The protection of your personal data when you visit our website is very important to us. For this reason, we observe the legal provisions on data protection, in particular the German Federal Data Protection Act (BDSG, as of 25 May 2018 the ‘new BDSG’ in accordance with the GDPR) and the German Telemedia Act (TMG). Any data that you transmit to us will of course be treated as confidential. As a rule, we do not make your data available for use by others unless you have given your consent to this or we are obliged to disclose this data due to official or court orders. The collection, storage, processing and use of your personal data is carried out exclusively in accordance with the following data protection declaration.
 

Legal basis of processing

Our company uses Article 6 (1) (a) GDPR as the legal basis for processing operations where we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the execution of a contract to which the data subject is a party, as is the case, for example, for processing operations that are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6 (1) (b) GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation requiring the processing of personal data, for example to comply with tax obligations, the processing is based on Article 6 (1) (c) GDPR. In rare cases, the processing of personal data might become necessary in order to protect the vital interests of the data subject or of another natural person (Article 6 (1) (d) GDPR). Finally, processing operations could also be based on Article 6 (1) (f) GDPR. Processing operations that are not covered by any of the above-mentioned legal bases are carried out on this legal basis if the processing is necessary to protect legitimate interests pursued by our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.
 

Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

• you have given your express consent to this pursuant to Article 6 (1) (a) GDPR,
• disclosure pursuant to Article 6 (1) (f) GDPR is necessary to assert, exercise, or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• a legal obligation exists for the disclosure pursuant to Article 6 (1) (c) GDPR, or
• this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Article 6 (1) (b) GDPR.
   

Rights of the data subject

You have the right,

• under Article 15 GDPR, to request information about the personal data relating to you that we process. In particular, you may request information as to the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right of rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if not collected by us, and the existence of automated decision making including profiling and, where applicable, meaningful information on the details in this respect;
• under Article 16 GDPR, to obtain the prompt rectification of inaccurate personal data or the completion of personal data stored by us;
• under Article 17 GDPR, to request the erasure of your personal data stored by us the processing is necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;
• under Article 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you decline its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims, or if you have lodged an objection to the processing in accordance with Article 21 GDPR;
• under Article 20 GDPR, to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
• under Article 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects in relation to you or otherwise significantly affects you;
• under Article 7 (3) GDPR, to withdraw at any time the consent that you once gave us. A consequence of this is that in future, we will no longer be permitted to continue the data processing based on this consent; and
• under Article 77 GDPR, to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement for this purpose if the data subject believes that the processing of personal data concerning him or her violates the EU’s General Data Protection Regulation (GDPR).

Cookies/Session-IDs

General collection of data

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. More specifically, the following data may be stored:

• IP address (if possible, this is stored in anonymised form)
• Domain name of the website you came from
• Names of any retrieved files
• Date and time of retrieval
• Name of your internet service provider
• If applicable, operating system and browser version of your end device

We only store IP addresses for data security reasons in order to ensure the stability and security of our system (legal basis: Article 6 (1) (f) GDPR). We reserve the right to perform statistical analyses of anonymised datasets.
 

Contact forms

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided, will be stored and processed by us for the purpose of processing the enquiry and in the event of follow-up enquiries. Your data will be used exclusively for the purpose of answering and processing your question. Data processing in this case is carried out in accordance with Article 6 (1) (a) GDPR on the basis of your voluntarily given consent. You can withdraw this consent at any time (right of withdrawal).
 

Referrals to third-party websites

This website contains referrals to third-party websites in the form of links. Only when you click on one of these links will data be transmitted to the link destination. This is technically necessary. The data transmitted specifically includes the following: Your IP address, the time you clicked on the link, the page on which you clicked on the link, details of your internet browser. If you do not want this data to be transmitted to the link destination, do not click on the link.

SSL encryption

This website uses Secure Socket Layer (SSL) encryption for the transmission of data from your browser to our server and to servers that provide files that we embed on our website.
With SSL, data is transmitted in encrypted form. The data cannot be changed and the sender can be identified.
You can identify the presence of SSL encryption by the “https” in front of the address of the website you are calling up with your browser.

Comment function

On individual pages or posts, there is a voluntary comment function for users who would like to share their opinion on the respective page or post. Comments are approved after a positive review and will appear publicly on the page where they were submitted. There is no entitlement to the approval of a comment. When you submit a comment, you must give a name, although this can be a pseudonym. You must also provide an email address. This will be used to inform you about the status of your comment, especially if you have asked a question in the comment and are waiting for an answer. Your email address will not be displayed publicly and will not be passed on to third parties or analysed manually. If you submit a comment, your IP address is only stored in anonymised form. The comment will be permanently stored until it is deleted by you (or an administrator). The email address you provided for your comment will only be stored for the purpose of sending you a notification in the event of a reply to your comment. Other data you provide about the comment will be published in the comment if you provide it. If a name is requested, you can also use a pseudonym.

Links to other websites

Our website/app may, from time to time, contain links to third-party websites or to other websites of ours. If you follow a link to one of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before you pass on personal data to these websites.

Openstreetmap

This page uses the open source mapping tool “OpenStreetMap” (OSM) via an API. The provider is the OpenStreetMap Foundation. The maps are displayed via a proxy server run by our internet agency. Your data will not be passed on to third parties.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of visits to our online offer, subpages visited and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision by the European Commission (including US companies that are not EU-U.S. DPF certified), we have other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: policies.google.com/privacy.
 

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision by the European Commission (including US companies that are not EU-U.S. DPF certified), we have other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
 

Cookiebot CDN

Type and scope of processing

We use Cookiebot CDN to properly provide the content of our website. Cookiebot CDN is a Cybot A/S service that acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other Cybot A/S services. For these services, you will find a separate section of this Privacy Policy. This section is only about using the CDN.

A CDN helps to deliver content from our online offering, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you connect to Cybot A/S servers, Havnegade 39, 1058 Copenhagen, Denmark, transmitting your IP address and, if applicable, browser data such as your user agent. This data will be processed exclusively for the above purposes and for the maintenance of the security and functionality of Cookiebot CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 sec. 1 lit. f. GDPR.

Storage time

The actual storage time of the processed data is not influenced by us, but is determined by Cybot A/S. For more information, see the privacy policy for Cookiebot CDN: www.cookiebot.com/de/privacy-policy/.

Sharethis social media functions

We use the ShareThis service on our website, which is provided by ShareThis Inc., 250 Cambridge Avenue, Palo Alto, CA 94306, USA (“ShareThis”). ShareThis provides functions for sharing the current page with other internet users, for example in social networks, or for setting bookmarks. When you use a ShareThis service, your internet browser establishes a direct connection with the ShareThis servers and, if applicable, the selected social network. The data generated in the process (such as the time of use or the browser language) is transferred to ShareThis and processed there. ShareThis may connect you to your user account on other social networks such as Twitter, Facebook or Google+ if you are logged in to the relevant social network at the time of your visit to our website. If you would not like this to happen, please log out of these social networks before using ShareThis functions. We do not process the data concerned or pass it on to third parties. By using the ShareThis service, you consent to data processing by ShareThis. You can object to the collection and storage of data by ShareThis at any time with effect for the future by installing an opt-out cookie. You can install this opt-out cookie here, where you will also find the ShareThis privacy notice. Please note that, due to the Cloud Act, American intelligence services could potentially gain access to personal data that is inevitably exchanged with provider of this tool when this tool is integrated due to the internet protocol.

Security notice

We secure our website and other IT systems against loss, destruction, unauthorised access, unauthorised modification or unauthorised dissemination of your data by means of appropriate technical and organisational measures. However, despite all due care, complete protection against all dangers is not possible in every case. Because we cannot guarantee complete data security for email communication, we recommend that you send confidential information by post.
 

Protection of minors

If you are under 18 years of age, you should not submit any personal data to us without the consent of your parents or legal guardians. We do not request personal data from children or young people. We do not knowingly collect such data and do not pass it on to third parties.

Access to our data protection policy

You can access and print out our data protection notice from any page of the domain www.hsb-automation.de by clicking on “Data protection”. Please note that when you navigate away from our website by following links included on our website, you will be forwarded to a new website whose data protection policy may differ from this one.

Changes to this data protection notice

We reserve the right to modify this data protection notice if the legal situation changes, or if changes are made to this website or to the type of data collection. However, this only applies with regard to the statements on data processing. If the user’s consent is necessary or if components of the data protection notice contain a provision regulating the contractual relationship with users, the data protection notice will only be amended with the consent of the user. Please therefore consult this data protection notice if you require further information, especially if you are sharing personal data.

Contact person, right to information and correction

If you have any further questions or comments about our data protection policy, you can contact our data protection officer at any time.
You also have a right to be informed at any time as to whether we have stored any personal data about you and, if so, which data has been stored. This information can also be provided electronically at your request. You have the right to have inadmissible data erased/blocked and to have inaccurate data corrected. Our data protection officer will be happy to provide you with information on this at any time upon request.

You can contact our data protection officer, Mr Matthias Walliser, using the following contact details:

Matthias Walliser Dipl.-Ing. (BA)
Altenwaldstrasse 8
72768 Reutlingen
GERMANY

DSGVO[at]hsb-automation.de

This website has been checked and scanned with the data protection tool wwwschutz. This data protection notice was created with the support of wwwschutz.