Privacy policy

Dear Customer,

The EU General Data Protection Regulation (GDPR) will also have direct legal effect in Germany from 25.05.2018. For this reason, we are obliged to inform you about the processing of your personal data (e.g. name and address).

Please take note of the following information. We look forward to further good cooperation with you.

Data protection information for customers and other data subjects*

(* e.g. people interested in our products)

With the following information we would like to inform you how we process your personal data and which rights you are entitled to under data protection law.

 

1. Who is responsible for data processing and whom can you contact?

 

Responsible is

 

Dr. Hettich Beteiligungen GmbH

Alter Postweg 130

D-32049 Herford

Tel.: +49 5221 1783756 

info@dr-hettich.eu

 

You can reach our company data protection officer at

 

Dr. Hettich Beteiligungen GmbH

Alter Postweg 130

D-32049 Herford

Tel.: +49 5221 1783756 

info@dr-hettich.eu

 
2. What sources and data do we use?

 

We process personal data that we receive from our customers or other data subjects in the course of initiating, establishing and conducting a business relationship. In addition, we process personal data that we permissibly obtain from public sources (e.g. commercial register) or that is legitimately transmitted to us by third parties (e.g. credit agencies, sales partners).

 

The following data is processed:

  • Name and other contact data (address, e-mail address, telephone number and comparable data).
  • Information about your financial situation (creditworthiness data)
  • Data related to the fulfilment of our contractual obligations
  • Data from postal, electronic and telephone communication
  • Documentation data (e.g. minutes of meetings)
 
3. What do we process your data for (purpose of processing) and on what legal basis?

 

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG)

 

a) for the fulfilment of contractual obligations (Art. 6 para. 1 b) DSGVO).

We process your personal data for the performance of our contracts with you, in particular within the scope of our order processing. Furthermore, your personal data is processed for the implementation of measures and activities in the context of pre-contractual relationships.

 

b) for the fulfilment of legal obligations (Art. 6 para. 1 c) DSGVO).

We process your personal data if this is necessary to comply with legal obligations (e.g. commercial and tax laws).

 

c) in the context of balancing interests (Art. 6 para. 1 f) DSGVO).

Where necessary, we process your data beyond the actual performance of the contract to protect legitimate interests of us or of third parties.

 

This is done for the following purposes:

  • for consultation of and data exchange with credit agencies,
  • for advertising and marketing measures,
  • for statistical evaluations or market analyses,
  • for benchmarking,
  • for the assertion of legal claims and defence in legal disputes which are not directly related to the contractual relationship,
  • for internal or external investigations,
  • for the limited storage of your data if deletion is not possible or only possible with disproportionate effort due to the special nature of the storage.

 

d) based on your consent (Art. 6 para. 1 a) DSGVO)

Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent.

Consent given can be revoked at any time. This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018. The revocation of consent only takes effect for the future and does not affect the lawfulness of the data processed until the revocation.

 
4. Who receives your data?

 

We share your personal data within the Dr. Hettich Beteiligungen Group with companies and divisions that need this data to fulfil contractual and legal obligations or to implement our legitimate interest.

 

For these purposes, recipients outside the Dr. Hettich Beteiligungen Group may also receive your data, such as in particular

  • service providers and vicarious agents used by us; these are in particular companies in the categories of transport, logistics, IT services, payment services, telecommunications and data destruction,
  • sales partners,
  • public bodies and institutions in the event of a legal or official obligation,
  • bodies and institutions on the basis of our legitimate interest or the legitimate interest of a third party (e.g. credit agencies, lawyers, courts, experts).

 

Further data recipients may be those bodies for which you have given us your consent to transfer data.

 
5. Will your data be transferred to a third country or to an international organisation?

 

Data is transferred to bodies in countries outside the European Union or the European Economic Area (so-called “third countries”) if it is necessary for the performance of a contract with you, if it is required by law (e.g. reporting obligations under tax law), if it is in our legitimate interest or that of a third party, or if you have given us your consent. In this context, the processing of your data in a third country may also be carried out in connection with the involvement of service providers within the scope of commissioned processing.

If there is no EU Commission decision on an adequate level of data protection for the country in question, we will ensure that your rights and freedoms are adequately protected and guaranteed in accordance with EU data protection requirements by means of appropriate contracts. We will be happy to provide you with the relevant detailed information upon request.

 
6. How long do we store your data?

 

We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. It should be noted that our business relationship may be a continuing obligation that is intended to last for years.

If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its – temporary – further storage and processing is necessary for the following purposes:

  • Fulfilment of retention periods under commercial and tax law resulting from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are up to 10 years beyond the end of the business relationship.
  • Preservation of evidence within the framework of the legal statute of limitations, which, for example, according to §§ 195 ff BGB of the German Civil Code (BGB), can generally be three years, but in certain cases up to 30 years. 7.
 
7. To what extent is there automated decision-making (including profiling)?

 

We do not use fully automated decision-making pursuant to Art. 22 DSGVO. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.

 
8. What data protection rights do you have?

 

The applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller (see point 1 above) with regard to the processing of your personal data. Every data subject has the

  • The right to information about the personal data stored by us,
  • the right to correction, deletion or restriction of the processing of their personal data,
  • the right to object to processing (see point 10 below),
  • the right to data portability,
  • Right to lodge a complaint with a data protection supervisory authority.
 
9. Is there an obligation for you to provide data?

 

Within the scope of our business relationship, you must provide those personal data that are necessary for the establishment, implementation and termination of a business relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to enter into, perform and terminate a contract with you.

 
10. Information about your right to object (Art. 21 DSGVO)

 

General right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which we process on the basis of Article 6(1)(f) DSGVO (data processing based on our overriding legitimate interest) or Article 6(1)(e) DSGVO (data processing in the public interest); this also applies to profiling based on this provision within the meaning of Article 4(4) DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

Right to object to processing of data for direct marketing purposes

In some cases, we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

 

Recipients of the objection

The objection can be made informally with the term “objection”, stating your name, address and date of birth, and should be addressed to:

Dr. Hettich Beteiligungen GmbH
Alter Postweg 130
D-32049 Herford
info@dr-hettich.eu

 
11. Contact form

 

If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO).

The data you enter in the contact form will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.