Privacy policy

Contact details of the person responsible

Hirschbach GmbH

Windmill 2

D-74429 Sulzbach-Laufen

Phone +49 (0)7976 / 98 60-0

Fax +49 (0) 7976 / 9860-60

info@hirschbach.de

Contact details of the data protection officer

Gerd Rückert, external data protection officer

Erich-Sailer-Str. 50

74206 Bad Wimpfen

Tel: 07063 934815

E-mail: rueckert@grcon.de

Welcome to our website. The protection of your data is very important to us. We therefore explain below how we process your personal data.

General processing of visitor data

The use of our website is generally possible without providing personal data.

However, we would like to point out that access data is also collected in this case and stored in the server log files. This includes the following data in particular:

  • Browser type / your browser version,
  • Operating system,
  • the website from which you are visiting us,
  • Date and time of the visit,
  • Your IP address.

Where possible, we only evaluate this information in anonymized form to defend against attacks and to improve our offer (processing of personal data in the context of a balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR) and then delete it. The data cannot be traced back to you personally and will not be merged with other data.

However, we reserve the right to evaluate the data retrospectively if there are concrete indications of unlawful use.

Data categories; data sources

In principle, we process the personal data that is transmitted by you in connection with the use of our website or which you provide to us in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary for the fulfillment of the contract, we also process personal data that has been taken from publicly accessible sources (e.g. commercial registers, debtor directories, Internet) in a permissible manner or that has been legitimately transmitted to us by third parties (e.g. credit agencies).

This may include technical data relating to you (IP address, browser type), personal data (name, date of birth, legally authorized representatives), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, services purchased, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising letters) and other comparable categories of personal data.

Processing of personal data based on consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)

In individual cases, we obtain your consent for certain purposes expressly specified in connection with data collection.

In these cases, data processing takes place exclusively on the basis of your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the expressly stated purpose(s).

You can revoke your consent at any time with effect for the future. The revocation has no influence on the legality of the processing up to the time of revocation.

Cross-border data transfer (Art. 49 para. 1 sentence 1 lit. a) GDPR)

If personal data is transferred to a third country, we comply with the data protection requirements for this by basing the data transfer on standard contractual clauses or by obtaining your consent to this in accordance with Art. 49 para. 1 sentence 1 lit. a) GDPR.

Data is transferred, for example, in connection with the use of the Google service "YouTube". Due to the use of these services, data is transferred to the United States of America.

Data will only be transmitted if you give us your consent.

The specific details of the recipient, the personal data transferred and the purpose of the data transfer can be found in the information on the respective processing below.

There is a risk to your personal data due to the data transfer. In the United States of America, there is no level of data protection comparable to EU law (GDPR) and / or national regulations (e.g. BDSG) or sufficient guarantees to ensure an adequate level of data protection. Any deficits cannot be compensated for by other specific guarantees due to the US legal situation. Nevertheless, depending on the service, standard contractual clauses are sometimes used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the information on the respective services.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the legality of the processing up to the time of revocation.

Processing of personal data for contract processing or contract initiation (Art. 6 para. 1 sentence 1 lit. b) GDPR)

If a contract is concluded with us, we use personal data insofar as this is necessary for the execution of the contract or for the implementation of pre-contractual measures. The purposes of data processing depend on the specific content of the contract, which you can find in the contract documents.

If a contract already exists with us, we process your data in order to check that you are our contractual partner and to properly provide the contractual service owed.

Processing of personal data in the context of a balancing of interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)

We process personal data after weighing up interests, insofar as this is necessary to protect our interests or the interests of third parties.

Examples of such purposes are

  • Ensuring the IT security and integrity of our systems,
  • Prevention or investigation of criminal offenses,
  • Assertion of or defense against legal claims.

Contact us

If you contact us by email or telephone, we will process the personal data you provide in order to respond to your inquiry. The legal basis for this is generally Art. 6 para. 1 sentence 1 lit. b) GDPR, but exceptionally, if there is no contractual relationship, Art. 6 para. 1 sentence 1 lit. f) GDPR, whereby the legitimate interest lies in the proper response to your request. We delete the data after the final processing of your request, unless there is a contractual or legal obligation to retain it.

Contact form

If you send us an inquiry via our contact form, we will process the data you provide on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR in order to process your inquiry. In principle, your data will be deleted after your request has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system.

You can revoke your consent at any time with effect for the future using any of the contact details provided.

Application

Insofar as we process data in the course of an application by you, please refer to the data protection declaration for applicants, available under this link, pointed out.

We process your data, in particular your name, contact information, CV, proof of academic, technical and professional achievements and content data that you provide in your cover letter, for the purpose of concluding an employment contract. The legal basis for this data processing is § 26 BDSG. If your application is not successful, we will store your data for 6 months after the end of the application process. If your application leads to employment, your data will be stored for the duration of the employment relationship.

Please do not include any particularly sensitive data in your application. This includes data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, data concerning sex life or sexual orientation, see Art. 9 (1) GDPR. We also ask that you do not include a photograph with your application.

Use of cookies

Various cookies may be used during your visit to our website. These are text files that are placed on your computer and enable, among other things, the smooth running of your visit to our website.

In some cases, cookies are necessary to ensure the functionality or IT security of our website. The use of such functional cookies is based on a legitimate interest in enabling the use of our website including its functions in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

We may use other - non-essential - cookies on the basis of Art. 6 para. 1 sentence 1 lit. a) GDPR and therefore on the basis of your consent. The purposes of the cookies used in each case may include

  • Enabling the use of special functions,
  • the (pseudonymized) analysis of user behavior in order to optimize our website,
  • Increasing the attractiveness and user-friendliness of our website,
  • Improvement and needs-based design of our offering,

be.

The use of non-essential cookies takes place in the context of so-called usage profiles. You are assigned a pseudonym under which the usage data is stored. Your IP address is only stored in abbreviated form, so that a personal assignment of the usage profile is generally no longer possible.

If we use cookies, particularly for the purposes of (re-)marketing or the implementation of (social media) plugins, we base this use on your free consent to such data processing and require your consent in this respect. With regard to the individual plugins or tracking tools, we refer you to the following detailed explanations.

Most of the cookies we use are deleted from your computer after you close your browser (session cookies). Other types of cookies can remain on your computer and enable us to recognize your computer the next time you visit our website by means of the user profile created (persistent cookies).

You can select which cookies are to be set on our cookie banner, which appears at the beginning of your visit to our website. We use the Borlabs Cookie service from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg ("Borlabs") as the cookie banner. The data collected is stored exclusively on our servers. No data is passed on to Borlabs or other companies.

Cookies are used on our website exclusively by us and not by third parties, with the exception of third-party cookies, which are explicitly mentioned in this privacy policy.

You can declare your consent by confirming our cookie banner when you visit our website. Once you have given your consent, you can withdraw it at any time with effect for the future. You can change your cookie settings here or under "Cookies" at the bottom of the website at any time. There you will also find further information on the specific cookies we use.

YouTube

Plugins from the social network YouTube are used on our website. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube").

When using plugins, we rely on your consent to data collection. If you do not consent to the use of data when you first visit our website, the YouTube plug-in will not be activated, so that data will not be transmitted even if you accidentally interact with a YouTube plug-in.

If you consent to the processing of your data by the "YouTube" plugin as part of the opt-in procedure, the lawfulness of the processing of your data is based on consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, so that we use your data to the extent of the consent you have given for the purpose of linking to YouTube.

If you are on a page of our website on which such a plugin is available, your browser will only establish a direct connection with the YouTube servers when you activate the relevant button by clicking on it ("extended data protection mode"). The content of the plugin is then transmitted by YouTube to your browser, which integrates it into the website. By activating the plugin, YouTube receives the information that you have accessed the corresponding page of our website. Content is then transmitted from YouTube to your browser and included on the page. YouTube receives the message that you are on the corresponding page of our website. This happens even if you do not have a YouTube profile or are not logged in. Personal data (including your IP address) is then automatically forwarded to a YouTube server located in the USA and stored.

A direct assignment by YouTube only takes place if you are logged in to YouTube. A corresponding interaction also takes place if you actively press the corresponding button. The result is a publication on your YouTube account and the display in your contacts. Further details on how YouTube handles your personal data can be found on the following page: https://policies.google.com/privacy?hl=de&gl=de .

The transfer of data to the USA is permitted on the basis of your consent in accordance with Art. 49 para. 1 sentence 1 lit. a) GDPR.

In the context of the use of social plugins, an agreement on joint responsibility within the meaning of Art. 26 GDPR was concluded between us and YouTube. The content of this agreement can be found at the following link: https://privacy.google.com/intl/de/businesses/controllerterms/.

Data transfer

We pass on data to other third parties if and insofar as we have transferred the fulfillment of tasks to them. Data will only be passed on if this is necessary to fulfill the assigned tasks.

We work together with the following companies:

  • TrafficPlex GmbH, Lima-City Webspace, Konsul-Smidt-Str. 90, 28217 Bremen, Germany
  • NIRO-Media UG (haftungsbeschränkt), Performance Online Marketing, Kürzstraße 2, 74532 Ilshofen, Germany
  • Avaya GmbH & Co. KG, Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany
  • Netzstation Informationstechnik GmbH, Marie-Curie-Straße 19, 73529 Schwäbisch Gmünd, Germany
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Furthermore, service providers can be entrusted with tasks in the following areas, for example:

  • IT maintenance
  • IT development
  • IT provision
  • Lawyers

The transfer of data always takes place on the basis of a legal standard or a suitable contract in accordance with Art. 26 or 28 GDPR, which ensures compliance with all data protection requirements.

Otherwise, data will only be passed on in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the transfer of data is legitimized in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.

Data transfer to a third country

It is intended to transfer data to a third country. This transfer takes place on the basis of your consent. The recipient of the data provided by you is the following company:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

​
If data is transferred to a third country on the basis of consent without an adequacy decision or other suitable guarantees, the associated increased risk of data processing in the context of the transfer must be pointed out on the basis of Art. 49 para. 1 sentence 1 lit. a) GDPR. However, we would like to assure you that potential risks are successfully minimized thanks to careful selection and constant review of the standards of our contractual partners.

Duration of data storage

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfillment of contractual and legal obligations or to safeguard our legitimate interests.

Personal data is stored in a contractual relationship for at least as long as is necessary to fulfill contractual obligations and exercise contractual rights. This period may extend beyond the actual contract period, as the data may still be relevant after the end of the contract within the scope of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.

The criteria for the duration of the storage of cookies can be found in the corresponding section.

Rights of data subjects

As a person affected by the processing of personal data, you have the following rights:

You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data and to the information listed in detail in Art. 15 GDPR.

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay where one of the grounds listed in paragraph 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

You have the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to processing, for the duration of the review by the controller.

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on your consent or on a contract and the processing is carried out by automated means (Art. 20 GDPR). When exercising the right to data portability, you have the right to obtain that the personal data be transmitted directly by us to another controller, insofar as this is technically feasible (right to data portability).

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on our legitimate interest. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (Art. 21 GDPR).

You can contact us at any time using the contact options provided on our website to exercise your rights.

Right to object to direct advertising

In individual cases, we process personal data for the purpose of direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising (Art. 21 GDPR).

If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made form-free at any time via one of the contact options specified in this privacy policy or in our imprint.

Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). You can assert this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information.

Further information can be found under the following link:

https://www.baden-wuerttemberg.datenschutz.de/beschwerde/

However, you can of course also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the contact details listed above.

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.

 

Up-to-dateness and amendment of this data protection information

This data protection information is up to date as of February 2023.

We reserve the right to update this data protection information as necessary to adapt it to legal and technical developments or in connection with the offer of new services or products. Should we change our data protection policy, we will post this directly in this statement on our homepage.