Source: https://hsr-hydraulics.com/datenschutzerklaerung/
Timestamp: 2019-04-21 04:34:17+00:00

Document:
HSR is an innovative and expanding company in the hydraulics industry with branches throughout the whole of Germany. The core business of HSR is the servicing of high-pressure connections for technical systems in industry and construction.
The company collects, processes and uses personal data solely for performing or preparing contracts, complying with statutory obligations or with the consent of the data subject.
Related data comprises all personal data necessary to fulfil the respective purpose.
The legal basis for performing the designated procedures is defined in the GDPR and, where applicable, in the respective national data protection laws (in Germany the BDSG [Federal Data protection Act - FDPA]). Particular reference should be made here to Articles 4 to 7 GDPR. Art. 4 GDPR defines the terms used and refers to Recitals 26-37.
Where processing is necessary on the basis of Art. 6 (1) (f) GDPR, this is done solely for concluding or performing contracts – except where such interests are overridden by the legitimate interests of the data subject – taking into account all data protection requirements. When weighing up the interests of the data subjects and the contracting parties, strict standards in favour of the data subject are applied at all times.
• service providers and other business partners, insofar as the transmission of data is necessary for fulfilling the respective purpose and is permitted or required on grounds of a statutory provision, or the data subject has given his/her consent.
There are no provisions for any further disclosure of personal data and this shall, as such, not take place.
Where it is necessary to transfer data to third countries, this is done solely for concluding or performing contracts – except where such interests are overridden by the legitimate interests of the data subject – taking into account all data protection requirements. Where there is any intent to transfer personal data to a third country or an international organisation, this is done on the basis of Art. 45 GDPR (Transfers on the basis of an adequacy decision). However, should data be transferred pursuant to Art. 46 or Art. 47 or Art. 49 (1) second subparagraph, please note that suitable safeguards or binding in-house data protection regulations are in place or, respectively, when weighing up the interests of the data subjects and the contracting parties, strict standards in favour of the data subject are applied at all times.
Personal data is erased in accordance with the relevant statutory or contractual regulations on data erasure, taking into account any statutory or contractual retention obligations.
Personal data that is not subject to any statutory or contractual retention or erasure obligations is erased as soon as such is no longer required to fulfil the specific purpose.
Each data subject has the right to request from the controller access to the personal data relating to him/her, the right to rectification, erasure or restricted processing of the data, the right to object to the processing, and the right to data portability.
Where processing is performed on the basis of Art. 6 (1) (a) or Art. 9 (2) (a), each data subject has the right to withdraw his/her consent at any time, without affecting the lawfulness of processing on the basis of consent prior to the withdrawal thereof.
Each data subject has the right to be informed whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to conclude a contract, and whether the data subject is obligated to provide the personal data, and what the consequences of failure to provide such data might be.
We use automated decision-making including profiling. The logic involved, and the significance and envisaged consequences of such processing, are defined as follows. Profiling is any form of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person using algorithms. An automated individual decision occurs where the decision is based solely on algorithms without being additionally checked by a person. Within the company, this is performed on the basis of Art. 22 GDPR and, where necessary, the data subject may assert his/her rights under Art. 22 (1) GDPR.
When you use our website, data is stored for organisational and technical reasons. The access data includes the IP address, the date and time of the request, the time zone difference to Greenwich Mean Time (GMT), the content of the request (i.e. name of the specifically accessed web page), the access status/HTTP status code, the volume of data transmitted, the referrer URL (previously visited page), the browser type and version, the operating system and its interface, the language and version of the browser software, and notification that the data was successfully retrieved. We evaluate this technical data anonymously and only for statistical purposes to enable us to continuously optimise our website and make our services more appealing. This data is stored separately from other personal information on secure systems and is not used to identify particular individuals.
The collection of certain data is technically essential for us to be able to deliver and display content through our website. When you access our website, these so-called server log files are recorded by us or the web space provider. These log files do not allow any conclusions to be drawn about your identity. The information includes the name of the website, the file, the current date, the volume of data, the browser and version, the operating system used, the domain name of your internet provider, the referrer URL (the page from which you were forwarded to our website) and the respective IP address. We use this data to display and deliver our content and for statistical purposes. The information helps us to provide and continuously optimise our website. We also reserve the right to examine the aforementioned data retroactively if we suspect that our website is being used illegally.

References: Art. 4
 Art. 6
 Art. 45
 Art. 46
 Art. 47
 Art. 49
 Art. 6
 Art. 9
 Art. 22
 Art. 22