By using this website, you agree to the collection, processing and use of data in accordance with the description below. Any access to our website and any retrieval of a file provided on this website are recorded. This recording serves internal system-specific and statistical purposes. The name of the file retrieved, the date and time of the retrieval, the data volume transferred, reporting of successful retrieval, web browsers used and the requesting domain are recorded. In addition, the IP addresses of the requesting computers are also recorded. In principle, you can visit our website without registration. However, the use of individual services of our website can involve different rules which are specifically explained below. Personal data, including, in particular, forename and surname, address, date of birth, e-mail address and phone number as well as the IP address are only recorded by us if the website user and/or customer provides the information voluntarily, e.g. in the framework of an inquiry or registration or upon the conclusion of a contract or through the settings of his/her browser.
The above-mentioned data is collected if you use the following functions:
- Registration function
- Contact function
- Order function
We only process your personal data in accordance with the provisions of valid data protection legislation. Data are defined as personal if they can be clearly allocated to a specific natural person. Personal data is not forwarded to third parties without the approval of the person concerned.
We hereby point out that internet-based data transmission can involve security gaps, so that complete protection against third-party access cannot be guaranteed.
We use personal data for the purpose of operating this website and to answer your inquiries.
2. Access data
We collect data regarding you whenever you use this website. We automatically record information on your user behaviour and your interactions with us and register data regarding your computer or your mobile device. We collect, save and use data regarding every access to our website. These access data include:
-Name and URL of the file retrieved
-Date and time of the retrieval
-Volume of data transmitted
-Message regarding successful retrieval
-Browser type and version
-Websites, which are called from the user’s system via our website
-Internet service provider of the user
-IP address and the requesting provider.
We use these log data without allocating these to you personally or creating any other profile for statistical evaluations for the purpose of operating, protecting and optimising our website but also in order to anonymously record the number of visitors to our website and the extent and type of use of our website. On the basis of this information, we can provide personalised and site-specific content and analyse the transmission of data, locate and remedy errors as well as improve our services. This constitutes a justified interest according to art. 6 section. 1 S. 1 f) GDPR.
You can block cookies or delete cookies which have already been set. However, we have to point out that, in this case, certain features on the website will not work or will only work to a limited degree.
Our justified interest in using the cookies according to art. 6 section 1 S. 1 f GDPR is making our website more user-friendly, effective and secure.
4. Data ensuring compliance with our contractual obligations
We process personal data which we need to comply with our contractual obligations, such as, e.g., name, address, e-mail address, invoice and payment data. These data have to be collected in order to conclude the contract.
The data are deleted after expiry of the warranty periods and of the statutory retention periods. In any case, data which are connected with a user account are preserved for the period during which this account is maintained.
Art. 6 section 1 S. 1 b) GDPR forms the legal basis for processing of these data as these are needed to ensure that we can comply with our contractual obligations towards you.
5. Registration function
You can register on our website. The personal data which are transferred to the persons responsible are specified in the respective input mask which is used for registration. The personal data entered by the website user and/or the customer are exclusively collected and saved for internal use by the party responsible for processing. We can effect forwarding of the data to one or several order processors, such as a parcel delivery service.
In addition, upon registration on our website, the IP address assigned to the website user or the customer, the data and time of the registration are saved. These data are not forwarded to third parties in principle unless there is a legal requirement to forward such or unless forwarding is required for the purposes of civil or criminal legal proceedings.
The registration of the website user and/or customer along with the voluntary provision of personal data serves the purpose of offering the website user and/or customer content or services which, due to the nature of the matter, should only be offered to registered users.
You can request us to delete a registration set up at any time without incurring any other costs than the costs of transmission. A written notification submitted to the contact data specified under section 12 (e.g. e-mail address, fax, letter) is sufficient to this end. We will then delete your saved personal data unless we have to save such for the execution of orders or on the basis of statutory retention requirements.
Your consent according to art. 6 section 1 S. 1 a) GDPR constitutes the legal basis for processing of these data.
We offer you the possibility of subscribing to a newsletter on our website. We use this newsletter to provide information on our offers at regular intervals. You need a valid e-mail address to be able to receive our newsletter. We will check the e-mail address entered by you to make sure that you actually own the e-mail address specified and/or that the owner of the address is authorised to receive the newsletter. Upon your registration for our newsletter, we will save your IP address and the date and time of your registration. These data collected are exclusively used for the provision of our newsletter. They are not forwarded to third parties. You can cancel your subscription to our newsletter at any time. Details regarding this are provided at the following link: www.hpc-standards.com/newsletter.
We save your registration data for as long as these are needed for sending out the newsletter. We save the log data regarding the registration and the address for dispatching for as long as there is an interest in verifying the consent originally granted; usually, this corresponds to the periods of limitation for claims under civil law, i.e., at a maximum 3 years.
Your consent according to art. 6 section 1 S. 1 a) in conjunction with art. 7 GDPR in conjunction with art. 7 section 2 no. 3 UWG [German Law against Unfair Competition] confirming that the newsletter was dispatched with your consent constitutes the basis for dispatching of this newsletter. Our justified interest in verifying that the newsletter was sent out with your consent constitutes the legal basis for logging of the registration.
Furthermore, we offer you the possibility of contacting us via e-mail and/or via the contact form. In this case, we will save the data provided by the user of the website and/or the customer for the purpose of processing his/her contact inquiry. Data is not forwarded to third parties.
If data are processed for the purpose of executing pre-contractual measures which are carried out upon your request and/or, in case you are already a customer, for executing this contract, art. 6 section 1 S. 1 b) GDPR constitutes the legal basis for data processing.
We only process further personal data if you consent to this (art. 6 section 1 S. 1 a) GDPR) or if we have a legal interest in processing your data (art. 6 section 1 S. 1 f) GDPR). For example, answering your e-mail constitutes a justified interest.
8. Forwarding of data to third parties
In principle, we do not forward your data to third parties. Moreover, we take corresponding measures and carry out regular inspections to ensure that the data collected by us cannot be viewed or intercepted from the outside.
9. Storage period
Unless this is specifically indicated, we will only save personal data for as long as this is required for fulfilling the purposes pursued.
In some cases, the legislator provides for the retention of personal data, e.g. under tax legislation. In these cases, the data are exclusively saved by us for these legal purposes but not processed otherwise and they will be deleted after the expiry of the statutory retention period.
10. Your rights
We are required to inform you of your rights regarding the collection and processing of your personal data. The use of these rights does not involve any costs for you.
Under the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please submit your inquiry clearly identifying you as a person to the address specified in section 12 via e-mail or mail.
Below, you will find an overview of your rights.
10.1 Right to confirmations and information
You have the right to clear information regarding processing of your personal data.
You have the right to receive confirmation from us as to whether applicable personal data are processed. If this is the case, you are also entitled to request information regarding your personal data which we have saved regarding you as well as a copy of these data from us free of charge. Furthermore, you have the right to the following information:
1. the purposes of processing,
2. the categories of personal data which are processed,
3. the recipients or categories of recipients to whom the personal data have been disclosed or will be disclosed,
4. if possible, the planned period for which personal data are saved or, if this is not possible, the criteria for specifying such period,
5. the existence of a right to the correction or deletion of the personal data concerning you or to the restriction of processing by the data controller or a right of objection to processing,
6. the existence of a right of appeal to a supervisory authority,
7. if the personal data is not collected from you, all available information regarding the origin of the data,
8. the existence of automated decision-making, including profiling, pursuant to art. 22 section 1, 4 GDPR and – at least in these cases – meaningful information regarding the logistics involved as well as the scope and the intended effects of such processing on you.
If personal data are forwarded to a third country or to an international organisation, you have the right to information on the suitable guarantees according to art. 46 GDPR in connection with the transmission.
10.2 Right to rectification
You have the right to request the rectification and, if applicable, completion of personal data regarding you.
You have the right to request us to immediately rectify incorrect personal data regarding you. Under consideration of the purposes of processing, you have the right to request the completion of incomplete personal data – also with the help of a supplementary statement.
10.3 Right to erasure
In a number of cases, we are obliged to delete personal data regarding you forthwith.
According to art. 17 section 1 GDPR, you have the right to request us to delete personal data regarding you forthwith and we are obliged to delete personal data forthwith in case one of the following reasons applies:
1. The personal data are no longer required for the purposes for which they were collected or otherwise processed.
2. You revoke your consent on which processing according to art. 6 section 1 S. 1 a) GDPR or art. 9 section 2 a) GDPR was based and there is no other legal basis for such processing.
3. You lodge an objection against processing according to art. 21 section 1 GDPR and there are no higher-ranking justified reasons for processing or you lodge an objection against processing according to art. 21 section 2 GDPR.
4. The personal data were processed unlawfully.
5. The deletion of personal data is required for the performance of a legal obligation under EU legislation or the laws of the members states to which we are subject.
6. The personal data were collected with regard to offered information society services according to art. 8 section 1 GDPR.
If we have published the personal data or if we are required to erase these in accordance with art. 17 section 1 GDPR, we shall take adequate measures, including technological measures, under consideration of the available technology and implementation costs, to inform the data controllers processing said personal data of the fact that you have requested them to erase all links to these personal data or copies or replications of thereof.
10.4 Right to the restriction of processing
In a number of cases you have the right to request us to restrict processing of your personal data.
You have the right to request us to restrict processing if one of the following preconditions is fulfilled:
1. You contest the correctness of the personal data – for a period which enables us to check the correctness of the personal data,
2. Processing is unlawful and you have refused the deletion of the personal data and instead requested that the use of the personal data be restricted,
3. We no longer need the personal data for the purposes of processing but you need these to assert, exercise or defend legal claims or
4. You have lodged an objection against processing in accordance with art. 21 section 1 GDPR, for as long as it has not yet been ascertained if our company’s justified reasons outweigh your reasons.
10.5 Right to data portability
You have the right to receive or determine the personal data regarding you in a machine-readable format or to have such transmitted by us.
You have the right to obtain the personal data regarding you which you have provided to us in a structured, commonly used and machine-readable format and you have the right to forward these data to another data controller without any hindrance by us provided
1. the processing is based on consent pursuant to art. 6 section 1 S. 1 a) GDPR or art. 9 section 2 a) GDPR or a contract according to art. 6 section 1 S. 1 b) GDPR and
2. the processing is carried out by automated means.
Upon exercising of your right to data portability pursuant to art. 20 section 1 GDPR, you have the right to have the personal data directly transferred from us to another data controller in as far as this is technically feasible.
10.6 Right to object
Even in the case of lawful processing, you have the right to object to processing of personal data concerning you on grounds relating to your personal situation and if our interests in processing do not outweigh yours.
You have the right to object at any time to processing of personal data concerning you which is based on art. 6 section 1 S. 1 e) or f) GDPR on grounds relating your particular situation. This also applies to profiling based on those provisions. In this case, we shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data regarding you for the purpose of such marketing. This also applies to profiling in as far as it is connected with such direct marketing.
You have the right to object at any time to processing of personal data concerning you for scientific or historical research purposes pursuant to art. 89 section 1 GDPR on grounds relating to your particular situation unless such processing is necessary for the performance of a task carried out for reasons of public interest.
10.7 Automated decision-making, including profiling
You have the right not to be subject to a decision exclusively based automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you.
Automated decision-making on the basis of the collected personal data is not effected.
10.8 Right to revoke a declaration of consent under data protection legislations
You have the right to revoke a consent to processing of personal data at any time.
10.9 Right to complain to a supervisory authority
You have the right to complain to a supervisory authority, in particular, in the member state of your residence, your place of work or the scene of the alleged violation if you are of the opinion that processing of the personal data concerning you was effected unlawfully.
11. Data security
We endeavour to protect your data in the framework of the valid data protection legislation and technological capabilities.
Your personal data are transferred in an encrypted form at our company. However, we point out that the transmission of data on the internet (e.g. in e-mail communications) may involve security vulnerabilities. Gapless protection of the data against third-party access is not possible.
For the protection of your data we maintain technological and organisational security measures pursuant to art. 32 GDPR which we continuously update to comply with the state of the art.
Moreover, we do not guarantee that our offer is available at specific times. Malfunctions, interruptions or defects cannot be excluded. The servers used by us are regularly and carefully backed up.
12. Responsibility for data collection
If you have questions, requests for information, other requests, complaints or would like to voice criticism regarding our data protection, you may contact the following:
HPC Standards GmbH
Managing director holding power of representation: Dr. Alexander Schulze
Am Wieseneck 7
04451 Borsdorf OT Cunnersdorf
Phone: +49 34291 3372-36
Fax: +49 34291 3372-39
13. Amendments of the privacy statement
We reserve the right to amend the privacy statement at any time with regard to applicable data protection provisions.