Source: https://heros-rail.com/data-privacy-policy.html
Timestamp: 2019-04-22 12:43:55+00:00

Document:
The information shown below will give you a simple overview about what happens with your personal data when you visit our website. Personal data are all data that can personally identify you. Please see the data privacy notice listed under this text for more detailed information about data privacy.
The data on this website are processed by the website operator. The operator‘s contact details are shown in the legal notice for this website.
For one, your data will be collected when you provide them to us. This may include data entered into a contact form.
Other data is automatically collected by our IT systems when you visit our website. In particular, this includes technical data (e.g. internet browser, operating system or time of page access). These data are automatically collected as soon as you access our website.
Part of the data is collected to guarantee that we can make our website available without any errors. Other data may be used to analyse your user behaviour.
HEROS does not sell personal data to third parties and HEROS does not buy personal data from third parties.
You have the right to receive information about origin, recipient and purpose of your stored personal data without any charge to you. Furthermore, you have a right to request correction, blocking or deletion of this data at any time. Please contact us at the address shown in the legal notice at any time if you have further questions about data privacy. Furthermore, you also have a right to file a complaint with the competent regulatory authority.
Under certain circumstances you also have the right to restrict the processing of your personal data. Please see the section “Right to restriction of processing” in our data privacy notice for more details.
The controller is the natural person or legal entity that solely or jointly with others makes decisions about the purposes and methods for the processing of personal data (e.g. names, email address, etc.).
Many data processing operations can only be carried out with your express consent. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
If your personal data is processed for direct mail advertising purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail advertising. If you object, your personal data will then no longer be used for the purpose of direct mail advertising (objection according to Art. 21 para. 2 GDPR).
In the case of violations of the GDPR, the affected persons have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.
You have the right to have data that we process on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another person in charge, this will only be done to the extent technically feasible.
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties without decrypting them.
You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time to the extent permitted by applicable law. You can contact us at any time at the address shown in the legal notice if you have any further questions related to personal data.
If you contest the accuracy of your personal data stored with us, we usually need time to investigate the matter. For the duration of the investigation, you have the right to request the restriction of the processing of your personal data.
If you have objected to processing pursuant to Art. 21 para. 1 GDPR, a consideration must be made between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data may only be processed – with the exception of storage – with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State.
We herewith object to the use of contact data published within the scope of our legal notice obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.
Cookies which are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimized provision of its services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these will be treated separately in this data protection declaration.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of its website – for this purpose the server log files must be recorded.
If you contact us by email, phone or fax, your enquiry including all related personal data (name, enquiry) will be stored for the purpose of processing the enquiry. We will not pass on this data without your consent.
This data is processed based on Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or the implementation of precontractual measures. In all other cases they are processed based on your consent (Art. 6 para. 1 lit. a GDPR) and / or our legitimate interests (Art. 6 para. 1 lit. f GDPR), since we have a legitimate interest in effectively processing the enquiries we receive.
The data sent to us via contact enquiries will remain with us until you ask us to delete them, revoke your consent to storage or the purpose for the data storage no longer applies (e.g. when the processing of your enquiry has been completed). Mandatory statutory provisions, especially statutory retention periods, are not affected.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.

References: Art. 21
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6