1. Name and address of the responsible person

​The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions are:

• Hydrostat® Engineering + Konstruktion GmbH, Lise-Meitner-Str. 4, D-45699 Herten
• Hydrostat® International GmbH, Lise-Meitner-Str. 4, D-45699 Herten

​

2. Name and address of the data protection officer

The contact person for data protection is the representative of the controller:
Gerhard Grobe, +49 2366 9383311, info(at)hydrostat.de

​

3. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the rights listed below vis-à-vis the controller.

 

Right to information:

You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from the controller:

• the purposes for which the personal data are processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
• the planned duration of storage of the personal data concerning you or, if specific information is not available, the criteria for determining that storage period;
• the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all available information on the origin of the data if the personal data are not collected from the data subject;
• the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved, as well as the scope and intended consequences of such processing for the data subject.

You have the right to request information about whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.

Right to rectification:

You have the right to request rectification and/or completion from the controller if the personal data concerning you that are processed are incorrect or incomplete. The controller must carry out the rectification immediately.

Right to restriction of processing:

You may request the restriction of the processing of your personal data under the following conditions:

• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;
• the controller no longer needs the personal data for the purposes of the processing, but you require it to assert, exercise, or defend legal claims, or if you have
• objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data – with the exception of its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing has been restricted in accordance with the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure:

You may request the controller to delete the personal data concerning you immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:

• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• The personal data concerning you were processed unlawfully.
• The erasure of the personal data concerning you is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.
• The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

 

Right to information:

If you have asserted your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you was disclosed of this rectification, erasure, or restriction of processing, unless doing so proves impossible or involves disproportionate effort. You have the right to be informed by the controller of these recipients.

Right to data portability:

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another controller without hindrance from the controller to whom the personal data was provided, provided that:

• the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the freedoms and rights of others. The right to data portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

Right of objection:

You have the right to object at any time to the processing of personal data concerning you based on Article 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

 
Right to withdraw your consent to data protection:

You have the right to withdraw your consent to data protection at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent until its withdrawal.

Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority to which the complaint was submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

​

4. Processing of applicant data

The purpose of applicant management is personnel recruitment. The data is required to decide on or establish the employment relationship (Art. 88 GDPR, Section 26 of the new Federal Data Protection Act). This includes finding suitable applicants and selecting those with the best skills for the respective position. To carry out the application process, the application data provided by the applicant will be processed by our internal human resources department. There are no plans to forward the data to third countries. The application data will generally be deleted within six months of notification of the decision, unless consent to longer data storage has been given.

 

5. Processing of employee data

The data communicated for the purpose of implementing the employment relationship and, if applicable, derived from it will be used only for the purpose of employment, the implementation of training measures, and individually agreed occupational health care (Article 88 GDPR, Section 26 of the new Federal Data Protection Act). Personal data will be processed for this purpose by our responsible internal department. Contract processors and public authorities will only be involved to comply with overriding legal requirements. Other external bodies will be used if the data subject has given their consent or if transmission is permissible for overriding interests. The data storage period is based on statutory retention periods and is generally 10 years.

 

6. Processing of customer data/prospect data/supplier data

The data communicated and required for contract execution will be used exclusively for the purpose of contract fulfillment (Art. 6 (1) (b) GDPR). Any additional data will only be processed with your express consent. External service providers or other contractors will only be involved if the data subject has given their consent or if transmission is permissible due to overriding interests. Processors outside the European Union may also be used to execute the contract. Personal data will only be transferred to public authorities if required by the relevant overriding legal provisions. The data storage period depends on the statutory retention periods and is generally 10 years.

​

7. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's Internet service provider
• The user's IP address
• Date and time of access
• Websites from which the user's system accesses our website
• Websites accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 (1) (f) GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. Storage in log files occurs to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. If the data is stored in log files, this will be the case after seven days at the latest. Longer storage is possible. In this case, the users' IP addresses are deleted or altered so that the accessing client can no longer be identified. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no right to object.

 

8. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is visited again. We use cookies to make our website more user-friendly. Some elements of our website require that the visiting browser can be identified even after changing pages. The following data is stored and transmitted in the cookies:

• Language settings
• Log-in information

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These require that the browser be recognized even after changing pages. We require cookies for the following applications:

• Adopting language settings
• Remembering search terms

The user data collected by technically necessary cookies is not used to create user profiles. Cookies are stored on the user's computer and transmitted from there to our site. Therefore, you as the user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

​

9. Contact form and email contact

Our website provides a contact form that can be used for electronic contact. If a user uses this option, the data entered in the input form will be transmitted to us and stored. The following data will also be stored at the time the message is sent:

• The user's IP address
• Date and time of registration

Your consent to the processing of the data is obtained during the sending process and reference is made to this privacy policy. Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be saved. The data will not be passed on to third parties in this context. The data will be used exclusively for processing the conversation. If the user has given their consent, the legal basis for processing the data is Art. 6 (1) (a) GDPR. The legal basis for processing the data transmitted when sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. The processing of the personal data from the input mask serves us solely to process the contact. If contact is made by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and that sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. The user has the option of revoking his or her consent to the processing of personal data at any time. If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of establishing contact will be deleted.

​

10. Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will shorten your IP address beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that if you do this you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link [link to tools.google.com/dlpage/gaoptout. Against the background of the discussion surrounding the use of analysis tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” and that IP addresses are therefore only processed in shortened form in order to exclude direct personal reference. This site does not currently support a special option for browsers on mobile devices.

​

11. Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking, a web analysis service provided by Google Inc. ("Google"). Google AdWords Conversion Tracking also uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Google will never associate this data with other Google data. You can generally prevent the use of cookies by selecting the appropriate settings on your browser.

 

Status: 04.2019