Imprint, Legal Disclaimer & Privacy Statement

Data protection

Thank you for visiting our website. The protection and security of your personal information when you use our website is very important to us. We would therefore like to inform you at this point about which items of your personal data we collect when you visit our website and for what purpose they are used.
This data privacy policy applies to the Internet services of HygroMatik GmbH, which can be accessed at the domain https://www.hygromatik.com/de and the various subdomains (“our website”).

Who is responsible and how do I get in contact with them?
Person responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) HygroMatik GmbH
Lise-Meitner-Strasse 3
24558 Henstedt-Ulzburg
T +49 4193 895-0
F +49 4193 895-33
E-mail: datenschutz@hygromatik.de

Data Protection Officer
mein-datenschutzbeauftragter.de
Phillip Herold
Hafenstrasse 1a
23568 Lübeck
E-mail: datenschutz@hygromatik.de

What is it all about?
This data privacy policy meets the legal requirements for transparency in the processing of personal data. Personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address or user behaviour when visiting a website. Information that we cannot (or only with disproportionate effort) link to your person, e.g. by anonymisation, is not personal data. Processing personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data must be erased as soon as the purpose of the processing has been achieved and there are no legal grounds for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we will store your personal data in individual cases for the establishment, exercise or defence of legal claims and if there are statutory storage requirements.

Who gets my data?
We only disclose your data processed by us on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or preserving legitimate interests) in individual cases. In addition, in individual cases, we will disclose personal data to third parties if this is for the purpose of the establishment, exercise or defence of legal claims. Possible recipients may then be law enforcement agencies, lawyers, auditors, courts etc.
Where, for the operation of our website, we use service providers who process personal data under Article 28 GDPR within the scope of order processing on our behalf, these service providers may be recipients of your data. You can obtain more information on the use of data processing service providers and web services in the overview of the individual processing operations.

How do you use cookies?
Cookies are small text files that are sent by us to the browser of your terminal device and stored there during your visit to our website. As an alternative to the use of cookies, information can also be stored in the local memory (local storage) of your browser. Some features on our website will not be available without the use of cookies or local storage (technically necessary cookies). On the other hand, other cookies enable us to conduct various analyses so that we are able, for example, to recognise the browser you are using when you visit our website again and to send us various types of information (non-essential cookies). Cookies help us to design our website to be more user-friendly and effective for you, for example, by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not harm your computer. They cannot run programs or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing procedures. Detailed information on the cookies used can be found in the cookie settings of this Privacy Policy.

What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act, you have the following rights as the data subject:

Information under Article 15 GDPR, § 34 Federal Data Protection Act about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
Rectification under Article 16 GDPR of incorrect or incomplete data stored by us;
Erasure under Article 17 GDPR of the data stored by us, where the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for public interest reasons, or for the establishment, exercise or defence of legal claims;
Restriction of processing under Article 18 GDPR, if the accuracy of the data is disputed, processing is unlawful, we no longer need the data and you refuse erasure because you need it for the establishment, exercise or defence of legal claims or you have objected to processing under Article 21 GDPR.
Data portability under Article 20 GDPR, where you have provided us with personal data as part of consent under Article 6(1)(a) GDPR or on the basis of a contract under Article 6(1)(b) GDPR and it has been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transfer the data directly to another data controller where this is technically feasible.
Objection under Article 21 GDPR to the processing of your personal data where this takes place on the basis of Article 6(1)(e, f) GDPR and there are grounds for this arising from your particular situation or the objection is directed against direct advertising. There is no right to object if overriding compelling legitimate grounds for processing can be demonstrated or the processing is carried out for the establishment, exercise or defence of legal claims. If there is no right to object for individual processing operations, this is indicated there.
Withdrawal of consent you have given under Article 7(3) GDPR with future effect.
Lodging a complaint under Article 77 GDPR with a supervisory authority, if you believe that the processing of your personal data breaches the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our head office.
How is my data processed in detail?

We inform you below about the individual processing procedures, the scope and purpose of the data processing, the legal basis, the requirement to provide your data and the respective storage duration. Automated decision making in individual cases, including profiling does not take place.

Provision of the website
Nature and scope of processing
When you access and use our website, we collect personal data, which your browser automatically transmits to our server. The following information is temporarily stored in a “log file”:

IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Website from which access takes place (referrer URL)
Browser used and, if applicable, the operating system of your computer and the name of your access provider

We do not host our own website; it is hosted by a service provider who, for the purpose of providing the website, processes the above data on our behalf under Article 28 GDPR.
Purpose and legal basis
Processing takes place to safeguard our overriding legitimate interest in the display of our website and to ensure security and stability on the basis of Article 6(1)(f) GDPR. The collection of data and storage in log files is absolutely essential for the operation of the website. There is no right to object to the processing based on the exception under Article 21(1) GDPR. To the extent that further storage of log files is required by law, processing is based on Article 6(1)(c) GDPR. There is no legal or contractual requirement to provide the data but it is technically impossible to access our website without doing so.
Storage period
The above data will be stored for the duration of the display of the website and for technical reasons for a maximum of 30 days.

Contact form
On our website we offer you the option of contacting us using the form provided. The information collected from the mandatory fields is necessary to process the request. In addition, you may voluntarily provide additional information that you feel is necessary to process the contact request.
If you use the contact form, your personal data is not disclosed to third parties.
Purpose and legal basis
Depending on the type of enquiry, the legal basis for this processing is Article 6(1)(b) GDPR for enquiries that you yourself make as part of a pre-contractual measure or Article 6(1) p. 1 (f) GDPR if your enquiry is of a different nature. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without the information in the mandatory fields being provided. If you do not wish to provide this data, please contact us by other means.
Storage period
Where you use the contact form on the basis of your consent, we will store the data collected for each request for a period of three years, starting with the completion of your request or until your consent is withdrawn.

Information for applicants
We publish job vacancies on our website for which you can apply by e-mail. If you decide to apply for a vacancy, we will process your personal data provided there and send to us solely for the purpose of carrying out the application process.
In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by labour law has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent. We will not pass on your personal data to third parties outside the specific application process without your express consent or without a legal basis.
Please note that applications sent to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorised persons can intercept and use this data.
The legal basis for processing your personal data as part of the application process is Article 26(1) in conjunction with (2) Federal Data Protection Act.

Newsletter
Nature and scope of processing
If you subscribe to our newsletter on our website, we will collect your email address and other contact details provided and store this information together with the date of subscribing and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your subscription within 48 hours, it will automatically expire and the data will not be processed for dispatch of the newsletter.
The newsletter is sent directly by us. Your data will not be disclosed to third parties or processors within the meaning of Article 28 GDPR.
Purpose and legal basis
Your data is processed for the purpose of sending the newsletter based on your consent under Article 6(1)(a) GDPR. By unsubscribing from the newsletter, you can withdraw your consent under Article 7(3) GDPR with future effect. There is no legal or contractual obligation to provide your data, but the newsletter cannot be sent without provision of your data.
Storage period
After subscribing to the newsletter, we store the data no longer than until confirmation of the subscription. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter).

Google Analytics
Nature and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online provision. This includes, for example, the number of hits on our website, sub-pages visited and our visitors’ dwell time on our website.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used to compile reports on website activity, among other things.
Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Article 6(1)(a) GDPR and § 25(1) Telecommunications-Telemedia Data Protection Act.
When you use the service, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection. This makes it difficult to enforce known user rights.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the data protection declaration for Google Analytics: https://policies.google.com/privacy.

Google Maps
Nature and scope of processing
We use the map service Google Maps for displaying travel directions. Google Maps, which displays a map on our website, is a service of Google Ireland Limited.
When you access this content of our website, you connect to servers at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and your IP address and, if applicable, browser data such as your user agent is transmitted. This data is processed exclusively for the above mentioned purposes and to maintain the security and functionality of Google Maps.
Purpose and legal basis
The use of Google Maps is based on your consent in accordance with Article 6(1)(a) GDPR and § 25(1) Telecommunications-Telemedia Data Protection Act.
When you use the service, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection. This makes it difficult to enforce known user rights.

Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the data protection declaration for Google Maps: https://policies.google.com/privacy.

Google Tag Manager
Nature and scope of processing
We use the Google Tag Manger of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used to manage website tags through one interface and allows us to control the precise integration of services on our website.
This enables us to flexibly integrate additional services to evaluate user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Article 6(1)(a) GDPR and § 25(1) Telecommunications-Telemedia Data Protection Act.
When you use the service, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection. This makes it difficult to enforce known user rights.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the data protection declaration for the Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Fonts
Nature and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online services. To obtain these fonts, you connect to Google Ireland Limited’s servers and your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent in accordance with Article 6(1)(a) GDPR and § 25(1) Telecommunications-Telemedia Data Protection Act.
When you use the service, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection. This makes it difficult to enforce known user rights.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the data protection declaration for Google Fonts: https://policies.google.com/privacy.

Data protection declaration for social networks
In order to present our company in the best possible way and to communicated with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence on social networks. When you use social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU.
In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection.
This makes it difficult to enforce known user rights. In addition, it may also be that your data is not processed in your interest by the provider in the third country.
The USA does not have a level of data protection comparable to the requirements of the GDPR. It is possible for government agencies to access personal information without us or you knowing. You will presumably not be able to enforce your rights in the USA.
In addition to the respective provider of a social network, we also collect and process personal user data on so-called “fan pages”. This notice is to inform you on the data we collect from you on our social media sites, how we use them and how you can object to the use of the data. Please refer to the respective offer listed in more detail below for the respective data processing purposes and data categories.
The social media activities operated by us and detailed below are carried out on the basis of a balancing of interests pursuant to Article 6 (1)(f) DSGVO.
In order to achieve this, cookies are used which record user behaviour and enable a profile of the user.
A specific list of the processing purposes of the user data can be found in the data privacy notices of the respective providers. By adjusting the appropriate settings in your user account, you can restrict the creation of your profile, at least to a certain extent. For the exact procedure, please read the corresponding data protection information of the respective provider.
The relevant platforms are:
YouTube

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
https://policies.google.com/privacy?hl=de

LinkedIN

LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland
https://de.linkedin.com/legal/privacy-policy?

HygroMatik GmbH operates profiles on the listed platforms in order to draw attention to products and service offers and to interact with customers, interested parties and other platform users.
In this context, the platform operators also use certain data collected from platform users (e.g. whether a photo on a profile was marked with a “like” or commented on) to create aggregated usage statistics and make them available to the respective operators of the profile (so-called “insights” or “analytics”). As profile operators, we also receive such usage statistics. The information we receive as profile operators does not allow any conclusions to be drawn about individual users. The profile operator itself has no access to personal data that the platform operator processes to create usage statistics. Only the respective platform operator determines which data are processed for these purposes, and in which manner. As the profile operator, HygroMatik GmbH can neither legally nor actually influence the processing by the platform operators.
For processing in connection with the creation of usage statistics, HygroMatik GmbH and the respective platform operator are considered joint controllers within the meaning of Article 26 GDPR.
Insofar as possible, joint responsibility agreements are in place with the respective platform operators.
Beyond that, HygroMatik GmbH as the profile operator processes data only to a very limited extent:

Processing of user names and comments deleted because of breaches of netiquette. These are kept within the statute of limitations as possibly required proof in the event of legal disputes.
Recruiting potential applicants on career platforms

For these purposes, we generally process only your name, message content, comment content and the profile information you provide “publicly”.

LinkedIn Insight-Tag

Nature and scope of the processing
We use LinkedIn Insight-Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimise them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To do this, LinkedIn Corporation offers retargeting for website visitors to display targeted advertising outside of our website.
LinkedIn Insight-Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent) and timestamp. This data is used to present anonymised reports on website audience and ad performance.
Purpose and legal basis
The use of LinkedIn Insight-Tag is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight-Tag: https://www.linkedin.com/legal/privacy-policy.

Concept & programming:

Abakus Elektronik GmbH

Q.BIG Communication GmbH

Imprint.

Data protection

Reporting platform