General Privacy Notice pursuant to Art. 13 GDPR

Protecting your privacy in the processing of personal data is an important concern for us. When you visit our website, our web servers automatically store the IP address of your internet service provider, the website from which you visit us, the webpages you visit on our website, as well as the date and duration of your visit. This information is essential for the technical transmission of the website and the secure operation of the server. No personalized analysis of this data is carried out.

Controller

Hasenkopf Industrie Manufaktur GmbH
Stöcklstraße 1-2
84561 Mehring
Germany
Phone: +49 (0) 8677 9847 0
Email: info@hasenkopf.de

Personal Data

Personal data is data relating to you as an individual. This includes your name, your address, and your email address. You are not required to provide any personal data in order to visit our website. In some cases, however, we require your name, address, and other information in order to provide you with the service you have requested.
The same applies where, at your request, we provide you with informational material or respond to your inquiries. In such cases, we will always inform you accordingly. In addition, we only store the data that you have transmitted to us automatically or voluntarily.
When you use one of our services, we generally collect only the data necessary to provide that service to you. We may ask you for additional information, but this is voluntary in nature. Whenever we process personal data, we do so in order to provide our service to you or to pursue our commercial objectives.

Contact

When you contact us (e.g. via color finder, contact form, email, phone, or social media), the data provided by the requesting person will be processed insofar as this is necessary to respond to the inquiry and any requested measures.
Responses to contact inquiries within the scope of contractual or pre-contractual relationships are carried out to fulfill our contractual obligations or to respond to (pre-)contractual inquiries. Otherwise, processing is based on our legitimate interest in responding to inquiries.

Types of data processed: master data (e.g. names, addresses), contact data (e.g. email, phone numbers), content data (e.g. entries in online forms)
Data subjects: communication partners
Purpose of processing: handling contact inquiries and communication
Legal basis: performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR)

Automatically Stored Data

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

Date and time of request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Web browser and operating system used
Full IP address of the requesting computer
Amount of data transferred

This data is not merged with other data sources. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to assign the cookie to the specific internet browser in which it was stored. This enables visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain different cookies. A specific internet browser can therefore be recognized and identified by means of the unique cookie ID.
By using session cookies, the controller can provide users of this website with a user-friendly service that would not be possible without the setting of cookies. Without consent, we use only technically necessary cookies on the legal basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
We use personal cookies to improve our website or for marketing purposes only with your consent. During your first visit, you may voluntarily consent to tracking or analysis via the cookie banner displayed. Where applicable, your data may be shared with partners or third-party providers. These cookies are stored only if you explicitly consent to this; in that case, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can change your cookie settings at any time.

Content Delivery Network (CDN) – Cloudflare

This website uses a so-called Content Delivery Network (CDN) provided by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany. A CDN is a network of servers distributed worldwide that is used to deliver the content of our website more quickly, securely, and reliably. In this process, user requests are routed to the geographically nearest server.
Cloudflare is used on the basis of Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure, efficient, and reliable provision of our online services.
Cloudflare also processes data in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework and also uses appropriate Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
Data processing
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Cloudflare.
Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether data entered on this website (e.g. in a contact form) is provided by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various types of information (e.g. IP address, time spent by the website visitor on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The storage and analysis of the data are carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
For further information on Google reCAPTCHA, please refer to Google’s Privacy Policy and Google’s Terms of Service at the following links: https://policies.google.com/privacy?hl=en

Newsletter – HubSpot CRM

Our website offers you the opportunity to subscribe to our newsletter. For the distribution and management of the newsletter, we use HubSpot, a service provided by HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland.

We process the data you provide when subscribing to the newsletter, together with additional data such as your IP address, the date and time of registration, information relating to confirmation as part of the double opt-in procedure, and, where applicable, usage data (e.g. opening and click behavior), if this has been activated. The data is processed exclusively for the purpose of sending the newsletter and for the statistical analysis and optimization of our newsletters.

Double opt-in procedure
Subscription to our newsletter takes place using the double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your subscription. Only after this confirmation will your email address be added to our distribution list. This procedure serves to prevent misuse and to provide legally compliant documentation of your consent. The data is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link included in the newsletter. Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy

Google Tag Manager

On our website, we use Google Tag Manager, a tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). We use Google Tag Manager to manage the tools deployed on our website, which are described in this privacy notice. Details regarding these tools can therefore be found in the information relating to the specific tool. We use Google Tag Manager on the basis of our legitimate interest pursuant to Art. 6(1) sentence 1 lit. f GDPR in the integration of tags. The use of Google Tag Manager enables us to integrate additional services on our website.
The tool triggers other tags, which may in turn collect data. Google Tag Manager itself does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in effect for all tracking tags implemented via Google Tag Manager. The Tag Manager processes and transmits your IP address to servers in the United States.
The transmitted data consists solely of pseudonyms, and it is not possible to infer your name from this data. Google relies on the EU-U.S. Data Privacy Framework for the transfer of data to the United States and, in the event of data transfers to other third countries, on EU Standard Contractual Clauses. You can obtain a copy of the EU Standard Contractual Clauses here. This ensures a level of protection comparable to that within the EU.
We have concluded a data processing agreement with Google for the use of Google Tag Manager. Under this agreement, Google assures that it processes the data in compliance with the General Data Protection Regulation and ensures the protection of the rights of the data subject. Further information on Google Tag Manager can be found in the terms of use for this product.

Adobe Fonts

This website uses web fonts provided by Adobe to ensure the consistent display of certain typefaces. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”).

When you access this website, your browser loads the required fonts directly from Adobe in order to display them correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the United States. As a result, Adobe becomes aware that this website has been accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided.

The storage and analysis of the data are carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses.

Details can be found here:
https://www.adobe.com/de/privacy/eudatatransfers.html

Further information on Adobe Fonts can be found at:
https://www.adobe.com/de/privacy/policies/adobe-fonts.html

Adobe’s privacy policy can be found at:
https://www.adobe.com/de/privacy/policy.html

Online presences on Facebook, LinkedIn, and Instagram

Provided that you have given your consent to the respective social media operator in accordance with Art. 6(1) sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the above-mentioned social media platforms. Usage profiles are created from this data using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose.

For detailed information on the processing and use of data by the respective social media operator, as well as contact options, your related rights, and settings options for the protection of your privacy, please refer to the providers’ privacy notices linked below. Should you still require assistance in this regard, you may contact us.

Facebook: https://www.facebook.com/policy.php
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Instagram: https://privacycenter.instagram.com/

Security

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access. All of our employees and service providers working on our behalf are obligated to comply with the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policies are regularly revised. Please make sure that you have the most current version.

Data Subject Rights

You have the right at any time to obtain information about your stored data, to have your data corrected, deleted, or the processing of your data restricted, as well as the right to object to processing, the right to data portability, and the right to lodge a complaint, subject to the requirements of data protection law.

Right of Access

You may request information from us as to whether and to what extent we process your data.

Right to Rectification

If we process data relating to you that is incomplete or inaccurate, you may request that it be corrected or completed at any time.

Right to Erasure

You may request the deletion of your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests worthy of protection. Please note that there may be reasons preventing immediate deletion, for example in the case of statutory retention obligations.

Regardless of the exercise of your right to erasure, we will delete your data promptly and in full, provided that no contractual or statutory retention obligation prevents this.

Right to Restriction of Processing

You may request restriction of the processing of your data if:
you contest the accuracy of the data, for a period enabling us to verify its accuracy;
the processing of the data is unlawful, but you oppose erasure and request restriction of the use of the data instead;
we no longer need the data for the intended purpose, but you require it for the establishment, exercise, or defense of legal claims; or
you have objected to the processing of the data.

Right to Data Portability

You may request that we provide you with the data you have provided to us in a structured, commonly used, and machine-readable format and that you may transmit this data to another controller without hindrance from us, provided that:

we process this data on the basis of your consent, which is revocable, or for the performance of a contract between you and us; and
this processing is carried out by automated means.

Where technically feasible, you may request that we transmit your data directly to another controller.

Right to Object

If we process your data on the basis of legitimate interest, you may object to this processing at any time; this also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims. You may object to the processing of your data for direct marketing purposes at any time without giving reasons.

Right to Lodge a Complaint

If you believe that we have violated German or European data protection law in processing your data, we ask you to contact us so that any questions can be clarified. Of course, you also have the right to contact the supervisory authority responsible for you, namely the competent state data protection supervisory authority.

If you wish to exercise any of the rights mentioned above in relation to us, please contact our Data Protection Officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this Privacy Policy

We reserve the right to amend our privacy policies if this becomes necessary due to new technologies. Please make sure that you have the most current version. If fundamental changes are made to this privacy policy, we will announce them on our website.

All interested parties and visitors to our website may contact us regarding data protection matters at:

Mr. Robert Heindl
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany

Phone: +49 941 2986930
Fax: +49 941 29869316
Email: anfragen@projekt29.de
Website: www.projekt29.de