1. Name and address of the controller
The controller according to the EU General Data Protection Regulation (GDPR), other national data protection laws in the Member States, and other data protection legislation is:
- Hydrostat® Engineering + Konstruktion GmbH, Lise-Meitner-Str. 4, D-45699 Herten
- Hydrostat® International GmbH, Lise-Meitner-Str. 4, D-45699 Herten
2. Name and address of the data protection officer
The representative from the controller can be contacted on all data protection issues:
Gerhard Grobe, +49 2366 9383311, info(at)hydrostat.de
3. Rights of the data subject
If personal data concerning you are processed, you are considered a data subject according to the GDPR and you have the following rights vis-à-vis the controller.
Right to information:
You can ask the controller to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you can request the following information from the controller:
- The purposes for which the personal data are processed;
- The categories of personal data processed;
- The recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
- The planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
- The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- The existence of a right to lodge a complaint with a supervisory authority;
- Any available information on the origin of the data if the personal data have not been obtained from the data subject;
- The existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
Right to rectification:
You have a right of rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are incorrect or incomplete. The controller shall make the rectifications without delay.
Right to restriction of processing:
Under the following conditions, you may request that the processing of personal data concerning you be restricted:
- If you dispute the accuracy of the personal data concerning you for a period of time that enables the controller to verify the accuracy of the personal data;
- If the processing is unlawful and you refuse the erasure of personal data and instead request that the use of the personal data be restricted;
- If the controller no longer requires the personal data for the purposes of the processing, but you require them to assert, exercise or defend legal claims, or
- If you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending legal claims, or for protecting the rights of another natural or legal person, or on grounds of an important public interest of the Union or a Member State.
If the processing restriction itself has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure:
You have the right to request the erasure of personal data concerning you by the controller without undue delay and the controller shall have the obligation to erase this personal data without undue delay where one of the following grounds applies:
- The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing is based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing.
- You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
- The personal data have been unlawfully processed.
- The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
Right to information:
If you have exercised your right to rectify, erase or restrict the processing of your personal data vis-à-vis the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed about the rectification, erasure or restriction of the processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed of these recipients.
Right to data portability:
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transfer those data to another controller without hindrance from the controller to which the personal data have been provided, where:
- The processing is based on a consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or is based on a contract pursuant to Art. 6 para. 1 lit. b GDPR; and
- The processing is carried out by automated means.
In exercising this right, you shall also have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercising of official authority vested in the controller.
Right to object:
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the purpose of asserting, exercising or defending legal claims.
Right to revoke the declaration of consent pursuant to data protection law:
You have the right to revoke your declaration of consent pursuant to data protection law at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.
Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
4. Processing of applicant data
The purpose of applicant management is to recruit personnel. The data are required to make a decision on or justify the establishment of an employment relationship (Art. 88 GDPR, § 26 BDSG (new)). This includes finding suitable applicants and selecting the applicants with the best skills for the respective position. During the application process, our human resources department processes the personal data provided by the applicant. A data transfer to third countries is not planned here. Following notification of the decision, the applicant data is usually deleted within six months, unless the applicant has granted their consent for longer storage of their data.
5. Processing of employee data
Data communicated for execution of the employment relationship and data derived from this relationship are only used for the purposes of employment, the execution of qualification measures, and for individually agreed occupational medical care (Art. 88 GDPR, § 26 BDSG (new)). In this context, personal data is processed by the appropriate internal department. Processors of personal data and public authorities are only involved for the purpose of meeting overriding legal provisions. Other external bodies are used provided the data subject has given their consent or transfer is permitted due to an overriding interest. The duration of the data storage depends on statutory obligations to retain data and is usually 10 years.
6. Processing of customer data/data from interested parties/supplier data
Data provided and which are necessary for performance of the contract are used for the purpose of fulfilling the contract only (Art. 6 para. 1 lit. b GDPR). Any additional data provided for processing will only be processed with your express consent. External service providers or other bodies will only be involved provided the data subject has given their consent or transfer is permitted due to an overriding interest. As part of performance of the contract, processors of personal data from outside the European Union may be used. Personal data is only passed on to public authorities when required where overriding legal provisions exist. The duration of the data storage depends on statutory obligations to retain data and is usually 10 years.
7. Provision of the website and creation of log files
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
- Information on the browser type and version used
- Operating system of the user
- Internet service provider of the user
- IP address of the user
- Date and time of access
- Websites from which the user’s system accessed our website
- Websites accessed by the user’s system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data allows us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. In these purposes lies our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
- Language settings
- Log-in information
- Adopting language settings
- Remembering keywords
9. Contact form and contact via e-mail
Our website features a contact form which can be used for contacting us online. If a user makes use of this opportunity, the data entered in the form are sent to us and stored. At the time of sending the message, the following data will also be stored:
- IP address of the user
- Date and time of registration
10. Use of Google Analytics
11. Google AdWords Conversion Tracking
As of: 04.2019
Your personal contact
We are pleased to serve you: from HYDROSTAT you can expect well-founded consulting service that is focused on you and your project.
Talk to us: Tel .: +49 2366 9383311.