General information on the collection of personal data
The operator of the website ("We", "Us", "Our", "Our" and "Our") takes the protection of your personal data very seriously. This Privacy Notice describes how we process and protect the personal data collected and processed via this website or affiliated websites ("Website"). It consists of a "Summarising Notice" (see below under 1.), a "Detailed Notice" (see below under 2.).
Personal data ("personal data") is all information (such as your salutation (title), your name, your address, your e-mail address, your telephone number, your bank details, your credit card number, your IP address, etc.) that relates to an identified or identifiable natural person ("data subject"). Your personal data will only be processed by us in accordance with the provisions of Regulation (EU) 2016/679 (EU General Data Protection Regulation "GDPR") and the other provisions of the applicable national data protection laws.
Your personal data will only be processed if you have consented to the processing or if the processing is permitted by law. The contents of this privacy policy inform you about the type, scope and purpose of the processing of your personal data.
This privacy policy relates exclusively to our website and other services. In the event that you are redirected to third-party websites via links from our website, please inform yourself on these websites about the handling of your personal data.
1. Summarising Note
1.1 Scope of application, data subject and controller
This privacy policy applies exclusively to the collection and processing of personal data of users of our website or affiliated websites or the companies of the group of companies. The controller for all personal data collected and processed in connection with the use of the website is the operator of the website. If another controller processes personal data about how you use this website, you will receive a separate privacy policy.
1.2 How you can contact us and our data protection officer
You can contact us by post using the contact details provided in the legal notice.
You can contact our data protection officer by post at the following address:
HYDAC Verwaltung GmbH, Abteilung Datenschutz, Industriestraße, 66280 Sulzbach/Saar, Germany or at the following email address: privacy(at)hydac.com.
1.3 Categories of personal data, purposes of processing and legal bases
Appendix 1 "Personal Data" to this Privacy Policy contains detailed information about (i) the categories of personal data that We collect from you; (ii) the purposes for which We process this personal data; and (iii) the legal bases for collecting and processing your personal data. If the processing is for a different purpose, We will provide you with additional information.
1.4 Recipients and categories of recipients of the personal data
We transfer your personal data to other companies within the group of companies. We use internal and external service providers to provide services and products on our behalf. Your personal data is transmitted to the service providers for this purpose. Within the company and the companies of the group of companies and when using service providers, any access to your personal data in connection with your use of the website is restricted to those persons who absolutely need this data to fulfil their professional duties.
We will disclose your personal data to government authorities, courts, external consultants and similar third parties that are public bodies to the extent required or permitted by applicable law.
We only disclose personal data to recipients to the extent necessary.
1.5 Data transfers outside the European Economic Area ("EEA")
Some of the recipients of your personal data are located outside the EEA or have branches there. We ensure that such recipients outside the EEA provide an adequate level of protection for personal data and that appropriate technical and organisational security measures are in place to protect personal data by entering into appropriate data transfer agreements or by taking other appropriate measures. Any further transfer beyond this is subject to the relevant legal requirements.
1.6 Scope and duration of storage
Your personal data will only be processed by us and/or our service providers to the extent necessary for the fulfilment of our obligations to you or for the fulfilment of the service providers' obligations to us. Processing in accordance with the applicable data protection laws only for the period necessary to fulfil the purposes for which the personal data is processed. When the purpose for the data processing has ceased to exist, the personal data will be deleted from the systems and/or records and/or steps will be taken to properly anonymise your personal data so that you can no longer be identified from that data. This does not apply where We and/or our service providers are required to retain your information beyond this:
to comply with any legal or regulatory obligations to which We and/or Our service providers are subject, with regard to legal action periods or are otherwise authorised to retain personal data.
1.7 Your rights
In accordance with applicable data protection laws (such as the GDPR), you have the following rights: (i) the right of access; (ii) the right to obtain a copy of your personal data undergoing processing; (iii) the right to rectification; (iv) the right to erasure ("right to be forgotten"); (v) the right to restriction of processing; (vi) the right to data portability; (vii) the right to object; and (viii) the right to lodge a complaint with the competent data protection supervisory authority. If you have given your consent to the processing of personal data, you may withdraw this consent at any time. Such a revocation does not affect the legality of the processing that took place prior to the revocation of consent.
1.8 Use of cookies and similar technologies on the website
We use cookies and similar technologies on our website. You can find detailed information on this in our cookie policy under point 5.
1.9 Personal data required for the conclusion or fulfilment of the contract
You only need to provide the personal data that is marked as mandatory in the relevant forms on Our Website. Without this personal data, the desired contract cannot be concluded or an existing contract can no longer be executed and may have to be cancelled.
Personal data that is not labelled as mandatory in the relevant forms on Our website does not have to be provided.
1.10 Changes to this privacy policy
This Privacy Policy may be subject to change. We reserve the right to amend or supplement this Privacy Policy at any time. You can see the current version date of this privacy policy at the bottom of the page.
2.1Categories of Personal Data, purposes of processing and legal bases
In Appendix 1 "Personal Data" to this Privacy Notice, you will find detailed information on:
the categories of Personal Data We collect from you in addition to other Personal Data that you actively provide to Us (e.g., when you send an email to Us);
the purposes for which We process those categories of Personal Data; and
the legal bases for the collection and processing of your Personal Data.
We also use cookies and similar technologies on Our Website. You can find detailed information on this in Our Cookie Policy.
Please note that We process your Personal Data for other purposes only if:
We are obligated to do so on the basis of legal requirements (e.g., transfer to courts or criminal prosecution authorities);
if you have consented to the respective processing; or
if the processing is otherwise lawful under applicable law.
If processing for another purpose takes place, We will provide you with additional information.
2.2 Recipients and categories of recipients
We transfer your personal data to the recipients and categories of recipients listed below for the respective purposes and to the extent necessary:
Within the companies of the Group.
We pass on your personal data to other companies for the following purposes,
for the implementation of marketing measures. Such data transfers are carried out on the basis of Art. 6 para. 1 lit. a) or f) GDPR,
for the (pre-)contractual execution and completion of your request to the location responsible for you on the basis of Art. 6 para. 1 lit. f) GDPR or
for further inquiries to specific companies in the group that have been received via central communication channels
(A list of these other HYDAC Group companies can be found here: https://www.hydac.com/en/locations)
Processors (internal and external)
We use both external and internal processors to provide services and products on our behalf and pass on your personal data to them for this purpose.
Our processors are contractually obliged to process this personal data on our behalf under appropriate instructions, insofar as this is necessary for the respective processing purposes and to protect your personal data appropriately.
Our processors may not otherwise process or disclose your personal data unless this is permitted by law.
We share your personal data with the processors listed in the "Service Providers" appendix to this Privacy Policy.
Public authorities, courts, external consultants and comparable third parties
To the extent required or permitted by applicable law in order to,
ensure compliance with applicable laws,
respond to official inquiries or requests from public authorities
comply with applicable legal requirements,
protect the rights, privacy, safety or property of our website visitors, guests, employees or the public,
enable us to pursue possible legal remedies or prevent or mitigate any possible loss or damage we may suffer,
respond to an emergency. Such data transfers are based on Art. 6 para. 1 lit. a), c) or f) GDPR.
Within the group and processors, access to your personal data in connection with your use of the website or other services is restricted to those persons who absolutely need this data to perform their professional duties.
Data transfers outside the European Economic Area (EEA)
Some of the recipients of your personal data are located outside the European Economic Area, where data protection laws may provide a different level of protection than the laws in your country. We will take necessary steps under applicable data protection law to ensure that transfers from the EEA are adequately protected.
By concluding appropriate safeguards on the basis of the standard contractual clauses (2021/914/EU) pursuant to Art. 46 para. 2 lit. c) GDPR or by other appropriate means available upon request under the conditions set out in section 7, We have ensured that all recipients located outside the EEA provide an adequate level of protection for personal data and that appropriate technical and organizational security measures are in place to protect such data from unauthorized access; measures are in place to protect such data against accidental or unlawful destruction or accidental loss, alteration, disclosure or access and against all other unlawful forms of processing. Any disclosure (including to our affiliates outside the EEA) is subject to the relevant legal requirements.
Scope and duration of storage
In compliance with applicable data protection laws, your personal data will be stored by HYDAC and/or our processors only to the extent and for the duration necessary for us to fulfill our obligations to you or for the processors to fulfill their obligations to us.
Once your personal data is no longer necessary for the purpose of your processing, it will be deleted from systems and/or records and/or steps will be taken to properly anonymize it so that you can no longer be identified from your personal data. However, we and/or our processors may need to retain your data in order to comply with any legal or regulatory obligations to which HYDAC and/or our processors are subject. If legal proceedings are initiated, the personal data will be stored until the end of these proceedings, including any appeal periods. In addition, We may retain personal data if permitted by applicable law.
So far as a more detailed description is possible, you will find detailed information in Appendix 1 "Personal Data" to this Privacy Notice.
2.5Your statutory rights
If you have declared your consent to any Personal Data processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
In accordance with applicable data protection laws (such as the GDPR), you may have the following rights which you may exercise by contacting Us as stated in in Section 7:
Right of access: You have the right to obtain confirmation from Us as to whether or not Personal Data concerning you is processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been, or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You also have the right to obtain a copy of the Personal Data undergoing processing. For further copies requested by you, We may charge a reasonable fee based on administrative costs.
Right to rectification: You have the right to obtain rectification of inaccurate Personal Data concerning you from Us. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
Right to erasure ("right to be forgotten"): Under certain circumstances, you have the right to obtain the erasure of Personal Data concerning you from Us and We may be obliged to erase such Personal Data.
Right to restriction of processing: Under certain circumstances, you have the right to obtain the restriction of processing your Personal Data from Us. In this case, the respective data will be marked and may only be processed by Us for certain purposes.
Right to data portability: Under certain circumstances, you have the right to receive the Personal Data concerning you, which you have provided to Us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another entity without hindrance from Us.
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by us and we can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by us. Exercising this right will not incur any costs.
Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
Right to file a complaint: In addition to the rights set out above, you also have the right to lodge a complaint with the competent data protection supervisory authority.
2.6Personal Data required to enter into or perform the contract
You are only required to provide Personal Data that We need to establish and maintain a business relationship with you or that We are required to collect by law. Such Personal Data are marked as mandatory in the respective forms on Our Website. Without such Personal Data, We will not be able to enter into the requested contract or - should you remove such Personal Data at a later point in time - We will no longer be able to perform an existing contract and may have to terminate it.
Personal Data that are not marked as mandatory in the corresponding forms on Our Website do not have to be provided.
In the following cases, We can provide Our service and/or conclude a contract only if you provide Us with the relevant data records:
Purchase/service orders: Company data (address, contact details, registration number or similar), contact person (salutation, surname, first name, telephone and extension, e-mail address, position, department, location);
Newsletter subscriptions: Last name, first name; salutation; company data; company address; personal contact information (email address, phone number); country/region; language; consent status (opt-in for marketing); interests (industries, trends and topics).
For additional information regarding Our newsletter and purchase/service orders, please see Appendix 1 "Personal Data" to this Privacy Notice.
2.8Changes to this Privacy Notice
This Privacy Notice may require an update from time to time – e.g., due to the implementation of new technologies or the introduction of new services or features. We reserve the right to change or supplement this Privacy Notice at any time. We will publish the changes on https://www.hydac.com/privacy-policy.
Version
Date
Version 2.5
02/2023
Version 3.0
08/2023
Version 3.5
10/2023
18.10.2023
4.1 Personal data
We process the following personal data in connection with your use of the website, as follows:
Zweck der Verarbeitung
Kategorien von personenbezogenen Daten
Rechtsgrundlagen für die Verarbeitung
Speicherdauer
Displaying our website and ensuring stability and security Our system automatically retrieves personal data from your computer system when you visit our website. The personal data we collect about you is stored in our system's log files. This data is not stored together with other personal data. This is necessary in order to display our website to you and to ensure stability and security.
Browser type, operating system, internet service provider, IP address, date and time of your visit to Our Website, information about the website from which your system is directed to Our Website and information about the website that is accessed by your system via Our Website.
Necessary for the fulfilment of a contract (Art. 6 para. 1 lit. b) GDPR) and for the protection of legitimate interests (technically necessary for the operation of the website and to display it correctly for web visitors) (Art. 6 para. 1 lit. f) GDPR).
The personal data is stored for as long as is necessary for the respective purpose. The personal data will be deleted as soon as storage is no longer required, unless there are statutory retention obligations or limitation periods must be observed.
Communication with you (e.g. via the contact form offered on the website or via the e-mail address(es) provided on the website)
We use your personal data to properly respond to your enquiries about orders, purchased products or products that may be of interest to you and Our services, etc. Our website has a contact form that you can use to contact Us electronically. If you make use of this option, the data entered in the input mask will be transmitted to Us and stored.
The communication channel depends on the contact information provided (e.g. chat, e-mail, telephone, etc.)
First and last name, title, e-mail address, telephone number, address, company, content of the enquiry, location and sector
When a message is sent via our contact form, the following data is also processed:
The IP address of the user and the date and time of registration
Necessary for the protection of legitimate interests (necessary for answering your enquiries) (Art. 6 para. 1 lit. f) GDPR).
The personal data is stored for as long as is necessary for the respective purpose. The personal data will be deleted as soon as storage is no longer required, unless there are statutory retention obligations or limitation periods must be observed.
Customer analytics and/or data analysis, i.e:
We use personal data to improve your user experience on Our Website by analysing the personal data you provide during your visit to Our Website, e.g. via cookies and similar technologies (see also Our Cookie Policy under point 5). We use personal data to better understand you as a customer and to suggest personally relevant features to you, to offer you tailored content so that you can participate in interactive features of Our Services and to offer you tailored promotions.
In particular, the following personal data is processed for this purpose:
Country/region, cookies, web behaviour (elements and pages clicked on, products added to the shopping cart, products remaining in the shopping cart), date and time of access, industry interest and topic interest
Safeguarding legitimate interests (to customise a person's online experience, to improve the performance, usability and effectiveness of Our Website in order to increase user-friendliness, to conduct and analyse Our marketing activities in order to offer better products and services that may be of more interest to customers) (Art. 6 para. 1 lit. f) GDPR or consent (Art. 6 para. 1 lit. a) GDPR).
With regard to the personal data processed by cookies and similar technologies, we refer you to our cookie policy //reference//.
When processing personal data on the basis of your consent, the personal data will be stored until you revoke your consent and will be deleted as soon as possible after revocation.
Otherwise, the personal data will be stored for as long as is necessary for the respective purpose. The personal data will be deleted when storage is no longer required, unless there are statutory retention obligations or statutory limitation periods must be observed.
Processing and fulfilment of product and service orders placed via the website, e.g:
Receive and process orders; deliver products and services; process payments; communicate with you in connection with your orders in order to properly fulfil Our contractual obligations and confirm receipt of the order and completion of the delivery via the intended communication channel such as e-mail, etc.
In particular, the following personal data is processed for this purpose:
Company data (address, contact details, registration number, etc.) and contact person (title, surname, first name, telephone and extension, e-mail address, position, department, location)
Necessary for the fulfilment of a contract (Art. 6 para. 1 lit. b) GDPR).
Personal data is stored for up to 10 years in order to fulfil tax law requirements.
Credit checks
In the case of a purchase on account or another payment method where we make advance payment, we may carry out a credit check (scoring). For this purpose, we transmit the data you enter to a credit agency. The probability of non-payment is determined on the basis of this data. If the risk of non-payment is too high, we may refuse the payment method in question.
Company, company address, bank details and registration numbers
To fulfil the contract (Art. 6 para. 1 lit. b GDPR) and to safeguard a legitimate interest (avoidance of payment defaults; Art. 6 para. 1 lit. f GDPR). If consent has been obtained, the credit check is carried out on the basis of the consent (Art. 6 para. 1 lit. a) GDPR).
The personal data is stored for as long as is necessary for the respective purpose. The personal data will be deleted when storage is no longer required, unless there are statutory retention obligations or statutory limitation periods must be observed.
Communicationabout our products and services, campaigns and events that may be of interest to you / sending newsletters.
Based on your consent, we will send you information about our products, services and campaigns (direct marketing), e.g. by e-mail or post in the form of newsletters.
In particular, the following personal data is processed for this purpose:
Surname, first name, title, company data, company address, personal contact information (e-mail address, telephone number), country/region, language, consent status (opt-in for marketing), interests (industries, trends and topics of interest and participants in the application/registration).
,
Consent (Art. 6 para. 1 lit. a) GDPR) in the case of advertising by post to safeguard legitimate interests (Art. 6 para. 1 lit. f) GDPR). When you register for an event (e.g. customer day, HYDAC employee party, etc.), you provide us with your data because you wish to participate. Participation is generally not mandatory. The collection of data may be necessary for reasons of tax law or security on site (Art. 6 para. 1 lit c) GDPR)
The personal data will be stored until you revoke your consent (e.g. unsubscribe from the newsletter), if applicable. The personal data will also be automatically deleted after 3 years at the latest if you no longer respond to our newsletter (e.g. open the newsletter email). Otherwise, the personal data will be stored for as long as is necessary for the respective purpose. The personal data will be deleted when storage is no longer necessary, unless there are statutory retention obligations or statutory limitation periods must be observed. In the context of tax law retention for billing at events, it may be necessary to retain information about your participation for 10 years.
Data processing in connection with a Reporting system We process the personal data of the reporting persons, unless the report was submitted anonymously, as well as the personal data of the accused person(s), such as name and other communication and content data, solely for the purpose of receiving and investigating reports of criminal, illegal, morally reprehensible or unfair behaviour in a secure and confidential manner.
Information about the reporting person (if not reported anonymously) and the accused(s) such as
First and last name, function/title, contact details, other employment-related data where applicable, Personal information identified in the reports of the investigation team, including details of the allegations made and supporting evidence, date and time of calls (when the report is received via the telephone hotline) and Any other information identified in the investigation findings and in the follow-up procedure following the report, e.g. information on criminal behaviour or data on illegal or improper behaviour, if reported
The collection of the reporting person's personal data in the case of a non-anonymous report is based on consent to the processing through the transmission of the data (implied consent) (Art. 6 para. 1 sentence 1 lit. a GDPR).
The collection, processing and disclosure of personal data of the persons named in the report serves to safeguard the legitimate interests of the company It is in the legitimate interest of companies to detect, process, remedy and sanction violations of the law and serious breaches of duty by employees throughout the centre, effectively and with a high degree of confidentiality, and to avert associated damage and liability risks for companies (Sections 30, 130 OWiG). Directive (EU) 2019/1937 ("EU Whistleblower Directive") and the Whistleblower Protection Act also require the establishment of a reporting system in order to give employees and third parties the opportunity to report legal violations in the company in a protected manner.
The disclosure of personal data to other recipients in the case of non-anonymous reports may be necessary due to a legal obligation (Art. 6 para. 1 sentence 1 letter c GDPR).
The personal data will be stored in the respective procedure for as long as required for the clarification and final assessment, a legitimate interest of the company or a legal requirement exists. This data is then deleted in accordance with the legal requirements. The duration of storage depends in particular on the severity of the suspicion and the reported possible breach of duty.
Downloads
Additional notices regarding the privacy policy as a download
Information on the joint processing of data in the companies of the HYDAC group as PDF
Notices regarding the privacy policy in video monitoring as PDF
Data protection notice Intellectual-Property PDF PDF
Cookies and other technologies
Our Internet pages use so-called „cookies“. Cookies are small data packets and do no harm to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.
Which cookie we use when you use our website, you can see as the end.
Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. Insofar as consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of this website may be limited.
If cookies are used by third parties or for analysis purposes, we will inform you separately in the context of this privacy statement and, if necessary, request your consent.
Consent via a Consent Manager
Our website uses the consent technology of Onetrust to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Onetrust Technology Ltd, 82 St John Street, London, GB, EC1M 4JN (hereinafter „ConsentManager“).
When you enter our website, a connection is established to Onetrust's servers in order to obtain your consents and other declarations regarding cookie use. Onetrust then stores a cookie in your terminal device in order to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you delete the Onetrust provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
The use of Onetrust takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
Onetrust Contract processing
We have concluded a contract with the above-mentioned provider. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
We have concluded an order processing agreement with the above-mentioned provider.
Description/scope of data processing
Legal basis of data processing
Purposes of data processing
Duration of retention
Possibility of objection and removal
Information about the browser type and version used.
the user's operating system.
the user's Internet service provider.
the user's IP address.
The date and time of access.
Websites from which the user's system accesses our website.
Websites from which the user's system accesses our website.
If cookies or cookie-like technologies are used in the course of data processing, the storage of information in the end user's terminal device or access to information already stored in the end user's terminal device is carried out in accordance with 25 para. 1 TTDSG and further data processing in accordance with Art. 6 para. 1 GDPR. Insofar as the use of cookies für mandatory, this is done on the basis of § 25 para 2 TTDSG and the further data processing according to Art. 6 para 1 litGDPR.
The protection of legitimate interests forms the legal basis für the processing of data using technically necessary cookies. The legal basis für the processing of data using cookies for analysis purposes is consent, if the user has consented to this use.
.
The purpose of using technically necessary cookies is to make it easier for users to use websites. Some functions on our websites cannot be offered without the use of cookies. These functions require that the browser be recognized even if the user leaves the site. Which cookie we use and for what purpose can be seen ünnen via the following link:
The user data collected by means of technically necessary cookies are not used to create user profiles. Analytics cookies are used to improve the quality of our website and content. Analytics cookies show us how the website is used. In this way, we can continuously optimize our website. These purposes constitute our legitimate interest in processing the data in accordance with our legitimate interest.
.
The storage time depends on the cookie used. Cookies processed when you open the website:
You can see the storage period in the following list.
You can disable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If you deactivate cookies for our website, it may no longer be possible to use all functions to their full extent. If you have agreed to the use of the analysis cookie and want to withdraw your consent, you can find this setting under
