Data Protection Declaration

We are pleased that you are interested in our company. The Management of Haslinger GmbH metal Construction places a very high value on data protection. Using the internet pages of Haslinger GmbH is fundamentally possible without giving any personal data. However, if a data subject wishes to take up any specific services from our company via the internet, it could become necessary to process personal data. If it is necessary to process personal data, and there is no legal basis for such processing, we generally seek the consent of the data subject.

Processing of personal data such as the name, address, e-mail address or telephone number of a data subject is always done according to the General Data Processing Regulations and in agreement with the country-specific data protection regulations applicable to Haslinger GmbH. Our company wishes to inform the public about the type, scope and purpose of the personal data collected, processed and used by us through this data protection statement. Data subjects are also informed of their rights through this data protection statement.

Haslinger GmbH Metal Construction, as the party responsible for processing the data, has implemented many technical and organisation measures to ensure as comprehensive protection as possible to personal data processed via this internet page. Nonetheless, internet-based data transfer can be subject to security gaps so that absolute security cannot be guaranteed. For this reason, every data subject is entitled to transfer personal data to us by a different method, for example, by telephone.

The Haslinger GmbH Metal Construction data protection declaration is based on the European guidelines and regulator used at the time of the introduction of the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be clear and comprehensible to the public as well as to our customers and business partners. To ensure this, we would first like to clarify the terms used.

In this data protection declaration, we use the following terms:

• a)    Personal Data

  Personal data is all information related to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable if the person can directly or indirectly be identified particularly by assignation of an identifying feature such as a name, an identification number, location data, an online identity, or to one or several features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

• b)    Data subject

  A data subject is any identified or identifiable natural person whose personal data is processed by the party responsible for the processing.

• c)    Processing

  Processing is any procedure carried out with or without the assistance of automated procedures or any such sequence of procedures in connection with personal data, such as collection, capture, organisation, filing, saving, adaptation or changing, reading out, calling up, use, revelation through transfer, distribution or making available in any other manner, comparison or linking, restriction, deletion or destruction .

• d)    Restriction of processing

  Restriction of processing is the marking of saved personal data with the aim of restricting its future processing.

• e)    Profiling

  Profiling is any kind of automated processing of personal data which consists of this personal data being used to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects in relation to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, residence, or change of location of this natural person.

• f)     Anonymisation

  Anonymisation is the processing of personal data in a manner in which the personal data can no longer be ascribed to a specific person affected without using other additional data, if this additional information is stored separately and technical and organisational measures have been put in place to ensure that the personal data is not associated with an identified or identifiable person.

• g)    Responsible party or party responsible for the processing

  The responsible party or the part responsible for the processing is the natural person or legal entity, authority, establishment or other office who decides either alone or together with others, on the purpose and means of the processing of the personal data. If these purposes or means are prescribed by Union law or the laws of the member states, then the responsible party or the defined criteria designated by the processing party are provided for under Union law or the law of the member states.

• h)    Contract processor

  The contract processor is a natural person or legal entity, authority, institution or other office who processes the personal data on behalf of the responsible person.

• i)      Recipient

  The recipient is a natural person or legal entity, authority, institution or other office to whom personal data is disclosed, regardless of whether it concerns a third party or not. However, authorities who might receive personal data in the context of a defined investigatory contract according to Union law or the law of the member states, are not considered as recipients.

• j)      Third Party

  A third party is a natural person, or a legal entity, authority, institution or other office other than the data subject, the responsible party, the contract processor and the persons immediately under the responsibility of the responsible person or the contract processor authorised to process the data.

• k)   Consent

The responsible person in the sense of the GDPR , other data protection laws applicable in the European Union and other conditions with the character of a data protection law is:

Haslinger GmbH Metal Construction
Gewerbefeld 2
94501 Aldersbach-Uttigkofen
Represented by
Hr. Karl Haslinger
Fr. Annemarie Haslinger
Telephone: +49 8543 9618-0
Fax: +49 85439618-60

The Haslinger GmbH Metal Construction internet sites use cookies. Cookies are text files which are placed on a computer system by an internet browser and stored.

Many internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a sequence of characters through which internet sites and servers can be associated with the specific internet browser in which the cookie is stored. This enables the internet sites visited and servers to distinguish between the individual browser of the data subject from other internet browsers containing other cookies. A certain internet browser can be recognised and identified via the unique cookie-ID.

By using cookies, Haslinger GmbH Metal Construction can offer the users of these sites more user-friendly services which would not be possible with=out the cookies being set.

The information and offers on our internet site can be optimised to the user by using a cookie. Cookies enables us, as stated above, to recognise returning users on our website. The purpose of this re-recognition is to make using our internet site easier for the users. The user of an internet site that uses cookies will not have to, for example, re-enter access data on every visit because this is taken over by the internet site and the cookie stored on the user's computer system. Another example is the cookie for the shopping basket in the online shop. The online shop remembers the article that a customer placed in the virtual shopping basket via a cookie.

The data subject can prevent the placing of cookies by our internet site at any time by an appropriate setting of the internet browser used and thereby refuse the setting of coolies permanently. In addition, cookies already set can be deleted at any time by an internet browser or other software programs. This is possible in all common internet browsers. If the data subject disables the setting of cookies in the internet browser used, it is possible that not all functions of the internet site can be used to their full extent.

The Haslinger GmbH Metal Construction website captures a series of general data and information on every visit to the internet site by a data subject or an automated system. These general data and information are stored in the server's log files. The (1) types and versions of browser used, (2) the operating system used by the system gaining access, (3) the internet pages from which a system accessing our website is directed (so-called referrer), (4) the sub-websites that are steered to our website via a system gaining access, (5) the date and time the internet page is accessed, (6) an Internet-Protocol-Address (IP-Address), (7) the Internet Service Provider of the system gaining access and (8) other similar data and information that serves to secure against threats in the case of attack on our information technology systems can be collected.

In using this general data and information, Haslinger Gmbh Metal Construction draws no conclusions regarding the data subject. The information is needed to (1) correctly present the content of our internet site, (2) to optimise the content of our internet site and the advertising on it, (3) to be able to ensure the continuing functionality of our information technology systems and the technology and (4) to provide necessary information to law-enforcement authorities for an investigation in the event of a cyber-attack. This anonymised information and data is used by Haslinger GmbH Metal Construction for statistical purposes and also with the aim of increasing data protection and data security in our company to ultimately ensure an optimal protection level for the personal data processed by us. The anonymous data in the server log-files are stored separately from any personal data given by a data subject

On the Haslinger GmbH Metal Construction internet site, users are given the opportunity to subscribe to our company newsletter. The personal data that is transferred to the party responsible for processing in ordering the newsletter is that given in the input screen.

Haslinger GmbH Metal Construction informs its customers and business partners about the company's offers at regular intervals via a newsletter. Our company newsletter can fundamentally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject has registered to receive the newsletter. For legal reasons, a confirmation e-mail is sent to an e-mail address entered by the data subject to receive the newsletter for the first time in a double-opt-in procedure. This confirmation e-mail is to check whether the owner of the e-mail address, as the data subject, has authorised the receipt of the newsletter.

In the registration for the newsletter, we also store Internet Service Provider (ISP) IP address of the of the computer system being used by the data subject at the time of registration and the date and time of the registration. Collection of this data is necessary to be able to trace the (possible) misuse of the e-mail address of a data subject at a later time and thereby serves the legal protection of the party responsible for processing.

The personal data collected in the context of registration for the newsletter will be used solely for sending our newsletter. Additionally, subscribers to the newsletter could receive information by e-mail if this is necessary for operation of the newsletter service or a registration in this respect is needed, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances. Personal data collected within the newsletter service is not transmitted to third parties. Subscriptions to our newsletter can be cancelled by the data subject at any time. The consent to the storing of personal data submitted to us by the data subject for sending the newsletter can be withdrawn at aby time. There is a corresponding link in every newsletter for the purpose of withdrawal of consent. There is also an option to cancel the subscription to the newsletter directly on the internet page of the party responsible for processing, or to inform the party responsible for processing in other ways

The newsletters from Haslinger GmbH Metal Construction contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which is sent in html format to enable a log-file record and log file analysis. This allows a statistical analysis of how successful or otherwise an online marketing campaign has been to be carried out. Using the embedded tracking pixels, Haslinger GmbH Metal Construction can identify whether and when an e-mail das been opened by a data subject and what links in the e-mail were followed by the data subject.

Personal data collected via such tracking pixels contained in the newsletters are stored and analysed by the party responsible for processing to optimise sending of newsletters and adapt the content of future newsletters even better to the interests of the data subject. This personal data is not transmitted to third parties. Data subjects are entitled at any time to withdraw the consent given separately in relation to this via the double opt-in procedure. After a revocation of consent, the personal data is deleted by the party responsible for processing. Haslinger GmbH will automatically regard unsubscription from receipt of the newsletter as withdrawal of consent.

Based on the legal regulations, the Haslinger GmbH internet site contains details allowing for fast contact with our company to be made electronically and immediate communication with us, which also encompasses an electronic mail (e-mail) address. If a data subject makes contact with the party responsible for processing by e-mail or by a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data voluntarily transferred by a data subject to the party responsible for processing is stored for the purpose of processing the enquiry or contacting the data subject. This personal data is not transmitted to third parties.

The party responsible for processing processes and stores the personal data of the data subject only for as long as is necessary to meet the purpose for which it was stored or to the extent provided for by European Guidelines and Regulators or in laws or regulations from another law-making body to which the party responsible for processing is subject.

If the purpose for storage ceases, or the storage period provided for by European guidelines or another authorized lawmaker expires, the personal data is routinely blocked or deleted according to legal regulations

The following data is stored every time a page is called up: the date and time of the access, the page accessed or the name of the file, the quantity of data transmitted and notification of whether the access/call-up was successful. Your IP address is stored anonymously (the last octet is set to 0). This data may be used later for statistical purposes. It is not possible to assign the data to a natural person.

• a)    Right to confirmation

  Every data subject has the right under the European Guideline and Regulator to require from the party responsible for processing a confirmation of whether personal data pertaining to him or her is being processed. If a data subject wishes to exercise this right of confirmation, he or she can contact our data protection officer or another employee of the party responsible for processing. .

• b)    Right to be informed

  Every data subject of the party responsible for processing has the right from the European Guidelines and Regulator to require, at no cost, information from the party responsible for processing on the data about him or her that is stored and to have a copy of this information. Moreover, the European Guidelines and Regulator grant the data subject right to the following information:

  • the purpose of processing
  • the categories of personal data being processed
  • the recipients or categories of recipient to whom the personal data has been, or will be disclosed, especially for recipients in third countries or in international organisations
  • if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria by which this duration will be decided
  • the existence of the right to correction or deletion of personal data relating to him or her or the restriction of processing by the party responsible for processing or a right to deny permission for this processing
  • the existence of a right to complain to a supervisory authority
  • if the personal data is not collected from the data subject: All available information about the origin of the data
  • the existence of automated decisions including profiling according to Article 22 Section 1 and 4 GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effect of such processing for the data subject

  The data subject also has the right to know whether the personal data has been transferred to a third country or an international organisation. If this is the case, then the data subject also has the right to receive information about the appropriate guarantees in connection with the transfer.

  If a data subject wishes to exercise this right to information, he or she can contact our data protection officer or another employee of the party responsible for the processing at any time.

• c)    Right to correction

  Any data subject of processed personal data has the right granted by the European Guideline and Regulator to require immediate rectification of incorrect personal data relating to him or her. The data subject also has the right in consideration of the purpose of processing to require the completion of incomplete data — including via a supplementary declaration.

  If a data subject wishes to exercise this right to information, he or she can contact our data protection officer or another employee of the party responsible for the processing at any time.

• d)    Right to deletion (Right to be forgotten)

  Any data subject of processed personal data has the right granted by the European Guideline and Regulator to require from the party responsible for processing that the personal data concerned is immediately deleted if one of the following reasons applies and if the processing is not required:

  • The personal data was collected or otherwise processed for purposes for which it is no longer needed.
  • The data subject withdraws consent to on which the processing according to Art. 6 Section 1 point a GDPR or Art. 9 Section 2 point a GDPR is based and there is no other legal basis for processing.
  • The data subject objects to processing according to art. 21 Section 1 GDPR, and there are no overriding justified reasons for processing, or the data subject objects to processing according to art. 21 Section. 2 GDPR.
  • The personal data was illegally processed.
  • Deletion of the personal data is required to fulfil a legal obligation under Union law or the law of the member state to which the party responsible for processing is subject.
  • the personal data was collected in relation to information society services offered according to Art. 8 Section. 1 GDPR.

  If one of the reasons named above applies, and a data subject requests the deletion of personal data stored by Haslinger GmbH Metal Construction, he or she can contact our data protection officer or another employee of the party responsible for the processing at any time. The data protection officer of Haslinger GmbH Metal Construction or another employee will initiate the immediate compliance with the request for deletion.

  If the personal data were made public by Haslinger GmbH Metal Construction and our company, as the party responsible for processing under Art. 17 Section 1 GDPR, is obliged to delete the personal data, then Haslinger GmbH Metal Construction will take appropriate measures, including of a technical nature, in consideration of the available technology and the implementation costs, to bring to the attention of other parties responsible for processing who are processing the revealed personal data that the data subject requires the deletion by this other party responsible for processing of all links to this personal data or copies or reproductions of this personal data, insofar as processing is not necessary. The Haslinger GmbH Metal Construction Data Protection Officer or another employee will initiate the necessary steps .

• e)    Right to restriction of the processing

  Any data subject affected by processing of personal data is granted the right by the European guidelines and Regulator to require restriction of processing of the data by the party responsible for processing if one of the following conditions is met:

  • The accuracy of the personal data is disputed by the data subject, in this case for a duration that enables the party responsible for processing to check the personal data.
  • The processing is illegal, the data subject refuses deletion of the data and requires instead restriction of the use of the personal data.
  • The party responsible for processing no longer needs the personal data for the purposes of processing, the data subject however needs it for making, exercising or defending legal claims.
  • The data subject has objected to processing according to Art. 21 Section. 1 GDPR and it is not yet established whether the legitimate grounds of the party responsible for processing outweigh those of the data subject.

  If one of the conditions named above applies, and the data subject would like to exercise the right to restrict the personal data stored by Haslinger GmbH Metal Construction, he or she can contact the data protection officer or another employee of the party responsible for processing at any time. The Haslinger GmbH Metal Construction Data Protection Officer or another employee will initiate restriction of processing.

• f)     Right to transferability of data

  Each data subject of processed personal data is granted the right by the European guidelines and Regulator to receive the personal data relating to him or her provided by the data subject to the party responsible for processing in a structured, common and machine-readable format. The data subject also has the right to transfer this data to another party responsible for processing without hindrance from the party responsible for processing to whom the personal data was supplied, so long as the processing is based on consent according to Art. 6 Section 1 point a GDPR or Art. 9 Sect. 2 Point a GDPR or a contract according to Art. 6 Sect. 1 Point b GDPR and the processing takes place via automated processes, if the processing is not required for carrying out a task which is in the public interest or is in the exercise of a public power transferred to the party responsible for processing.

  Furthermore, the data subject has the right to in the exercise of his or her right to data transferability under Art. 20 Sect. 1 GDPR to have the personal data transferred from one party responsible for processing to another if this is technically possible and it does not impact the rights and liberties of other persons.

  To exercise the right of data transferability, the data subject can contact the data protection officer of Haslinger GmbH Metal Construction or another employee.

• g)    Right to refusal

  Each data subject of processed personal data is granted the right by the European guidelines and Regulator for reasons arising from his or her situation, to object at any time to the processing of personal data relating to him or her happening on the basis of Art. 6 Section. 1 point e or f of the GDPR. This also applies to profiling based on these conditions.

  Haslinger GmbH Metal Construction will no longer process personal data in the case of an objection unless we can demonstrate absolutely legitimate reasons for the processing, which override the interests, rights and liberties of the data subject, or the processing is for the making, exercise or defence of legal claims.

  If Haslinger GmbH Metal Construction processes personal data to operate direct advertising, the data subject has the right at any time to object to processing of personal data for the purposes of this kind of advertising. This also applies to profiling if this is connected to direct advertising. If the data subject objects to Haslinger GmbH Metal Construction processing personal data for purposes of direct advertising, then Haslinger GmbH Metal Construction will no longer use the data for this purpose.

  The data subject also has the right for reasons arising from his or her particular situation, to object to processing of personal data at Haslinger GmbH Metal Construction for scientific or historical research purposes or for statistical purposes according to Art. 89 Sect. 1 of GDPR, unless such processing is required for the fulfilment of a task in the public interest.

  If a data subject wishes to exercise this right to information, he or she can contact the Haslinger GmbH Metal Construction data protection officer directly or another employee. The data subject is also at liberty to exercise the right of objection in connection with the use of services from information companies regardless of Guideline 2002/58/EG, by automated processes in which technical specifications are used.

• h) Automated decisions in individual cases including profiling

  Each data subject of processed personal data is granted the right by the European guidelines and Regulator to not be subjected to a decision making process purely by automated means, including profiling, which gives rise to legal effects or similarly significantly negatively affects him or her if the decision (1) is not required for the agreement or fulfilment of a contract between the data subject and the party responsible for processing, or (2) is permissible under legal stipulations of the Union or of member states to which the party responsible for processing is subject and these legal stipulation contain appropriate measures for guaranteeing rights and freedoms as well as legitimate interests of the data subject or (3) is done with the express consent of the data subject.

  If the decision is (1) necessary for the agreement or fulfilment of a contract between the data subject and the party responsible for processing or (2) is made with the express consent of the data subject, Haslinger GmbH Metal Construction will take appropriate measures to guarantee the rights and freedoms and legitimate interests of the data subject, which include as a minimum the right to obtain the intervention of a person on the part of the party responsible for processing, to present his or her own case and to dispute a decision.

  If a data subject wishes to exercise this right in relation to automated decision making, he or she can contact our data protection officer directly or another employee of the party responsible for processing at any time.

• i)      Right to withdraw a data protection law consent

  Each data subject of processed personal data is granted the right by the European guidelines and Regulator to withdraw consent to the processing of personal data at any time.

The party responsible for processing collects and processes personal data from applicants for the purpose of processing the application procedure. Processing may also be electronic. This is especially the case if the applicant has submitted corresponding application documents to the party responsible for processing electronically, for example, by e-mail or via a web form found on the internet site. If the party responsible for processing enters into an employment contract with the applicant, the data submitted is stored for the purpose of processing the employment contract in observance of the legal regulations. If the party responsible for processing does not enter into an employment contract with the applicant, the application documents are automatically deleted two months after the declination decision is made known, unless any other legitimate interest of the party responsible for processing do not conflict with the deletion. Another legitimate interest in this context would be, for example, the duty to keep evidence in a process under the Equal Opportunities Act (AGG).

External scripts, Google Fonts are used on these internet pages. Google Fonts is a Google Inc. service. (“Google”). The inclusion of this web font occurs via a server call-up, generally a Google server in the USA. Through this, information of which of our internet pages you have visited is passed to the server. The IP address of the browser of the user's end-device of the visitor to these web pages is also stored by Google. You can find more information in the Google data protection notice which you can access here:
www.google.com/fonts#AboutPlace:about, www.google.com/policies/privacy/

Google Maps (API) by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) is used in the Haslinger GmbH Metal Construction web site. Google Maps is a web service for presentation of interactive maps to show geographical information visually. Immediately on accessing the sub-pages in which the Google Maps map is included, information about the use of the Haslinger GmbH Metal Construction website (such as the IP address of the user) is transferred to servers in the USA and stored there.
Google could pass this information to third parties if this is legally stipulated or if third parties process this data on behalf of Google. Google will not link the user's IP-address to other Google data. However, it would still be technically possible for Google to use the user data obtained through use of Google Maps to identify the user, create personality profiles from that or process and use it for other purposes over which Haslinger GmbH Metal Construction does not, and cannot, have any influence.
The Google conditions of use can be read at www.google.de/intl/de/policies/terms/regional.html The additional conditions of use for Google Maps can be seen at https://www.google.com/intl/de_US/help/terms_maps.html. Comprehensive information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy“) : http://www.google.de/intl/de/policies/privacy/
If the user does not agree to the future transmission of his or her data to Google while using Google Maps, there is an option to completely deactivate the Google Maps service by the user switching off the JavaScript application in his or her browser. Google Maps and thus the map display on the Haslinger GmbH Metal Construction website cannot then be used.

This website usesMatomo, an open-source solution for web-analysis. Matomo uses so-called "Cookies" - Text files that are stored on your computer and allow statistical analysis of the use of the website. The data is anonymised and stored on a German server belonging to the provider. The IP-address is anonymised before it is stored and cannot be used to identify an individual person.

The data stored by Matomo is not linked to other data sources or passed on to third parties.

You can prevent the installation of cookies with an appropriate setting on your browser software. However, we advise you that if you do this, you may not be able to use the full functionality of this website.

Open tracking administration"

Art. 6 I point. a GDPR serves our company as the legal basis for processing procedures in which we seek consent for a specific processing purpose. If the processing of personal data is necessary for the fulfilment of a contract for which the data subject is a contracting partner, as would be the case for example in processing procedures for a delivery of goods or the provision of another service or return service, then the processing is based on Art. 6 I point. b GDPR. The same applies to processing procedures that are necessary for carrying out pre-contractual measures, for example, in respect of enquiries about our products or services. If our company is subject to a legal duty which requires processing of personal data, such as fulfilling tax obligations, then the processing is based on Art. 6 I point. c GDPR. In rare cases, processing of personal data could become necessary, to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to the factory were to be injured as thus his or her name, age, health insurance company or other vital information needed to be passed to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I point. d GDPR. Finally, processing procedures could be based Art. 6 I point. f GDPR. Processing procedures not covered by any of the previously named legal bases could be based on this if the processing is necessary safeguards a legitimate interest of our company or a third party, unless this is outweighed by the interests, fundamental rights and fundamental freedoms of the data subject. Such processing procedures would be permitted as they were specifically mentioned by the European lawmakers. It represented insofar the opinion that a legitimate interest could be assumed if the data subject is a customer of the party responsible for processing (Recital 47 Section 2 GDPR).

If the processing of personal data is based on Article 6, I point f GDPR, our legitimate interest is carrying out our business activities to the benefit of the well-being of all our employees and our shareholders.

The criterion for the duration of storage of personal data is the legal retention period in each case. After the period had expired, the data is routinely deleted if it is no longer required for fulfilment of a contract or starting a contract.

Necessity for completion of a contract; Obligation of the data subject to supply the personal data; possible consequences of non-submission

We inform you that the provision of personal data is sometimes a legal requirement (e.g., tax regulations) or can arise from contractual regulations (e.g., details of the contract partner). Sometimes it might be necessary for a contract agreement that a data subject makes personal data available to us which must subsequently be processed. The data subject is obliged, for example, to submit personal data to us if our company is entering into a contract with him or her. Non-disclosure of the personal data would have the consequence that the contract with the data subject could not be signed. The data subject would have to contact our data protection officer before providing personal data. Our data protection officer briefs the data subject in the individual case of whether the provision of personal data is required by law or contractually prescribed, or is necessary for closure of the contract, whether there is an obligation to provide the personal data, and what consequences not providing the personal data would have.

As a conscientious company, we do not carry out automated decision making or profiling.

This data protection statement was created by the data protection statement generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH [German Data Protection Society], which acts as External Data Protection Officer Dachau, in cooperation with RC GmbH, which recyclesused computers and the law company WILDE BEUGER SOLMECKE | Lawyers.