Source: https://www.hase.eu/data-protection-declaration/
Timestamp: 2019-04-21 13:02:01+00:00

Document:
We are pleased by your visit to our Internet site www.hase.de and your interest in our company. The protection of your personal data is an important concern to us. Personal data are considered to be information about personal or factual circumstances of a designated or designatable natural person.
This shall include, among others, the actual name, the address, the telephone number and the birthdate, but also all other data which can refer to a designatable person. Because personal data enjoy special legal protection, we shall collect them only in the scope which is required for the supplying of our Internet site and the rendering of our services. In the following, we describe which personal information we collect during your visit to our Internet site and how we use them.
Our data protection practices are implemented in accordance with the statutory directives–particularly those of the Bundesdatenschutzgesetz [German Data Protection Act] (BDSG), the Telemediengesetz [German Telemedia Act] (TMG) and the EU General Data Protection Regulation (GDPR). We shall collect, process and store your personal data exclusively insofar as this is required for the functional supplying of this Internet site as well as of our content and the rendering of our services as well as for the processing of inquiries and, where applicable, for the implementation of orders / contractual agreements–however, this shall be respectively done only if a justified interest exists in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR or any other permission in this regard has been obtained. Only if you have specially issued your consent in advance shall your data also be used for more extensive purposes which have been precisely specified in the approval, e.g. for the sending of advertising information via a newsletter.
These data shall be stored in our system’s log files. The storage of these data together with the personal data of a concrete user shall not be undertaken so that an identification of individual website visitors is not undertaken.
Art. 6 Para. 1 lit. f GDPR (entitled interest). Our entitled interest exists in ensuring the attainment of the purpose depicted below.
The logging shall be undertaken in order to preserve the compatibility of our Internet site for as many visitors as possible and in order to prevent misuse and eliminate disruptions. In this regard, it is necessary to log the technical data of the retrieving computer in order to respond as early as possible to display errors, attacks made against our IT systems and/or defects in the functionality of our Internet site. In addition, the data enables us to optimise the website and for the general safeguarding of the security of our information technology systems.
The deletion of the aforementioned technical data shall be undertaken as soon as they are no longer needed in order to ensure the compatibility of the Internet site for all visitors, but nonetheless by no later than three months after the accessing of our Internet site.
The options of lodging an objection and requesting deletion shall be based upon the following general provisions regarding the right of objection and right of deletion under data protection law which are depicted in this Data Protection Declaration.
The data inputted by you on our contact forms.
We shall use the data collected via our contact form and/or via our contact forms only for the processing of the concrete contact inquiry which is received via the contact form.
After processing your inquiry, the collected data shall be promptly deleted insofar as no statutory retention timeframes oppose this.
The data that you enter in the form’s fields.
Art. 6 Para. 1 lit. b GDPR (implementation of pre-contractual measures).
The purpose of the data processing shall encompass the processing of your catalogue order and, insofar as consent has been obtained in this regard, the related forwarding of your contact data to the locally-competent Hase partner for the purpose of the downstream contacting via letter post and, insofar as they have been provided, e-mail and telephone.
The data shall be deleted by us as soon as they are no longer needed for the processing of the catalogue order and insofar as no statutory retention obligations oppose this deletion.
The rights of objection and deletion shall be based upon the following general provisions for rights of objection and deletion under data protection law which are depicted in this Data Protection Declaration.
On our website, we use the service from the Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter, “Google Tag Manager”). Google Tag Manager offers a technical platform for being able to run other web services and web-tracking programmes and control them in a bundled manner via so-called “tags”. In this context, Google Tag Manager stores cookies on your computer and analyses–insofar as web-tracking tools have been run via Google Tag Manager–your surfing behaviour (so-called “tracking”). These data that are sent by individual tags integrated into Google Tag Manager are compiled, stored and processed by Google Tag Manager under one uniform user interface. All integrated “tags” shall be once again separately indicated in this Data Protection Declaration. You can find detailed information regarding the data protection for the tools that have been integrated into Google Tag Manager in the respective section of this Data Protection Declaration. During the usage of our website with the activated integration of tags from Google Tag Manager, data–such as particularly your IP address and your user activities–shall be transmitted to servers of the Google LLC Company and processed and stored outside of the European Union, e.g. in the USA.
The EU Commission has determined that an appropriate data protection level can exist in the USA if the data processing company subjects itself to the US-EU Privacy Shield Convention and the data export has been reliably designed in this manner to the USA. This is indeed the case with Google LLC. With regards to the web services integrated via Google Tag Manager, the provisions in the respective section of this Data Protection Declaration shall be valid. If tracking tools are used in Google Tag Manager, they shall ensure, through an IP anonymisation of the source code, that the IP address is anonymised by Google Tag Manager before transmission is made. In this regard, Google Tag Manager shall enable only the anonymised collection of IP addresses (so-called IP masking).
Art. 6 Para. 1 lit. a GDPR (Consent), either during the registration on Google (opening of a Google account and acceptance of the Data Protection Guidelines implemented therein) or, if you have not registered on Google, upon the basis of a rightful interest in accordance with Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the guaranteeing of the flawless functioning and administrability of our Internet site. Insofar as tracking functions are also used via Google Tag Manager, the rightful interest shall lie in the enabling of the usage of the updated online marketing functions and the evaluation of the usage streams on our Internet site.
By our mandate, Google shall use the information acquired via Google Tag Manager in order to evaluate your visit to this Internet site, to compile reports regarding the website activities and to render additional services associated with the usage of the website and the Internet to us.
Google shall store the data that are relevant for the function of Google Tag Manager as long as it is necessary in order to fulfil the booked web service. The data collection and storage shall be done in anonymised fashion. However, insofar as personal correlations should be created, the data shall be promptly deleted insofar as no statutory retention obligations oppose this. In any case, the deletion shall be undertaken after the retention obligation lapses.
You can prevent the collection and dissemination of the personal data to Google (particularly your IP address) as well as the processing of these data by Google by deactivating the implementation of the script code in your browser, installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com) or activating your browser’s “do not track” setting. Moreover, you can prevent the collection of the data (including your IP address) that are generated by the Google cookie and make reference to your usage of the website from being transmitted to Google as well as the processing of these data by Google by downloading and installing the browser plug-in that is available by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=en). You can find Google Analytics’ Security and Data Protection Guidelines at http://www.google.com/intl/en/analytics/learn/privacy.html.
The EU Commission has determined that an appropriate data protection level can exist in the USA if the data processing company subjects itself to the US-EU Privacy Shield Convention and the data export to the USA in this manner has been reliably designed. Through the activation of IP anonymisation within the Google Analytics tracking code for this Internet site, your IP address shall be anonymised by Google Analytics before its transmission. This website uses a Google Analytics tracking code which has been expanded by the operator gat._anonymizeIp(); in order to enable only an anonymised collection of IP addresses (so-called IP masking).
Art. 6 Para. 1 lit. a GDPR (Consent), either during the registration on Google (opening of a Google Account and acceptance of the Data Protection Guidelines implemented therein) or, if you have not registered on Google, upon the basis of a rightful interest in accordance with Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the enabling of the usage of the updated online marketing functions and the evaluation of the usage streams on our Internet site.
In accordance with our mandate, Google shall use this information in order to analyse your visit to this Internet site, compile reports regarding the website activities and in order to render additional services associated with the usage of the website and the Internet for us. The IP address transmitted during the Google Analytics by your browser shall not be commingled with other data by Google LLC.
Google shall store the data relevant for the providing of the web-tracking as long as it is necessary in order to fulfil the web service that has been booked. The data collection and data storage shall be done in anonymised fashion. Insofar as a personal reference should nonetheless exist, the data shall be promptly deleted insofar as they are not subject to statutory retention obligations. In all cases, the deletion shall be undertaken after the lapsing of the retention obligation.
You can prevent the collection and dissemination of the personal data to Google (particularly of your IP address) as well as the processing of these data by Google by deactivating the execution of the script code in your browser, installing a script blocker in your browser (you can find this, for example, on www.noscript.net or www.ghostery.com ) or activating the “Do Not Track” settings of your browser. Moreover, you can prevent the collection of the data (including of your IP address) generated by the Google cookie and which makes reference to your usage of the website from being sent to Google as well as the processing of these data by Google by downloading and installing the browser plug-in which is available by clicking on the following link http://tools.google.com/dlpage/gaoptout?hl=en . You can find the fundamental security and data protection principles of Google-Analytics at https://policies.google.com/privacy.
A web service from the CloudFlare Inc. Company, 101 Townsend St, 94107 San Francisco (hereafter: “CloudFlare”) has been downloaded onto our website. We shall use these data in order to guarantee the full functionality of our website. In this context, as required, your browser shall transmit personal data to CloudFlare. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the flawless functioning of the Internet site. CloudFlare itself has been certified in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list ). The data shall be deleted as soon as the purpose for their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in CloudFare’s Data Protection Declaration: https://www.cloudflare.com/security-policy/?utm_referrer=https://www.google.de/ . You can prevent the collection as well as the processing of your data by CloudFlare by deactivating the running of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com).
A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter: “Google”) has been downloaded onto our website. We use these data in order to guarantee the full functionality of our website. In this context, as required, your browser shall transmit personal data to Google. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the flawless functioning of the Internet site. Google itself has been certified in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list ). The data shall be deleted as soon as the purpose for their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in Google’s Data Protection Declaration: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by Google by deactivating the running of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com).
On our website, a web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter, “Google Apis”) has been downloaded. We shall use these data in order to ensure the full functionality of our website. In this context, as required, your browser shall transmit personal data to Google Apis. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The entitled interest encompasses the flawless functioning of the Internet site. Google Apis has received a certification in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list). The deletion of the data shall be undertaken as soon as the purpose of their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in Google Apis’ Data Protection Declaration: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by Google Apis by deactivating the execution of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com).
A web service from the Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter: “gstatic”) has been downloaded onto our website. We shall use these data in order to guarantee the full functionality of our website. In this context, as required, your browser shall transmit personal data to gstatic. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the flawless functioning of the Internet site. gstatic itself has been certified in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list ). The data shall be deleted as soon as the purpose for their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in gstatic’s Data Protection Declaration: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by gstatic by deactivating the running of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ).
A web service from the Twitter International Company, One Cumberland Place, Fenian Street, D02 AX07 Dublin 2 (hereafter: “Twitter Advertising”) has been downloaded onto our website. We shall use these data in order to guarantee the full functionality of our website. In this context, as required, your browser shall transmit personal data to Twitter Advertising. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The rightful interest shall lie in the flawless functioning of the Internet site. The data shall be deleted as soon as the purpose for their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in Twitter Advertising’s Data Protection Declaration: https://twitter.com/en/privacy . You can prevent the collection as well as the processing of your data by Twitter Advertising by deactivating the running of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ).
On our website, a web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter, “Doubleclick”) has been downloaded. We shall use these data in order to ensure the full functionality of our website. In this context, as required, your browser shall transmit personal data to Doubleclick. The legal basis for the data processing shall be Art. 6 Para. 1 lit. f GDPR. The entitled interest encompasses the flawless functioning of the Internet site. Doubleclick has received a certification in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list). The deletion of the data shall be undertaken as soon as the purpose of their collection has been fulfilled. You can find additional information regarding the handling of the transmitted data in Doubleclick’s Data Protection Declaration: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by Doubleclick by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com).
A web service from the Northwestern University Knight Lab Company, 1845 Sheridan Road, 60208 Evanston (hereafter, “Knightlab.com”) has been downloaded onto our website. If you have activated Java Script in your browser and have installed no Java script blocker, as required, your browser shall transmit personal data to: Knightlab.com. You can find additional information regarding the handling of the transmitted data in the Data Protection Declaration of Knightlab.com: No DPD. You can prevent the collection as well as the processing of your data by Knightlab.com by deactivating the running of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ).
A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland (hereafter, “GA Audience”) has been downloaded onto our website. We shall use these data in order to guarantee the full functionality of our website. In this context, your browser shall, as required, transmit personal data to GA Audience. The legal basis for the data processing is Art. 6 Para. 1 lit. f GDPR. There is a rightful interest that exists to have the Internet site function flawlessly. GA Audience has been certified in accordance with the EU-US Privacy Shield Convention (cf. https://www.privacyshield.gov/list ). The deletion of the data shall be done as soon as the purpose for the collection of the data has been fulfilled. You can find additional information regarding the handling of the transmitted data in GA Audience’s Data Protection Declaration: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by GA Audience by deactivating the execution of the script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ).
Art. 6 Para. 1 lit. f GDPR (entitled interest). Our entitled interest encompasses the preservation of the full functionality of our Internet site, the improvement of usability as well as the enabling of customer contacts which are more individualised. It is possible for us to identify individual website visitors via the cookie technology only if the website visitor has provided us with the corresponding personal data beforehand upon the basis of a special approval.
The cookies shall be placed by our website in order to preserve the full functionality of our Internet site and to improve usability. In addition, the cookie technology enables us to recognise individual visitors by means of pseudonyms, e.g. an individual ID of one’s own choosing, so that it is possible for us to offer services which are more individualised.
The storage of our cookies shall be undertaken until they are deleted in your browser or, if it is a session cookie, until the session has ended.
Otherwise, the rights of objection and deletion shall be based upon the following general provisions regarding the rights of objection and deletion under data protection law which are depicted in this Data Protection Declaration.
Your personal data shall be protected in such a manner by means of technical and organisational measures during their collection, storage and processing that they are not accessible to third parties. In the event of unencrypted communication via e-mail, the complete data security along the transmission route to our IT systems cannot be guaranteed by us so that we recommend encrypted communication or using the postal service for information which is highly confidential.
You shall have the right to request that we provide you with your personal data, which you have made available to us, in a structured, standard and machine-readable format. You can also demand that we promptly transmit these data to a third party upon your initial request to do so insofar as the processing is based upon a consent granted in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or is based upon a contractual agreement in accordance with Art. 6 Para. 1 lit. b GDPR and we undertake the processing within the parameters of automated data processing. Furthermore, when exercising this right, you shall also have the right to request that your personal data be transmitted directly by one responsible party to another responsible party insofar as this is technically feasible. Freedoms and rights of other persons may not be restricted by so doing. The right of data portability shall not be valid for any processing of personal data which is required for the fulfilment of a task which lies in the public interest or in the exercising of public authority which has been conferred to the responsible party.
Insofar as you suspect that your data are being illegally processed on our website, you may naturally at any time seek a legal clarification of the respective issue. Regardless of this, you shall have the option of contacting a government supervisory authority. You shall be entitled to a right to file a complaint in the EU member country of your place of residence, your work location and/or the location of the purported violation, i.e. you may select the government supervisory authority which you contact from the aforementioned locations. The government supervisory authority to which you submit the complaint shall then notify you of the status and the results of your submitted complaint including the option of seeking legal remedial action in court in accordance with Art. 78 GDPR.

References: Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 78