/// ENTERPRISE

PRIVACY POLICY

Thank you for visiting our homepage. The information listed here is intended to inform you about the handling of data protection in our company and show you that we take the statutory provisions on data protection seriously and comply with them.

1. Subject of data protection

Data protection is intended to protect personal data and thus the right of individuals to deal with their data in a self-determined manner. Personal data include, for example: name, postal address, email address or telephone number, but also usage data such as your IP address. In other words, individual details that can be used to identify a person or to establish a reference to a person.

2. Responsible person and data protection officer

The person responsible for data processing in terms of data protection regulations is:

Hagelschaden-Zentrum
Karosseriefachbetrieb GmbH & Co. KG
Einsteinstr. 27
89077 Ulm

CEO: Gerhard Schimanski

Phone: +49 731 931 64 14
Email: info@hagelschaden-zentrum.de

The person responsible for data protection:

Alexander Matzelsberger
Hämpergasse 10
D-89073 Ulm

Phone: +49 731 1533897
Fax: +49 731 1533759
Email: dsb@matzelsberger.com

3. Legal basis for the processing of personal data

If we obtain the consent of the data subject for the processing of personal data, Article 6 (1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

If we process personal data for the fulfillment of a contract to which the data subject is party, Art. 6 Para. 1b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Paragraph 1c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 Paragraph 1 f GDPR serves as the legal basis for the processing.


4. Data deletion and storage duration

Personal data of affected persons will be deleted or blocked by us as soon as the purpose of their storage no longer applies.

However, storage can go beyond the original purpose of storage if this has been provided for by the legislator in regulations to which we are subject. The data will also be blocked or deleted if a storage period prescribed by these regulations expires, unless the conclusion or fulfillment of a contract requires the data to be saved further.

 

5. Provision of the website and creation of log files

a) Description and scope of data processing

When you visit our website, our system automatically collects data and information from the computer system from which you are accessing our website.

The following data is collected:

(1) Information about the browser type and the version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system reached our website
(7) Websites that are accessed by the user’s system via our website

This data is also stored in so-called log files in our system. We save this data separately from other personal data relating to you and do not combine them at any time.

b) Legal basis for data processing

For the temporary storage of the data and the log files, we use Art. 6 Para. 1f GDPR.

c) Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
The storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. This also includes our legitimate interest in data processing in accordance with Art. 6 Para. 1f GDPR. An evaluation of the data for marketing purposes does not take place in this context.

d) Duration of storage</u<

The data will be deleted as soon as the purpose for which it was collected has been achieved and is no longer required.
In the case of the collection of data for the provision of the website, this is the case when you leave our website.
If the data is stored in log files, this is the case after seven days at the latest. Any further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the accessing client.

e) Opposition and removal option

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. For this reason, there is no option for the user to object.


6. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after changing pages.

The following data is stored and transmitted in the cookies:

(1) Language settings
(2) Log-in information

We also use cookies on our website that enable an analysis of the surfing behavior of the users.

In this way, the following data can be transmitted:

(1) Entered search terms
(2) Frequency of page views
(3) Use of website functions

The data collected in this way are pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user. When you visit our website, an information banner informs you about the use of cookies for analysis purposes and refers you to this data protection declaration. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

b) Legal basis for data processing

For the processing of personal data using cookies, Art. 6 Para. 1f GDPR serves us.

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.
The user data collected by technically necessary cookies are not used to create user profiles. The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and so we can continuously optimize our offer.
Our legitimate interest in the processing of personal data in accordance with Art. 6 Paragraph 1f GDPR lies in these purposes.

d) Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted to our website from there. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used in full.


7. Contact form and email contact

a) Description and scope of data processing

There is a contact form on our website that you can use to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to us and saved. The following data must be entered:

(1) First and last name
(2) Email address

You can also voluntarily provide us with the following data:

(1) address
(2) Place of residence
(3) telephone

As soon as you send us a message about this, the following data will also be transmitted and stored:

(1) IP address
(2) Date and time of registration

Before you can send us a message using the contact form, your consent to the sending and storage of your data will be obtained as part of the sending process. We refer to this data protection declaration.
Alternatively, you can contact us using the email address provided. In this case, we will save the personal data transmitted with the email.
We use this data exclusively for the conversation with you. They will not be passed on to third parties in any way.

b) Legal basis for data processing

If consent has been given, the legal basis for processing the data is Art. 6 Para. 1a GDPR.
The legal basis for processing the data that is transmitted when an email is sent is Article 6 Paragraph 1f GDPR. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1b GDPR.

c) Purpose of data processing

The personal data from the input mask will only be used to process the contact.
If you contact us by email, processing the contact is also our necessary legitimate interest in processing the data.
All other personal data that are transmitted during the sending process are used to ensure the security of our information technology systems and to prevent misuse of the contact form.

d) Duration of storage

The data will be deleted as soon as the purpose for which it was collected has been achieved and is no longer required.
For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. This is the case at the latest when, from our point of view, the circumstances indicate that the matter in question has been finally clarified.
All other personal data collected when contacting us by form or email will be deleted after a period of seven days at the latest.

e) Opposition and removal option

You can withdraw your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In this case, we will delete all personal data that was stored in the course of your contact. We will then not be able to continue the conversation with you.

Use the following contact options for your objection:

Postal:

Hagelschaden-Zentrum
Karosseriefachbetrieb GmbH & Co. KG
Einsteinstr. 27
89077 Ulm

CEO: Gerhard Schimanski

Phone: +49 731 931 64 14
Email: info@hagelschaden-zentrum.de


8. Web analysis by Google Analytics

We use Google Analytics to analyze our website. This is a web analysis service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses cookies for this task.

a) Scope of the processing of personal data

The cookies used by Google Analytics are stored on your computer. If individual pages of our website are called up, the following data is stored:

(1) IP address of the calling system
(2) operating system
(3) browser type
(4) The website accessed
(5) The sub-pages that are accessed from the accessed website
(6) The time spent on the website
(7) The frequency with which the website is accessed
(6) Date and time of your visit to our website

This information is transmitted to a Google server in the USA and stored there. If it is required by the local laws, Google will pass this information on to third parties. This also happens in the event that Google has this data processed by third parties.
The use and collection of the data is anonymized or pseudonymized. Because Google Analytics has been expanded on this website by the code “gat._anonymizeIp ();”. This ensures that your IP address is recorded anonymously (so-called IP masking) by shortening your IP address within the European Union or in contracting states in which the Agreement on the European Economic Area applies before it is transferred to the USA. Only in exceptional cases (e.g. technical problems with the European infrastructure) will the full IP address be sent to a Google server in the USA and only be shortened there.
On our behalf, Google will use the information collected to evaluate your use of our website. In addition, Google compiles reports on website activity for us and provides us with other services relating to website activity and internet usage.

b) Legal basis for processing personal data

The legal basis for the processing of personal data is Art. 6 Para. 1f GDPR.

c) Purpose of data processing

The processing of personal data enables us to analyze the surfing behavior of the users of our website. The knowledge gained in this way enables us to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. This is also our legitimate interest in processing the data in accordance with Art. 6 Para. 1f GDPR.
By anonymizing the IP address, the interests of users in protecting their personal data are sufficiently taken into account.

d) Duration of storage

The data will be deleted as soon as they are no longer required for our recording purposes. In our case this is the case for 14 days.

e) Opposition and removal option

Cookies are stored on the user’s computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used in full.
We offer you the option of a so-called “opt-out” from the analysis process.

To do this, please follow this link:
http://tools.google.com/dlpage/gaoptout?hl=de

In this way, another cookie is set on your system. This signals our system not to save the user’s data. If you delete the corresponding cookies from your system in the meantime, the opt-out cookie must be set again by following the link described above again.

Terms of use and information on data protection in the context of using Google Analytics can be found here:
http://www.google.com/analytics/terms/de.html
http://www.google.com/intl/de/analytics/privacyoverview.html.

9. Google Remarketing / Google Adwords

Our website also uses the marketing and remarketing functions provided by Google. This makes it possible to present interest-based advertisements to website visitors within the Google advertising network.

a) Scope of the processing of personal data

When you visit our website (but also other websites that use this service), a cookie is stored on your computer system. The following data is stored in this:

(1) IP address of the calling system
(2) websites accessed and individual content / offers on these websites
(3) technical information about the browser and operating system
(4) The subpages that are accessed from the accessed website
(5) The length of stay on the website and the frequency with which it is accessed
(6) Date and time of your visit to our website

This cookie makes it possible to recognize the respective visitor to a website as soon as he repeatedly calls up a website that participates in the Google advertising network, so that advertising can be presented in a more interest-based manner.
One of the marketing tools we use is “Google Adwords”. This program sets a cookie that is assigned to this website and is valid for 30 days on your computer for so-called conversation tracking as soon as you click on an advertisement placed by Google. However, this cookie is not used for personal identification. Google as well as we can recognize within the 30-day validity period that the calling computer system clicked on the ad and was forwarded to this page. This enables us to determine the total number of users who followed our advertisements on Google and were redirected. However, information that would make it possible to identify the user personally is not obtained.

b) Legal basis for the processing of personal data

The legal basis for processing users’ personal data is Art. 6 Para. 1f GDPR.

c) Purpose of data processing

The processing of this data enables us to analyze the use of our website in order to be able to further optimize our online offer for you and to ensure the economic operation of the same. Our legitimate interest in processing the data in accordance with Art. 6 Para. 1f GDPR lies in these purposes. By anonymizing the IP address, which is also done here as in point 9. a) (Google Analytics), the interests of users in their protection of personal data are adequately taken into account. According to Google, no other personal data is collected.

d) possibility of elimination

Should you nevertheless reject the marketing or remarketing functions of Google, you can deactivate them by following the link below:
http://www.google.com/settings/ads

Alternatively, you can deactivate the use of cookies for interest-based advertising.Follow the instructions under the following link:
http://www.networkadvertising.org/managing/opt_out.asp

You can find out how Google uses the data for marketing purposes under the following link:
https://www.google.com/policies/technologies/ads,

You can find Google’s privacy policy here:
https://www.google.com/policies/privacy


10. Use of Google Web Fonts

External fonts, Google Fonts, are used on this website. Google Fonts is a service provided by Google Inc. (“Google”). These web fonts are integrated through a server call, usually a Google server in the USA. This will tell the server which of our websites you have visited. The IP address of the browser of the terminal device of the visitor to this website is also saved by Google. You can find more information in Google’s data protection information, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/


11. Use of Google Maps

This website uses Google Maps to display a site plan. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use of the automatically collected data and the data you have entered by Google, one of its representatives or third-party providers.

The terms of use for Google Maps can be found under Terms of Use for Google Maps. You can find details in the data protection center of google.de: Transparency and options as well as data protection regulations.


12. Integration of social media (Twitter, Xing, Facebook, LinkedIn, Youtube, Google)

There are links to the following social networks on our website. In addition to this website, we also maintain an Internet presence there so that we can also inform our customers who are active there about our offers and services:

  1. of the news service “Twitter” of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The plug-ins can be recognized by the Twitter logo.
  2. of the social network “Xing” of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany
  3. of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
  4. YouTube is represented by Google Inc. based at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
  5. Google+ is represented by Google Inc. based at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

and

  1.  of the social network “LinkedIn” of the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA

The links can be recognized by the respective logo of the social network operator. With a click on the link you get to our internet presence there. Their own terms and conditions and data processing guidelines apply there.

If you have a Twitter user account and you are logged in there, the websites you visit will be linked to your Twitter account and may be disclosed to other users. This data is also transmitted to Twitter.

If you have a user account with Xing, Xing can assign the visit to your user account if you are logged in there.

Likewise, LinkedIn will assign your visit to this website to your user account if you have one.

We are not informed by the operating company about the content of the transmitted data or the data usage. We do not know whether and to what extent these companies operating the social networks may collect further data. More information can be found here:

Twitter privacy policy

Xing’s privacy policy

Facebook privacy policy


YouTube privacy policy


LinkedIn privacy policy


Google+ privacy policy

As a member of one of these social networks, you prevent the transmission of your member data and their linking by logging out of the social networks; ideally before you use the corresponding link.


13. Links

We would like to point out at this point that this data protection declaration does not apply to other websites that you can reach via links that are shown on our website. We have no influence on compliance with data protection and security regulations by other providers. Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there.


14. Rights of the data subject

As soon as your personal data is processed, you are a data subject within the meaning of the GDPR. You then have the following rights towards us:

a) Right to information

You can request confirmation from us as to whether personal data relating to you will be processed by us. If this is the case, you can request information from us about the following information:

(a) the purposes for which the personal data are processed;

(b) the categories of personal data that are processed;

(c) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(d) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(e) the existence of a right to correction or deletion of your personal data, a right to restrict processing by the controller or a right to object to this processing;

(f) the right to lodge a complaint with a supervisory authority

(g) all available information about the origin of the data if the personal data are not collected from the data subject;

(h) the existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether the personal data relating to you is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

b) Right to rectification

You have a right to correction and / or completion if the processed personal data concerning you is incorrect or incomplete.

c) Right to restriction of processing

You can request the restriction of the processing of your personal data under the following conditions:

(a) if you dispute the accuracy of the personal data concerning you for a period of time that enables us to verify the accuracy of the personal data;

(b) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(c) we no longer need the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or

(d) if you have objected to processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether our legitimate reasons outweigh your reasons.

If the processing of your personal data has been restricted, this data – apart from its storage – may only be used with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest processed by the Union or a Member State. Has the processing been restricted according to the o.g. Restricted requirements, you will be informed by us before the restriction is lifted.

d) Right to cancellation

(1) Obligation to delete

You can ask us to delete your personal data immediately. We are then obliged to delete this data immediately if one of the following reasons applies:

(a) The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.

(b) You revoke your consent on which the processing was based according to. Art. 6 Para. 1a or Art. 9 Para. 2a GDPR, and there is no other legal basis for the processing.

(c) You object to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object in accordance with Art. Art. 21 para. 2 GDPR objection to the processing.

(d) The personal data relating to you have been processed unlawfully.

(e) The deletion of your personal data is necessary to fulfill a legal obligation to which we are subject.

(f) The personal data relating to you was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.


(2) Information to third parties

If we have made the personal data relating to you public and we are obliged to delete it in accordance with Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to ensure that those responsible for the data processing process the personal data, to inform them that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.


(3) Exceptions

The right to deletion does not exist if processing is necessary

(a) to exercise the right to freedom of expression and information;

(b) to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which we are subject, or to perform a task that is in the public interest or in the exercise of official authority that has been assigned to us;

(c) for reasons of public interest in the field of public health in accordance with Art. 9 Paragraph 2h and i and Art. 9 Paragraph 3 GDPR;

(d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impair it, or

(e) for the establishment, exercise or defense of legal claims.

e) Right to be informed

If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data relating to you have been disclosed of this correction or deletion of the data or restriction of processing. This is not the case if this proves to be impossible or is only associated with a disproportionate effort. You have the right towards us to be informed about these recipients.

f) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible, if

(a) the processing is based on consent in accordance with. Art. 6 para. 1a GDPR or Art. 9 para. 2a GDPR or on a contract in accordance with Art. 6 para. 1b GDPR is based and

(b) the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data relating to you transmitted directly from us to another person responsible, insofar as this is technically feasible. This must not impair the freedoms and rights of other people.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

g) Right to object

You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Paragraph 1. e or f GDPR.
We will then no longer process the personal data relating to you, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for this purpose.
In connection with the use of information society services – regardless of Directive 2002/58 / EC – you have the option of exercising your right of objection by means of automated procedures that use technical specifications.

h) Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

i) Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is against violates the GDPR.
The supervisory authority to which the complaint was submitted informs the complainant of the status and the results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

j) contact details

To protect your rights, which you can assert against us, please use the following contact details:

Postal:
Hagelschaden-Zentrum
Karosseriefachbetrieb GmbH & Co. KG
Einsteinstr. 27
89077 Ulm

By email:
info@hagelschaden-zentrum.de

© HAGELSCHADEN-ZENTRUM Karosseriefachbetrieb GmbH & Co. KG - D-89077 Ulm