Thank you for your visit to our website and for your interest in the subject of data protection. Please read the following information to find out what personal data we collect and when as well as how we use these data.
The data controller pursuant to Article 4(7) EU General Data Protection Regulation (GDPR) is
HCD Consulting GmbH
82266 Inning am Ammersee
Tel.: +49 89 21 53 69 20
Company directors: Alexander Jauns, Matthias Lutz
Collecting, processing and using personal data
The legal basis for collecting, storing and processing personal data can be found, in particular, in the General Data Protection Regulation (GDPR) and the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). Personal data are information referring to an identified or identifiable natural person (Article 4(1) GDPR). These include, in particular, names, address data, telephone numbers or e-mail addresses, whereby information concerning preferences, memberships or, for example, websites visited may also constitute personal data.
Getting in touch
If you contact us (e.g. by e-mail or using our contact form), the data you transfer will be stored for the purpose of handling your enquiry and any follow-up questions. The legal basis for such processing is the necessity to take steps prior to entering into a contract pursuant to Article 6(1 b) GDPR. We delete the data created in this context once storage is no longer necessary, or we restrict processing if there are statutory retention obligations.
You may claim the following rights vis-à-vis our company concerning your personal data:
- Right to access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You also have the right to lodge a complaint with a data supervisory authority concerning our processing of your personal data.
Withdrawal of consents and objection to the processing of your data
We hereby draw your attention to the fact that you can withdraw any consent given to process your data at any time. However, withdrawal of your consent will not influence data processing that has already occurred but will only have a future effect.
Furthermore, you can object to processing of your personal data for the purposes of marketing and data analysis at any time. You can inform us of your objection to marketing using the above-mentioned contact details.
Using our online shop
If you would like to request an offer for our products via our webshop, it is necessary to provide some personal data. We need this information to handle and respond to your enquiry. The mandatory details required to answer your enquiry are marked separately; further details are voluntary. We use your data exclusively for the purpose of answering your enquiry and handling any contract that may come about. The legal basis for this is Article 6(1 b) GDPR.
If a contract is entered into, we are obliged by provisions under commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years. From that point on, we will only retain such data that are necessary for us to meet our legal obligations.
The enquiry and ordering procedures will be encrypted to prevent unauthorised access to your personal data by third parties.
Transfer to a third party
We will transfer your data to third parties if this is necessary for the performance of contracts (e.g. address data to our logistics providers) or for handling payments. The legal basis for the transfer of data is the necessity for the performance of a contract pursuant to Article 6(1 b) GDPR. Personal data will not be transferred to third parties for marketing or advertising purposes without your express consent.
Server log files
Each time you access our website, our hosting provider stores information in a log file. These log files contain information on the files accessed, status codes, time stamps and system information. These data are not personal; they do not enable identification of specific persons.
IP addresses are also stored in log files. We cannot easily identify them as belonging to a specific person.
If you would like to view our website, we collect the above-mentioned data as they are technically necessary for us to show you our website and ensure stability and security. The legal basis for such processing is the necessity to pursue our legitimate interests pursuant to Article 6(1 f) GDPR.
Our website uses so-called cookies. These are small files that are downloaded to your access device (computer, smartphone, tablet, etc.) and stored by your browser. They serve to increase user-friendliness, effectiveness and security of our website. In addition, cookies can be used to collect statistical data on the use of the website and to analyse our online services. Cookies do not contain viruses and do not harm your access device.
You can also block the storage of cookies in your browser in general. Most web browsers allow some control over most cookies through browser settings. For more information about blocking cookies, visit http://www.allaboutCookies.org. However, please be aware that certain features of our website may not be available to you after the blocking has been completed.
Web analysis with Google (Universal) Analytics
Our website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited (www.google.de). Google (Universal) Analytics enables analysis of the use of the website by our users. Cookies are stored on your computer for this purpose. The information generated concerning your use of this website will normally be transferred to a Google server in the USA where it will then be stored. By activating IP anonymization on this website, the IP address will be truncated before being transferred within the Member States of the European Union or in other states that have signed the agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. The anonymized IP address transferred by your browser for Google Analytics will not be linked to other Google data.
We use Google Analytics so that we can analyse and regularly improve use of our website. The statistics we compile help us to improve our offering and make it more interesting for you as a user. In respect of those exceptional cases in which personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can prevent Google’s cookie generated collection of data referring to your use of the website (including your IP address), plus processing of the data by Google, by downloading and installing the browser-plugin, which you can find here: http://tools.google.com/dlpage/gaoptout?hl=de
The legal basis for processing is the necessity to pursue our legitimate interests pursuant to Article 6(1 f) GDPR, namely our interest in the statistical evaluation of our users‘ usage of the website.
Conversion tracking with Google DoubleClick
By using our website you consent to the processing of the data collected by Google concerning you and to the form of data processing described above as well as to the stated purpose. You can prevent the storage of cookies by adjusting the settings of your browser software as described above under „Cookies“. You can also prevent Google’s cookie generated collection of data referring to your use of the websites plus processing of the data by Google by downloading and installing the browser-plugin, which you can find here under the item „DoubleClick deactivation extension“ or you can deactivate the option „Personalized advertising“. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising Alliance website by clicking the following link.
Our website also uses Google’s Remarketing service supplied by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Remarketing enables us to show targeted advertisements to users who have visited our website in the past. The aim here is, as far as possible, to show each user advertising for products he or she is actually interested in. The legal basis is Article 6(1 f) GDPR. Cookies are used for this evaluation. This enables Google to recognise our visitors as soon as they access websites within Google’s advertising network. By its own account, Google collects no personal data in this process. You can deactivate the Remarketing function by performing the appropriate settings at http://www.google.com/settings/ads.
Embedding of Youtube videos
We have embedded YouTube videos on our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are embedded in „extended data protection mode“, which means that no data concerning you as a user is transferred to YouTube if you do not play the videos. The data listed below is only transferred if you play the videos. We have no influence on this data transfer.
When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. The occurs regardless of whether YouTube provides a user account through which you have logged in or whether no user account exists. If you are logged in with Google, your data will be directly associated with your account. If do not wish association with your YouTube profile, you must log out before activating the button. YouTube will store your data as user profiles and use it for advertising or market research purposes or for presenting its website according to your needs. You have the right to object to the creation of these user profiles but you must address your objection to YouTube.
Google Web Fonts
We use Google Web Fonts on our website to ensure the uniform display of fonts. The required Web Fonts are loaded by your browser when you access the website so that texts and fonts are displayed correctly. Your browser establishes a connection to the Google servers, whereby Google learns that a device with your IP address has visited our website. The use of Google Web Fonts and the associated data processing serves our interest of having an attractive website. The legal basis is Article 6(1 f) GDPR.
If your browser does not support the display of Web Fonts, a default font is used instead.
Within our online offer so-called ‘Facebook pixel’ of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, and if You are a EU resident by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland (‘Facebook’).
This allows us to track the behavior of site visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimize future advertising measures.
The data collected about You are anonymous for us and they do not give any indication of the personal identities of the users. However, the data is stored and processed by Facebook so that a connection to a particular user profile is possible. That means, the usage profiles based on user profiles can be created. The processing of the generated data by Facebook occurs within the framework of the Data Policy of Facebook. Therefore, You can receive further information about operation of remarketing pixels and about display of Facebook ads in the Data Policy of Facebook https://www.facebook.com/about/privacy/. You may allow Facebook and its partners to serve ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
The legal basis for obtaining consent is Art. 6 para. 1 lit. f DSGVO
You may opt out of Facebook pixel collection and use of your information to display Facebook ads. To control what types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based ads: https://www.facebook.com/settings?tab=ads.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Links to other websites
Our online service may include links to other websites. We have no influence regarding whether their operators comply with data protection provisions.