Data protection
Data Controller
The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Herzog Maschinenfabrik GmbH & Co. KG
Auf dem Gehren 1
49086 Osnabrück, Germany
Tel.: +49 541 - 9332 - 0
Fax: +49 541 - 9332 - 32
Email: info(at)herzog-maschinenfabrik.de
Data Protection Officer
You can reach our Data Protection Officer at datenschutz-at-herzog-maschinenfabrik.de.
Herzog Maschinenfabrik GmbH & Co. KG
Auf dem Gehren 1
49086 Osnabrück, Germany
Your Rights as a Data Subject
Using the contact details provided, you can exercise the following rights at any time under the EU General Data Protection Regulation (GDPR):
- Access to your stored data and information about its processing (Art. 15 GDPR),
- Rectification of incorrect personal data (Art. 16 GDPR),
- Deletion of your stored data (Art. 17 GDPR),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data (Art. 21 GDPR), and
- Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you may revoke it at any time with future effect.
You can also file a complaint with a supervisory authority at any time, e.g., the supervisory authority of your place of residence or the competent authority for us as the responsible entity.
A list of supervisory authorities (for the non-public sector) including contact information is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing Activities
Collection of General Information When Visiting Our Website
Type and Purpose of Processing
When you access our website — that is, without registering or otherwise submitting information — general information is automatically collected. This information (server log files) includes, for example, the type of web browser, operating system used, domain name of your internet service provider, your IP address, and similar data.
This information is processed for the following purposes:
- Ensuring a smooth connection and optimal presentation of the website
We do not use your data to draw conclusions about you personally. However, we reserve the right to retrospectively review server log files if there is concrete evidence of unlawful use.
Privacy Policy for LinkedIn Pixel
When visiting this website, personal data is processed. Categories of processed data: data regarding website usage and click events on individual elements. Purpose of processing: analysis of user behavior, effectiveness of online marketing efforts, and selection of online advertising on other platforms using real-time bidding based on user behavior. Legal basis for processing: your consent under Art. 6 (1)(a) GDPR. Data is transmitted to: the independent controller LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, D02 X527, Ireland. The legal basis for transferring data to LinkedIn Ireland Unlimited Company is your consent under Art. 6 (1)(a) GDPR. This may involve transferring personal data to a country outside the EU. Transfers to the US are based on Art. 45 GDPR in conjunction with the EU Commission’s adequacy decision C(2023) 4745, as the recipient has committed to complying with the principles of the Data Privacy Framework (DPF).
Legal Basis and Legitimate Interest
Processing is carried out pursuant to Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage Duration
Data is stored in server log files in a form that allows identification of data subjects for no longer than one year, unless a security-related incident occurs (e.g., a DDoS attack).
In such a case, the log files will be stored until the incident has been resolved and fully clarified.
Provision Mandatory or Required
The provision of the aforementioned personal data is not legally or contractually required. However, without the IP address, service and functionality of our website cannot be guaranteed. Some features and services may also be unavailable or limited.
Objection
See the information below regarding your right to object under Art. 21 GDPR.
Contacting Us
Type and Purpose of Processing
Contact is possible via the email addresses provided. In such cases, the personal data transmitted with the email will be stored. This includes the date and time of the email, email address, IP addresses, and server communication metadata.
You may also contact us via the telephone numbers provided. In doing so, we collect log data, including your telephone number and the duration of the call.
Regardless of the communication method, we collect the content of your inquiry. Your data is stored for the purpose of individualized communication with you.
Legal Basis
Data processing is based on our legitimate interest (Art. 6 (1)(f) GDPR).
Our legitimate interest is to facilitate easy communication with you.
If your inquiry is related to a potential contract, data is processed to carry out pre-contractual measures (Art. 6 (1)(b) GDPR).
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage Duration
Data will be deleted no later than one year after the inquiry has been processed.
If a contractual relationship is established, we are subject to statutory retention periods, which are generally 6 or 10 years due to accounting and tax regulations.
Provision Mandatory or Required
Providing your personal data is voluntary. However, we can only process your inquiry if you provide us with the necessary information and the reason for your request.
Objection
See the information below regarding your right to object under Art. 21 GDPR.
Social Plugins (Shariff)
We use a social plugin on our website to simplify sharing with the social media services and providers listed below. You can recognise the functionality by the fact that it is marked with the corresponding logo.
These buttons are deactivated by default and therefore do not establish any contact with the servers of the respective provider. The buttons only become active and establish the connection (but only for the selected provider) when the website visitor activates the buttons and thus declares their consent to communication with the respective provider. With a second click, the website visitor can then send their recommendation to the social media provider.
We have integrated the social media buttons of the following companies on our website
LinkedIn Corporation, Attn: Legal Dept (Privacy Policy and User Agreement, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA)
Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Use of the Tracking Tool Google Analytics
Type and Purpose of Processing
Provided you have given your consent, this website uses Google Analytics 4, a web analysis service of Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
Google Analytics uses cookies that enable an analysis of your use of the website. The information collected is generally transmitted to and stored on a Google server in the USA.
Google Analytics has IP anonymization enabled by default. Due to the activation of IP anonymization on this website, your IP address is shortened by Google within member states of the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.
During your visit to our website, your user behavior is recorded in the form of so-called events, such as:
- Page views
- Session start
- Session duration
- User engagement
- First visit to the website
- Scrolls (when a visitor scrolls 90% down the page)
- Clicks on external links
- Viewed or clicked ads
- Internal searches
- Interaction with video content
- Downloads
- Language settings
Additionally, the following information is collected:
- Your approximate location (region)
- Your IP address (in shortened form)
- Technical information such as browser, internet provider, device, and screen resolution
- Referrer URL (i.e., which website or advertising medium you used to reach us)
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website and internet usage.
Legal Basis
The legal basis for this data processing is your consent according to Art. 6 (1) sentence 1 lit. a GDPR.
Recipients
We use technical service providers for the operation and maintenance of our website and for the evaluation of cookies, who act as our processors.
Further recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Storage Duration
The data we send and that is linked to cookies is automatically deleted after one year.
The maximum lifespan of Google Analytics cookies is two years. Data whose retention period has been reached is automatically deleted once per month.
Third Country Transfer
Since Google's headquarters is located in the USA, it cannot be ruled out that data is processed on Google's servers in the USA. This entails the risk that your data may be processed by US authorities for control and monitoring purposes without providing you with any legal remedies. To ensure an adequate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
Withdrawal of Consent
You can withdraw your consent at any time in the cookie settings with effect for the future.
You can also prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will then be installed on your device. This will prevent Google Analytics from collecting data on this website and this browser in the future, as long as the cookie remains installed.
Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Browser Add-on to deactivate Google Analytics.
Cookies
A cookie is a small data set that is created when a website is visited and temporarily stored on the system of the website visitor. When the server of this website is accessed again by the user, the user's browser sends the previously received cookie back to the server. The server can evaluate the information received through this process. Cookies can particularly facilitate navigation on a website.
Detailed information on cookies and which cookies are used on this website for which purpose can be accessed at any time in the cookie settings.
Deleting Cookies
You can delete individual cookies or the entire set of cookies. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge-anzeigen-zulassen-blockieren-l%C3%B6schen-und-verwenden-168dab11-0753-043d-7c16-ede5947fc64d
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Additionally, you can generally prevent the loading of so-called scripts. NoScript allows JavaScript, Java, and other plugins to be executed only on trusted domains of your choice.
Information and instructions on how to edit this function can be obtained from your browser provider (e.g., for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).
Technically Necessary Cookies
Type and Purpose of Processing
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
We need cookies for the following applications:
You can find an overview of the cookies used in our cookie consent tool.
Legal Basis and Legitimate Interest
The data processing is carried out solely on the basis of our legitimate interest in the user-friendly design of our website and the documentation of consent pursuant to Art. 6 (1) lit. f GDPR in conjunction with a balancing of interests under §25 (2) TDDDG.
Recipients
The recipients of the data are, if applicable, technical service providers who act as data processors for the operation and maintenance of our website.
Storage Duration
Please refer to the cookie consent tool for the respective storage duration of the cookies.
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and features may be unavailable or limited.
Objection
Please read the information about your right to object under Art. 21 GDPR below.
Provision Required or Mandatory
Providing your data is voluntary and solely based on your consent. However, we point out that you may not be able to use all features of this website to their full extent.
Withdrawal of Consent
You can withdraw your consent at any time via the cookie consent tool with effect for the future.
Profiling
By using technically non-essential cookies, website visitor behavior can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.
Information on Your Right to Object under Art. 21 GDPR
Right to Object on a Case-by-Case Basis
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out based on Art. 6 (1) lit. f GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
Recipient of an Objection
datenschutz-at-herzog-maschinenfabrik.de
Changes to Our Privacy Policy
We reserve the right to adjust this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will apply to your next visit.
Questions About Data Protection
If you have any questions about data protection, please email us at the address of the controller mentioned above.
Copyright Notice
This privacy policy was created with the help of activeMind AG - the experts for external data protection officers (Version #2024-10-25).