Thank you for your visit to our website and for your interest in the subject of data protection. Please read the following information to find out what personal data we collect and when as well as how we use these data.
The data controller pursuant to Article 4(7) EU General Data Protection Regulation (GDPR) is
HCD Consulting GmbH
82266 Inning am Ammersee
Tel.: +49 89 215 36 92-0
Company directors: Alexander Jauns, Matthias Lutz
Collecting, processing and using personal data
The legal basis for collecting, storing and processing personal data can be found, in particular, in the General Data Protection Regulation (GDPR) and the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). Personal data are information referring to an identified or identifiable natural person (Article 4(1) GDPR). These include, in particular, names, address data, telephone numbers or e-mail addresses, whereby information concerning preferences, memberships or, for example, websites visited may also constitute personal data.
Getting in touch
If you contact us (e.g. by e-mail or using our contact form), the data you transfer will be stored for the purpose of handling your enquiry and any follow-up questions. The legal basis for such processing is the necessity to take steps prior to entering into a contract pursuant to Article 6(1 b) GDPR. We delete the data created in this context once storage is no longer necessary, or we restrict processing if there are statutory retention obligations.
You may claim the following rights vis-à-vis our company concerning your personal data:
• Right to acess,
• Rights to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.
You also have the right to lodge a complaint with a data supervisory authority concerning our processing of your personal data.
Withdrawal of consents and objection to the processing of your data
We hereby draw your attention to the fact that you can withdraw any consent given to process your data at any time. However, withdrawal of your consent will not influence data processing that has already occurred but will only have a future effect.
Furthermore, you can object to processing of your personal data for the purposes of marketing and data analysis at any time. You can inform us of your objection to marketing using the above-mentioned contact details.
Using our online shop
If you would like to request an offer for our products via our webshop, it is necessary to provide some personal data. We need this information to handle and respond to your enquiry. The mandatory details required to answer your enquiry are marked separately; further details are voluntary. We use your data exclusively for the purpose of answering your enquiry and handling any contract that may come about. The legal basis for this is Article 6(1 b) GDPR.
If a contract is entered into, we are obliged by provisions under commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years. From that point on, we will only retain such data that are necessary for us to meet our legal obligations.
The enquiry and ordering procedures will be encrypted to prevent unauthorised access to your personal data by third parties.
Transfer to a third party
We will transfer your data to third parties if this is necessary for the performance of contracts (e.g. address data to our logistics providers) or for handling payments. The legal basis for the transfer of data is the necessity for the performance of a contract pursuant to Article 6(1 b) GDPR. Personal data will not be transferred to third parties for marketing or advertising purposes without your express consent.
Server Log Files
Each time you access our website, our hosting provider stores information in a log file. These log files contain information on the files accessed, status codes, time stamps and system information. These data are not personal; they do not enable identification of specific persons.
IP addresses are also stored in log files. We cannot easily identify them as belonging to a specific person.
If you would like to view our website, we collect the above-mentioned data as they are technically necessary for us to show you our website and ensure stability and security. The legal basis for such processing is the necessity to pursue our legitimate interests pursuant to Article 6(1 f) GDPR.
Our website uses so-called cookies. These are small data files that are placed on your access device (computer, smartphone, tablet or the like) and stored by your browser. Their purpose is to improve the user-friendliness, effectiveness and security of our website. Furthermore, cookies can be used to collect statistical data on use of the website and they can be analysed to improve our offering. Cookies do not contain any viruses and do not cause any damage to your access device.
You can block the storage of cookies in your browser. Most web browsers allow a certain amount of control over most cookies by means of the browser settings. You will find further information on blocking cookies at http://www.allaboutCookies.org. We would like to draw your attention to the fact that certain functions on our website may not be available or may only be available to a limited extent after blocking.
- Chrome: https://support.google.com/chrome/answer/95647?hl=de
- Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE
- Safari auf IOS: https://support.apple.com/de-de/HT201265
- Opera: https://help.opera.com/de/latest/web-preferences/#manageCookies
Web analysis with Google (Universal) Analytics
Our website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited (www.google.de). Google (Universal) Analytics enables analysis of the use of the website by our users. Cookies are stored on your computer for this purpose. The information generated concerning your use of this website will normally be transferred to a Google server in the USA where it will then be stored. By activating IP anonymization on this website, the IP address will be truncated before being transferred within the Member States of the European Union or in other states that have signed the agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. The anonymized IP address transferred by your browser for Google Analytics will not be linked to other Google data.
We use Google Analytics so that we can analyse and regularly improve use of our website. The statistics we compile help us to improve our offering and make it more interesting for you as a user. In respect of those exceptional cases in which personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can prevent Google’s cookie generated collection of data referring to your use of the website (including your IP address), plus processing of the data by Google, by downloading and installing the browser-plugin, which you can find here: http://tools.google.com/dlpage/gaoptout?hl=de
The legal basis for processing is the necessity to pursue our legitimate interests pursuant to Article 6(1 f) GDPR, namely our interest in the statistical evaluation of our users‘ usage of the website.
Conversion tracking with Google DoubleClick
By using our website you consent to the processing of the data collected by Google concerning you and to the form of data processing described above as well as to the stated purpose. You can prevent the storage of cookies by adjusting the settings of your browser software as described above under „Cookies“. You can also prevent Google’s cookie generated collection of data referring to your use of the websites plus processing of the data by Google by downloading and installing the browser-plugin, which you can find here under the item „DoubleClick deactivation extension“ or you can deactivate the option „Personalized advertising“. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising Alliance website by clicking the following link.
Our website also uses Google’s Remarketing service supplied by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Remarketing enables us to show targeted advertisements to users who have visited our website in the past. The aim here is, as far as possible, to show each user advertising for products he or she is actually interested in. The legal basis is Article 6(1 f) GDPR. Cookies are used for this evaluation. This enables Google to recognise our visitors as soon as they access websites within Google’s advertising network. By its own account, Google collects no personal data in this process. You can deactivate the Remarketing function by performing the appropriate settings at http://www.google.com/settings/ads.
Embedding of YouTube videos
We have embedded YouTube videos on our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are embedded in „extended data protection mode“, which means that no data concerning you as a user is transferred to YouTube if you do not play the videos. The data listed below is only transferred if you play the videos. We have no influence on this data transfer.
When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. The occurs regardless of whether YouTube provides a user account through which you have logged in or whether no user account exists. If you are logged in with Google, your data will be directly associated with your account. If do not wish association with your YouTube profile, you must log out before activating the button. YouTube will store your data as user profiles and use it for advertising or market research purposes or for presenting its website according to your needs. You have the right to object to the creation of these user profiles but you must address your objection to YouTube.
Google Web Fonts
We use Google Web Fonts on our website to ensure the uniform display of fonts. The required Web Fonts are loaded by your browser when you access the website so that texts and fonts are displayed correctly. Your browser establishes a connection to the Google servers, whereby Google learns that a device with your IP address has visited our website. The use of Google Web Fonts and the associated data processing serves our interest of having an attractive website. The legal basis is Article 6(1 f) GDPR.
If your browser does not support the display of Web Fonts, a default font is used instead.
We use the “visitor action pixels” from Facebook Inc (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website.
This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads.
Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Links to other websites
Our online service may include links to other websites. We have no influence regarding whether their operators comply with data protection provisions.