Source: https://www.hohenstein.us/en-us/privacy-policy/
Timestamp: 2019-04-18 14:27:30+00:00

Document:
If we obtain consent from the data subject for the processing actions for personal data, Art. 6 (1) lit. a) GDPR is applicable as the legal basis.
When processing personal data that is necessary for fulfilment of a contract whereby the contractual party is the data subject, Art. 6 (1) lit. b) GDPR is applicable as the legal basis. This also applies to processing actions that are necessary for the execution of pre-contractual measures.
If it is necessary to process personal data in order to fulfil a legal obligation for which our company is liable, Art. 6 (1) lit. c) GDPR is applicable as the legal basis.
In the event that essential interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d) GDPR is applicable as the legal basis.
If processing is necessary for the protection of a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the party concerned do not outweigh the first-mentioned interests, then Art. 6, section 1, lit. f) GDPR is applicable as the legal basis.
The legal basis for the processing of your personal data for an application procedure is § 26 BDSG [German Federal Data Protection Act].
Data is only passed to third parties within the framework of statutory guidelines. We only pass on the user data to third parties if this is necessary, for example, for the purposes of a contract or on the basis of legitimate interests in the economic and effective operation of our business.
If we hire subcontractors to provide our services, we will take suitable legal precautions and appropriate technical and organisational measures to ensure protection of the personal data in accordance with the pertinent statutory regulations.
Third countries are countries in which the GDPR is not directly applicable legislation. This basically includes all countries outside of the EU or European Economic Area.
Data is transmitted to a third country or international organisation. In this case, the adequacy decision of the EU Commission is taken into account. This states that it is a safe third country or a safe international organisation which offers an adequate level of protection.
The personal data for the data subject is deleted or locked as soon as the purpose of storage lapses. Furthermore, data can be stored if this was intended by the European or national lawmaker within the context of union law regulations, laws or other provisions to which the responsible party is liable. The data is also locked or deleted on expiration of a storage period prescribed by the specified standards unless it is necessary to store the data for a longer period in order to conclude or fulfil a contract.
We and our service providers shall take technical and organisational security precautions to protect your personal data from any accidental or intentional manipulations, loss or destruction or from being accessed by unauthorised persons. Our data processing and security measures are continually improved in accordance with technical developments.
The security measures specifically include the encrypted transfer of data between your browser and our server. A 128-bit SSL (AES 128) encryption technology is used for this purpose.
In accordance with statutory provisions, you, as the person concerned, have the right at any time to receive free-of-charge information about your data stored by Hohenstein.
In addition, you can assert your rights to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) against Hohenstein at any time. This also applies to a right to data portability (Art. 20 GDPR).
If you have made your personal data available to us based on your consent, you can withdraw this consent at any time with effect for the future (Art. 7 (3) GDPR).
If you feel that Hohenstein has processed your personal data in an unlawful manner, you can contact any data protection supervisory authority with your complaints.
In addition, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) lit. e GDPR (data processing in the public interest) and Article 6 (1) lit. f GDPR (data processing on the basis of legitimate interests) by e-mail to datenschutz@hohenstein.de or by mail to Hohenstein, Datenschutz, Schlosssteige 1, 74357 Bönnigheim (Art. 21 GDPR). This may also apply to any profiling based on Article 4 No. 4 GDPR.
From time to time, it becomes necessary to edit the content of this information regarding data protection. We therefore reserve the right to change this information at any time. We will also publish the changed version of the data protection information here. If you visit us again, you should therefore read through the data protection information again.
The log files contain IP addresses or other data which enables assignment to a user. This may be applicable, for example, if the link to the website from which the user accesses the internet site, or the link to the website to which the user switches, contains personal data. The data is also saved in the log files for our system. This data is not stored together with other personal user data.
It is saved in log files to ensure the functioning of the website. We also use the data to optimise the website and to guarantee the security of our information technology system. In this context, no evaluation of the data for marketing purposes takes place.
We have a legitimate interest in data processing for the mentioned purposes within the meaning of Art. 6 (1) lit. f) DSGVO, as the collection of data and the storage of data in log files is absolutely necessary for the operation of the website.
Legal basis for temporary storage of data and log files is Art. 6 (1) lit. f) GDPR.
The data is deleted as soon as it is no longer required for achieving the purpose of its collection. If the data is collected for provision of the website, this applies when the session is over.
If the data is saved in log files, this applies after a maximum of six months. Storage for a longer time is possible. In this case, the IP addresses for the user are deleted or distorted so that assignment of the calling client is no longer possible.
In accordance with the provisions of Art. 15 - 22 GDPR, you have the right to information, rectification, erasure of your personal data, as well as the right to data portability and the restriction of processing. In the cases of Art. 6 (1) lit. e) and f) GDPR you have the right to object. This also applies to automated individual decision-making, including profiling. If you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future. If you think that the processing of your personal data by Hohenstein is not lawful, you can complain to any data protection supervisory authority.
Some of the cookies that we use are deleted again after the end of the browser session, that is, after you close your browser (these are called session cookies). Other cookies remain on your end device for up to 24 months and allow us or our service providers to recognise your browser again during your next visit (persistent cookies). Cookies also enable the analysis of your use of our website (web tracking, see below).
information on the number of times our website is called and on the use of individual functions of our website.
When cookies are activated, an identification number and an allocation are assigned There is no assignment of your personal data to this identification number. Your name, your IP address or similar data which would enable an assignment of the cookie to you, are not stored in cookies. On the basis of cookie technology, we only receive pseudonymised information, for example, on which sites have been visited, etc.
You can configure your browser so that you are informed in advance when cookies are set and you can decide in individual cases whether to prevent the acceptance of cookies for specific cases or in general or whether cookies are fully blocked. This may restrict the functionality of the website.
The legal basis for the processing of personal data using cookies for the purposes of analysis is, with the existence of relevant consent for this by the user, Art. 3 (1) lit. a) GDPR.
By activating IP anonymisation on our website, your IP address is routinely shortened within member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA in exceptional cases and shortened there.
Google will use this information on our behalf to anonymously evaluate your use of the website, to compile reports on website activities and to provide us with services related to website usage and internet usage.
You can prevent the recording of data created by the cookie and relating to your use of the website (including your shortened IP address) with Google and the processing of this data by Google by downloading and installing the browser plug-in available from the link http://tools.google.com/dlpage/gaoptout?hl=de or, as described under c. (Consent and refusal of cookies), configure the settings for your browser software.
If you do not want to be recorded by the Google Tag Manager, send an informal email to datenschutz@hohenstein.de.
We use the video portal YouTube on our website. This is a video portal operated by Google.
Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google and its subsidiary YouTube guarantee that they will follow the EU's data protection regulations when processing data in the United States.
We use YouTube in its privacy-enhanced mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the privacy-enhanced mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video. Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.
We collect and use your information (for example, the name, address, telephone number, e-mail address and payment information) within the framework of the respective contract purpose, specifically for the processing of your registration and for the execution of seminars, webinars, workshops, (virtual) press conferences and other events.
If we receive your e-mail address in connection with your (fee-based) participation in an event, we will also use this for the promotion of our own, similar events by e-mail, provided that you have not objected to its use.
We also use your information for customer analyses and written advertising by post, also on behalf of partner companies from the textile industry. If you register for our online information service & newsletter, we also use your e-mail address for sending the newsletter.
Your consent is obtained for the processing of the data during the dispatch process and this data protection declaration is referenced.
Provided there is the consent of the user, the legal basis for the processing of data after registration for seminars, webinars, events and press conferences is Art. 6 (1) lit. a) GDPR. For processing your data in order to fulfil our services and execute contractual measures, legal basis Art. 6 (1) lit. b) GDPR is valid, otherwise, for the processing of your data to protect our legitimate interests Art. 6 (1) lit. f) GDPR.
The data is deleted as soon as it is no longer required for achieving the purpose of its collection.
Partner companies from the textile industry, if applicable.
If you want us to stop processing and using your personal data for advertising purposes or would like to withdraw any consent that you have granted at any time, simply send a brief message by e-mail to datenschutz@hohenstein.de or by letter to Hohenstein, Abt. Datenschutz, Schlosssteige 1, 74357 Bönnigheim, Germany.
You can also exercise your right of objection to the newsletter distribution, for example, by using the Unsubscribe function on our website. You can find a link to this function in the footer of each newsletter. When unsubscribing, your data is deleted immediately and you will no longer receive a newsletter from us.
We take photos and/or videos to provide an illustrative report of our events. These are published in our print media and/or on the website. They are not used for any purpose other than for reporting. Images published on our website can be accessed throughout the world. Their unauthorised use by a third party can therefore not be universally excluded.
Your image will only be used with your express or implicit consent Art. 6 (1) lit. a) GDPR) or if we base the processing on a legitimate interest according to Art. 6 (1) lit. f) GDPR. A legitimate interest is, for example, to report vividly on our events.
The images are deleted as soon as they are no longer required for achieving the purpose of their collection.
If you do not want a photo and/or video to be taken of you, please mention this to the photographer before it is taken or move out of the picture. You can also withdraw your consent at any time with effect for the future. In the case of an revocation, we will not use any unpublished photos/videos and remove any published photos/videos from our internet site. In all other media, we will observe your revocation for the future. If a group photo is published, the subsequent revocation by an individual person does not, in general, mean that the image must be removed.
If you object to the use of your image or would like to withdraw any consent that you have granted, simply send a brief message by e-mail to datenschutz@hohenstein.de or by letter to Hohenstein, Abt. Datenschutz, Schlosssteige 1, 74357 Bönnigheim, Germany.
There are no formal requirements for this message and no additional fees will be charged.
During the registration procedure, your consent is obtained for processing the data and this data protection declaration is referenced.
No data is transmitted to third parties within the context of data processing for the distribution of newsletters. The data is exclusively used for the distribution of the newsletter.
The user data is collected so that the newsletter can be personalised for delivery.
For newsletter tracking, the user behaviour is pseudonymised when recorded. This refers to the following pseudonymised data: recipients, recipients minus bounces, recipients in queue, recipients skipped, unique unsubscription rate, unique unsubscriptions, bounce rate, bounces (hard and soft bounces), unique opening rate, unique openings, opening rate, openings, unique click rate, unique clicks, click rate, effective unique click rate, clicks for segmentation of target groups.
Newsletter tracking: if you have previously explicitly given consent, newsletter tracking (also known as web beacons or tracking pixel) is employed. When the newsletter is delivered, the external server then collects particular data from the recipient, e.g. the time of the call, the IP address or information on the e-mail program used (client). The name of the image file is individualised for every e-mail recipient through the addition of a unique ID. In doing this, the e-mail sender notes which ID belongs to which e-mail address and thus, when calling the image, can determine which newsletter recipient has just opened the e-mail.
During the dispatching process, your consent is obtained for the processing of the data and this data protection declaration is referenced.
Provided there is the consent of the user, the legal basis for the processing of data after subscribing to the newsletter is Art. 6 (1) lit. a) GDPR.
The data is deleted as soon as it is no longer required for achieving the purpose of its collection. It is stored for as long as the subscription to the newsletter is active.
You can submit an objection to the processing of your personal data at any time; this also includes your e-mail address (Art. 6 (1), Art. 21 (1), (4) GDPR).
If you want us to stop processing and using your personal data for advertising purposes or would like to withdraw any consent that you have granted at any time, simply send a brief message by e-mail to: datenschutz@hohenstein.de or by letter to: Hohenstein, Abt. Datenschutz, Schlosssteige 1, 74357 Bönnigheim, Germany.
If you contact us by e-mail or using a contact form on our internet site, you are assumed to be in agreement with the electronic communication. Personal data is collected when contact is made with us. Which data is collected via the contact form is apparent from the respective contact form. Your data is transmitted securely (SSL encryption).
The information you provide is only used for the purposes of processing the contact and for possible follow-up questions.
Processing for fulfilment of our services and execution of contractual measures as per Art. 6 section 1 lit. b) GDPR. Processing for protection of our legitimate interests as per Art. 6 (1) lit. f) GDPR.
We only store the data you have made available to us for as long as it is necessary to fulfil the above purposes or for the storage periods defined by the legislator. If the respective purpose lapses or after expiration of the corresponding time periods, your data is routinely locked or deleted in accordance with the statutory regulations.
You can object to the processing of your personal data at any time, provided that there are no statutory storage obligations. If such an obligation exists, we can also lock your data if you wish. If there is a corresponding statutory requirement, we will also delete your personal data without the need for a corresponding request on your part.
We process the data you have sent us in connection with your application to check your suitability for the position (or, if applicable, other open positions in our company) and to execute the application process. Please note the data protection notes listed in connection with your application.
If we receive your e-mail address in connection with your (fee-based) participation in a seminar, webinar, event or virtual press conference, we will also use this for the promotion of our own, similar events by e-mail, provided that you have not objected to its use.
We also use your information for customer analyses and written advertising by post, also on behalf of partner companies from the textile industry.
Provided there is the consent of the user, the legal basis for the processing of data is Art. 6, (1), lit. a) GDPR. For processing your data for the protection of our legitimate interests, the legal basis is Art. 6 (1) lit. f) GDPR.
Once you have done so, your data will no longer be used for advertising purposes. This will not affect the legality of any use of your data up until the time at which you withdraw your consent or request that your data is not used for advertising purposes.
You can also exercise your right of objection for example, by using the Unsubscribe function on our website. You can find a link to this function in the footer of each newsletter.
If you are available as a test person for fitting tests, we record name, address, telephone, date of birth and body measurements. We also take photos during fittings. The data on body measurements and photos are used to make recommendations for customers on the optimisation of their collections with regard to clothing sizes and processing qualities. This data is only passed on to third parties in an anonymous form. We need the remaining data for contract processing with you, it is not passed on to third parties.
If we obtain consent from the data subject for processing personal data, Art. 6 (1) lit. a) GDPR serves as the legal basis.
When processing personal data that is required for fulfilment of a contract for which the data subject is a contractual party, Art. 6 (1) lit. b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of pre-contractual measures.
The personal data for the person in question is deleted or locked as soon as the purpose of storage lapses.
In accordance with the statutory regulations, you as the party concerned, have the right to receive free-of-charge information on the data stored by Hohenstein about you.
Furthermore, you can assert to Hohenstein your rights to correction, deletion or restriction of the data processing or the right of objection at any time. The same applies to a right to data transferability.
If you have provided us with personal data on the basis of consent, you can revoke the consent at any time with future effect.
If you explicitly request it, you can receive press releases from Hohenstein Institutes about research and development activities, testing, certifications and events in the textile industry, their international sites, the textile certifications of the OEKO-TEX® Association and other news from the textile industry by email. You can select the areas which are of particular interest to you when registering for the press distribution list. We will use the data which you provide while registering to determine whether you are entitled to receive press releases and to address you personally. Which data is collected via the contact form is apparent from the respective contact form. Your data is transmitted securely (SSL encryption).
The information you provide is only used for the purposes of sending the press release and for possible follow-up questions.
Provided there is the consent of the user, the legal basis for the processing of data after subscribing to receive press releases is Art. 6 (1) lit. a) GDPR.
The data is deleted as soon as it is no longer required for achieving the purpose of its collection. It is stored for as long as the subscription to press releases is active.
You have the right to information about your personal data processed by us. If your information request is not in writing, please understand that we will then require evidence from you to prove that you are really the person you claim to be.
Moreover, you have the right to correction or deletion or to restrict the processing, if this is due in law. In addition, you have a right to object to the processing within the framework of statutory regulations. The same applies to a right to data transferability.
If you do not wish to receive any more press releases, it is sufficient to send a short message to the Hohenstein Institute (e-mail: info@hohenstein.de).
The company premises in Bönnigheim is monitored around the clock with video cameras. The resulting recordings may be considered personal data.
The video surveillance of the company premises is used for safeguarding domiciliary rights and to secure the property of the company and employees.
The legal basis is Art. 6 (1) lit. f) GDPR.
The recordings are stored for 10 days or until the intended purpose has been achieved.
The legal basis is Art. 6 (1) lit. f) GDPR. Our legitimate interest is e.g. to apply an authorization concept for portal usage in order to make documents available only to the right addressees.
Your data is stored for the duration of the customer relationship and then deleted after expiration of any statutory retention requirements.
Should you have provided your personal data on the basis of consent, you can withdraw the consent for the future at any time.
In addition to this website, we also maintain presences in various social media, which you can reach via the corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network.
The social network provider may process the most important data of the computer system from which you visit it - for example, your IP address, the processor type and browser version used, including plug-ins.
It is possible that in addition to the storage of the data you have actually entered in this social media, further information may also be processed by the provider of the social network, perhaps even outside the European Union. If these are US providers who are certified under the Privacy Shield, they have committed themselves to comply with EU data protection standards.
If you are logged in with your personal user account of the respective network when visiting such a presence, this network can assign the visit to this account.
The processing of personal data is based on our legitimate interests in effective communication and information of our users in accordance with Article 6 (1) lit. f). GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 6
 Art. 15
 Art. 6
 Art. 3
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6