Privacy Policy

The protection of your personal data is of great importance to us. It is important to us to inform you about which personal data is collected, how it is used, and what options you have when navigating our website.

HOCHBURG GmbH & Co. KG
Hirschstrasse 27
70173 Stuttgart

Telefon: 0711 722 333 60
E-Mail: go@hochburg.net
www.hochburg.net

By using this website, you agree to the collection, processing, and use of data as described below. Our website can generally be visited without registration. When you visit, data such as accessed pages or file names, date, and time are stored on the server for statistical purposes without being directly linked to your person. Personal data, in particular name, address, or email address, is collected on a voluntary basis. No data will be shared with third parties without your consent.

Handling of Personal Data

Personal data refers to information that can be used to identify a person, meaning details that can be traced back to an individual. This includes name, email address, or telephone number. However, data about preferences, hobbies, memberships, or websites visited by an individual also count as personal data. Personal data is only collected, used, and shared if permitted by law or if users consent to the data collection.

Area of Applicability

This privacy policy informs users about the type, scope, and purposes of the collection and use of personal data by the responsible provider. The legal basis for data protection can be found in the General Data Protection Regulation.

Methods of Contact

The website contains a contact form that can be used for electronic communication. Alternatively, contact can be made via the provided email address. If you contact us through one of these channels, the transmitted personal data will be automatically stored. The storage is solely for the purpose of processing or contacting the affected person. The data will not be shared with third parties. The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal requirements, particularly retention periods, remain unaffected.

Creation of Log Files

Each time the website is accessed, we collect data and information through an automated system. These are stored in the server's log files. The following data may be collected:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

The processing of this data serves to deliver the content of our website, ensure the functionality of our IT systems, and optimize our website. The data in the log files is always stored separately from other personal data of the users.

Cookies

Unsere Website verwendet Cookies. Das sind kleine Textdateien, die es möglich machen, auf dem Endgerät des Nutzers spezifische, auf den Nutzer bezogene Informationen zu speichern, während er die Website nutzt. Cookies ermöglichen es, insbesondere Nutzungshäufigkeit und Nutzeranzahl der Seiten zu ermitteln, Verhaltensweisen der Seitennutzung zu analysieren, aber auch unser Angebot kundenfreundlicher zu gestalten. Cookies bleiben über das Ende einer Browser-Sitzung gespeichert und können bei einem erneuten Seitenbesuch wieder aufgerufen werden. Wenn Sie das nicht wünschen, sollten Sie Ihren Internetbrowser so einstellen, dass er die Annahme von Cookies verweigert.

Privacy Policy for Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies." These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a server of Google in the USA and stored there.

IP anonymization

We have activated the IP anonymization feature on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

Browser Plugin

Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können. Sie können darüber hinaus die Erfassung der durch den Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem Sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren: https://tools.google.com/dlpage/gaoptout?hl=de.

 

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: Disable Google Analytics

Mehr Informationen zum Umgang mit Nutzerdaten bei Google Analytics finden Sie in der Datenschutzerklärung von Google.

 

Data Processing Agreement

We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Routine Deletion and Blocking of Personal Data

We process and store personal data of the data subject only for as long as it is necessary to achieve the purpose of storage. Storage may also take place insofar as this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. As soon as the purpose of storage ceases to apply or a storage period prescribed by the aforementioned provisions expires, the personal data is routinely blocked or deleted

 

Duration of Storage of Personal Data

 

Personal data will be stored for the duration of the respective statutory retention period. After the period has expired, the data will be routinely deleted, unless there is a necessity for contract initiation or contract fulfillment.


Legal Basis for Processing

Insofar as we obtain the consent of the data subject for processing operations of personal data, Article 6 paragraph 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6 paragraph 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Article 6 paragraph 1 lit. d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 paragraph 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the conduct of our business activities.

Rights of the Data Subject

If personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights against the controller.

 

Right of access

You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request information from the controller regarding the following details:

• the purposes for which the personal data are processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom your personal data have been disclosed or will be disclosed;
• the planned duration of storage of your personal data, or, if specific information is not possible, the criteria for determining the storage period;
• the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• any available information about the source of the data, if the personal data are not collected from the data subject;

You have the right to request information as to whether your personal data are being transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

Right to Rectification

You have the right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without undue.


Right to Restriction of Processing

Under the following conditions, you may request the restriction of the processing of your personal data:

• if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data;
• if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• if the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims; or
• if you have objected to processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

If the processing of your personal data has been restricted, such data – apart from being stored – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been imposed in accordance with the aforementioned conditions, you will be informed by the controller before the restriction is lifted.

Right to erasure

You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase this data without undue delay, provided that one of the following reasons applies:
• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data concerning you have been processed unlawfully.
• The deletion of the personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.

The right to erasure does not exist insofar as the processing is necessary
• for exercising the right to freedom of expression and information;
• for compliance with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
• for the establishment, exercise, or defense of legal claims.


Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by the controller about these recipients.
Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data were provided, provided that

• the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and
• the processing is carried out by automated means.
In exercising this right, you also have the right to obtain the direct transfer of your personal data from one controller to another, where technically feasible. The freedoms and rights of others must not be affected by this. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.


Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6(1)(e) or (f) GDPR. The controller shall no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Withdraw Data Protection Consent
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement, if you consider that the processing of your personal data violates the GDPR. The competent supervisory authority for data protection matters is the Data Protection Officer of the federal state in which our company is based:

The State Commissioner for Data Protection and Freedom of Information

Kingstrasse 10 a
70173 Stuttgart
Phone: 07 11/61 55 41-0
Fax: 07 11/61 55 41-15

As of February 2020