Introduction
With this Privacy Policy, we would like to inform you about the data we process on our website www.hysolutions.de and draw your attention to some important aspects of this process.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
Furthermore, our website contains links to other websites. We have no influence over the content on those sites or their compliance with applicable laws and therefore cannot assume any responsibility for such content. This privacy policy therefore applies only to our website www.hysolutions.de.
A. Who is responsible for data processing, and who can you contact?
The entity responsible for data processing on this website is:
hysolutions GmbH
Burchardstraße 21
20095 Hamburg
Phone: +49 (0) 40 3288-4428
Email: info@hysolutions.de
In accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Federal Data Protection Act (BDSG), the appointment of a data protection officer is not mandatory for every company. Our company does not process personal data to an extent that requires the appointment of a data protection officer. In particular, we are not a company whose core business involves extensive, regular, and systematic monitoring of data subjects, nor is our core business the extensive processing of special categories of data pursuant to Article 9 of the GDPR or of data relating to criminal convictions and offenses pursuant to Article 10 of the GDPR.
For all data protection-related concerns or questions, our data protection officers are available to assist you at the contact details provided above.
B. What data do we process, and for what purpose?
Every time our website is accessed, our system—i.e., the web server—automatically collects information from the user’s computer or device (server log files). The web server’s access logs record which pages were accessed and when. They contain the following data:
IP address, directory protection user, date, time, pages accessed, protocols, status code, data volume, referrer, user agent, hostname accessed.
The IP addresses are stored in an anonymized form. To do this, the last three digits are removed; for example, 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymized IP addresses are retained for 60 days. Information regarding the directory protection user used is anonymized after one day.
Error logs, which record failed page requests, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the webpage accessed.
1. Use of our website www.hysolutions.de
Since personal data is processed when using our website www.hysolutions.de, we would like to inform you below about how your data is handled.
1.1 Hosting and Technical Implementation
This website is managed by an external agency (technical implementation) and hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers with the assistance of the technical implementer.
The use of external service providers is for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter “GDPR”) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) of the Telecommunications and Digital Services Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time. Our hosting provider and the technical service provider will process your data only to the extent necessary to fulfill their service obligations and will follow our instructions regarding this data.
We use the following hosting provider:
Mittwald CM Service GmbH & Co KG
Königsberger Straße 4-6
32339 Espelkamp
support@mittwald.de https://www.mittwald.de
We have entered into a Data Processing Agreement (DPA) with the aforementioned providers. This is a contract required by data protection law that ensures they process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
1.2 SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator.
You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
1.3 Cookies
Our website uses so-called “cookies.” Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the display of videos). Other cookies are used to analyze user behavior or display advertisements. Cookies that are necessary for the execution of the electronic communication process (necessary cookies), for providing certain functions you have requested (functional cookies), or for optimizing the website (e.g., cookies for measuring web traffic) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the relevant cookies takes place exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent may be revoked at any time.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for specific cases or generally, and to enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
To the extent that cookies from third-party companies or for analytical purposes are used, we will inform you separately about this within the scope of this Privacy Policy and, if necessary, request your consent.
1.4 Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website—for this purpose, the server log files must be collected.
2. Inquiries via email or phone
If you contact us via email or telephone, your inquiry, including all personal data contained therein (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR, provided your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if such consent was requested.
The data you send to us via contact requests will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
C. What data protection rights do you have?
Upon request, we will be happy to inform you whether we have stored any personal data about you and, if so, what data (right of access). In addition, you may have inaccurate data corrected (right to rectification) or have data deleted if its storage is unlawful or no longer necessary (right to erasure). Under certain circumstances, you may also request that we restrict the processing of your personal data (right to restriction of processing) and object to the processing of your data if such processing is based on
- the legal basis of the legitimate interest (Art. 6(1)(f) GDPR) or
- the performance of a task carried out in the public interest (Art. 6(1)(e) GDPR) or
- consent (Art. 6(1)(a) GDPR, where applicable in conjunction with § 25(1) TDDDG) (Right to Withdrawal).
In particular, you may object at any time to the use of your personal data for advertising purposes and/or market and opinion research (right to object to advertising). Furthermore, you may generally request that we provide you with your personal data in a structured, commonly used, and machine-readable format so that you may transmit this data to another controller without hindrance from us (right to data portability).
The rights mentioned above are granted to you by Articles 15–21 of the GDPR. They are presented here only in a very abbreviated form.
If you have questions regarding the exact scope of the rights in question and the exercise of the aforementioned rights, you may contact the Data Protection Officer named below and/or the Hamburg Commissioner for Data Protection and Freedom of Information.
D. Which regulatory authority can you file a complaint with?
If you believe that the processing of your personal data violates the GDPR, you may—without prejudice to any other administrative or judicial remedy—file a complaint with the competent supervisory authority. The competent supervisory authority is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de
Website: datenschutz-hamburg.de
As of: June 2024