Privacy policy

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Person responsible

The organisation named in the legal notice is responsible for the data processing described below.

Usage data

When you visit our website, so-called usage data is temporarily analysed on our web server as a log for statistical purposes in order to improve the quality of our website. This data record consists of

• the name and address of the requested content,

• the date and time of the request,

• the amount of data transferred,

• the access status (content transferred, content not found),

• the description of the web browser and operating system used,

• the referral link, which indicates from which page you came to ours,

The legal basis for the processing of usage data is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimised display.

Storage of the IP address for security purposes

In addition, we store the full IP address transmitted by your web browser for a strictly earmarked period of seven days in the legitimate interest of being able to recognise, limit and eliminate attacks on our websites. After this period has expired, we delete or anonymise the IP address. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data security

We take technical and organisational measures to protect your data from unauthorised access as comprehensively as possible. We use an encryption process on our websites. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Required cookies

We use cookies on our websites that are necessary for the use of our websites.

Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

Some of these cookies only contain information on certain settings and are not personally identifiable. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser so that it informs you about the placement of cookies.  You can also delete them at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our web pages may then not be displayed in full and some functions may no longer be technically available.

Consent banner

We use a consent management platform (consent or cookie banner) on our websites. The processing in connection with the use of the consent management platform and the logging of the settings you have made is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, in our legitimate interest in displaying our content according to your preferences and being able to prove the consent(s) you have given.  The settings you have made, the consent you have given and parts of your usage data are stored in a cookie. This means that it is retained for subsequent page requests and your consent can still be tracked. You can find further information on this under the heading "Required cookies".

The provider of the consent management platform works for us as a strictly instruction-bound service provider (processor). An order processing contract in accordance with Art. 28 GDPR has been agreed. 

Google Analytics

We use the web analysis tool "Google Analytics" to customise the design of our websites. Google Analytics creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognise returning visitors and count them as such.

As part of the Google Analytics service, Google Ireland Limited supports us as a processor in accordance with Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with other sub-processors.

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

Hotjar

In order to better understand the needs of our users and to optimise the offer and experience on our website, we use the Hotjar tool from the service provider Hotjar Ltd, Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, which supports us as a processor in accordance with Art. 28 GDPR.

Hotjar's technology helps us gain a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on (use of so-called funnels), what they like and dislike, how long users spend with the mouse on a particular location (so-called heat maps) and also record mouse and scroll function, etc.) and this helps us to tailor our offer to our users' feedback. Hotjar works with cookies and other technologies to collect data about the behaviour of our users and their end devices, in particular the IP address of the device (is only recorded and stored in anonymised form during your use of the website), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

Further information on the handling of personal data by Hotjar Ltd can also be found at https://www.hotjar.com/legal/policies/privacy/

Google DoubleClick

Our website uses Google DoubleClick to manage and display adverts. This service stores so-called "cookies" (text files) on your computer and uses so-called "web beacons" (invisible graphics) to analyse your user behaviour on our pages. The information generated by cookies and web beacons, including your IP address, is transmitted to Google servers and stored there. However, your IP address will not be merged with other personal data. You can block the installation of cookies in your browser settings and thus prevent the data processing described above. However, you may then not be able to use all the functions of this website to their full extent.

As part of the Google DoubleClick service, Google Ireland Limited supports us as a processor in accordance with Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

Google Ads

We use the functions of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting).

For these purposes, when our and other websites on which Google marketing services are active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or codes, also known as web beacons) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, what content they are interested in and which offers have been clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer. The user's IP address is also recorded.

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. smartphone) can also be displayed on another of your end devices (e.g. tablet or PC).

The data is deleted as soon as it is no longer required for the purposes of processing. Log data is anonymised after 9 months and cookie information after 18 months.

As we use a third-party provider, Google, which is also based in the USA, it cannot be ruled out that your data will also be processed in the USA. An adequate level of data protection is guaranteed for transfers to the USA due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

If you have a Google account, you can object to personalised advertising by clicking on the following link: https://www.google.com/settings/ads/onweb

Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de

Microsoft Advertising

Our website uses Microsoft Advertising, a service provided by Microsoft Corporation, to manage and deliver targeted adverts, perform remarketing, enable conversion tracking and generate analytics reports. We use cross-device tracking technologies to display targeted advertising on other websites based on your visit to our site and to analyse the effectiveness of our advertising measures. This means that your browsing behaviour can be tracked across different devices (e.g. smartphone, tablet, computer) to provide you with a more personalised advertising experience.

Microsoft collects personal data such as your IP address and device information through direct interactions with users in order to deliver targeted adverts. The specific data collected depends on the user's interaction with Microsoft services, the privacy settings selected and the features used.

As we use a third-party provider, Microsoft, which is also based in the USA, it cannot be ruled out that your data will also be processed in the USA. An adequate level of data protection is guaranteed for transfers to the USA due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

If you deactivate tracking or advertising at cookie level, this setting applies to all tracking tags implemented via Microsoft Advertising. For more detailed information on Microsoft Advertising, please refer to Microsoft's privacy policy: https://about.ads.microsoft.com/en-us/resources/policies/microsoft-advertising-privacy-policy

Leadinfo

On our website, we use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands, to generate leads. Leadinfo uses a tracking code installed on the website to recognise company visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behaviour on our website and processes domains from form entries (e.g. hedelius.de) in order to correlate IP addresses with companies and improve services.

In the context of Leadinfo, Leadinfo B.V. supports us as a processor in accordance with Art. 28 GDPR.

Data processing is based on your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

Tracking technologies from third-party providers for advertising purposes

We use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and we can recognise how effective our advertising measures were.

Data processing is based on your consent, provided that you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below may retrieve recognition features for your browser or end device (e.g. a so-called browser fingerprint), analyse your IP address, store or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by third-party providers to recognise your end device on other websites. We can commission the relevant third-party providers to place adverts based on the pages you visit on our website.

What does cross-device tracking mean?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you are using, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we work for advertising purposes. If the data is processed in this context outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the following table.

Social media plugins

We enable you to use social plugins. However, for data protection reasons, no data is transmitted to social media services when you visit our websites.

However, you have the option of giving your consent to this data processing via our banners in order to activate and use the social plugins integrated on our websites. Only then will your browser establish a connection to the servers of the operator of the respective social media service.

If you activate a plugin via the corresponding setting in the banner, the social media service receives in particular your IP address and, among other things, information about your visit to our websites (usage data). This occurs regardless of whether you have an account with the respective social media service. If you are logged in, the data can be assigned directly to your social media profile.

Overall, we have no influence on whether and to what extent the respective social media service processes personal data after activation. However, it is likely that the social media service will create user profiles from your data and use them for the purpose of personalised advertising. In addition, your data will be used to inform other users of the social media service about your activities on our websites.

Embedding takes place on the basis of your consent, provided that you have given your consent via our banner.  If the data is processed in this context outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the following table.

If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by withdrawing your consent. To do so, please follow this link and make the appropriate settings via our banner.

Integration of other technical third-party content and functions

We use the technical functions and content of third-party providers listed below to display our websites.

When you visit our website, the content of the third-party provider that provides these functions and content is loaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data technically required in this context.

We have no influence on further data processing by the third-party provider.

Data processing takes place on the basis of your consent, provided that you have previously given your consent via our banner solution.

Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA). For transfers to the USA, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

Embedded videos

We embed videos on our websites that are not stored on our servers. However, for reasons of data protection, no content from the third-party provider is loaded when you visit our website and the third-party provider does not receive any information.

Only when you give your consent via our banner will content from the third-party provider be loaded. This provides the third-party provider with the information that you have accessed our site and the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third-party provider. Your consent includes the reloading of content from the third-party provider.

Embedding takes place on the basis of your consent, provided that you have given your consent via our banner. If the data is processed in this context outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the following table.

Contact form

You have the option of getting in touch with us via our contact form. To use our contact form, we first need the data marked as mandatory fields.

We use this data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to answer your enquiry.

In addition, you can decide for yourself whether you would like to provide us with further information. This information is voluntary and is not mandatory for contacting us. We process your voluntary information on the basis of your consent.

Your data will only be processed to answer your enquiry. We will delete your data if it is no longer required and there are no legal obligations to retain it.

Insofar as your data transmitted via the contact form is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary information at any time. To do so, please contact the e-mail address provided in the legal notice.

Newsletter registration and dispatch

You can subscribe to a newsletter on our website. Please note that we require certain data to subscribe to the newsletter.

The newsletter will only be sent if you have given us your express consent. After you have placed your order, you will receive a confirmation e-mail to the e-mail address you have provided (so-called double opt-in). You can revoke your consent at any time. An uncomplicated way to revoke your consent is, for example, via the unsubscribe link provided in every newsletter.

As part of the newsletter registration process, we store further data in addition to the data already mentioned, insofar as this is necessary so that we can prove that you have ordered our newsletter. This may include the storage of the full IP address at the time of the order or confirmation of the newsletter, as well as a copy of the confirmation e-mail sent by us. The corresponding data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and in the legitimate interest of being able to account for the legality of the newsletter dispatch.  

If you order our newsletter, we ask you to agree to further newsletter tracking as part of the ordering process.

If you give us the corresponding consent, we will integrate individual tracking pixels into our newsletters, with which we can recognise when the newsletter sent to you was called up or opened and individualise the links in the newsletter in order to be able to evaluate when you clicked on which link.

If you wish to revoke your consent, please use the link provided in every newsletter to unsubscribe or adjust your consent.

Event registration

On our website, you have the option of registering for events (e.g. trade fairs) using a registration form. In this context, we need your business contact details (in particular first name, surname, company name and address, email address) in order to create and send your personalised admission ticket. The legal basis in this respect is Art. 6 para. 1 lit. b GDPR. The processing of your business contact data is also in our legitimate interest in being able to contact you quickly in the event of queries or news about the event (Art. 6 para. 1 lit. f GDPR).

In addition, you can decide for yourself whether you would like to provide us with further information. This information is voluntary and is not mandatory for contacting us. We process your voluntary information on the basis of your consent.

Your data will only be processed to deal with your enquiry. We will delete your data if it is no longer required and there are no legal retention periods to the contrary.

Insofar as your transmitted data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address provided in the legal notice.

Enquiry form

On our website you have the possibility to request a HEDELIUS machining centre via an enquiry form. In this context, we require information about the machining centre you require as well as your business contact details (in particular first and last name, company name and address, e-mail address). We process your data for the purpose of processing your enquiry and sending you an offer for the desired machining centre. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. b GDPR (fulfilment of contract or pre-contractual measure). We also process your contact data in our legitimate interest in contacting you regarding the machining centre you have requested (Art. 6 para. 1 sentence 1 lit. f GDPR).

In addition, you can decide for yourself whether you would like to provide us with further information. This information is voluntary and is not mandatory for contacting us. We process your voluntary information on the basis of your consent.

Your data will only be processed to deal with your enquiry. We will delete your data if it is no longer required and there are no legal obligations to retain it.

Insofar as your data transmitted via the enquiry form is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary information at any time. To do so, please contact the e-mail address provided in the legal notice.

Service requests

You have the option of submitting a service enquiry regarding HEDELIUS machining centres via the service form on our website. In order to process your service enquiry, we need the contact details of a contact person in addition to the details of your company. We also require information about the machining centre concerned and the specific circumstances of the service request. We process your personal data in our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) to be able to contact you immediately regarding the service enquiry.

Your data will only be processed to deal with your service enquiry. We will delete your data if it is no longer required and there are no legal retention periods to the contrary.

Insofar as your transmitted data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time.

Make an appointment

On our website, you have the opportunity to make an appointment for an individual demonstration of our machining centres or test runs for the machinability of materials and other events. For the purpose of arranging and coordinating appointments, we require your business contact details (in particular first and last name, company name, e-mail address and telephone number) in addition to information on the desired presentation dates. The legal basis for data processing is our legitimate interest in processing and responding to your appointment request (Art. 6 para. 1 lit. f GDPR).

In addition, you can decide for yourself whether you would like to provide us with further information. This information is voluntary and is not mandatory for contacting us. We process your voluntary information on the basis of your consent.

Your data will only be used to process your appointment request. We will delete your data if it is no longer required and there are no legal retention periods to the contrary.

Insofar as your transmitted data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address provided in the legal notice.

Storage duration

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) reasons for storage prevent deletion.

Further processors

We pass on your data to service providers who support us in the operation of our websites and the associated processes as part of order processing in accordance with Art. 28 GDPR. These are, for example, hosting service providers. Our service providers are strictly bound by our instructions and are contractually bound accordingly.

Below we list the processors with whom we work if we have not already done so in the above text of the privacy policy. If data may be processed outside the EU or the EEA in this context, we will inform you of this in the following table.

Your rights as a data subject

When processing your personal data, the GDPR grants you certain rights as a data subject:

Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the examination by the controller.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

Right of cancellation (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing to protect the public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

Assertion of your rights

Unless otherwise described above, please contact the office named in the legal notice to assert your rights as a data subject.

Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information on the subject of data protection using the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Strasse 88
28217 Bremen
Web: https://www.dsn-group.de/
E-mail: office@datenschutz-nord.de

If you contact our data protection officer, please also indicate the responsible body named in the legal notice.