Source: https://www.hosta-group.com/en/privacy-notice/
Timestamp: 2019-04-24 00:20:02+00:00

Document:
We process personal data of our users only if this is necessary for the provision of a functioning website and our contents and services. A user’s personal data are only processed with the user’s consent. An exception are cases, when a prior consent is not possible for factual reasons, and the processing of data is approved by legal regulations.
The data subject’s consent to the processing of personal data shall be subject to Art. 6 Para. 1 S. 1 lit. a EU General Data Protection Regulation (GDPR).
Legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party, shall be Art. 6 Para. 1 S. 1 lit. b GDPR. This shall also apply to necessary steps prior to entering in to a contract.
If the processing of personal data is necessary for the compliance with a legal obligation to which our company is subject, Art. 6 Para. 1 S. 1 lit. c GDPR shall be the legal basis.
Art. 6 Para. 1 S. 1 lit. d GDPR shall apply, if vital interests of the data subject or of another natural person require the processing of personal data.
If data processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and if such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Art. 6 Para. 1 S. 1 lit. f GDPR shall apply.
The personal data of the data subject shall be erased or blocked, as soon as the purpose for the data storage ceases to apply. Data may be stored beyond that time, if required by European or national legislative authorities in union regulations, laws, or other provisions to which the data controller is subject. Data are also blocked or erased, if a period of data storage required by the standards mentioned has expired, unless further storage of data is necessary for the conclusion or performance of a contract.
You shall have the right to obtain from the controller information as to whether personal data are processed.
the existence of automated decision-making, including profiling acc. to Art. 22 Para. 1 and 4 GDPR – and at least in those cases– meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
The data subject shall have the right to be informed, if personal data are transferred to a third country or an international organisation. In this case, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR related to the transfer.
This right to information may be restricted, if this right is likely to render impossible or seriously impair the realisation of reserach or statistical purposes, and if the restriction is necessary for achieving research and statistical purposes.
The data subject shall have a right to rectification and/or completion of data, if the personal data processed are incorrect or incomplete. The controller has to correct the data without undue delay.
The data subject’s right to rectification may be restricted, if this right is likely to render impossible or seriously impair the realisation of reserach or statistical purposes, and if the restriction is necessary for achieving research and statistical purposes.
or the data subject has objected to processing pursuant to Art. 21 Para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If the restriction of processing was restricted according to the a.m. requirements, the data subject will be informed by the controller prior to the restriction’s cancellation.
1.34. This right of restriction may be restricted, if it is likely to render impossible or seriously impair the realisation of reserach or statistical purposes, and if the restriction is necessary for achieving research and statistical purposes.
The data subject withdraws consent on which the processing is based according to Art. 6 Para. 1 S. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and where there is no other legal ground for the processing.
The personal data have been collected in relation to the offer of information society services referred to Art. 8 Para. 1 GDPR.
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6 Para. 1 S. 1 lit. e or f GDPR, including profiling based on those provisions.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EG, the data subject may exercise his or her right to object by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 Para. 1 GDPR, the data subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary to the extent that the realisation of research or statistical purposes would be seriously impaired or rendered impossible, and the restriction is necessary for the achievement of research and statistical purposes.
These decisions, however, shall not be based on special categories of personal data referred to in Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place.
When accessing our website our system automatically collects data and information of the accessing computer’s data processing system.
Data are also stored in the log files of our system. These data will not be stored together with other personal data of the user.
Legal basis for the temporary storage of data and log files is Art. 6 Para. 1 S. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. The user’s IP address must be stored for the period of access.
Data are stored in log files to ensure the website’s functional capability. In addition to that the data help us to optimise our website and to ensure the security of our information technology systems. The evaluation of data for marketing purposes does not take place in this context.
These purposes also serve our legitimate interests in data processing according to Art. 6 Para. 1 S. 1 lit. f GDPR.
Data are erased as soon as they are no longer necessary for achieving the purpose of their collection. Where data are collected for the provision of the website, these data are erased when the access is terminated.
If data are stored in log files, data will be erased after seven days at the latest. Longer storage is possible. In this case the users’ IP addresses are deleted or distorted to prevent the assignment of the accessing client.
The collection of data for the provision of the website and the storage of data in log files is compulsory for the operation of a website. Therefore the user cannot object.
Our website provides a contact form which may be used for electronic contacts. If a user uses this form, the data entered into the entry mask will be transferred to us and stored.
Data are not transferred to a third party. The data are only used for processing the conversation.
Legal basis for data processing with the user’s consent shall be Art. 6 Para. 1 S. 1 lit. a GDPR.
Legal basis for the processing of data which have been transferred by sending an e-mail, shall be Art. 6 Para. 1 S. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 Para. 1 S. 1 lit. b GDPR shall apply, too.
If we are contacted by e-mail, this includes the required legitimate interest in processing the data.
The data will be deleted as soon as they are no longer required for achieving the purpose of their collection. For personal data from the contact form’s entry mask und data which have been sent by e-mail, this is the case as soon as the conversation with the user is finished. The conversation is finished, when we can reasonably assume that the issue has been resolved.
The additional data resulting from sending an e-mail will be erased after not more than seven days.
At any time the user may withdraw his or her consent to the processing of his or her personal data. If the user contacts us by e-mail, he or she may object to the storage of his or her personal data at any time. In this case the conversation cannot be continued. .
I have read the privacy statement. I consent to the electronic collection and storage of my information and data required for answering my enquiry. Note: You may withdraw your consent at any time for the future by e-mail to info@hosta-group.com.
All personal data which have been stored when contacting us will be erased.
For the processing of data your consent will be requested when the message is sent, and you will be referred to this privacy notice.
As an alternative you may also contact us via the e-mail address provided. In this case the user’s personal data which are sent with the e-mail will be stored.
The processing of personal data from the entry mask is only required for processing your message. If we are contacted by e-mail, this includes the required legitimate interest in processing the data.
The processing of other personal data resulting from sending an e-mail is used only by us to prevent any misuse of our contact form and to ensure the safety of our IT systems.
At any time the user may withdraw his or her consent to the processing of his or her personal data. If the user contacts us by e-mail, he or she may object to the storage of his or her personal data at any time. In this case the conversation cannot be continued.
You may send us your application by e-mail. We collect your e-mail address and the data provided by you in your e-mail.
After sending your application you will get an acknowledgement of receipt by e-mail.
Your data will not be transferred to a third party. The data are used only for processing your application.
Data processing is subject to Art. 6 Para. 1 S.1 lit. a GDPR and §26 Federal Data Protection Act (BDSG).
Personal data from your application e-mail will only be used for processing your application.
After the application procedure is finished data will be stored for up to 6 months. Your data will be erased at the end of 6 months. If required due to a legal obligation data are stored pursuant to applicable provisions.
Additional personal data collected when sending an e-mail will be erased after a maximum of seven days.
The candidate may withdraw his or her consent to the processing of his or her personal data at any time. In this case his or her application cannot be considered any more.
Any later change or erasure of data sent is only possible with another e-mail by the candidate.
All personal data which have been stored in connection with eletronic applications will be erased in this case.
On our website we use the Google plugin of YouTube, by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. When visiting our website your browser will start a connection with the servers of YouTube. Information about your visit to our website will be transferred to YouTube. The contents of the plugin is beyond our control. If you are logged into your YouTube account during your visit, YouTube can assign your visit to the website to your account. By interacting with this plugin this information will be transferred directly to YouTube and stored there. If you do not want this data transfer, you have to log out of your YouTube account before visiting our website.
Art. 6 Para. 1 S.1 lit. f GDPR shall apply for processing personal data of users.
The provision of the YouTube plugin makes our site more user-friendly.
We have no information about the maximum storage time.
This privacy notice has been created with the support of DataGuard.
Matomo (formerly Piwik). This website uses the open source web analytics application Matomo. Matomo uses so-called „cookies“. These are text files which are stored on your computer and enable us to analyse your visit to our website. The information provided by the cookie about the use of our website will be stored on our server. Before storage the IP address will be anonymised.
Matomo cookies remain on your end device until they are erased by you.
The storage of Matomo cookies and the use of this analytics tool is pursuant to Art. 6 Para. 1 lit. f GDPR. The website owner has a legitimate interest in the anonymised analysis of user behaviour in order to optimise their website and advertising.
The information created by the cookie about the website’s use will not be transferred to a third party. You can prevent the storage of cookies by changing your browser settings; we have to inform you, however, that in this case you may not be able to use all functions of this website to their full extent.
If you do not consent to the storage and use of your data, you may deactivate the storage and use here. In this case an opt-out-cookie is deposited on your browser which prevents Matomo from storing usage data. When you erase your cookies, the Matomo opt-out-cookie will be erased, too. The opt-out must be reactivated when you visit our website again.

References: Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 8
 Art. 6
 Art. 89
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 §26

Art. 6
 Art. 6