties, in particular public authorities (Art. 6 (1) (1) lit. c GDPR).
6. Rights of data subjects
6.1 Right of access
You can request information about your personal data that we process in accordance with Art. 15 GDPR.
6.2 Right to object
You have the right to object for special reasons (see point 9).
6.3 Right to rectification
If the information concerning you is not (or no longer) accurate, you can request correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
6.4 Right to erasure
You can request the erasure of your personal data in accordance with Art. 17 GDPR.
6.5 Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data.
6.6 Right to lodge a complaint
If you are of the opinion that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. This also includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
6.7 Right to data portability
In the event that the requirements of Art. 20 (1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR, but are justified pursuant to Art. 6 (1) lit. f GDPR. The requirements of Art. 20 (1) GDPR are therefore not fulfilled in this respect.
7. Right to object pursuant to Art. 21 (1) GDPR
You have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6 paragraph 1 lit. f GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.
8. Explanation of the function
Information about our companies and the services we offer can be found in particular under www.hepp.de including the associated sub-domains and subpages. When you visit our websites, your personal data may be processed.
We must point out that you can decide at your own discretion whether to provide us with your data. However, if and to what extent you do not wish to provide us with the necessary data for a particular service, you will not be permitted to use or fully use the respective service. We only use the data to provide the service you have requested.
9. Processing activities
When using the websites for informational purposes, the following categories of personal data may be collected, stored and further processed by us:
9.1 Data processed for the provision of the website and the creation of log files
9.1.1 What data is processed and for what purpose?
Each time the content of the website is accessed, data that may allow identification is temporarily stored. The following data is collected:
The temporary storage of the data is necessary for the course of a website visit in order to enable delivery of the website. The temporary storage of the data is necessary for the duration of a website visit in order to enable provision of the website. These purposes also constitute our legitimate interest in data processing.
9.1.2 On what legal basis is this data processed?
The data is processed on the basis of Art. 6 (1) lit. f GDPR.
9.1.3 Are there any other recipients of the personal data besides the controller?
The website is maintained by the companies 7thSense GmbH, Wilhelmstraße 25, 72764 Reutlingen, Germany, www.7thsense.de, and ideas that matters GmbH & Co. KG, Vogelsangstraße 16A, 70176 Stuttgart, Germany, www.ideas-tm.de.
The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany.
The supervising companies and the hoster receive the above-mentioned data as processors.
9.1.4 How long is the data stored?
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. During provision of the website, this is the case when the respective session has ended. The log files are stored [..., up to a maximum of 24 hours] in a manner directly and exclusively accessible to administrators. After that, they are only available indirectly via the reconstruction of backups and are permanently deleted after [..., maximum four weeks].
9.2 Contact form
9.2.1 What data is processed and for what purpose?
When using the contact form, the data categories transmitted through it are "contact form data":
are processed. The purpose of the processing is to be able to contact you with questions about our products and services and, where necessary, to provide assistance.
.
9.2.2 On what legal basis is this data processed?
We process this data on the basis of Art. 6 (1) lit. b for the purpose of initiating or fulfilling a contract.
9.2.3 How long is the data stored?
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is generally the case with the contact form after it has been sent to us. However, it may be stored for up to ten years due to legal obligations. As a rule, the storage period is three years.
9.3 Newsletter
We offer a subscription to our newsletter. If you sign up for our newsletter, the following "newsletter data" will be processed by us:
The purpose of the processing is to send you the newsletter and to inform you about current products, product developments and promotions as well as to fulfil our accountability obligations and, where necessary, to be able to clarify any possible misuse of your personal data.
Please note that we analyse your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons or tracking pixels which constitute pixel image files that are saved on our website. For the analyses, we link the data stated in B.(9.1.1) and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. We create a user profile from the data obtained in this way in order to tailor the newsletter to your individual interests. When you read the newsletter, we therefore record which links you click on and thereby infer your personal interests. We link this data to your transactions on our website.
You can stop this tracking at any time by clicking on the highlighted link provided in every email or letting us know via a different contact method. This information is saved for as long as you subscribe to the newsletter. If you unsubscribe, we only save the data in anonymous statistical form. Furthermore, such tracking is not possible if you have disabled image display by default in your email programme. In such cases, the newsletter will not be fully displayed and you may not be able to use all the features. If you show pictures manually, this tracking takes place.
9.3.1 On what legal basis is this data processed?
By subscribing to our newsletter, you consent to the processing of your personal data (the legal basis is Art. 6 (1) lit. a GDPR). We use the so-called double opt-in procedure for subscriptions to our newsletter. This means that once you have registered we send an email to the given address, asking you to confirm that you want to receive the newsletter.
9.3.2 Are there any other recipients of the personal data besides the controller?
The company XQueue GmbH, Christian-Pless-Str. 11–13, 63069 Offenbach, Germany, will be used to handle the newsletter service.
XQueue GmbH receives the above-mentioned data as a processor.
9.3.3 How long is the data stored?
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. With the newsletter, this is the case when you unsubscribe from the newsletter. Due to documentation requirements, the data can be stored for up to three years after you unsubscribe.
9.4 Use of cookies, third parties and other technologies on our website
9.5 Cookie
We use cookies on our websites. Cookies are files that are stored on your user device when you visit a website. Cookies contain information such as user preferences, login information and other data that can be used to improve the user experience.
We distinguish between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which means that these cookies are stored permanently beyond the individual session. We distinguish between the following cookies in terms of their function:
9.5.1 On what legal basis is this data processed?
The legal basis for cookies that are absolutely necessary to provide you with the expressly requested service is Section 25 (2) (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any use of cookies that is not absolutely technically necessary for this purpose constitutes data processing that is only permitted with your express and active consent in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) (1) lit. a GDPR. This applies in particular to the use of functional, advertising and tracking cookies. Moreover, we will only pass on your personal data processed by cookies to third parties if you have given your explicit consent to this in accordance with Art. 6 (1) (1) lit. a GDPR.
9.5.2 Are there any other recipients of the personal data besides the controller?
If you have given your consent, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, will be used as an analysis partner.
Google Ireland Limited receives the above-mentioned data as a processor.
9.5.3 How long is the data stored?
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For necessary cookies, this is the case when you close the website you have visited or your browser. Due to documentation requirements, the data can be stored for up to three years after you unsubscribe. Further information on the storage period can be found in our Cookie Information. (see (D.)).
9.6 Cookie-Hinweise
For more information about what cookies we use and how you can manage your cookie settings and opt out of certain types of tracking, please see our Cookie Information (see (D)).
10. Embedding videos on YouTube
Nowadays, it is common to supplement product offerings on the Internet with media from third-party platforms. We therefore integrate our YouTube videos into our website and ask you whether you wish to load them each time you access the external content.
To implement privacy-friendly defaults, content is disabled by default. At first, only a blank window is displayed. The video stored on YouTube will only be played if you have consciously consented to the data transmission and thus to the processing of your data by YouTube by clicking on the button offered.
On the basis of this so-called two-click solution, you decide yourself whether your data is sent to YouTube. This implementation is necessary because we have no control over how YouTube processes your data. YouTube is responsible for data protection.
We therefore cannot obtain effective consent under data protection law for this. Above all, this would have to be done in an informed manner. However, since we have no knowledge of the purposes for which YouTube processes your data, we cannot inform you about this.
In addition to the IP address, YouTube may also process technical data (screen resolution, browser used, operating system, etc.). Cookies may also be used, for example, to analyse your browsing behaviour. We ourselves do not receive any information about how you use YouTube and what content you share or comment on.
We therefore point out that you should inform yourself in advance with YouTube about how YouTube processes your data.
We use marketing analytics techniques on our websites. These are described below.
10.1 Google Analytics 4
If you have given your consent, Google Analytics 4, a web analysis service provided by Google LLC, is used on this website. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
10.1.1 Type and purpose of processing
Google Analytics uses cookies that enable us to analyse your use of our website. The information collected by cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.
We use the User ID function. The User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices.
With Google Analytics 4, IP address anonymisation is enabled by default. Due to IP anonymisation, your IP address will be abbreviated by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and abbreviated there. According to Google, the IP address provided by your browser as part of Google Analytics will not be combined with other Google data.
During your visit to the website, your user behaviour is recorded in the form of "events". Events can be:
In addition, the following are recorded:
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
10.1.2 On what legal basis is this data processed?
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (1) lit. a GDPR and Section 25 (1) (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
10.1.3 Are there any other recipients of the personal data besides the controller?
Other recipients of the data are/may be:
Google Ireland Limited receives the above-mentioned data as a processor. Google LLC and Alphabet Inc. receive your data from Google Ireland Limited as controller.
10.1.4 Transfer to third countries
For the United States, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified according to the EU-US Privacy Framework.
10.1.5 Storage period
The data we send and link to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.
10.1.6 Revocation
You can revoke your consent at any time with effect for the future by calling up the cookie settings [SET THE LINK TO THE SETTINGS OPTIONS OF THE CONSENT TOOL HERE] and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of consent before its revocation.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, functionality on this and other websites may be limited. You may also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by
You can find more information about the terms of use of Google Analytics and data protection at Google under https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de.
10.2 Google Ads (DoubleClick Floodlight)
We use DoubleClick Floodlight on our websites. DoubleClick Floodlight is a service , provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you visit our websites, Google places a cookie on your computer to generate a unique username. The content you have used is assigned to this username. For example, this helps avoid displaying an advert that you have already seen. Conversions can also be measured using the cookies. This involves establishing whether you took appropriate action after seeing or accessing a particular advert.
If you do not wish to receive interest-based advertising, you can disable the use of cookies by Google for this purpose by going to the page https://www.google.de/settings/ads. Alternatively, users can disable the use of cookies by third parties by going to the deactivation page for the network advertising initiative.
The purpose and scope of the data collection and further processing and use of the data by Google, as well as the associated rights and settings options to protect the users privacy, are contained in Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de
The cookie policy of proHeq GmbH is directly linked to the settings of the cookies. Here you will find the necessary details about the cookies used as well as the options for accepting or rejecting them. This link will take you to the cookie policy.