Thank you very much for your interest in the websites and companies of the HYDAC company group. Protecting your personal data is a priority for us. Personal data refers to all information related to an identified or identifiable natural person (hereinafter: data). For example, this includes the IP address, address, name, e-mail address or telephone number.
We only ever collect these data to the extent technically required. In the following privacy policy, we would like to inform you which data we process, and why we process them during your visit to our websites.
Pursuant to Art. 4 No. 7 of GDPR and other national data privacy laws of the Member States and other data privacy provisions, the data controller is
HYDAC Verwaltung GmbH
66273 Sulzbach/Saar
Hirschbachstraße 4
Postfach 12 51
Germany
Phone: +49 (0) 68 97 509-01
E-mail: info@hydac.com
Website: https://www.hydac.com
If you have questions on data processing, please contact the data protection officer.
The joint data protection officer of the companies in the HYDAC company group can be reached at:
HYDAC Verwaltung GmbH
Central Data Protection Department
Industriestrasse
66280 Sulzbach/Saar
Germany
Phone: +49 (0) 68 97 / 509 9500
E-mail: datenschutz(at)hydac.com
We only process data of our website users where this is required to provide a functional website and the content and services. User data are processed in accordance with the legal foundations, and only for the purposes we define in advance.
The companies in the HYDAC company group process data in accordance with the provisions of GDPR.
Where we obtain consent from the data subject for data processing, Art. 6 Par. 1 Cl. 1 a of GDPR serves as the legal foundation.
When data must be processed to fulfil a contract, in which the data subject is a contract party, Art. 6 Par. 1 Cl. 1 b of GDPR is the legal foundation. This is also the case for processing required to perform pre-contractual measures.
Where data must be processed to fulfil a legal obligation to which our company is subject, Art. 6 Par. 1 Cl. 1 c of GDPR serves as the legal foundation.
If the data processing is required to safeguard a legitimate interest of our companies or a third party, and if the data subject’s interests, fundamental rights and fundamental freedoms do not have priority over the aforementioned interest, Art. 6 Par. 1 Cl. 1 f of GDPR serves as a legal foundation for processing.
The data subject’s data shall be deleted or processing of the data shall be restricted as soon as the purpose of processing no longer applies. The data can be stored beyond that if prescribed by European or national legislation in Union Regulations, laws or other rules to which the data controller is subject. Data processing is also restricted or data are also deleted when the storage period prescribed by the abovementioned legislation expires, unless data must be stored for a longer period for contract conclusion or contract fulfilment.
For purely informative use of the website, i.e. if you do not want to register or send us information in other ways, we only collect the data your browser sends to our server. If you want to view our website, we collect the following data, which we require technically to display our website and ensure its stability and security.
The following data are collected:
The data are also stored in our system’s log files. This data are not stored together with other data of the user.
The legal foundation for the data collected based on requirements and for temporary storage of the data is Art. 6 Par. 1 Cl. 1 f of GDPR.
The system must collect and store data temporarily to facilitate delivery of the website to the user’s computer.
These purposes represent our legitimate interest in data processing in accordance with
Art. 6 Par. 1 Cl. 1 f of GDPR.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. Where data are collected to provide the website, this occurs when the browser is closed.
The data are recorded to provide the website, and storage of data in log files is essential to operate the website. Accordingly, the user has no objection options in accordance with Art. 21 of GDPR.
We use cookies on various pages to facilitate your visit to our website and the use of certain functions. Cookies are small text files, which your browser can save on your computer. Based on your requirements, you can configure your browser to inform you when cookies are set, to allow you to make case-by-case decisions on whether to accept them, or to always accept or reject cookies. Cookies can be used for various purposes, e.g. to detect whether your PC has already been connected to a website (permanent cookies) or to save the last items viewed (session cookies).
The following cookies are collected when the website is opened:
The following cookies are only collected when certain functions are used:
We use cookies to offer you a more comfortable user experience. Some elements of our website require the browser that accesses it to be identifiable even after a page change.
Among other things, the following data are stored and transmitted in the cookies:
###onetrust-cookie-list###
Our website also uses cookies that allow us to analyse the users surfing behaviour (see Point X on this).
The legal foundation for processing the data using technically necessary cookies is Art. 6 Par. 1 Cl. 1 f of GDPR.
The legal foundation for processing the data using cookies for analytics purposes with relevant consent from the user is Art. 6 Par. 1 Cl. 1 a of GDPR.
The purpose of using technically necessary cookies is to improve the user experience on our websites. Some functions of our websites cannot be offered without cookies. They require that the browser is recognised even after the user leaves the page.
We need cookies for the following applications:
The user data collected by technically necessary cookies are not used to produce user profiles.
Analytics cookies are used to improve the quality of our website and our content. The analytics cookies show us how the website is used. In this way, we continuously optimize our site.
These purposes represent our legitimate interest in processing the data in accordance with Art. 6 Par. 1 Cl. 1 f of GDPR.
The storage period depends on the cookie used.
Cookies collected when the website is opened:
Cookies that are only collected when certain website functions are used:
You can deactivate or restrict sending of cookies by changing the settings in your browser. Cookies already saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, you may not be able to use all website functions fully.
If you consented to the use of the analytics cookie and want to revoke your consent, you can find this setting under hydac.com/privacy.
Users can register on our websites by entering their data. The data are entered in an input screen, sent to us and stored. The data are not passed on to third parties.
Depending on the forms to be completed by the user, the following data are collected as part of the registration process, among others:
At the time of registration, the following data are also saved:
As part of the registration, the user’s consent to process this data is obtained
The legal foundation for processing the data with consent from the user is Art. 6 Par. 1 Cl. 1 a of GDPR.
If registration is required to fulfil a contract, in which the user is a contract party, or to perform pre-contractual measures, the legal foundation for processing the data is Art. 6 Sect. 1 Cl. 1 b of GDPR.
User registration is required for provision of certain content and services on this website.
In addition, the user registration can be required to fulfil a contract with the user or to perform pre-contractual measures.
The data are deleted as soon as the user withdraws his or her consent to process them.
As a user, you can cancel your registration at any time. You can have the data stored on you changed at any time.
Objections can be submitted in writing or by e-mail to the office stated in Point I with future effect.
If the data are required to fulfil a contract or to take pre-contractual measures, early deletion of data is only possible where no contractual or legal obligations rule out deletion.
Our websites have a contact form which can be used to contact us electronically. If the users contacts us in this way, the data he or she enters in the input screen are sent to us and saved.
Among others, the following data are collected and stored:
The following data are also saved when the message is sent:
As part of the transmission process, your consent to process the data is obtained, and reference is made to this privacy policy.
Alternatively, the e-mail address provided can be used for contact. In this case, the user data sent in the e-mail are saved.
No data are forwarded to third parties in this context. The data are only used to process the conversation.
The legal foundation for processing the data with consent from the user is Art. 6 Par. 1 Cl. 1 a of GDPR.
The legal foundation for processing data sent by e-mail is Art. 6 Par. 1 Cl. 1 f of GDPR.
If the purpose of the e-mail contact is to conclude a contract, Art. 6 Par. 1 Cl. 1 b of GDPR is an additional legal foundation.
We only process data from the input screen to process your contact. If you contact us by e-mail, this is also the required legitimate interest in processing the data.
The other data processed during the transmission process serve to prevent abuse of the contact form and ensure the security of our IT systems.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For data from the input screen of the contact form and the data sent by e-mail, this is the case when the respective conversation with the user is ended or completed. The conversation is ended when the circumstances indicate that the matter involved has been finally resolved.
The user can revoke his or her consent to process the data at any time. If the user contacts us by e-mail, he or she can object to storage of the corresponding data at any time. If this is the case, the conversation cannot be continued.
Objections can be submitted in writing or by e-mail to the office stated in Point I with future effect.
All data saved as part of the contact are then deleted.
An application portal hosted by a service provider is used to submit applications.
Among others, the following data are processed as part of this procedure:
The legal foundation for processing the data is user consent in accordance with Art. 6 Par. 1 Cl. 1 a of GDPR.
The purpose of data processing is application management. The data are required to complete the application procedure.
The application data are deleted six months after the position is filled, unless the applicant is hired.
The user can revoke his or her consent to process the data at any time.
The objection can be submitted in writing or by e-mail to the office stated in Point I with future effect.
On our website, we use the open-source software tool Matomo (formerly PIWIK) to analyse our users’ surfing behaviour. The software places a cookie on the user’s computer (see above on cookies). The following data are saved when the individual pages are opened:
The software runs exclusively on our website servers. The data are stored exclusively there. The data are not passed on to third parties.
The software is configured not to store full IP addresses, instead masking 2 bytes of the IP address (e.g.: 192.168.xxx.xxx). This renders attribution of the truncated IP to the accessing computer impossible.
The legal foundation for processing the user data is Art. 6 Par. 1 Cl. 1 a of GDPR.
Processing user data allows us to statistically analyse user behaviour for optimisation and marketing purposes. Analysing the data obtained enables us to compile information on the use of individual components of our website. That helps us improve our website and its user friendliness.
Data are only processed with express consent from the user. Anonymization of the IP address takes the user’s interest in protecting his or her data sufficiently into account.
The data are deleted as soon as they are no longer required for our statistical recording purposes.
Cookies are stored on the user’s computer and sent from there to our page. As a result, you have full control over the use of cookies as a user. You can deactivate or restrict sending of cookies by changing the settings in your browser. Cookies already saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, you may not be able to use all website functions fully.
On our website, users can opt out of the analytics process. To do so, follow the corresponding link. This sets another cookie on your system, which tells our system not to save the user’s data. If the user deletes the corresponding cookie on his or her own system, he or she must set the opt-out cookie again.
For further details on the privacy settings of the Matomo software, see the following link: https://matomo.org/docs/privacy/ .
If your data are processed, you are the data subject as defined in GDPR, and you have the following rights vis-à-vis the data controller:
You can demand confirmation from the data controller of whether we process your personal data.
If we do process your data, you can demand the following information from the data controller:
You are entitled to request information on whether your data are sent to a third country or an international organisation. In this context, you can request notification of such sending via the suitable guarantees per Art. 46 of GDPR.
You have a right to rectification and/or completion vis-à-vis the data controller, where your personal data processed are inaccurate or incomplete. The data controller must rectify the data without delay.
Under the following conditions, you can request restriction of processing of your personal data:
Where processing of your personal data has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If restriction of processing was restricted based on the above conditions, you will be notified by the data controller before the restriction is lifted.
You can demand that the data controller erase your personal data without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
Where the data controller has made your personal data public and is obliged pursuant to Art. 17 Par. 1 of GDPR to erase the personal data, the data controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform data controllers which are processing your personal data that you have requested the erasure by such data controllers of any links to, or copy or replication of, those personal data.
There is no right to deletion as long as processing is required
If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the data controller, the data controller is obliged to notify all recipients to whom the corresponding data were disclosed of this rectification or deletion of data or restriction of processing, unless this proves impossible or involves an unreasonable effort.
You have the right vis-à-vis the data controller to be notified of these recipients.
You have the right to receive your personal data, which you have provided to the data controller, in a structured, standard and machine-readable format. You also have the right to send these data to another controller without hindrance by the data controller to whom the data were made available, provided
In exercising this right, you also have the right to have your data sent directly from one controller to another controller, provided this is technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
That right of data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data, which is based on Art. 6 Par. 1 Cl 1 e or f of GDPR, including profiling based on those provisions.
The data controller shall no longer process your personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for the purpose of direct marketing, your personal data shall no longer be processed for this purpose.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
You have the right to revoke your declaration of consent under Data Privacy Law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
However, these decisions must not be based on particular categories of data per Art. 9 Par. 1 of GDPR, unless Art. 9 Par. 2 a or g of GDPR apply and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the first two alternatives, the data controller shall implement suitable measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data is in breach of GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 of GDPR.
Privacy Policy of HYDAC Verwaltung GmbH142 KContact details of controller, data protection coordinators, central data protection department, supervisory authority332 KAgreement of the joint controller pursuant to Art. 26 GDPR3.09 MData privacy notice concerning video surveillance.pdf V20 022023 en-GB.pdf166 KDatenschutzhinweis Intellectual-Property DSGVO GDPR.pdf143 K