Data protection

Thank you for visiting our website. Compliance with data protection regulations is particularly important to us. The aim of this data protection declaration is to inform you, as a user of the website, about the type, scope and purpose of the processing of personal data and the rights you have, insofar as you are considered a data subject within the meaning of Article 4 No. 1 of the General Data Protection Regulation.

1. Responsible body

This website and the range of services are operated by:

Storz Hydrauliksysteme GmbH

Obere Hauptstr. 64

78573 Wurmlingen

Telephone: 07461 / 96653-0

Fax: 07461 / 96653-29

Email: info@storz-hydraulik.de

www.storz-hydraulik.de

2. Data protection officer

We have appointed a data protection officer.

www.mein-datenschutzanwalt.de

Mr. Philipp Herold

Hafenstrasse 1a

23568 Lübeck

Email: datenschutz@storz-hydraulik.de

3. General

We developed the website to collect as little data from you as possible. We always ensure that we only process your personal data in accordance with a legal basis or with your consent. We adhere to the regulations of the General Data Protection Regulation (GDPR), which has been in force since May 25, 2018, and the applicable national regulations, such as the Federal Data Protection Act, the Telecommunications Telemedia Data Protection Act or other more specific data protection laws.

4. Purpose and legal basis for processing personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

a) To be able to process your request with you if you have contact requests (e.g. email address, first name, last name);

b) To be able to send you an offer based on your quotation request (quotation form).

c) For the technical implementation of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information)

d) To send a newsletter with information about our service offerings and news about our services (e.g. name, email address)

Regarding the legal basis for processing your personal data:

We process personal data that is necessary for the justification, implementation or processing of our service offer (contract processing) on the legal basis of Article 6 Paragraph 1 Letter b GDPR. If we obtain your consent for the processing of your personal data, the consent in accordance with Article 6 Paragraph 1 Letter a GDPR forms the legal basis for the data processing. Data processing is also permitted if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not outweigh this. (Art. 6 Para. 1 lit. f GDPR) If we use external service providers as part of order data processing, the processing takes place on the legal basis of Art. 28 GDPR.

5. Collection of personal data when you visit our website

If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Article 6 Paragraph 1 and following DSGVO (GDPR)):

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transferred in each case

• Website from which the request comes

• Browsers

• Operating system and its interface

• Language and version of the browser software.

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the host’s servers.

We use the following host:

10Web Inc.
800 West El Camino Real, Suite 180,
Mountain View, CA 94040, USA

The data center is located in Frankfurt, Germany and powered by Google Cloud.

Order processing

We have concluded an order processing contract with the named provider. This is a contract required by data protection law, which guarantees that the personal data of our website visitors will only be processed in accordance with our instructions and in compliance with the GDPR.

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Further information on this can be found under the “Cookies” section in this data protection declaration, in our cookie policy and in the consent management tool used.

6. Integration of services from other providers

Our website uses content, services and benefits from other providers. These are, for example, services for statistical analysis of the use of and visits to our website. In order for this data to be accessed and displayed in the user’s browser, the user’s IP address must be transmitted to the third-party providers used.
Even if we try to only use third-party providers who only need the IP address to be able to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored becomes saved. Information about the third-party providers used can be found below in this data protection declaration.

Google Analytics
Type and extent of processing
We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our online offering, the time spent on the website, sub-pages visited or the browser used. To evaluate user behavior, Google Analytics 4 uses cookies, scripts and pixels as well as machine learning-based algorithms that automatically evaluate event data such as scrolling movements. This information is used, among other things, to compile reports on website activity.

Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and Section 25 Paragraph 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Article 45 Para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are registered under the EU-U.S. Data Privacy Framework (EU-U.S. DPF) certified.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the data protection declaration for Google Analytics: https://policies.google.com/privacy.

Google Ads
Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognize users. Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider. If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis
The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 Para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

7. Cookies

Cookies are small text files that are stored on your data carrier and store certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, information about the age of the cookie, and an alphanumeric identifier.

Cookies enable our systems to recognize the user’s device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user’s computer. Cookies help us to improve our website and to offer you a better and more tailored service. They enable us to recognize your computer or your (mobile) device when you return to our website and thereby:

• Store information about your preferred activities on the website in order to tailor our website to your individual interests.
• To speed up the speed of processing your requests.

We work with third-party services that help us make the Internet offering and the website more interesting for you. Therefore, when you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically deleted after the specified time.

Further information about the individual third-party providers can be found in the Cookie Consent Tool and the data protection information contained therein as well as our Cookie Policy.

If you do not wish to use browser cookies, you can set your browser so that it does not accept the storage of cookies. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies and not the cookies of our service providers and partners, you can select the “Block third-party cookies” setting in your browser. We assume no responsibility for the use of third-party cookies.

8. Establishing contact (contact forms, offer forms, etc.)

You can contact us by email or using our contact form (offer form for business customers). In this case, we store the personal data you provide in order to process your request and to contact you to process your request. As far as we request information via our contact form, we have it for contact Mandatory fields required for registration are marked accordingly (asterisk). The voluntary information serves us to concretize your request and to improve the processing of your request. You will transmit the requested data to us on a purely voluntary basis.

Depending on the type of request, the legal basis for this processing is Article 6 Paragraph 1 Letter b GDPR for inquiries that you make yourself as part of a pre-contractual measure or Article 6 Paragraph 1 Clause 1 Letter f GDPR if your Inquiry is of a different nature. The legitimate interest follows from the purposes mentioned in section 4. If personal data is requested that we do not need to fulfill a contract or to protect legitimate interests, it will be transmitted to us on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
For the contact form we use the service Tally. The company is based in Belgium. Tally’s privacy policy can be found here.

9. Social plugins

Social plugins with Shariff solution
Our website uses social plugins (“plugins”) from the social networks Facebook and LinkedIn, operated by Meta Platforms Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) and LinkedIn Ireland Unlimited Company , Wilton Place, Dublin 2, Ireland (“LinkedIn”). To improve the protection of your data when you visit our website, these buttons are not fully integrated as plugins, but in the form of HTML links. This type of integration ensures that when you access a page on our website where such buttons are available, a connection to the Facebook or LinkedIn servers is not established. When you click on such a button, the Facebook or LinkedIn page opens in a new browser window. There you can interact with the plugins (if necessary after logging in). The purpose and scope of data collection, the further processing and use of the data by Facebook and LinkedIn as well as your related rights and setting options to protect your privacy can be found in the data protection information of Facebook (https://privacycenter.instagram.com/policy/) or LinkedIn ( https://www.linkedin.com/legal/privacy-policy).

10. Social media presence

In order to present our company in the best possible way and to communicate with you as users, customers or interested parties and to inform you about the services we offer, we rely on our presence in social networks. When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). A level of data protection equivalent to that in the EU cannot be guaranteed in all countries outside the EU. In this context, it can lead to risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data protection.

This makes it more difficult to enforce known user rights. In addition, it may happen that your data is not processed in your interest by the provider in the third country. We only transfer personal data to third countries for which an adequate level of protection has been confirmed or if the transfer of personal data can be ensured through contractual agreements or other appropriate guarantees.

In addition to the respective social network provider, we also collect and process personal user data on so-called “fan pages”. With this notice we inform you about what data we collect from you on our social media sites, how we use it and how you can object to the use of data. Please refer to the respective offer listed in more detail below for the respective data processing purposes and data categories.

To achieve this, cookies are used which record user behavior and enable the user to be profiled.

You can find a specific list of the processing purposes for user data in the data protection information of the respective provider. By making the appropriate settings in your user account, you can restrict your profile creation, at least to a limited extent. For the exact procedure, please read the relevant data protection information of the respective provider.

The relevant platforms are:

Platform

Facebook

responsible body

Meta Platforms Ireland Ltd

4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data protection information from the platform operators

https://privacycenter.instagram.com/policy/

Platform
YouTube

responsible body

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

Data protection information from the platform operators

https://policies.google.com/privacy?hl=de

Platform
LinkedIn

responsible body
LinkedIn Ireland Unlimited Company

Wilton Place, Dublin 2, Ireland

Data protection information from the platform operators

https://www.linkedin.com/legal/privacy-policy

Storz Hydrauliksysteme GmbH operates profiles on the platforms listed to draw attention to products and service offers and to interact with customers, interested parties and other users of the platform.

In this context, the platform operators also use certain data that they have collected from users of the platform (e.g. whether a photo on a profile was “liked” or commented on) to create aggregated usage statistics and the respective operators of the profile (so-called “insights” or “analytics”). As profile operators, we also receive such usage statistics. The information that we receive as profile operators does not allow any conclusions to be drawn about individual users. The profile operator does not have access to personal data that the platform operator processes to create usage statistics. Only the respective platform operator determines which data is processed for these purposes and in what way. As a profile operator, Storz Hydrauliksysteme GmbH cannot legally or actually influence the processing by the platform operators.

For processing in connection with the creation of usage statistics, Storz Hydrauliksyste-me GmbH and the respective platform operator are considered joint controllers within the meaning of Art. 26 GDPR.

If possible, there are agreements on shared responsibility with the respective platform operators.

In addition, data processing by Storz Hydrauliksysteme GmbH as the profile operator only takes place to a very limited extent:

Processing usernames and comments that are deleted due to a violation of netiquette. These will be kept within the statute of limitations for any necessary proof in the event of legal disputes.
Processing of user names and individual messages when you contact us via messenger services
Recruiting potential applicants on career platforms

For these purposes, we usually only process your name, message content, comment content and the profile information you have provided “publicly”.

11. Newsletters

With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

To register for our newsletter, we use the so-called double opt-in procedure. This means that after you register, we will send you an email to the email address you provided, in which we will ask you to confirm that you would like to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your email address. Providing further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter a GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email, by email to datenschutz@storz-hydraulik.de or by sending a message to the contact details provided in the legal notice.

12. Rights of the data subject

You have the right:

in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection , the existence of a right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about its details;
in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or complete personal data stored by us;
in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for financial purposes is necessary to assert, exercise or defend legal claims;
in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data but you want to use it need to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transmission to another person responsible (data portability);
in accordance with Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. This means that we are no longer allowed to continue the data processing that was based on this consent in the future
to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or place of work or at our company headquarters.
Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided there are reasons for doing so, which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a special situation.

If you would like to exercise your right of revocation or objection, simply send an email to datenschutz@storz-hydraulik.de.

13. Sharing your personal information

Your personal data will be passed on as described below.
Data will also be passed on if we are entitled or obliged to pass on data due to legal regulations and/or official or court orders. This may in particular involve providing information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

If your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with applicable data protection laws, in particular the GDPR. To the extent that your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR, we ensure that the processing of personal data takes place in accordance with the General Data Protection Regulation.

We believe it is important to process your data within the EU/EEA. However, it may happen that we use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to standards within the EU is established at the recipient before the transfer of your personal data. This can be achieved, for example, via EU standard contracts or binding corporate rules or special agreements to whose regulations the company can submit.

14. Data Security

We secure our website through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

In particular, your personal data is transmitted to us in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. Our security measures are continuously improved in line with technological developments.

15. Storage period for personal data

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary to fulfill the original purpose and there are no longer any statutory retention periods. The statutory retention periods form the criterion for the final duration of storage of personal data. After the deadline has expired, the relevant data will be routinely deleted. If there are retention periods, processing is restricted in the form of blocking the data.

16. References and links

When you access websites that are referred to on our website, you may be asked again for information such as name, address, email address, browser properties, etc. This data protection declaration does not regulate the collection, transfer or handling of personal data by third parties.

Third-party service providers may have different and their own regulations in dealing with the collection, processing and use of personal data. It is therefore advisable to find out about their practices for handling personal data on third-party websites before entering personal data.

As of: January 2024