A. Data Protection Objectives

We strive for long-term relationships with our employees and consistently high satisfaction among our users. In doing so, we particularly focus on designing individual relationships with you and align all our other objectives accordingly. An important part of these relationships is based on trust. Therefore, we fully advocate for the protection of privacy and the right to data protection. Our goal is to offer employees and users a secure, risk-free service.

To ensure that the processing of personal data only takes place in accordance with legal foundations, we align our processes and technical design with the General Data Protection Regulation, the Federal Data Protection Act and other relevant laws. In particular, no more personal data should be collected than is necessary for the respective purpose, and simple exercise of data subject rights should be ensured.

The following declaration concerns data processing within the framework of our web offering. Even though we have taken organizational and technical measures to ensure the most comprehensive protection of the offering possible, the occurrence of a security gap in electronic communication channels cannot be completely ruled out by nature. For this reason, visitors to the website are free to inform themselves about us or transmit information to us via other channels.

The usage and communication data arising from your visit to our web offering is processed by us for the purpose of presenting this web offering. No use beyond this takes place. Additional processing operations may be carried out by the integrated services of third parties, which we use to improve the presentation or functionality of this web offering.

B. Terminology

Personal Data

Personal data is all information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable who can be identified, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller or Data Controller

Controller or data controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third Party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Health Data

"Health data" means personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.

C. General Information

Controller

The controller within the meaning of the General Data Protection Regulation is:

GUBSE AKTIENGESELLSCHAFT
Bahnhofstraße 26-28
66578 Schiffweiler
Phone: +49 6821 9646 – 0
E-Mail: info@sihot.com
Internet: https://sihot.com

(hereinafter: GUBSE AG)

Data Protection Officer

You can reach our data protection officer at:

privacy@sihot.de
Phone: 06841 9816-0
Fax: 06841 9816-29

Our data protection officer will help you quickly and easily with questions or when asserting your data subject rights.

Type and Scope of Processed Data

In principle, usage data (e.g. visited websites, access times) and communication data (e.g. browser information, IP addresses) are processed.

Browser and Server Data

Please note that your browser transmits information to us when simply using the website. The purpose of this transmission is to technically enable you to visit the website. The data is required to process the information request. The type of information transmitted therefore also depends on your settings and technical specifications. When accessing our internet offering, the following data may therefore be collected:

  • IP address
  • Time of access
  • Called page or name of the retrieved file (URL)
  • Status information (e.g. error codes)
  • Amount of data transferred
  • Browser information (web browser used, operating system, language setting, etc.)

The data is used for statistical and security-related purposes. No transfer to third parties takes place. This internet offering itself does not use techniques aimed at evaluating the access behavior of individual users. Personal usage profiles are not created. The data is stored for the stated purposes for a maximum of 7 days.

Cookies

When using this offering, cookies are stored on your computer. The legal basis for use is § 15 para. 1 TMG and § 15 para. 3 TMG in consideration of Art. 6 para. 1 lit. f) GDPR. Cookies are small text files that are stored on your hard drive by the browser you use and through which certain information flows to the place that sets the cookies. Cookies are a technical means to ensure the function of the website and improve the user experience. They serve, for example, to store information across multiple pages. We use cookies for the following purposes:

  • Storage of user settings.

We use the following types of cookies:

  • Transient cookies (temporary use)
  • Persistent cookies (time-limited use).

The latter may be used by third-party providers. The cookies serve our interest in easy operability and improvement of our web offering.

The transient cookies are automatically deleted when you close the browser. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie. The deletion periods correspond to the specifications of the respective third-party provider.

You can delete cookies in your browser's security settings at any time. You can also set your browser to reject certain or all cookies. However, we point out that in this case the functionality of the website may be limited. Cookie-related information is stored separately from other data you may have provided to us. This data is expressly not linked to your other data.

Categories of Data Subjects

Affected by data processing through our website are visitors to the web offering.

Purpose of Processing

  • Provision of an online presence
  • Interaction possibilities for users
  • Security measures

Storage Duration

The criterion for the duration of storage of personal data is the respective legal retention period and the processing purpose. After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required to achieve the processing purpose.

The specific storage periods are specified within this declaration for the individual data processing operations.

Several permission provisions of the GDPR come into consideration as legal bases: First, Art. 6 para. 1 lit. a) GDPR serves as the basis for processing operations where your consent is obtained for the processing operation. For such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our services, the processing is based on Art. 6 para. 1 lit. b) GDPR. In the case of fulfilling tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR. In the case of this web offering, the processing of data is predominantly based on Art. 6 para. 1 lit. f) GDPR. This permission basis applies when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

The specific interests are reproduced at the point of the processing operation.

Technical Security Measures

We maintain current technical and organizational measures to ensure data security, in particular to protect your personal data from dangers during data transmission and from knowledge acquisition by third parties. These are adapted according to the current state of technology.

D. Third-Party Service Providers

Insofar as we involve third parties in processing, this is done exclusively on the basis of a legal permission norm and in compliance with legal provisions. This permission norm may consist of your consent, a legal obligation or our legitimate interests.

Hosting

The hosting services we may use serve to provide the following services: infrastructure and platform services, software tools, computing capacity, storage space and maintenance services that we need for the purpose of operating this online offering.

The hosting provider may process usage data on the basis of our legitimate interest in an effective and secure provision of this online offering in accordance with Art. 6 para. 1 lit. f) GDPR.

Usage data includes the data described under "Type and Scope of Processed Data". This data is deleted after seven days.

Our internet presence contains links to third-party websites. This privacy policy applies only to the content of our internet pages and does not cover third-party websites linked on this page. We have no influence on the legality of the content of these pages or their handling of personal data. For questions about the content or data protection of such third-party providers, please contact the respective provider.

Plugins

Currently, no plugins, scripts or web tracking software are used on our website.

E. Use of Our Registration Area

If you wish to use our log-in area, you must register by providing your contact data and operational data. We use the so-called double opt-in procedure for registration, i.e. your registration is only completed when you have previously confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. If your confirmation does not take place, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory; all other information can be provided voluntarily by using our log-in area.

When you use our log-in area, we store your data required for contract or agreement fulfillment until you permanently delete your access. Furthermore, we store the voluntary data you have provided for the duration of your use of the registration area, unless you delete it beforehand. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

F. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers and events. The advertised goods and services correspond to our product portfolio.

For registration to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we send you an email to the specified email address in which we ask you to confirm that you want to receive the newsletter. If you do not confirm your registration, your information will be blocked and finally automatically deleted. In addition, we store your respective IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify possible misuse of your personal data (Art. 6 para. 1 lit. f) GDPR).

After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email, via our website or by email or by a message to the contact data specified in the imprint.

G. Data Subject Rights

You have the right to receive information about your data stored with us free of charge at any time without giving reasons, as well as about the origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage. You can correct, delete or restrict the processing of your data collected by us at any time and make use of your right to data portability. Furthermore, you have the possibility of objection.

Rectification, Erasure or Restriction of Processing: You have the right to demand from GUBSE AG without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Object: Insofar as the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f) GDPR, you have the right to object at any time to the processing of this data for reasons arising from your particular situation. We will then no longer process this personal data unless GUBSE AG can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

Right of Withdrawal: If the processing is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. For this purpose, you can contact us or our data protection officer at any time using the data mentioned above.

Right to Erasure: You have the right to obtain from GUBSE AG the erasure of personal data concerning you without undue delay, and GUBSE AG shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

  • You object to the processing and there are no overriding legitimate grounds for the processing.

  • The erasure of personal data is necessary for compliance with a legal obligation in Union or Member State law to which we are subject. This does not apply where processing is necessary for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject.

Right to Restriction of Processing: You have the right to obtain from GUBSE AG restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.

  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.

  • GUBSE AG no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or you have objected to processing and verification of whether our legitimate grounds override yours is pending.

  • Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Should you have obtained restriction of processing, we shall inform you before the restriction is lifted.

Right to Lodge a Complaint: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. You can also contact the data protection officer of GUBSE AG.

You can reach them at:

privacy@sihot.de
Phone: 06841 9816 0
Fax: 06841 9816 29

We are always happy to be available for further questions about our notices, data protection and the processing of your personal data. Further information on data protection in the Federal Republic of Germany can also be found at www.bfdi.bund.de.