Data protection

1. Name and address of the controller

The controller according to the EU General Data Protection Regulation (GDPR), other national data protection laws in the Member States, and other data protection legislation is:

 

• Hydrostat® Engineering + Konstruktion GmbH, Lise-Meitner-Str. 4, D-45699 Herten
• Hydrostat® International GmbH, Lise-Meitner-Str. 4, D-45699 Herten

​

2. Name and address of the data protection officer

The representative from the controller can be contacted on all data protection issues:
Gerhard Grobe, +49 2366 9383311, info(at)hydrostat.de

​

3. Rights of the data subject

If personal data concerning you are processed, you are considered a data subject according to the GDPR and you have the following rights vis-à-vis the controller.

Right to information:

You can ask the controller to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you can request the following information from the controller:

 

• The purposes for which the personal data are processed;
• The categories of personal data processed;
• The recipients or categories of recipients to whom the personal data concerning you has been or is still being disclosed;
• The planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
• The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
• The existence of a right to lodge a complaint with a supervisory authority;
• Any available information on the origin of the data if the personal data have not been obtained from the data subject;
• The existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

Right to rectification:

You have a right of rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are incorrect or incomplete. The controller shall make the rectifications without delay.

Right to restriction of processing:

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

 

• If you dispute the accuracy of the personal data concerning you for a period of time that enables the controller to verify the accuracy of the personal data;
• If the processing is unlawful and you refuse the erasure of personal data and instead request that the use of the personal data be restricted;
• If the controller no longer requires the personal data for the purposes of the processing, but you require them to assert, exercise or defend legal claims, or
• If you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending legal claims, or for protecting the rights of another natural or legal person, or on grounds of an important public interest of the Union or a Member State.
If the processing restriction itself has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure:

You have the right to request the erasure of personal data concerning you by the controller without undue delay and the controller shall have the obligation to erase this personal data without undue delay where one of the following grounds applies:

 

• The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing is based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
• The personal data have been unlawfully processed.
• The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

Right to information:

If you have exercised your right to rectify, erase or restrict the processing of your personal data vis-à-vis the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed about the rectification, erasure or restriction of the processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed of these recipients.

Right to data portability:

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transfer those data to another controller without hindrance from the controller to which the personal data have been provided, where:

 

• The processing is based on a consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or is based on a contract pursuant to Art. 6 para. 1 lit. b GDPR; and
• The processing is carried out by automated means.

In exercising this right, you shall also have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercising of official authority vested in the controller.

Right to object:

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the purpose of asserting, exercising or defending legal claims.

 
Right to revoke the declaration of consent pursuant to data protection law:

You have the right to revoke your declaration of consent pursuant to data protection law at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

​

4. Processing of applicant data

The purpose of applicant management is to recruit personnel. The data are required to make a decision on or justify the establishment of an employment relationship (Art. 88 GDPR, § 26 BDSG (new)). This includes finding suitable applicants and selecting the applicants with the best skills for the respective position. During the application process, our human resources department processes the personal data provided by the applicant. A data transfer to third countries is not planned here. Following notification of the decision, the applicant data is usually deleted within six months, unless the applicant has granted their consent for longer storage of their data.

​

5. Processing of employee data

Data communicated for execution of the employment relationship and data derived from this relationship are only used for the purposes of employment, the execution of qualification measures, and for individually agreed occupational medical care (Art. 88 GDPR, § 26 BDSG (new)). In this context, personal data is processed by the appropriate internal department. Processors of personal data and public authorities are only involved for the purpose of meeting overriding legal provisions. Other external bodies are used provided the data subject has given their consent or transfer is permitted due to an overriding interest. The duration of the data storage depends on statutory obligations to retain data and is usually 10 years.

6. Processing of customer data/data from interested parties/supplier data

Data provided and which are necessary for performance of the contract are used for the purpose of fulfilling the contract only (Art. 6 para. 1 lit. b GDPR). Any additional data provided for processing will only be processed with your express consent. External service providers or other bodies will only be involved provided the data subject has given their consent or transfer is permitted due to an overriding interest. As part of performance of the contract, processors of personal data from outside the European Union may be used. Personal data is only passed on to public authorities when required where overriding legal provisions exist. The duration of the data storage depends on statutory obligations to retain data and is usually 10 years.

​

7. Provision of the website and creation of log files

Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

 

• Information on the browser type and version used
• Operating system of the user
• Internet service provider of the user
• IP address of the user
• Date and time of access
• Websites from which the user’s system accessed our website
• Websites accessed by the user’s system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data allows us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. In these purposes lies our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

​

8. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables a unique identification of the browser when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after a page change. The following data is stored and transmitted in the cookies:

 

• Language settings
• Log-in information

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. As a result, it is necessary that the browser is also recognised after a page change. Cookies are required for the following applications:

 

• Adopting language settings
• Remembering keywords

The user data collected by technically necessary cookies are not used to create user profiles. Cookies are stored on the user’s computer and transmitted from here to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

​

9. Contact form and contact via e-mail

Our website features a contact form which can be used for contacting us online. If a user makes use of this opportunity, the data entered in the form are sent to us and stored. At the time of sending the message, the following data will also be stored:

 

• IP address of the user
• Date and time of registration

During the sending process, your consent is obtained for processing the data and you are referred to this privacy policy. Alternatively, you can also contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation. The legal basis for processing the data following consent by the user is Art. 6 para. 1 lit. a GDPR. The legal basis for processing the data transmitted by sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, an additional legal basis for processing the data is Art. 6 para. 1 lit. b GDPR. The processing of personal data sent via the form is used by us solely to process the contact. In the event of contact via e-mail, this also includes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For personal data from the contact form and the data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be concluded from the circumstances that the matter in question has been conclusively clarified. Any additional personal data collected during the sending process will be deleted after a period of seven days at the latest. The user has the right to withdraw consent to the processing of personal data at any time. If a user contacts us by e-mail, they may object to the storage of their personal data at any time. In such a case, the conversation cannot continue. All personal data stored in the course of making contact will be deleted in this case.

​

10. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be truncated in advance within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be first transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and for providing other services relating to website activity and Internet usage for the website operator. Google will not associate the IP address transmitted by your browser as part of Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data that was generated through the cookie relating to your use of the website (including your IP address) from being recorded or processed by Google by downloading and installing the browser plug-in available under the following link: [link to tools.google.com/dlpage/gaoptout. In view of the discussion on the use of analytical tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” so that IP addresses are only processed further in abbreviated form to prevent them being directly linked to a particular individual. This website does not currently have a special option for browsers on mobile devices.

​

11. Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking, a web analytics service provided by Google, Inc. (“Google”). Google AdWords Conversion Tracking also uses cookies, which are placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. On no account will Google associate your data with any other data held by Google. If you do not want cookies to be used, you can prohibit them from being stored in your browser configuration.

As of: 04.2019