Controller for data collection
The controller responsible for the collection and processing of your personal data in accord-ance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) (hereinafter referred to as “GDPR”) is:
Am Kupfergraben 6
Personal data and processing of said data
Personal data provided by the user
We collect, process and store your personal data when you access our Website.
In order to enable effective use of the Website, Hogertz collects data about your use of our Website by means of so-called “website log files” (hereinafter referred to as “Log Files”). Each attempt to access our Website is therefore logged.
The Log Files generated from this process contain the following data:
- Your IP address;
- Time, type and number of requests;
- Name and URL of the requested file;
- Website from which access is requested (referrer-URL);
- Your browser type and other similar information, where applicable.
The collection and processing of data stored in Log Files is required for anonymised analysis for statistical purposes, i.e. to analyse your use of our Website and ensure continuous im-provement of our services. Such data are not attributable to you as an identified person. These data will not be merged with other data sources.
If you require assistance with regard to using our Website and the content provided on it, you can contact us directly by using our contact form. By doing so, we will collect, process and save your name and your email address. We will only collect, process and save your name and your email address to the extent required in order to process your query and ensure the security of our systems.
Processing of personal data by third parties
Hogertz works in partnership with the following external service provider in order to pro-cess your data in a secure and efficient manner.
Service provider is webspezi.com, Breiter Berg 16, 21502 Geesthacht, Germany. All data centres used are located in Germany and are certified according to “ISO 27001”. “ISO 27001″ is an internationally recognized standard for information security that takes into ac-count aspects such as data security, data protection and reliability.
Purpose of the collection, processing and storage of your personal data
We will only collect, process and store your personal data to the extent required from a tech-nical perspective in order to provide our Website. By collecting, processing and storing your personal data, we can therefore ensure the security of our Website, and by doing so we can also ensure that you are able to access our content efficiently and conveniently. In order to be able to adapt our Website in line with the constantly changing technical environment and security framework, we will also use your personal data to ensure the continuous improve-ment of our Website.
Duration of storage and erasure of personal data
Your data stored in Log Files will be erased if such data are no longer required to fulfil the pur-pose for which they were stored. As a general rule, such data will be erased after 14 days.
Personal data collected and processed by us in connection with your use of the contact form on our Website will be stored for as long as it is necessary to process your enquiry and will subsequently immediately be deleted on our servers.
Your personal data will also be erased after you have revoked your consent for such storage, where applicable.
Such erasure does not include data, the rectification, blocking or erasure of which run contra-ry to legal, statutory or contractual retention periods, as well as data required for the estab-lishment, content-related creation or amendment of a contractual relationship with us, or data which must be stored for billing purposes.
Legal basis for processing your personal data
Your personal data will be collected, processed and stored in accordance with GDPR provi-sions as well as in accordance with the relevant provisions under EU law and national law.
Where the collection, processing or storage of such data are necessary for the performance of a contract to which you are party, or in order to take steps at your request prior to entering into a contract, Article 6 (1) (b) GDPR will form the legal basis for the collection, processing and storage of your personal data.
Where the collection, processing or storage of such data are necessary for the performance of a legal obligation under Union law or national statutory provisions which Hogertz is subject to, Article 6 (1) (c) GDPR will form the legal basis for the collection, processing and storage of your personal data.
If the collection, processing and storage of your personal data is necessary to preserve legit-imate interests of Hogertz or a third party and such interests are not outweighed by your interests or fundamental rights and freedoms, Article 6 (1) (f) GDPR forms the legal basis for the collection, processing and storage of your personal data.
In cases where none of these statutory provisions are applicable, the collection, processing and storage of your personal data will only be undertaken subject to your separate consent. Where necessary, you can provide your explicit consent when visiting the services provided by Hogertz on our Website by way of a brief separate electronic confirmation. Where Hogertz obtains your separate consent for the processing of personal data, Article 6 (1) (f) GDPR forms the legal basis for the collection, processing and storage of your personal data.
Your rights regarding the protection of your personal data
You shall be entitled to the following rights, to the extent of the respective provision, in ac-cordance with GDPR provisions as well as in accordance with the relevant provisions under EU law and national law:
Right of access
You can request confirmation from Hogertz as to whether personal data concerning you are collected, processed and stored by Hogertz. If such data are collected, processed or stored, you may request information from Hogertz about the purposes to which the per-sonal data are being collected and processed and the planned duration for which the personal data concerning you are due to be stored or, if this cannot be specified, the criteria for defin-ing the storage period.
Please send your written request for information to:
Am Kupfergraben 6
Right to rectification and completion
You are entitled to request that Hogertz rectifies and/or completes your personal data if the collected and processed personal data are incorrect or incomplete.
Right to restriction of processing
You can request the processing of personal data concerning you to be restricted.
Right to erasure
You can request that Hogertz deletes your personal data immediately. Hogertz is then obliged to delete such data immediately if the personal data concerning you are no longer required to achieve the purposes for which they were collected or otherwise processed, or you have withdrawn your consent on the basis of which the data were collected, processed or stored. The right to erasure will not apply if the processing of such data is necessary to fulfil a statutory obligation demanding the collection and processing of data according to Union law or Member State law which Hogertz is subject to, and if the collection and processing of such data is necessary for the assertion, exercising or defence of legal claims.
Right to data portability
You have the right to receive personal data concerning you which you have provided to us as the controller for data collection in a structured, commonly used and machine-readable for-mat. You also have the right to transmit such data to another controller without hindrance from the controller to whom the personal data were provided.
Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the collection or processing of personal data concerning you that is performed in accordance with Article 6 (1) (f) GDPR.
Right to withdraw declaration of consent
If you have given us your consent to collect and process your personal data, you have the right to withdraw your declaration of consent under data protection law at any time.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Mem-ber State of your habitual residence, your place of work or the place of the alleged infringe-ment, if you believe that the collection and processing of personal data concerning you is un-lawful.
Last updated: April 2019