Gå til indhold Spring til navigationsmenuen

Information on the processing of personal data for our commercial partners

The protection of personal data is important to us. We would therefore like to inform you below about the way in which we collect, store and process your personal data, and about your rights.

Our business partners are our customers, distributors and various service providers.

This information complements our general data protection declaration, which can be consulted on our website.

1. Data controller

The data controller is:
HIWIN SAS

17 rue des Cigognes - Immeuble Le Méléze

<67960 Entzheim France

Tel: +33 3 88 28 84 80

E-mail: contact@hiwin.fr

Our data protection officer can be contacted by post or by e-mail at:

Christoph Boser
E-mail: datenschutz@hiwin.de
Tel: +33 3 88 28 84 80


2. Why we process your data (Purposes of processing)

When working with its business partners, HIWIN processes personal data for the following purposes:

  • Communication with business partners about products, services or projects, for example to process requests or orders from the business partner;
  • Planning, realisation and management of the business relationship between HIWIN and the business partner, for example to process the order of products and services, to make and collect payments, processing &.for accounting, invoicing and debt collection purposes, and to carry out deliveries, maintenance activities or repairs.
  • Maintaining and protecting the security of our products and services as well as our website;
  • Respect des exigences légales (par exemple en matière fiscale, lutte contre le blanchiment d’argent);
  • Preventing and managing risks relating to security, fraud or other criminal actions;

3. On what legal basis do we process your data?

For the aforementioned purposes, HIWIN processes the following categories of personal data, as appropriate:

  • Contact information, such as name and surname, business address, business telephone number, business mobile telephone number, business fax number and business email address;
  • Payment data, such as information needed to process payments or prevent fraud, in the case of credit card payments, card information as well as the card control number;
  • Information the processing of which is necessary in the context of a project or the establishment of the contract, performance and fulfilment of the contract with HIWIN;
  • Other information, which is given to us voluntarily by our contacts, such as internal and external contacts or particular wishes for execution The products or services purchased in advance, and their history Information from publicly accessible sources, information databases or creative organisations;
  • If necessary, as part of our compliance obligations: Information on relevant legal proceedings and other disputes, in which business partners are involved.

5. Recipients of data
Within our company, we only give your personal data to those departments and persons who require it in the exercise of their legal and contractual obligations or to departments and persons involved in processing based on our regulatory interest.eacute;gales and contractual obligations or to services and persons involved in processing based on our legitimate interest, in accordance with Article 6 paragraph 1 point f RGPD.

In some cases, we also pass on your personal data to contractual partners who offer our products as distributors or retailers.

When we share personal data with other business partners, we require them to protect and process your data in accordance with the applicable data protection provisions. Data processing and transfer are carried out on the basis of Article 6 para. 1 point f RGPD. The legitimate interests lie in setting up an efficient distribution structure close to customers. The transfer may also be based on your explicit consent. If you do not wish your data to be transferred, you may inform us at any time and, if appropriate, withdraw your consent. This may affect the processing of your request and the fulfilment of your order.

The recipients of personal data may also include institutions and public bodies if there is a legal obligation or an official request (e.g. police, public ministries, supervisory authorities, tax authorities). No data will be transferred to third parties for advertising purposes without your explicit consent.

6. Transmission of personal data to affiliated companies of the HIWIN group

Where appropriate, HIWIN will communicate personal data for the purposes mentioned above to other subsidiaries or establishments of the HIWIN Group. If this is necessary in order to carry out the business relationship with our business partner

Companies of the HIWIN Group may be located outside the EU and the EEA (third countries). Personal data is only transferred to third countries if we have concluded standard contractual clauses with the recipients or set up Binding Corporate Rules or as part of the Privacy Shield.

The basis for the processing of data is Article 6 paragraph 1 point b RGPD, which legitimises the processing of data for the performance of a contract or pre-contractual measures, as well as Article 6 paragraph 1 point f RGPD in accordance with other legitimate interests.eacute;-contractual measures, as well as Article 6 paragraph 1 point f RGPD in accordance with the other legitimate interests indicated above (see également points 2, 3 and 5).

7. Transfer of data to a third country
A transfer of data to third parties in a country outside the EU and the EEA Economic Area is not foreseen.

8. How long is the data stored?

If necessary, we process and store your personal data for the duration of our business relationship. We are also subject to various retention and documentation obligations. The retention and documentation periods prescribed therein are two ten years, and may extend to thirty years in certain cases.

We will only save and use your data for an appropriate period of time after the end of the contract, in order to keep you up to date with our services and offers and to send you information. This is done on the basis of Article 6 paragraph 1 point f RGPD. After this period, we will delete your personal data. If, after such deletion, data is required for legitimate analytical, historical or other business purposes, we will take appropriate measures to anonymise such data.

9. Children
Our offer is intended for adults only. People under the age of 18 may not send us any personal data without the consent of their parents or legal guardian.

10. Automatic decision making
For the establishment, performance or termination of the business relationship, as well as for pre-contractual measures, we do not apply any fully automatic decision making, in accordance with the law.eacute;-contractual measures, we do not apply fully automatic decision-making, in accordance with Article 22 RGPD. If we apply this procedure in individual cases, we will inform you or ask for your consent.

11. What are my rights regarding my personal data?
If your personal data is processed, you are the data subject within the meaning of the RGPD and you will be informed of your rights.You are the data subject within the meaning of the RGPD and have the following rights vis-à-vis the data controller:

Rights of access to information

You can ask the person responsible to confirm whether any personal data about you is being processed.

Right of rectification

You have the right to ask the data controller to correct and/or complete the data if the personal data processed about you is incorrect or incomplete. The data controller must make the correction without delay.


Right to restrict processing

Under the following conditions, you may request that the processing of your personal data be restricted:

The processing of your personal data is subject to the following conditions.
  • <(1) if you challenge the accuracy of your personal data during a period that allows the data controller to verify the accuracy of the personal data; <(2) if the processing is unlawful and you object to the erasure of the personal data and request instead that the use of the personal data be restricted; - if the processing is unlawful and you object to the erasure of the personal data and request instead that the use of the personal data be restricted; - if the processing is unlawful and you object to the erasure of the personal data and request instead that the use of the personal data be restricted; - if the processing is unlawful and you object to the erasure of the personal data and request instead that the use of the personal data be restricted.
  • (3) if the controller no longer needs the personal data for the purposes of the processing, but you need it to exercise or defend legal claims or
  • .
  • (4) if you have objected to the processing in accordance with Article 21(1) of the Data Protection Regulation and it has not yet been established whether the legitimate grounds invoked by the data controller are applicable;has not yet been established whether the legitimate grounds invoked by the controller outweigh your grounds.

Right to erasure
You can ask the data controller to erase your personal data without delay.

Right to information
If you have exercised your right to rectification, erasure or restriction of the processing of your personal data, the data controller shall notify each recipient to whom the data is disclosed;If you have exercised your right to rectification, erasure or restriction of the processing of your personal data, the data controller shall notify each recipient to whom the personal data relates of this right;The data controller shall notify each recipient to whom personal data relating to you has been communicated of any rectification or erasure of personal data or any restriction on the processing thereof;In the event of the processing of personal data or the restriction of the processing carried out, unless such communication proves impossible or requires disproportionate effort.

The data controller will provide you with information about these recipients if you request it.

Right to portability of data
You have the right to receive the personal data that you have provided to a data controller in a structured, commonly used and machine-readable format.You have the right to receive the personal data that you have provided to a data controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit such data to another data controller without the data controller to whom the personal data was communicated being prevented from doing so, where:

You have the right to have your personal data transmitted to another data controller without the data controller to whom the personal data was communicated being prevented from doing so, where:

You have the right to have your personal data transmitted to another data controller.

  • <(1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and <(2) processing is carried out using automated procedures.

When you exercise this right, you may request that personal data be transferred directly from one data controller to another, where technically possible. This right is without prejudice to the rights and freedoms of third parties.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority; the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object
You have the right to object at any time, on grounds relating to your particular situation, &.agrave; un traitement des données ées àcaractère personal vous fondè sur l'article 6, paragraphe 1, point e) ou f) RGPD, y compris un profilage fond&egraute; sur ces dispositions.

Where personal data concerning you is processed for the purposes of canvassing, you have the right to object at any time to the processing of personal data concerning you for such canvassing, including profiling insofar as it is linked to the use of your personal data for the purposes of canvassing.This includes profiling insofar as it is linked to such prospecting.

If you object to the processing of your personal data for canvassing purposes, the data will no longer be processed for these purposes.

Right to withdraw consent to data processing

You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal of consent.


Right to lodge a complaint with a supervisory authority