Information on the protection of personal data
1. Your data protection at a glance
General information
The following information gives you an overview of the processing of your personal data when you visit our website. By personal data we mean any data that enables a person to be identified, whether directly or indirectly. You can find comprehensive information on data protection in the following data protection declaration.
Data collection on the company's website
The site operator is responsible for processing the data processed during your visit to our website. You can find their contact details in the "legal information" section.
How is your data collected?
We collect your data from the moment you provide it to us. This may include, for example, data communicated when you contact us by email or via the contact form.
Other data is collected automatically by our IT systems when you visit our site. In particular, this involves technical data (e.g. internet browser, operating system or time of site visit). This data is captured automatically.
What is your data used for?
Some data is collected to ensure that the website is fully available. Other data is used to process your request or to analyse user behaviour on the website.
What rights do you have with regard to your data?
You have the right to request access to the personal data we process at any time. In addition, you may request the rectification, erasure or restriction of such data. You may contact the data controller at any time if you have any questions about the protection of your personal data. You also have the right to appeal to the relevant supervisory authority.
Further details about your rights can be found in the data protection declaration under the heading "Your Rights".
Analysis tools and third-party tools
Your browsing behaviour may be subject to statistical analysis when you visit our site. This analysis is mainly carried out using session cookies and analysis programmes. The analysis of your browsing behaviour is generally carried out anonymously. Your browsing behaviour cannot therefore be traced. You can object to this analysis or prevent it by refusing to use certain tools. Detailed information on this subject can be found in the following privacy statement.
2. General remarks and mandatory information
DATA PROTECTION STATEMENT
The personal data we collect is treated confidentially and in accordance with the applicable legal provisions.
Personal data is any data that can be attributed to you personally, for example your name, address, email addresses or user behaviour.
We hereby inform you of the categories of data we collect, the purposes of processing and their legal bases, as well as your rights.
Please note that data transmission via the Internet (e.g. when communicating by e-mail) can always have security gaps. Infallible data protection against unauthorised access by third parties cannot be guaranteed.
Data controller
The data controller in accordance with Article 4(7) of the European Union's General Data Protection Regulation (GDPR) is
HIWIN SAS
17 rue des Cigognes - Immeuble Le Méléze
67960 Entzheim France
Telephone: +33 3 88 28 84 80
E-mail: contact@hiwin.fr
Your rights:
You have the following rights regarding your personal data:
.- Right to request access to the personal data we process, in accordance with Article 15 of the RGPD,
- Right to rectify inaccurate personal data relating to you, in accordance with Article 16 of the RGPD,
- .
- Right to demand erasure, under the conditions of Article 17 of the RGPD,
- Right to limitation of processing, in accordance with Article 18 of the RGPD,
- Right to data portability, i.e. the data subject has the right to have the processed data provided to us delivered to him or her or to a third party in a structured, commonly used and readable format, or to require its direct transmission to another controller if this is technically possible, in accordance with Article 20 of the RGPD.
- Right to withdraw your consent, in accordance with Article 7, paragraph 3 of the RGPD. You have the right to revoke your consent at any time. Simply send us an e-mail. This will not affect the lawfulness of data processing carried out up to the time of withdrawal of consent.
- Right to object to the processing of your personal data for advertising and data analysis purposes (art. 21, RGPD):
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on Article 6, paragraph 1, lit. e) or f), including profiling based on these provisions. (Right to object in accordance with art. 21, paragraph 1, RGPD).
In addition, you may object at any time to the processing of your personal data for advertising and data analysis purposes. (Right to object in accordance with art. 21, paragraph 2, RGPD).
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. You can do this by contacting the supervisory authority of your usual place of residence, your place of work or the supervisory authority to which we are subject.
To assert your rights, you can contact datenschutz@hiwin.de at any time.
SSL/TLS encryption
For security reasons, this site is equipped with SSL/TLS encryption to guarantee protection when transmitting confidential content such as orders or requests that you send to us in our capacity as site operator. With encrypted connections, the word "http://" in the browser's address line will be replaced by the word "https://". The browser address line will also show the padlock sign.
With SSL/TLS encryption enabled, data transmitted to our company will be protected against unauthorised access by third parties.
Right to portability of data
The data subject shall have the right to receive, either from himself or from a third party, the data processed by automated means on the basis of consent or the execution of a contract;The data subject shall have the right to receive, either from himself or from a third party, the data processed by automated means on the basis of consent or the execution of a contract in a common machine-readable form. Data may only be transmitted directly to another person responsible if this is technically possible.
SSL/TLS encryption
For security reasons, this site is equipped with SSL/TLS encryption to guarantee protection when transmitting confidential content such as orders or requests that you send to us in our capacity as site operator. With encrypted connections, the word "http://" in the browser's address line will be replaced by the word "https://". The browser address line will also show the padlock sign.
With SSL/TLS encryption enabled, data transmitted to and from our company will be protected against unauthorised access by third parties.
3. Data Protection Officer
Our data protection delegate is:
Christoph Boser
E-mail: datenschutz@hiwin.de
Tel: +33 3 88 28 84 80
4. Processing of personal data when visiting our website
Our website uses cookies to make our site more user-friendly and secure. These cookies do not cause damage to your computer or contain viruses. They are small text files that are stored on your computer following your visit to the website.
Most of the cookies we use are "session cookies". They are automatically deleted once your session has ended. Permanent cookies remain on your computer until you delete them. These "permanent cookies" enable us to recognise your computer the next time you visit our site.
You can set your browser to accept or reject cookies. If you disable the use of cookies, it is possible that the use of our website will be restricted.
Cookies whose sole purpose is to enable or facilitate online communication, or which are technically necessary to offer certain functionalities of our website (e.g. shopping basket functionality) are recorded on the basis of art. 6, paragraph 1, lit. f), RGPD.
The site operator has a legitimate interest in processing the data in order to ensure the technically stable and optimised provision of its online services.
Server log files
When you simply visit the website, the following information is automatically transmitted by your browser and stored in log files:
- Operating system and its interface
- Browser language and version
- Query content and URL
- Date and Time of the request to the server
- IP address
These data are not merged with other data sources.
The collection of this data is based on art. 6, paragraph 1, lit. f), RGPD. This data is stored in log files to ensure the functionality of the website. This data is also used to optimise our website and to ensure the security of our information systems, which are technically necessary to display our website and to guarantee its stability and security. The site operator therefore has a legitimate interest in processing this data.
Contact form
The data entered in the contact form is processed and stored in order to respond to the request. This data is never passed on to third parties without your consent.
The legal basis for data processing is the existence of a declaration of consent by the user (art. 6, para. 1, lit. a), RGPD). You have the right to revoke your consent at any time. Simply send us an e-mail. This will not affect the lawfulness of data processing operations carried out up to the revocation.
Your data will be stored until you request its deletion, revoke your consent or until the reason for storing it has ceased to exist (e.g. after your request has been processed).
.Requests by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, the personal data transmitted (name, contact address, content of request), will be stored and processed to respond to your request. This data will never be passed on to third parties without your consent.
The legal basis for any processing of data transmitted in an e-mail, fax or by telephone is Article 6, para. 1, lit. f), RGPD due to the fact that we have a legitimate interest in the efficient processing of requests addressed to us. If the contact by e-mail is for the purpose of concluding a contract, the legal basis for the processing is also Article 6, para. 1, lit. b), RGPD. In all other cases, processing is based on your consent (art. 6, para. 1, lit. a), RGPD).
Your data will be stored until you request its deletion, revoke your consent or until the reason for storing it has ceased to exist (e.g. after your request has been processed).
.Registration on this website
On our website, we offer users the opportunity to register by providing personal data. The data entered for this purpose is processed solely to provide you with the respective offer or service to which you have subscribed.
In the event of major changes to our range or necessary technical modifications, we will use the e-mail address indicated at the time of registration to inform you of our actions.
The data entered during registration is processed exclusively on the basis of your consent (art. 6, para. 1, lit. a), RGPD). Its purpose is to provide certain content or services.
You have the right to revoke your consent at any time. Simply send us an e-mail. This will not affect the lawfulness of data processing operations carried out prior to the revocation.
Data is deleted as soon as it is no longer required for the purpose for which it was collected.
Processing of customer data for contractual purposes
The personal data that you provide to us in connection with the conclusion of a contract relating to the services that we offer, are necessary to enable the resulting contractual relationship to be performed. This data is collected and processed to enable a contract to be fulfilled. The legal basis for the processing is art. 6, para. 1, lit. b), RGPD, which authorises the processing of data for the performance of a contract or pre-contractual measures.
Your data will be stored until you request its deletion, revoke your consent or until the reason for storing it has ceased to exist (after your order has been fulfilled).In addition, your data will be stored for a reasonable period of time after the contract has been fulfilled in order to inform you about our services and offers. This processing is based on art. 6, paragraph 1, lit. f), RGPD. The website operator has a legitimate interest in being able to inform its customers about its offers and services even after the end of the contract.
Transmission of data to third parties as part of the performance of the contract
Your data may be transmitted to third parties where this is necessary as part of the performance of the contract (e.g. carrier, payment provider) No transmission beyond these purposes will take place unless you have explicitly consented.
The legal basis for the processing is art. 6, para. 1, lit. b), RGPD ("performance of a contract or pre-contractual measures").
5. Social networks
Data processing through social networks
Social networks such as Facebook, Xing, etc. can generally analyse your user behaviour in aggregate when you visit their site or a site with content (e.g. "Like" buttons or advertising banners). When visiting our social network presences, several processing operations relating to data protection are triggered. In detail:
The operators of the social networks save the data collected in the form of user profiles and analyse it for advertising, market research and/or website design purposes. Data analysis is used in particular (even for users who are not logged in) to provide you with targeted advertising and to inform other users of the social network of your activities on our site.
Legal basisThe processing of its data is based on art. 6 al. 1 lit. f RGPD. Through our presence on social networks, we offer you the opportunity to interact with these networks and other users, in order to improve our offer and make it more interesting for our users. This is a legitimate interest within the meaning of
Responsibility and exercise of rights
When you visit one of our pages on social networks (e.g. Facebook), we are jointly responsible with the operator of the social network for the data processing operations triggered during this visit. In principle, you can exercise your rights against both us and the operator of the relevant portal (e.g. Facebook).
Storage duration
Data is deleted as soon as it is no longer required for the purpose for which it was collected or you ask us to delete it or revoke your consent
We have no influence on the data collected and how it is processed, and we are not aware of the full extent of data collection, processing purposes and retention periods by social network operators for their own purposes. For more details on this subject, please contact the operators of the social networks directly (e.g. in their privacy statement, see below).
Social networks in detail
Facebook
We have a Facebook profile. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. Facebook has EU-US-Privacy-Shield certification.
With Facebook, we have entered into an agreement on joint responsibility for data processing (Controller Addendum). This agreement defines the data processing operations for which Facebook and we are responsible when you visit our Facebook fan page. You can consult this agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum
Details can be found in the Facebook privacy statement: https://www.facebook.com/about/privacy/
Facebook plugins (Like & Share button)< /strong>
Plugins from the Facebook social network are integrated on our website. On our website, the Facebook plugins show the Facebook logo or the "Like" button ("J'aime"). You can find an overview of the Facebook plugins on the site: https://developers.facebook.com/docs/plugins/?locale=de_DE.
When you visit our website, the plugin creates a direct link between your browser and your Facebook server. Facebook will therefore be informed that you have visited our website with your IP address. If you click on the Facebook "Like" button while logged in to your Facebook account, you can link the content of our site to your Facebook profile. Facebook can thus attribute your visit to our website to your user account. Please note that our company, as the provider of the website, is not informed by Facebook of the content of the data transmitted and that Facebook does not inform us of its use. Further information can be found in Facebook's privacy statement at https://de-de.facebook.com/privacy/explanation.
If you do not want Facebook to be able to attribute your visit to our site to your Facebook user account, please log out.
The use of Facebook plugins is carried out on the basis of Article 6, paragraph 1, lit. f), RGPD. The website operator has a legitimate interest in the best possible visibility in social media.
Plugin from XING
Our website uses the functions of the XING network. XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany is the provider of this service.
A connection with XING's servers is established each time one of the pages on our site that contains XING functions is called up. To the best of our knowledge, no personal data is stored. No IP addresses are saved and there is no evaluation of user behaviour.
The XING plugin is used on the basis of Art. 6, Paragraph 1, lit. f), GDPR. The website operator has a legitimate interest in the best possible visibility in social media. Further information on data protection and the XING Share button can be found in the XING privacy statement on the website: https://www.xing.com/app/share?op=data_protection.
LinkedIn Ads
On our webpage we have integrated a pixel from LinkedIn Corporation. When accessing our website, you are redirected to LinkedIn. The following data may be transmitted:
- ID unique cookie
- Web page consulted
- Date/time
LinkedIn may store a cookie and clear identification on the terminal you are using, and read a cookie already present if necessary. If you are registered with LinkedIn, this data is used to insert targeted advertising for us on LinkedIn pages. For this purpose, the data is also processed by LinkedIn in the USA. Your data will only be transferred to the USA if you have given your express consent. The legal basis for the storage of cookies is the consent given (Art. 6, para. 1, lit. a), GDPR). You can revoke your consent at any time in our cookie settings. Further analysis of the data acquired is the responsibility of LinkedIn.
You can also find out more from LinkedIn at https://fr.linkedin.com/legal/privacy-policy?. If you are connected to LinkedIn, you can deactivate data acquisition at any time under the following link: https://www.linkedin.com/psettings/enhanced-advertising.
6. Analysis and marketing tools
Google Analytics 4
If you have given your consent, our website uses Google Analytics 4, a web analytics service provided by Google LLC,. The responsible authority for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Extent of processing
Google Analytics 4 uses cookies to enable an analysis of how you use our websites. The information acquired by the cookie about your use of this website is generally transmitted to a Google server in the USA, where it is stored. In the case of Google Analytics 4, the anonymisation of IP addresses is activated by default. As a result of IP anonymisation, your IP address will be abbreviated by Google in the Member States of the European Union or in other countries that have signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA, where it will then be abbreviated. According to Google, the IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data. During your visit to the website, your user behaviour is recorded in the form of "events".
Events can be as follows:
- Page views
- First visit to the website
- opening of the session
- Your "clicks", interaction with the web page
- Clicks on external links
- Internal search requests
- Interaction with videos
- Loading files
- Advertisements viewed/clicked on
Also registered are:
- your approximate location
- Your IP address (in abbreviated form)
- Your Internet provider
- The URL referrer (via which website/advertising medium you arrived at this website)
Purpose of processing
Google uses this information to evaluate your use [pseudonym] of the website and to compile reports on website activities. The reports provided by Google Analytics 4 are used to analyse the performance of our website.
Recipients and transfers to third countries
The recipients of the data are/can be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (als Auftragsverarbeiter nach Art. 28 DSGVO)
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that the US authorities will have access to the data stored at Google.
Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6, para. 1, lit. a), GDPR, . You can withdraw your consent at any time with effect for the future by opening the cookie settings https://www.hiwin.de/de/datenschutz#uc-corner-modal-show and changing your choice there. The legality of the data processing that has taken place up to the time of revocation is not affected by the revocation. /p><
Integration of Google-TAG-Manager
For the delivery of online advertising and the integration of external partners, we use Google Tag Manager from the service provider Google Ireland Limited. This enables us to control the delivery of online advertising. This tool does not require cookies, but it does require IP addresses to be transmitted to Google. The use and operation of the tag manager is measured. We have activated the anonymisation of the IP address before it is transmitted to Google. The legal basis for data processing is Article 6(1) sentence 1 point f of the GDPR. The accumulated data will be deleted after a period of two years.
Use of a consent management platform
On our website, we use the consent management platform operated by our commissioned and monitored service provider. This tool is used to monitor consent to the installation of cookies as well as to integrate external service providers and to provide proof of consent. For the purposes of proving consent, we store information about the device you are using, browser information, the anonymised IP address, the date and time of the visit and the opt-in and opt-out data for a period of three years. The legal basis for storing this data is Article 6, paragraph 1, sentence 1, lit. c of the RGPD.
Use of SalesViewer® technology:
We use SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimisation purposes.
To do this, javascript code is used to capture data relating to the company and use of the website. Data entered using this technology is encrypted in a non-recoverable one-way function (known as a "hash"). The data is immediately pseudonymised and is not used to personally identify website visitors.
The data stored by Salesviewer is deleted as soon as it is no longer required for the intended purpose and there is no legal obligation to retain it. Processing is carried out on the basis of the legitimate interests of the website operator (Article 6 paragraph 1 lit.f RGPD)
7. Newsletter
If you wish to subscribe to our newsletter, we will need at least an e-mail address in order to send you the newsletter.
The legal basis for processing data after subscription to the newsletter is Article 6, paragraph 1, point a) RGPD. You can revoke your consent to the newsletter subscription at any time. To this end, a corresponding link appears in each newsletter
Data is deleted as soon as it is no longer required for the purpose for which it was collected. The user's e-mail address is therefore kept for as long as the newsletter subscription is active.
8. Plugins and tools
YouTube
Our website uses plugins from the YouTube website. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the site.
We use YouTube in the advanced data protection mode. According to YouTube, this mode ensures that YouTube does not save any data from visitors to this website before they view the video. However, the transmission of data to YouTube's partners is not necessarily excluded by the advanced data protection mode. Regardless of whether you view a video, YouTube will establish a connection with the Google DoubleClick network.
As soon as you launch a YouTube video on our website, a connection will be established with YouTube's servers. On this occasion, the pages you have visited on our website will be communicated to the YouTube server. If you are logged in to your YouTube account, YouTube will be able to attribute your browsing behaviour directly to your personal profile. Sign out of your YouTube account if you wish to prevent this attribution.
Following the launch of a video, YouTube may also store various session cookies on your terminal. These session cookies provide information about visitors to our site to YouTube. This information is used, among other things, to capture statistics on the video in order to increase user-friendliness and prevent fraud attempts. Session cookies remain on your terminal until you delete them.
Other data processing operations over which we have no control may be triggered after the launch of a YouTube video.
We use YouTube in order to be able to ensure the proper presentation of our internet offering. This is a legitimate interest within the meaning of Article 6, paragraph 1, lit. f), RGPD.
Further information on data protection at YouTube can be found in their privacy statement at: https://policies.google.com/privacy?hl=fr.
Zendesk
We use a cloud-based customer service platform called Zendesk to respond to user enquiries. Zendesk, Inc, 1019 Market Street in San Francisco, CA 94103 USA is the provider of this service.
We use Zendesk to ensure that your requests are processed quickly and efficiently. From a legal point of view, the processing of your data is authorised by the legitimate interest provided for in Article 6(1)(g) GDPR.
As a U.S. provider, Zendesk is enrolled in the EU-U.S. Data Protection Shield, better known as the Privacy Shield, which provides an adequate level of protection for personal data transferred between Europe and the United States. We have also signed a Data Processing Agreement (DPA) with Zendesk. This guarantees that Zendesk will only use user data in accordance with the data protection standards of the European Union and to process requests. It is also guaranteed that no data will be passed on to third parties.
You can send your requests with your e-mail address without giving your name.
In case you do not agree with the processing of your request by Zendesk, you also have the possibility to communicate with us by e-mail, phone or fax.
Further information can be found in the Zendesk privacy statement on the website: https://www.zendesk.de/company/customers-partners/privacy-policy/.
Use of Zopim live chat software
We use the "Zopim" book chat software offered by Zendesk, Inc, ("Zendesk") to improve communication with visitors to our site.
If you have any questions about our products, our website or our company, you can send us a message via the Zopim chat window. You will be able to see if someone is online to answer you immediately. If no-one is available, you can still leave us a message. We will reply to your request as soon as possible. All visitors to our site will be logged with their e-mail address and the page they are currently viewing. The IP address is then anonymised. Zopim uses session cookies and Flash cookies to enable you to personalise the online use of our service.
The information generated by the session cookie about your use of this website (including your anonymized IP address) is sent to a Zendesk server in the United States where it is stored. We store the unique ID number and the time you log in in an encrypted session cookie on your hard drive for the duration of your use. This session cookie allows you to move from page to page on our site without having to log in again on each page. Session cookies are deleted from your computer when you log out. The chats carried out are archived and saved. You can block the saving of session cookies by setting your browser parameters; we would nevertheless draw your attention to the fact that in such a case, you may no longer be able to use all the functions of this website.
You can view details about how your personal data is processed and information about data collection and use at Zopim in the Zendesk privacy notices at https://www.zendesk.com/company/customers-partners/privacy-policy/.