Source: https://www.hebsdigital.com/privacy-policy/eu-privacy-statement/previous-privacy-policies/eu-privacy-statement-may25
Timestamp: 2019-04-18 21:11:57+00:00

Document:
We take the protection of personal data very seriously. If you are in the European Economic Area and we collect personal data relating to you in the context of the offering of goods or services, even if provided free of cost, or if we collect data when monitoring your behaviour which takes place within the European Economic Area, your personal data will be subject to Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”).
1.2. We have designated a representative in the European Union in accordance with Art. 27 of the GDPR.
4.2.1. Our website uses Adobe Analytics, a web analysis service of Adobe Systems (https://www.adobe.com/about-adobe.html), 345 Park Avenue, San Jose, CA 95110-2704, USA ("Adobe").
4.2.4. We use Adobe Analytics for the purposes set forth in Section 4.1 and the preservation of our legitimate interest described therein (legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR) and, where applicable, on the basis of your consent as described in Sec. 4.1.3 (legal basis for processing: Art. 6 no. 1 lit. a) of the GDPR).
4.2.5. We have concluded a contract processing agreement with Adobe Systems Software Ireland Limited to ensure that personal data is processed only on our behalf and in accordance with our instructions. The contract processing agreement with Adobe contains guarantees for an adequate level of protection in the form of Adobe's participation in the Privacy Shield Program.
4.3.1. Our website uses technologies such as Pardot provided by salesforce.com, inc, The Landmark @ One Market Street, San Francisco, CA 94105, USA ("SFDC“).
4.3.2. We have concluded a contract processing agreement with SFDC to ensure that personal data is processed only on our behalf and in accordance with our instructions. The contract processing agreement contains guarantees for an adequate level of protection in the form of SFDC's participation in the Privacy Shield Program.
4.4.1. If you register via our website or by other means to receive electronic newsletters, we will store and process your registration data (the registration form will show you which registration data we collect and store and whether entries are mandatory or voluntary) for an unlimited period of time until you unsubscribe or we cancel the newsletter dispatch in order to fulfil the existing contract with you for the receipt of the newsletter (legal basis for processing: Art. 6 no. 1 lit. b) of the GDPR). The IP address assigned to you by the internet service provider (ISP), and the date and time of registration will also be stored when you register. The purpose of this is to protect our legitimate interest in preventing and, if necessary, prosecuting misuse of our services (legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR). In addition, we will store and process your consent to receive the newsletter for the retention period specified below. This serves to protect our legitimate interest in being able to prove in the event of a dispute that you wished to receive the newsletter (legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR).
4.4.2. The registration for our newsletter which is powered by Pardot technologies of SFDC (see Sec. 4.3) takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to prevent unauthorized use of your e-mail address by another person.
4.5.1. If you register on our website and create a user account (the registration form will show you which registration data we collect and store and whether entries are mandatory or voluntary), all personal data collected in connection with this user account will be stored in this user account until you request to delete the user account or until we cancel the user account for the performance of our contractual relationship on use of the respective website or web service (legal basis for processing: Art. 6 no. 1 lit. b) of the GDPR). The IP address assigned to you by your internet service provider (ISP), and the date and time of registration will also be stored when you register. The purpose of this is to protect our legitimate interest in preventing and, if necessary, prosecuting misuse of our services (legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR).
4.5.2. Our website contains a contact form, powered by Pardot technologies of SFDC (see Sec. 4.4), which you can use to submit communications to us. When submitting information through the contact form, you are required to enter certain information which we will use for responding to your request. The contact form enables you to submit additional information on a voluntary basis.
4.5.3. If you provide us with personal data via the user account or the contact form for a purpose beyond the use of the website or respective web service, such as sending us an offer or product information, we will also store and process this data for this purpose. In order to find more information on how we store and process such data, you will need to refer to the Section of this Privacy Statement that is pertinent to the respective purpose (especially Section 7 et seq.).
4.6.1. We share data with other companies of our group of undertakings. For further information on this and on the safeguards, we have put in place in this respect, please refer to Sec. 11 below.
5.1. In this Section we will inform you about how we process and use personal data in relation to you that we collect in connection with calls to our telephone hotline and on the specific rights you have in this respect.
5.2. When you call our hotline, our representative will record your name, the date and time of your call and the content of your request in a call log. If you are registered with us in the customer database, this information will be stored in your customer account and the information in Section 6 will then apply. If you express interest in a product or service and there is no customer relationship, this information will be stored in our database of prospective customers and the information in Section 5 will then apply. In all other cases we will record your details in a separate database for call logs.
5.3. We share data with other companies of our group of undertakings. For further information on this and on the safeguards we have put in place in this respect, please refer to Sec. 11 below.
6.1. In this Section we will inform you about how we process and use the personal data in relation to you that we collect when you express an interest in our products or services and on the specific rights you have in this respect.
6.2. If you express your interest in our products or services by making an enquiry (e.g. at a trade fair or conference, by e-mail, or via the contact form), we will store your contact data and the subject of your interest in a separate database for prospective customers.
6.3. We will store and process this data in order to process your inquiry and also to safeguard our legitimate interest, in view of your request, in improving our deliveries and services to meet your individual requirements and to thus promote the sale of our products and services and, if necessary, to offer you additional products or services in line with your interests (legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR).
6.4. If your request results in a customer relationship, the data will be transferred to our customer database (cf. Section 6). If no customer relationship is established, the data will be deleted 2 years after the last correspondence with you.
6.5. We share data with other companies of our group of undertakings. For further information on this and on the safeguards we have put in place in this respect, please refer to Sec. 11 below.
6.6. We refer to Sections 9 et seq. for further regarding the possible recipients and storage periods of the above information.
6.7. You can object to the use of your data for direct marketing purposes at any time (cf. Section 10.8).
7.1. In this Section we will inform you about how we process and use personal data in relation to you that we store in our customer database and on the specific rights you have in this respect.
7.2. We will set up a customer account in our customer database if a customer relationship exists or is established with you. The customer account contains your master data (name, address, account etc.). All correspondence and documents (correspondence, orders, contracts, complaints, etc.) within the scope of the customer relationship will then be linked to this customer account.
7.3. We will store and process the above information to fulfil the respective contractual relationship with you with respect to our products and services that you use on the one hand, and, on the other hand, to safeguard our legitimate interest in improving our deliveries and services according to your individual requirements with regard to your concerns and interests and to thus promoting the sale of our products and services, and, if necessary, to offer you additional products or services in accordance with your interests, to document contractual agreements and correspondence for asserting, exercising or defending related legal claims(legal basis for processing: Art. 6 no. 1 lit. f) of the GDPR), to fulfil statutory documentation and document retention obligations (legal basis for processing: Art. 6 no. 1 lit. c) of the GDPR).
7.4. We share data with other companies of our group of undertakings. For further information on this and on the safeguards we have put in place in this respect, please refer to Sec. 11 below.
7.5. We refer to Sections 8 et seq. for further regarding the possible recipients and storage periods of the above information.
7.6. You can object to the use of your data for direct marketing purposes at any time (cf. Section 14.7).

References: Art. 27
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6