Privacy Policy

We are delighted to welcome you to our website hartfuss.net and thank you for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is a matter of great importance to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following Privacy Policy serves to fulfil the information obligations arising from the GDPR, as set out in particular in Articles 13 and 14 et seq. of the GDPR.

Data Controller

The data controller within the meaning of Art. 4(7) of the GDPR is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

With regard to our website, the data controller is:

Hartfuss Stahlbau GmbH & Co. KG
Saargemünderstraße 90
66130 Saarbrücken
Germany
E-mail: info@hartfuss.eu
Tel.: +49 (0) 681 9 88 12 -0
Fax: +49 (0) 681 9 88 12 -88

Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the device making the request (e.g. computer, mobile phone, tablet, etc.).

Which personal data are collected and to what extent are they processed?

(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Notification of whether the request was successful;
(9) Volume of data transmitted

These data are stored in the log files of our system. They are not stored together with personal data of a specific user, so that no identification of individual visitors takes place.

Legal basis for the processing of personal data

Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest lies in ensuring the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary for the course of a website visit in order to enable the delivery of the website. The storage and processing of personal data also serves to maintain the compatibility of our website for as many visitors as possible, and to prevent misuse and resolve faults. For this purpose, it is necessary to log the technical data of the accessing device so as to be able to respond as early as possible to display errors, attacks on our IT systems and/or functional errors on our website. The data also serve to optimise the website and to ensure the general security of our information technology systems.

Duration of storage

The aforementioned technical data are deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, and at the latest 3 months after accessing our website.

Right to object and deletion

You may object to the processing at any time pursuant to Art. 21 of the GDPR and request the deletion of data pursuant to Art. 17 of the GDPR. The rights available to you and how to exercise them are set out in the lower section of this Privacy Policy.

Integration of External Web Services and Processing of Data Outside the EU

Our website uses active content from external providers, known as web services. By accessing our website, these external providers may receive personal information about your visit. Processing of data outside the EU may occur in this context. You can prevent this by installing an appropriate browser plug-in or by disabling the execution of scripts in your browser. This may result in functional restrictions on the websites you visit.

We use the following external web services:

  • Gravatar

    We use the Gravatar service on our website, provided by Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, D02 AY86 Dublin, Ireland, E-mail: privacypolicyupdates@automattic.com, Website: https://gravatar.com/. The transmission and processing of personal data takes place exclusively on servers within the European Union.

    The legal basis for the transmission of personal data is your consent given on our website, pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR.

    Gravatar is a service for providing avatars across websites.

    You may withdraw your consent at any time. Further information on withdrawing your consent can be found either at the point of consent or at the end of this Privacy Policy.

    Further information on the handling of transmitted data can be found in the provider’s privacy policy at: https://automattic.com/privacy/.

    The provider also offers an opt-out option at: https://automattic.com/privacy/.

  • Rechtstextsnippet and Modules

    We use the Rechtstextsnippet and Modules service on our website, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, E-mail: support@website-check.de, Website: https://www.website-check.de/. The transmission and processing of personal data takes place exclusively on servers within the European Union.

    The legal basis for the transmission and processing is Art. 6(1)(c) of the GDPR. The use of this service supports us in fulfilling our legal obligations.

    This service is used to dynamically load the content of our legal texts on our website. The integration ensures that the most current versions of these texts are always displayed. Additional technical modules relating to legal texts or legally required elements may also be loaded via this integration.

    The rights available to you with regard to this processing are set out at the end of this Privacy Policy.

    Further information on the handling of transmitted data can be found in the provider’s privacy policy at: https://www.website-check.de/datenschutzerklaerung/.

Data Security and Data Protection, Communication by E-mail

Your personal data are protected by technical and organisational measures during collection, storage and processing, so as to render them inaccessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security during transmission to our IT systems. We therefore recommend the use of encrypted communication or postal correspondence for information requiring a high degree of confidentiality.

Right of Access and Requests for Rectification – Erasure & Restriction of Data – Withdrawal of Consent – Right to Object

Right of Access

You have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have a right of access to the information referred to in Art. 15(1) of the GDPR, provided that the rights and freedoms of other persons are not affected (cf. Art. 15(4) of the GDPR). We are also happy to provide you with a copy of the data.

Right to Rectification

Pursuant to Art. 16 of the GDPR, you have the right to have any inaccurate personal data held by us (such as address, name, etc.) corrected at any time. You may also request at any time that incomplete data held by us be completed. Any necessary amendment will be made without delay.

Right to Erasure

Pursuant to Art. 17(1) of the GDPR, you have the right to request that we erase personal data collected about you where:

  • the data are no longer necessary for the purposes for which they were collected;
  • the legal basis for processing has lapsed following the withdrawal of your consent;
  • you have objected to the processing and there are no overriding legitimate grounds for the processing;
  • your data are being processed unlawfully;
  • a legal obligation requires it, or a collection has taken place pursuant to Art. 8(1) of the GDPR.

This right does not apply, pursuant to Art. 17(3) of the GDPR, where:

  • the processing is necessary for the exercise of the right to freedom of expression and information;
  • your data were collected on the basis of a legal obligation;
  • the processing is necessary for reasons of public interest;
  • the data are necessary for the establishment, exercise or defence of legal claims.

Right to Restriction of Processing

Pursuant to Art. 18(1) of the GDPR, you have the right, in certain cases, to request the restriction of the processing of your personal data, in particular where:

  • you contest the accuracy of the personal data;
  • the processing is unlawful and you object to its erasure;
  • the data are no longer required for processing purposes but are needed by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pursuant to Art. 21(1) of the GDPR and it has not yet been determined whether the legitimate grounds of the controller override yours.

Right to Withdraw Consent

Where you have given your express consent to the processing of your personal data (Art. 6(1)(a) or Art. 9(2)(a) of the GDPR), you may withdraw that consent at any time. Please note that withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

Right to Object

Pursuant to Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6(1)(f) of the GDPR (legitimate interest). This right applies only where there are particular circumstances that militate against the storage and processing of your data.

How to exercise your rights

You may exercise your rights at any time by contacting us at the following address:

Hartfuss Stahlbau GmbH & Co. KG
Saargemünderstraße 90
66130 Saarbrücken
Germany
E-mail: info@hartfuss.eu
Tel.: +49 (0) 681 9 88 12 -0
Fax: +49 (0) 681 9 88 12 -88

Right to Data Portability

Pursuant to Art. 20 of the GDPR, you have the right to receive personal data relating to you in a structured, commonly used and machine-readable format. The data may be transmitted either directly to you or to a controller of your choosing.

Upon request, we will provide you, pursuant to Art. 20(1) of the GDPR, with the following data:

  • data collected on the basis of your express consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR;
  • data received by us in the context of existing contracts pursuant to Art. 6(1)(b) of the GDPR;
  • data processed by automated means.

We will transmit personal data directly to a controller of your choosing where this is technically feasible. Please note that we are not permitted to transfer data that would interfere with the freedoms and rights of other persons, pursuant to Art. 20(4) of the GDPR.

Right to Lodge a Complaint with a Supervisory Authority pursuant to Art. 77(1) of the GDPR

If you suspect that your data are being processed unlawfully on our website, you may at any time seek judicial remedy or pursue any other legal avenue available to you. Independently of this, you have the right, pursuant to Art. 77(1) of the GDPR, to lodge a complaint with a supervisory authority. This right may be exercised before the supervisory authority of the EU Member State in which you are habitually resident, in which you work, and/or in which the alleged infringement took place. The supervisory authority with which the complaint is lodged will inform you of the progress and outcome of your complaint, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.

Prepared by:

© DURY LEGAL Rechtsanwälte – www.dury.de

© Website-Check GmbH – www.website-check.de