EN

Data protection

Controller

The controller within the meaning of data protection laws, particularly the EU General Data Protection Regulation (GDPR), is:

Herzog Maschinenfabrik GmbH & Co. KG
Auf dem Gehren 1
49086 Osnabrück, Germany
Phone: 05 41 - 9 33 2 - 0
Fax: 05 41 - 9 33 2 - 32
Email: info(at)herzog-maschinenfabrik.de

Data Protection Officer

You can reach the Data Protection Officer at datenschutz-at-herzog-maschinenfabrik.de.

Herzog Maschinenfabrik GmbH & Co. KG
Auf dem Gehren 1
49086 Osnabrück, Germany

Your Rights as a Data Subject

According to the EU General Data Protection Regulation (GDPR), you may exercise the following rights at any time via the contact details above:

  • Right of access to your personal data and its processing (Art. 15 GDPR),
  • Right to rectification of inaccurate personal data (Art. 16 GDPR),
  • Right to erasure of your personal data (Art. 17 GDPR),
  • Right to restriction of processing if deletion is prohibited by law (Art. 18 GDPR),
  • Right to object to the processing of your data (Art. 21 GDPR),
  • Right to data portability if you have consented or entered into a contract (Art. 20 GDPR).

If you have given your consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority, for example the authority of your place of residence or the authority responsible for us.

A list of supervisory authorities (for the non-public sector) with addresses can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing Activities

Collection of General Information When Visiting Our Website

Nature and Purpose of Processing

When you access our website (i.e., without registering or providing any other information), information of a general nature is automatically collected. This information (server log files) includes the type of web browser used, the operating system, the domain name of your Internet service provider, your IP address, and similar details.

The data are processed for the following purposes:

  • To ensure error-free technical display and to optimise the website.

We do not use your data to draw conclusions about your person. However, we reserve the right to retrospectively review the server log files if there are concrete indications of unlawful use.

Privacy Policy for LinkedIn Pixel

Personal data are processed when you visit this website. Data categories: website usage data and click logs on individual elements. Purpose: examining user behaviour, analysing the effectiveness of online marketing measures, and selecting online advertising on other platforms via real-time bidding based on user behaviour. Legal basis: your consent under Art. 6(1)(a) GDPR. Data are transferred to the independent controller LinkedIn Ireland Unlimited Company, Wilton Place, Dublin, D02 X527, Ireland. The data transfer to LinkedIn Ireland is based on your consent under Art. 6(1)(a) GDPR. This may involve transfer of personal data outside the EU. The transfer to the USA is based on Art. 45 GDPR in conjunction with the Adequacy Decision C(2023) 4745 of the European Commission, as the recipient complies with the Data Privacy Framework (DPF).

Legal Basis and Legitimate Interest

Processing is based on our legitimate interest in improving website stability and functionality, as well as ensuring system security and abuse detection (Art. 6(1)(f) GDPR).

Recipients

Data recipients may include technical service providers acting as processors for operating and maintaining our website.

Storage Duration

Data are stored in server log files in an identifiable form for a maximum of one year, unless a security-related event (e.g., a DDoS attack) occurs.

In such an event, server log files will be retained until the issue is resolved and fully investigated.

Provision Required or Obligatory

Provision of this personal data is neither legally nor contractually required. However, without the IP address, the website’s service and functionality cannot be guaranteed, and certain services may be unavailable or restricted.

Right to Object

See the section on your right to object under Art. 21 GDPR below.

Contact Requests

Nature and Purpose of Processing

You can contact us via the provided email addresses. In this case, personal data transmitted with the email are stored, including the date and time of sending, the email address, IP addresses, and server information.

If you contact us by phone, we collect log data including your phone number and call duration.

Regardless of the communication method, we record the content of your inquiry. Your data are stored for individual communication with you.

Legal Basis

Processing is based on our legitimate interest (Art. 6(1)(f) GDPR). If you request a quote, processing is for pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients

Recipients may include technical service providers acting as processors.

Storage Duration

Data are deleted no later than one year after processing the contact request. If a contract is concluded, statutory retention periods of six or ten years apply for accounting and tax purposes.

Provision Required or Obligatory

Provision of personal data is voluntary. We can only process your request if you provide the necessary data and the reason for your inquiry.

Right to Object

See the section on your right to object under Art. 21 GDPR below.

Social Plugin (Shariff)

We use a social plugin to facilitate sharing on the social media platforms listed below. The buttons are inactive by default and do not connect to the respective provider’s servers. They become active only after you click to give consent, creating a connection solely with the selected provider. A second click allows you to share content.

The following social media buttons are embedded:

LinkedIn Corporation, Attn: Legal Dept. (Privacy Policy and User Agreement, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA)
Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Use of the Google Analytics Tracking Tool

Nature and Purpose of Processing

If you have given your consent, Google Analytics 4, a web analytics service of Google Ireland Limited, is used. Google Analytics uses cookies to analyse your website usage. Collected information is generally transferred to a Google server in the USA and stored there.

IP anonymisation is enabled by default. Within the EU/EEA, IP addresses are truncated before transmission. Only in exceptional cases is the full IP address sent to a US server and truncated there. Your IP address is not merged with other Google data.

During your visit, user behaviour is recorded as events, such as:

  • Page views
  • Session starts
  • Time spent on site
  • User engagement
  • First visits
  • Scrolls (when 90% of page height is reached)
  • Click on external links
  • Viewed or clicked ads
  • Site searches
  • Video interactions
  • Downloads
  • Language settings

Additional information recorded:

  • Approximate location (region)
  • IP address (anonymised)
  • Technical data like browser, ISP, device, and screen resolution
  • Referrer URL

For more details, see https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

Google uses this information to evaluate your website usage, compile reports on site activity, and provide other services related to internet usage.

Legal Basis

The legal basis for this processing is your consent under Art. 6(1)(a) GDPR.

Recipients

We employ technical service providers as processors for operating our website and analysing cookies. Google Ireland Limited (and Google LLC in the USA) are recipients.

Storage Duration

Collected data linked to cookies are automatically deleted after one year. Google Analytics cookies have a maximum lifespan of two years; data exceeding retention are deleted monthly.

Third-Country Transfer

As Google’s headquarters are in the USA, data transfer to the USA cannot be excluded. This may allow US authorities to access data without legal recourse. To ensure adequate protection, we have concluded EU standard contractual clauses with Google: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

Withdrawal of Consent

You can withdraw your consent at any time in the cookie settings. You can also opt out of Google Analytics by clicking this link, which installs an opt-out cookie preventing data collection for this browser.
Alternatively, you can prevent data collection by installing the browser add-on for disabling Google Analytics available here: Browser Add On to Disable Google Analytics.

Cookies

A cookie is a small data file created and stored on your system when visiting a website. When the server is accessed again, the browser sends the cookie back, allowing the server to process the information. Cookies can facilitate navigation on a website.

Detailed information on cookies in use and their purposes can be found in the cookie settings.

Deleting Cookies

You can delete individual cookies or all cookies. Instructions for deleting or blocking cookies vary by browser:

You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice.

Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Technically Necessary Cookies

Type and Purpose of Processing

We use cookies to make our website more user-friendly. Some elements of our website require that the browser making the request can also be identified after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

An overview of the cookies used can be found in our cookie consent tool.

Legal Basis and Legitimate Interest

Data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in documenting consent in accordance with Art. 6(1)(f) GDPR in conjunction with a balancing of interests according to §25(2) TDDDG.

Recipients

Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.

Storage Duration

The respective storage duration of the cookies can be found in the cookie consent tool.

Provision Required or Necessary

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and functionalities may be unavailable or limited.

Objection

For more information, please read about your right to object under Article 21 GDPR below.

Provision Required or Necessary

Providing your data is voluntary and based solely on your consent. However, please note that in this case, you may not be able to use all features of this website in full.

Withdrawal of Consent

You can revoke your consent via the cookie consent tool at any time with effect for the future.

Profiling

With the help of non-essential cookies, visitor behavior can be analyzed and interests assessed. For this purpose, we create a pseudonymous user profile.

Information About Your Right to Object According to Article 21 GDPR

Right to Object on a Case-by-Case Basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6(1)(f) GDPR (data processing based on a balance of interests); this also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Recipient of an Objection

datenschutz-at-herzog-maschinenfabrik.de

Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy to always comply with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

Questions About Data Protection

If you have any questions about data protection, please send us an email to the responsible party mentioned above.

Copyright Notice

This privacy policy was created with the help of activeMind AG - the experts for external data protection officers (version #2024-10-25).