Data privacy policy www.alpe-ladders.com

1. Data privacy policy

We are glad that you have visited our website and are interested in our company and products. The protection of your personal data is very important to us. Hymer-Leichtmetallbau GmbH & Co. KG (hereinafter referred to as "Hymer-Leichtmetallbau", "we" or "us") sets a high value on the security of user data and compliance with the provisions in data protection legislation.

Hymer-Leichtmetallbau websites may contain links to websites of other providers to which this data privacy policy does not apply. What data the operators of these sites might collect is beyond the scope of our knowledge and influence. You will find information in the data protection notice of the respective site.

In what follows, we provide you with detailed information about how we handle your data.

 

1.1 Definitions of terms

The data privacy policy is based on the terminology used in the General Data Protection Regulation (GDPR). 

"Personal data" refers to all information referring to an identified or identifiable natural person (hereinafter referred to as "data subject") (Art. 4 No. 1 GDPR). Your personal data includes information such as your core data (first and last name, address and date of birth), your contact information (phone number, e-mail address), your billing data (bank details) and much more.

 

"Processing" refers to every process carried out with or without the aid of an automated process or every such series of processes in association with personal data, such as collecting, recording, organising, ordering, storing, adapting or modifying, reading out, querying, using, disclosing through transfer, distributing or some other form of providing, comparing or linking, restricting, deleting or destroying.

 

"Data subject" refers to every identified or identifiable natural person whose personal data are processed by the processing controller.

 

"Controller" refers to the natural or legal entity, agency, institution or other body which decides, either unilaterally or in conjunction with others, on the purposes and means of processing personal data. If the purposes and means of this processing are specified by the law of the European Union or of its Member States, then the controller or the criteria defined for designating this person can be provided for in accordance with Union or Member State law.

 

"Processor" refers to a natural or legal entity, agency, institution or other body which processes the personal data on behalf of the controller.

 

"Recipient" refers to a natural or legal entity, agency, institution or other body to which the personal data is revealed, regardless of whether or not this is a third party. However, those agencies which might receive personal data in accordance with Union or Member State law as part of a particular investigation order shall not be regarded as recipients.

 

"Third party" refers to a natural or legal entity, agency, institution or other body aside from the data subject, controller, processor and persons who answer directly to the controller or processor and are authorised to process the personal data.

 

"Consent" refers to every declaration of intent which the data subject, having been informed, voluntarily and unmistakably makes for a particular case in the form of a declaration or other unmistakable confirming action through which the data subject indicates agreement to having the personal data in question be processed.

 

1.2 Collection and processing of personal data

It is always possible to use our Internet sites without providing any personal data. However, if you would like to avail yourself to special services of our company through our Internet site, that could require processing of personal data. If the processing of personal data is required and if there is no legal basis for such processing, we generally obtain the data subject's consent.

 

2. Purposes of collection - Category of data - Legal basis for the processing

2.1 Anonymous data collection

You can visit our site without actively providing information about your person. Each time the Internet site is visited, however, we automatically store access data (server log files) such as the name of your Internet service provider, the operating system used, the website from which you are visiting us, the date and duration of your visit, and the name of the requested file; in addition, for security reasons (such as detecting attacks on our websites) the IP address of the computer used is kept for the duration of 7 days. These data are evaluated exclusively for improving our website and do not allow any conclusions to be drawn about your person. These data will be not aggregated with other data sources. The legal basis for processing the data is Art. 6 Paragraph 1 GDPR. We process and use the data for the following purposes: 1. Preparing the websites of Hymer-Leichtmetallbau; 2. Improving our websites; and 3. Preventing and recognising errors/malfunctions as well as misuse of the websites. This type of data processing occurs either to fulfil the contract regarding the use of Hymer-Leichtmetallbau websites or because we have a legitimate interest in ensuring that the Hymer-Leichtmetallbau websites function and operate properly as well as adapt to the requirements of the users.

 

2.2 Use of cookie tracking

We use what are known as cookies on our websites to ensure that our website looks attractive during your visit and to enable the use of certain functions. This involves standard Internet technology for storing and retrieving login information and other usage information for all who use the Hymer-Leichtmetallbau websites. Cookies are small text files which are stored on your end device; their function includes enabling us to save user settings so that our websites can be displayed in a format that is tailored to your device. Some of the cookies we use are deleted after the browser session has ended, in other words, when you close your browser ("session cookies"). Other cookies remain on your end device and enable us or our partner companies to recognise your browser the next time you visit ("permanent cookies").

You can set your browser to inform you about the placement of cookies and can decide in each case whether to accept them or rule out the acceptance of cookies in certain cases or in general. Furthermore, the cookies can be deleted afterwards to remove data which the websites have stored on your computer. You can quickly find instructions on the Internet for how to do this. Deactivation of cookies can result in limited functionality of Hymer-Leichtmetallbau websites.

Deactivating or removing cookies (opt-out) 
Every web browser offers options for limiting and deleting cookies. For more information about this, refer to the following websites:

Internet Explorer:

https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox:

https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

Google Chrome:

https://support.google.com/chrome/answer/95647?hl=en

Safari:

https://support.apple.com/en-gb/HT201265

 

2.3 Use of Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider of this service is Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses what are called cookies, text files which are stored on your computer and enable your use of the website to be analysed. The information generated by the cookies through your use of this website (including your IP address) is transmitted to a server of Google in the United States and stored there. Google will use this information to analyse your use of the website, compile reports about the website activity for the website operator and provide other services connected with use of the website and the Internet. If necessary, Google will also transmit this information to third parties, insofar as this is prescribed by law, or insofar as these third parties process this data on behalf of Google.

 

 

Preventing the storage of cookies

You can prevent the storage of cookies through a corresponding setting in your browser software; in this case, however, we draw your attention to the fact that you might not be able to use all of this website's functions to their full extent. By using this website, you declare your consent to having the data about you that is collected be processed by Google in the manner described earlier and for the aforementioned purpose.

 

IP anonymisation

We have activated the IP anonymisation function on this website. This way your IP address is truncated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area before transfer to the United States.

 

Objection to data collection

If you do not want Google to obtain data from your browser when you call up the sites, you can find the opt-out solution for Google Analytics through the link here: https://tools.google.com/dlpage/gaoptout?hl=en. This plug-in prevents the browser from requesting the Analytics code, so that Google does not obtain any data when you call up the site. The plug-in is available only for Microsoft Internet Explorer 11, Google Chrome, Mozilla Firefox, Apple Safari and Opera. According to Google, the browser blocks the Google Analytics script after the plug-in is installed. For more detailed information on the conditions of use and data protection, visit https://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=en.

 

Demographic features of Google Analytics

This website uses the "demographic features" function of Google Analytics. This enables the creation of reports which contain information about the age, sex and interests of the website visitors. These data are derived from interest-related advertising of Google as well as from visitor data of third-party suppliers. These data cannot be associated with any particular person. You can deactivate this function at any time through the ad settings in your Google account or generally prohibit Google Analytics from collecting your data as outlined in the point "Objection to data collection".

 

2.4 Contact form/enquiries

You have the option of sending us enquiries using the contact form on our site. When you do this, your information from the contact form (content of your enquiry, subject of your enquiry and date), including the contact information you have specified there (first name, last name, company, address, phone number and e-mail), is stored by us for processing the enquiry and in case of follow-up questions. The legal basis for collecting and processing the data is Art. 6 Paragraph 1 GDPR.

The data you enter in the contact form remain with us until you request that we delete them, you withdraw your consent to have them stored or the purpose for storing the data no longer applies (for example, after your enquiry has been fully processed). Mandatory legal provisions—particularly retention periods—remain unaffected.

 

2.5 E-mail contact

If you send enquiries or information to us via e-mail, your information (e-mail address, content of your e-mail, subject of your e-mail and date), including the contact information you have specified there (first name, last name; where appropriate, phone number and address), is stored by us for processing the enquiry and in case of follow-up questions. We do not share these data without your consent. The legal basis for collecting and processing the data is Art. 6 Paragraph 1 GDPR.

The user should note that it is possible for e-mails to be read or altered along their transmission path without authorisation or detection of this. Hymer-Leichtmetallbau uses software for filtering unwanted e-mails (spam filter). The spam filter can reject e-mails if they have been identified incorrectly as spam based on certain characteristics.

The data you enter remain with us until you request that we delete them, you withdraw your consent to have them stored or the purpose for storing the data no longer applies (for example, after your enquiry has been fully processed). Mandatory legal provisions—particularly retention periods—remain unaffected.

 

3. Transfer of the data

3.1 Transfer internally, within Hymer-Leichtmetallbau

We transfer your data internally to the responsible offices of our management to fulfil our contractual or legal obligations. Your data will be transferred or revealed only to the extent required for this purpose, in compliance with the pertinent data protection provisions.

 

3.2 Company-wide transfer

Hymer-Leichtmetallbau is a globally active company with headquarters in Germany. The data which you transfer to us are stored in our centralised customer database in Germany and forwarded within the company for management purposes. If the data is passed within the company, this occurs to fulfil the contract or as a condition of use for the websites. In addition, there may be an interest in forwarding these data for internal, administrative purposes. If your data is processed outside of Europe, for example, in Turkey, this transfer will occur in compliance with all applicable data protection laws and particularly in accordance with Art. 44 f. GDPR.

 

3.3 Transfer to further recipients

We transfer your data to certain recipients so that we can provide corresponding applications and services (referred to as "processors"), who render external services for us, such as newsletter services, advertising agencies and IT providers. These process the data only in accordance with our instructions; moreover, they are prohibited from using these data for their own commercial purposes, which do not correspond to the agreed-upon purposes.

Where appropriate, we must reveal personal data if legally obligated to do so as part of an ongoing court procedure, based on a mandate or based on applicable law (Art. 6 Paragraph 1 Subparagraph (f) GDPR).

We share your personal data only if:

You have given your express consent to do so in accordance with Art. 6 Paragraph 1 Paragraph 1 Subparagraph (a) GDPR,

Such sharing is required in accordance with Art. 6 Paragraph 1 Paragraph 1 Subparagraph (f) GDPR in order to assert, exercise or defend legal claims and there is no reason to assume that you have a predominant interest worthy of protection in not having your data be shared,

In the event that there is a legal obligation to share in accordance with Art. 6 Paragraph 1 Paragraph 1 Subparagraph (c) GDPR, and

This is permitted by law and required in accordance with Art. 6 Paragraph 1 Paragraph 1 Subparagraph (b) GDPR to process the contractual relationships with you.

If your data is processed outside of Europe, this transfer will occur in compliance with all applicable data protection laws and particularly in accordance with Art. 44 f. GDPR.

 

3.4 Transfer to a third country or an international organisation

Your data can be transferred to countries outside of the EU or EEA (referred to as third countries) based on the aforementioned purposes (company-wide transfer (No. 3.2) and transfer to third parties (No. 3.3)). This transfer shall occur only to carry out our contractual and legal obligations or based on your consent. This transfer shall occur in compliance with all applicable data protection laws and particularly in accordance with Art. 44 f. GDPR. In particular, either due to adequacy decisions issued by the European Commission or based on certain guarantees (such as standard data protection clauses).

 

4. Further notification obligations

4.1 Existence of an automated decision-taking process, including profiling

As a responsible company, we refrain from using an automated decision-taking process or profiling.

 

5. Concluding section of the data privacy policy

5.1 Duration of storage

In general, we store your data as long as required to render our service or insofar as this has been provided for by the European body issuing directives and regulations or by another legislator in laws or regulations to which the processing controller is subject. In all other cases, we delete your personal data after the purpose for storing it no longer exists, with the exception of data which we must continue to store to fulfil legal obligations (for example, if we are obligated by retention periods in tax law and commercial law to keep documents such as contracts and invoices for a certain period).

 

5.2 Technical safety

Hymer-Leichtmetallbau takes technical and organisational safety measures to protect your data which we are processing from accidental or deliberate tampering, loss or destruction, and from being accessed by persons without authorisation. Our safety measures are continuously being improved in accordance with the development of technology.

For reasons of safety and to protect the transfer of confidential content, such as the enquiries you send to us as the website operator, this website uses SSL encryption (Secure Socket Layer) in combination with the respectively highest encryption level supported by your browser. Usually this is 256-bit encryption. If your browser does not support 256-bit encryption, we rely instead on 128-bit v3 technology. You can tell that a particular page of our website is transmitted with encryption when the address bar of your browser displays https:// and a lock icon.

If the SSL encryption is enabled, the data you transfer to us cannot be read by third parties.

Note that data transmission on the Internet (for example, during communication via e-mail) can have security gaps. Seamless protection of the data against access by third parties is not possible.

 

5.3 Legal basis of the processing

Art. 6 Paragraph 1 Subparagraph (a) GDPR serves our company as the legal basis for processing operations for which we obtain consent for a particular processing purpose.

If the processing of personal data is required to fulfil a contract in which the data subject is the contract party, as is the case, for example, for processing operations needed to deliver goods or render some other service or return service, then the processing is based on Art. 6 Paragraph 1 Subparagraph (b) GDPR. The same applies in the case of processing operations required for carrying out pre-contractural actions, for example, in cases of enquiries about our products or services.

If our company is subject to a legal obligation which requires that personal data be processed, such as to fulfil tax obligations, then the processing is based on Art. 6 Paragraph 1 Subparagraph (c) GDPR.

In rare cases, processing of personal data could be required to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor became injured in our company and this person's name, age, health insurance details or other vital information would have to be shared with a doctor, hospital or other third party. Then the processing would be based on Art. 6 Paragraph 1 Subparagraph (d) GDPR.

Finally, processing operations could be based on Art. 6 Paragraph 1 Subparagraph (f) GDPR. This legal basis serves as the foundation for processing operations not covered by any of the aforementioned legal bases, provided that the processing is required to protect a legitimate interest of our company or of a third party, insofar as the interests, basic rights and basic liberties of the data subject do not take precedence. If processing of personal data is based on Article 6 Paragraph 1 Subparagraph (f) GDPR, our legitimate interest is to carry out our business activities to benefit the well-being of all our employees and customers.

 

5.4 Legal or contractual regulations regarding the provision of personal data; Necessity for concluding a contract; Obligation of the data subject to provide the personal data; Possible consequences of failure to provide such data

We draw your attention to the fact that the provision of personal data is partially prescribed by law (for example, tax regulations) or can also be the consequence of contractual regulations (for example, information about a party to the contract). Sometimes in order to conclude a contract it is necessary that a data subject provide us with personal data which subsequently has to be processed by us. For example, the data subject is obligated to provide us with personal data if our company concludes a contract with him or her. The consequence of failing to provide the personal data would be that the contract could not be concluded with the data subject. Prior to providing personal data, the data subject has to contact one of our employees. Our employee will explain to the data subject whether the provision of personal data is prescribed by law or by contract, whether it is required to conclude the contract, whether there is an obligation to provide the personal data and what consequences would ensue from failing to provide the personal data.

 

5.5 Note about minors

This online offer is not addressed to children under 16 years of age. Persons who have not yet turned 16 years old are not permitted to transfer any personal data to Hymer-Leichtmetallbau without approval from a parent or legal guardian.

 

5.6 Rights of the data subject

You have the right to obtain information about the data we have stored, the duration, purpose and legal basis of this storage, as well as the origin and recipient of transfers. Inaccurate data must be corrected; data which has been stored illegitimately or is no longer required must be deleted. In addition, the data subject has the right to object, the right to restriction of processing as well as the right to data portability.

This information is provided upon your request and at no charge.

Furthermore, you have the right to submit a complaint directly to a supervisory authority.

 

5.7 Withdrawal of your consent to data processing

Some data processing operations are possible only with your express consent. You have the option to withdraw already granted consent at any time. This can be accomplished simply by sending an informal message to us via e-mail at datenschutz@remove-this.hymer-alu.de. The lawfulness of data processing which has already occurred prior to the withdrawal remains unaffected by the withdrawal.

 

5.8 Contact information of the controller and external data protection officer

Responsible office:

Hymer-Leichtmetallbau GmbH & Co. KG

Käferhofen 10

88239 Wangen, Germany

Phone:  +49 (0)7522 700-0

E-mail: info@remove-this.hymer-alu.de

 

Contact information of the external data protection officer:

David Kuhn

Deutsche Datenschutzkanzlei

Phone: +49 (0)7542 949 21 08

E-mail: datenschutz@remove-this.hymer-alu.de

Note: Your enquiries are treated with confidentiality and forwarded directly to the data protection officer.