Imprint, Legal Disclaimer & Privacy Statement

Data Privacy Policy

Thank you for visiting our website. The protection and security of your personal information when you use our website is very important to us. We would therefore like to inform you at this point about which items of your personal data we collect when you visit our website and for what purpose they are used.
This Data Privacy Policy applies to the Internet services of HygroMatik GmbH, which can be accessed at the domain https://www.hygromatik.com/de and the various subdomains (“our website”).

Who is the Data Controller and how do I get in contact with you?
The Data Controller
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
HygroMatik GmbH
Lise-Meitner-Straße 3
24558 Henstedt-Ulzburg
T +49 4193 895-0
F +49 4193 895-33
Email: hy@hygromatik.de

Data Protection Officer
Svenja Ulrich
Rudolf-Diesel-Straße 10
23617 Stockelsdorf
Email: info@hub24.de

What is it all about?
This Data Privacy Policy meets the legal requirements for transparency in the processing of personal data. Personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address or user behaviour when visiting a website. Information that we cannot (or only with disproportionate effort) link to your person, e.g. by anonymisation, is not personal data. Processing personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data must be erased as soon as the purpose of the processing has been achieved and there are no legal grounds for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we will store your personal data in individual cases for the establishment, exercise or defence of legal claims and if there are statutory storage requirements.

Who gets my data?
We only disclose your data processed by us on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or preserving legitimate interests) in individual cases. In addition, in individual cases, we will disclose personal data to third parties if this is for the purpose of the establishment, exercise or defence of legal claims. Possible recipients may then be law enforcement agencies, lawyers, auditors, courts etc.
Where, for the operation of our website, we use service providers who process personal data under Article 28 GDPR within the scope of order processing on our behalf, these service providers may be recipients of your data. You can obtain more information on the use of data processing service providers and web services in the overview of the individual processing operations.

How do you use cookies?
Cookies are small text files that are sent by us to the browser of your terminal device and stored there during your visit to our website. As an alternative to the use of cookies, information can also be stored in the local memory (local storage) of your browser. Some features on our website will not be available without the use of cookies or local storage (technically necessary cookies). On the other hand, other cookies enable us to conduct various analyses so that we are able, for example, to recognise the browser you are using when you visit our website again and to send us various types of information (non-essential cookies). Cookies help us to design our website to be more user-friendly and effective for you, for example, by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not harm your computer. They cannot run programs or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing procedures. Detailed information on the cookies used can be found in the cookie settings of this Privacy Policy.

What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you have the following rights as the data subject:

Information under Article 15 GDPR, Section 34 BDGS about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
Rectification under Article 16 GDPR of incorrect or incomplete data stored by us;
Erasure under Article 17 GDPR of the data stored by us, where the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for public interest reasons, or for the establishment, exercise or defence of legal claims;
Restriction of processing under Article 18 GDPR, if the accuracy of the data is disputed, processing is unlawful, we no longer need the data and you refuse erasure because you need it for the establishment, exercise or defence of legal claims or you have objected to processing under Article 21 GDPR.
Data portability under Article 20 GDPR, where you have provided us with personal data as part of consent under Article 6(1)(a) GDPR or on the basis of a contract under Article 6(1)(b) and it has been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transfer the data directly to another data controller where this is technically feasible.
Objection under Article 21 GDPR to the processing of your personal data where this takes place on the basis of Article 6(1)(e) or (f) GDPR and there are grounds for this arising from your particular situation or the objection is directed against direct advertising. There is no right to object if overriding compelling legitimate grounds for processing can be demonstrated or the processing is carried out for the establishment, exercise or defence of legal claims. If there is no right to object for individual processing operations, this is indicated there.
Withdrawal of consent you have given under Article 7(3) GDPR with future effect.
Lodging a complaint under Article 77 GDPR with a supervisory authority, if you believe that the processing of your personal data breaches the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our head office.

How is my data processed in detail?
We inform you below about the individual processing procedures, the scope and purpose of the data processing, the legal basis, the requirement to provide your data and the respective storage duration. Automated decision making in individual cases, including profiling does not take place.

Provision of the website
Nature and scope of processing
When you access and use our website, we collect personal data, which your browser automatically transmits to our server. The following information is temporarily stored in a “log file”:

IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Website from which access takes place (referrer URL)
Browser used and, if applicable, the operating system of your computer and the name of your access provider

We do not host our own website; it is hosted by a service provider who, for the purpose of providing the website, processes the above data on our behalf under Article 28 GDPR.
Purpose and legal basis
Processing takes place to safeguard our overriding legitimate interest in the display of our website and to ensure security and stability on the basis of Article 6(1)(f) GDPR. The collection of data and storage in log files is absolutely essential for the operation of the website. There is no right to object to the processing based on the exception under Article 21(1) GDPR. To the extent that further storage of log files is required by law, processing is based on Article 6(1)(c) GDPR. There is no legal or contractual requirement to provide the data but it is technically impossible to access our website without doing so.
Storage period
The above data will be stored for the duration of the display of the website and for technical reasons for a maximum of 30 days.

Contact form
Nature and scope of processing
On our website we offer you the option of contacting us using the form provided. The information collected from the mandatory fields is necessary to process the request. In addition, you may voluntarily provide additional information that you feel is necessary to process the contact request.
If you use the contact form, your personal data is not disclosed to third parties.
Purpose and legal basis
When you use our contact form, your data is processed for the purpose of communication and processing your request based on your consent under Article 6(1)(a) GDPR. Where your request refers to an existing contractual relationship with us, processing for the purpose of fulfilling the contract is based on Article 6(1)(b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without the information in the mandatory fields being provided. If you do not wish to provide this data, please contact us by other means.
Storage period
Where you use the contact form on the basis of your consent, we will store the data collected for each request for a period of three years, starting with the completion of your request or until your consent is withdrawn.

Notes for applicants
On our website, we publish job offers to which you can apply by e-mail. If you decide to apply for a vacancy, we will process the personal data you provide there and send to us solely for the purpose of carrying out the application process.
In the event of a rejection, we delete your data as soon as a retention period of 6 months required by labor law has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent. We will not pass on your personal data to third parties outside the specific application process without your express consent or without a legal basis.
Please note that applications sent to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons may intercept and use this data.
The legal basis for processing your personal data as part of the application process is Section 26 (1) in conjunction with (2) BDSG.

Newsletter
Nature and scope of processing
If you subscribe to our newsletter on our website, we will collect your email address and other contact details provided and store this information together with the date of subscribing and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your subscription within 48 hours, it will automatically expire and the data will not be processed for dispatch of the newsletter.
The newsletter is sent directly by us. Your data will not be disclosed to third parties or processors within the meaning of Article 28 GDPR.
Purpose and legal basis
Your data is processed for the purpose of sending the newsletter based on your consent under Article 6(1)(a) GDPR. By unsubscribing from the newsletter you can withdraw your consent under Article 7(3) GDPR with future effect. There is no legal or contractual obligation to provide your data, but the newsletter cannot be sent without provision of your data.
Storage period
After subscribing to the newsletter, we store the data no longer than until confirmation of the subscription. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter).

Google Analytics
Nature and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online provision. This includes, for example, the number of hits on our website, sub-pages visited and our visitors’ dwell time on our website.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
The information collected in the cookie about your use of the website (including your IP address in truncated form) is transferred from your browser to a Google server and stored there. This data may be transmitted to the servers of Google LLC. located in the USA. This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()". This configuration of the web analysis service ensures anonymisation of your IP address by truncating it and prevents direct linking to a particular person.
Your IP address will be truncated by Google within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is it possible that the full IP address is transferred to a Google LLC. server in the USA and truncated there. In such an exceptional circumstance, this processing is carried out under Article 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. Google will use this information on our behalf to evaluate your use of the website, to generate reports on website activities and to provide us with additional services related to the website and Internet use. Your IP address transmitted as part of Google (Universal) Analytics will not be linked with any other data from Google. You can prevent cookies from being saved by configuring your browser. In this case, however, we would like to point out that you may not be able to fully use all the features of our website. In addition, you can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google. This is possible by installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser plugin, click on the following link: https://developers.google.com/analytics/devguides/collection/gtagjs/user-opt-out.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en
Purpose and legal basis
We process data with the aid of Google Analytics in order to optimise our website and for marketing purposes on the basis of your consent under Article 6(1)(a) GDPR.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the Google Analytics Privacy Policy: https://policies.google.com/privacy.

Google Tag Manager
Type and scope of processing
We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and legal basis We process data using Googles Tag Manager for the purpose of managing integrated tools to optimize our website and for marketing purposes based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Maps
Nature and scope of processing
We use the map service Google Maps for displaying travel directions. Google Maps, which displays a map on our website, is a service of Google Ireland Limited.
When you access this content of our website, you connect to servers at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and your IP address and, if applicable, browser data such as your user agent is transmitted. This data is processed exclusively for the above mentioned purposes and to maintain the security and functionality of Google Maps.
Purpose and legal basis
The use of Google Maps is based on our legitimate interests in accordance with Article 6(1)(f) GDPR, i.e. interest in making it easier for you to find the locations mentioned on the website.

Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the Google Maps Privacy Policy: https://policies.google.com/privacy.

Google reCaptcha
Nature and scope of processing
We have integrated components of Google reCaptcha on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request comes from a natural person or is automated by a program. When you access this content, you connect to servers at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and your IP address and, if applicable, browser data such as your user agent is transmitted. Furthermore, Google reCAPTCHA records the user’s dwell time and mouse movements to distinguish automated requests from human ones. This data is processed exclusively for the above mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.
Purpose and legal basis
The use of the service is based on our legitimate interests, i.e. for protection when submitting forms under Article 6(1)(f) GDPR.
Storage period
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information refer to the Google reCAPTCHA Privacy Policy: https://policies.google.com/privacy?hl=en-US.

Privacy Policy for social networks
In order to present our company in the best possible way and to communicated with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence on social networks.
The social media profiles are maintained under joint responsibility under Article 26 GDPR.
You can also find us on the following platforms or social networks:

LinkedIn
YouTube

The data controller on the HygroMatik GmbH page is:
HygroMatik GmbH
Lise-Meitner-Straße 3
24558 Henstedt-Ulzburg
T +49 4193 895-0
F +49 4193 895-33
Email: hy@hygromatik.de

Data Protection Officer
Phillip Herold
Rudolf-Diesel-Straße 10
23617 Stockelsdorf
Email: Phillip.herold@m-dsb.de

The data controllers for the respective platforms are:
YouTube
Die YouTube LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
For more information on data protection at YouTube refer to the provider’s Privacy Policy at: www.google.en/intl/en/policies/privacy/
Opt-out: adssettings.google.com
Privacy Shield Agreement: www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
For more information see at: www.google.en/policies/privacy/frameworks/

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy Policy: www.linkedin.com/legal/privacy-policy
Privacy Shield Agreement: www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Actice
Opt-out: www.linkedin.com/psettings/?trk=nav_account_sub_nav_settings

Purpose of data processing and categories of data subjects
Data processing is carried out for the purposes of generating and making available social media content, to answer contact requests, to moderate comments and to draw attention to offers of HygroMatik GmbH.
The processing purposes pursued by social networks generally differ from ours. Thus, in most cases, the data collected from you in social networks is processed for the purposes of market research, advertising and to create user profiles for personalised advertising.
In order to achieve this, cookies are used which record user behaviour and enable a profile of the user. A specific list of the processing purposes of the user data can be found in the data privacy notices of the respective providers. By adjusting the appropriate settings in your user account, you can restrict the creation of your profile, at least to a certain extent. For the exact procedure, please read the corresponding data protection information of the respective provider.
The groups of people affected are the respective users and visitors of the respective social media sites.

Legal basis
When you use social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this connection, there may be risks, for you as a user if the data transmitted is processed in so-called third countries with an inadequate level of data protection.
This makes it difficult to enforce known user rights. In addition, it may also be that your data is not processed in your interest by the provider in the third country.
NOTE about the invalid Privacy Shield Agreement:
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) as well as Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) have been awarded the “Privacy Shield” certification for the US-European Data Protection Convention. Due to the recent decision of the European Court of Justice, the Convention no longer guarantees adequate proof of compliance with the level of protection required by the EU General Data Protection Regulation.
Due to the current legal uncertainty, we would like to point out that we provide the content on social media platforms on the basis of your “implied” consent given to us (Article 6(1)(a) GDPR). By visiting the pages and accepting the cookies set, you consent to the processing of your personal data and the transfer of this data.

Storage period
The storage period of personal data within the social media platforms depends on the respective platform operators. Hygromatik GmbH has no access to the data stored by the platform operators.
Rights of data subjects
The data controller is required to guarantee you the following rights when your personal data are processed:

the right to information under Article 15 GDPR,
the right to rectification under Articles 16 and 17 GDPR,
the right to restriction of processing under Article 18 GDPR,
the right to data portability under Article 20 GDPR,
the right to object to the processing under Article 21 GDPR,
the right to withdraw consent for future processing under Article 7(3) GDPR.

Automated decision making in individual cases, including profiling does not take place.

You also have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your data. Further rights that you can require from the platform operators (in particular the right to object to certain processing by the respective platforms or to withdraw consent granted to one of the platforms named) are described in the data policy of the respective platforms (links see above).

LinkedIn Insight-Tag

Nature and scope of the processing
We use LinkedIn Insight-Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To do this, LinkedIn Corporation offers retargeting for website visitors to display targeted advertising outside of our website.
LinkedIn Insight-Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent) and timestamp. This data is used to present anonymized reports on website audience and ad performance.
Purpose and legal basis
The use of LinkedIn Insight-Tag is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight-Tag: https://www.linkedin.com/legal/privacy-policy.

Imprint.

Data Privacy Policy