Databeskyttelseserklæring
1. Databeskyttelse i hovedtræk
Generelle oplysninger
Følgende oplysninger giver et nemt overblik over, hvad der sker med dine persondata, når du besøger vores hjemmeside. Persondata er alle data, som identificerer dig som person. Du kan finde detaljerede oplysninger om databeskyttelse i vores databeskyttelseserklæring, der er anført under denne tekst.
Dataindsamling på vores hjemmeside
Hvem er ansvarlig for dataindsamlingen på denne hjemmeside? Databehandlingen på vores hjemmeside foretages af hjemmesidens operatør. Operatørens kontaktinformationer fremgår af hjemmesidens kolofon.
Dataindsamling på vores hjemmeside
Hvem er ansvarlig for dataindsamlingen på denne hjemmeside? Databehandlingen på vores hjemmeside foretages af hjemmesidens operatør. Operatørens kontaktinformationer fremgår af hjemmesidens kolofon.
2. Generelle og obligatoriske oplysninger
Databeskyttelse
Operatørerne af disse sider tager beskyttelsen af dine persondata meget alvorligt. Vi behandler dine persondata fortroligt og i overensstemmelse med de lovbestemte databeskyttelsesforskrifter og denne databeskyttelseserklæring.
Når du besøger denne hjemmeside, vil vi indsamle forskellige persondata. Persondata er alle data, som identificerer dig som person. Denne databeskyttelseserklæring forklarer, hvilke data vi indsamler, og hvad vi bruger dem til. Den forklarer også, hvordan data indsamles og med hvilket formål.
Vi gør opmærksom på, at datatransmissionen på internettet (f.eks. ved kommunikation via e-mail) kan have sikkerhedsbrister. En fuldstændig beskyttelse af data mod adgang fra tredjeparter er ikke mulig.
Oplysning om den ansvarlige instans
Den ansvarlige instans for databehandlingen på denne hjemmeside er:
Hermann Hartje KG
Deichstr. 120-122
27318 Hoya
Telefon: +49 4251 / 811 - 0
E-mail: datenschutz@hartje.de
Den ansvarlige instans er den fysiske eller juridiske person, der alene eller sammen med andre træffer afgørelser om formål og midler til behandling af persondata (f.eks. navne, e-mailadresser mv.).
Kontaktformular
Hvis du sender os forespørgsler via kontaktformularen, vil dine oplysninger fra formularen, herunder de kontaktoplysninger, du har opgivet der, blive opbevaret af os med henblik på behandling af henvendelsen og i tilfælde af opfølgende spørgsmål. Vi vil ikke videregive dataene uden dit samtykke.
De data, der indtastes i kontaktformularen, behandles derfor udelukkende på baggrund af dit samtykke (artikel 6, stk. 1, litra a i GDPR). Du kan til enhver tid tilbagekalde dit samtykke. Hertil skal du blot sende os en meddelelse via e-mail. Lovligheden af den databehandling, der fandt sted frem til tilbagekaldelsen, berøres ikke af tilbagekaldelsen.
De data, du indtaster i kontaktformularen, forbliver hos os, indtil du beder os om at slette dem, tilbagekalder dit samtykke til opbevaringen eller formålet med datalagringen bortfalder (f.eks. efter din anmodning er blevet behandlet). Obligatoriske lovbestemmelser – især opbevaringsperioder – berøres ikke.
Behandling af oplysninger (kunde- og aftaleoplysninger)
Vi indsamler, behandler og bruger kun personlige data i det omfang, det er nødvendigt for etablering, indhold eller ændring af det juridiske forhold (foreliggende data). Disse data behandles på grundlag af artikel 6, stk.1, litra b i GDPR, hvis din anmodning er relateret til opfyldelsen af en kontrakt eller er nødvendig for at udføre foranstaltninger, der går forud for kontrakten. Vi indsamler, behandler og bruger kun persondata om brugen af vores internetsider (brugsdata) i det omfang, det er nødvendigt for at gøre det muligt for brugeren at benytte tjenesten eller for at fakturere brugeren. De indsamlede kundedata slettes efter afslutning af ordren eller efter afslutning af forretningsforholdet. De lovbestemte opbevaringsfrister berøres ikke heraf.
3. Databeskyttelsesrådgiver
Lovbestemt databeskyttelsesrådgiver
Vi har udpeget en databeskyttelsesrådgiver for vores virksomhed:
secom IT GmbH
Nienburger Straße 9a
27232 Sulingen
Telefon: +49 4271 / 9473 - 800
E-mail: datenschutz@secom-it.gmbh
Retention Period
Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.
General Information on the Legal Bases
If you have consented to the processing of your data, we process your personal data based on Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data as defined in Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Article 49(1)(a) of the GDPR.
If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the TDDDG. You may revoke your consent at any time.
If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data based on Article 6(1)(b) of the GDPR. Furthermore, we process your data if it is necessary to comply with a legal obligation based on Article 6(1)(c) of the GDPR.
Data processing may also be carried out based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The following sections of this Privacy Policy provide information on the specific legal bases applicable in each individual case.
Data Protection Officer
We have appointed a Data Protection Officer for our organization:
secom IT GmbH
Nienburger Straße 9a
27232 Sulingen, Germany
Phone: +49 4271 / 9473 - 800
Email: datenschutz@secom-it.gmbh
Recipients of Personal Data
As part of our business operations, we collaborate with various external parties. In some cases, this requires the transfer of personal data to these external parties. We disclose personal data to external parties only if this is necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) of the GDPR, or if another legal basis permits the disclosure of data. When using data processors, we only disclose our customers’ personal data based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1) E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR SPECIFIC SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE SPECIFIC LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) OF THE GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) OF THE GDPR).
Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in the Member State of their habitual residence, their place of work, or the location of the alleged violation. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to request that any personal data we process through automated means – based on your consent or in fulfilment of a contract – be transferred to you or a third party in a commonly used, machine-readable format. You also have the right to request that this data be transferred directly to another controller, where technically feasible.
Access, restriction and deletion
In accordance with applicable legal provisions, you have the right to access your stored personal data free of charge at any time, including its origin, recipients and the purpose of data processing. You may also have the right to request rectification, restriction or deletion of this data. For this, as well as any other questions relating to personal data, you may contact us at any time via the address provided in our Legal Notice.
Right to Restriction of Processing
You have the right to request that the processing of your personal data be restricted. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request that the processing of your personal data be restricted.
- If the processing of your personal data was or is unlawful, you may request that the processing be restricted instead of having the data erased.
- If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of erasure.
- If you have lodged an objection pursuant to Article 21(1) of the GDPR, a balancing of your interests against ours must be carried out. If it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data, apart from storage, may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content – such as orders or enquiries you send to us as the site operator – this website uses SSL and/or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is enabled, any data you transmit to us cannot be read by third parties.
4. Dataindsamling på vores hjemmeside
Cookies
Internetsiderne gør til dels brug af såkaldte cookies. Cookies beskadiger ikke din computer og indeholder ikke virus. Cookies bruges til at gøre vores tilbud mere brugervenlige, effektive og sikre. Cookies er små tekstfiler, som implementeres på din computer og gemmes af din browser.
De fleste af de cookies, vi bruger, er såkaldte "session-cookies". Sådanne cookies slettes automatisk efter dit besøg. Andre cookies forbliver på din enhed, indtil du sletter dem. Disse cookies gør det muligt for os at genkende din browser ved dit næste besøg.
Du kan indstille din browser, så du bliver informeret om cookies og browseren kun tillader cookies i enkelte tilfælde, udelukker accepten af cookies i visse tilfælde eller generelt, og automatisk sletter cookies, når browseren lukkes. Ved deaktivering af cookies kan funktionen af denne hjemmeside blive begrænset.
Cookies, der er nødvendige for at udføre den elektroniske kommunikationsproces eller for at levere bestemte funktioner (f.eks. indkøbskurv), gemmes på grundlag af art. 6, stk. 1 litra f i GDPR. Hjemmesidens operatør har en legitim interesse i lagring af cookies for en fejlfri og optimeret levering af sine tjenester. Såfremt andre cookies (f.eks. cookies til analyse af din surfadfærd) gemmes, behandles de særskilt i denne databeskyttelseserklæring.
Server-log-filer
Udbyderen af hjemmesiden indsamler og opbevarer automatisk oplysninger i såkaldte serverlogfiler, som din browser automatisk sender til os. Disse er:
- browsertype og browserversion
- anvendt operativsystem
- referrer URL
- værtsnavn af den tilgående pc
- tidspunkt for serveranmodningen
- IP-adresse
Disse data køres ikke sammen med andre datakilder.
Grundlag for databehandlingen er art. 6, stk. 1, litra f i GDPR, som tillader behandling af data til opfyldelse af en kontrakt eller foranstaltninger forud for kontraktindgåelse.
Contact form
If you submit an enquiry to us via the contact form, the information you provide – including the contact details entered – will be stored by us for the purpose of processing your enquiry and addressing any follow-up questions. We will not disclose this information without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that such consent was requested; you may revoke your consent at any time.
The data you enter in the contact form will be retained by us until you request its deletion, withdraw your consent to storage or the purpose for which the data was stored no longer applies (for instance, once your enquiry has been fully dealt with). Mandatory statutory provisions – including, but not limited to, retention periods – remain unaffected.
Registration on This Website
You can register on this website to access additional features. We use the data you provide solely for the purpose of using the specific offering or service for which you have registered. The required information requested during registration must be provided in full. Otherwise, we will reject your registration.
For important changes, such as those affecting the scope of our offerings or technically necessary changes, we will use the email address you provided during registration to notify you.
The data entered during registration is processed for the purpose of fulfilling the user relationship established by the registration and, where applicable, to initiate further contracts (Art. 6(1)(b) GDPR).
We will store the data collected during registration for as long as you remain registered on this website, after which it will be deleted. Statutory retention periods remain unaffected
5. Analyseværktøjer og reklamer
Google Analytics
Denne hjemmeside gør brug af funktionerne fra webanalysetjenesten Google Analytics. Udbyderen er Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics gør brug af såkaldte "cookies". Cookies er tekstfiler, som gemmes på din computer og muliggør en analyse af din brug af hjemmesiden. De oplysninger, der genereres af cookien om din brug af denne hjemmeside, overføres normalt til en Google-server i USA og gemmes der.
Lagringen af Google-Analytics-cookies sker på grundlag af art. 6, stk. 1 litra f i GDPR. Hjemmesideoperatøren har en legitim interesse i at analysere brugeradfærden for at optimere både sin hjemmeside og markedsføringen.
IP anonymisering
Vi har aktiveret en IP-anonymiseringsfunktion på denne hjemmeside. På denne måde forkortes din IP-adresse af Google, inden for EU-medlemsstaterne eller i andre kontraherende stater, i aftalen om Det Europæiske Økonomiske Samarbejdsområde, før den sendes til USA. Kun undtagelsesvis sendes hele IP-adressen til Google-serveren i USA, hvor den forkortes. På vegne af operatøren af denne hjemmeside vil Google bruge disse oplysninger til at evaluere din brug af hjemmesiden, til at udarbejde rapporter om aktiviteten og til at levere andre tjenester relateret til aktiviteten og internetbrugen til operatøren. Den IP-adresse, der overføres af din browser som en del af Google Analytics, vil ikke blive lagret sammen med andre Google-data.
Browser plugin
Du kan forhindre lagringen af cookies ved at indstille din browsersoftware i overensstemmelse hermed; vi gør dog opmærksom på, at du i dette tilfælde evt. ikke vil være i stand til at bruge alle funktioner på denne hjemmeside. Du kan også forhindre Google i at indsamle de data, der genereres af cookien og er relateret til din brug af hjemmesiden (inklusive din IP-adresse) og i databehandlingen af Google ved at downloade et browser-plugin, der er tilgængeligt under følgende link: https://tools.google.com/dlpage/gaoptout?hl=de.
Indsigelse mod dataindsamling
Du kan forhindre Google Analytics i at indsamle dine data ved at klikke på følgende link. En opt-out-cookie forhindrer, at dine data bliver indsamlet ved fremtidige besøg på denne hjemmeside: Deaktivering af Google Analytics.
Du kan finde mere information om, hvordan Google Analytics håndterer brugerdata i databeskyttelseserklæringen fra Google: https://support.google.com/analytics/answer/6004245?hl=de.
6. Plugins og værktøjer
Google Maps
Denne side bruger korttjenesten Google Maps via en API. Udbyderen er Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For at bruge funktionerne i Google Maps er det nødvendigt at gemme din IP-adresse. Disse oplysninger overføres normalt til en Google-server i USA og gemmes der. Udbyderen af denne side har ingen indflydelse på denne dataoverførsel.
Google Maps bruges med henblik på en attraktiv præsentation af vores onlinetilbud og for at gøre det nemmere at finde de steder, vi har angivet på hjemmesiden. Dette udgør en legitim interesse på grundlag af art. 6, stk. 1, litra f i GDPR.
Du kan finde mere information om brugen af brugerdata i Google-databeskyttelseserklæringen: https://www.google.de/intl/de/policies/privacy/.
Google Maps
Denne side bruger korttjenesten Google Maps via en API. Udbyderen er Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For at bruge funktionerne i Google Maps er det nødvendigt at gemme din IP-adresse. Disse oplysninger overføres normalt til en Google-server i USA og gemmes der. Udbyderen af denne side har ingen indflydelse på denne dataoverførsel.
Google Maps bruges med henblik på en attraktiv præsentation af vores onlinetilbud og for at gøre det nemmere at finde de steder, vi har angivet på hjemmesiden. Dette udgør en legitim interesse på grundlag af art. 6, stk. 1, litra f i GDPR.
Du kan finde mere information om brugen af brugerdata i Google-databeskyttelseserklæringen: https://www.google.de/intl/de/policies/privacy/.
6. Plugins og værktøjer
YOUTUBE
This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our web pages that includes YouTube, a connection is established with YouTube’s servers. In the process, the YouTube server is informed which of our pages you have visited.
Furthermore, YouTube may store various cookies on your device or use comparable technologies for recognition (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user experience, and prevent fraud. Furthermore, the collected data is processed within the Google advertising network.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube to ensure an engaging presentation of our online offerings. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If consent has been requested, processing is carried out exclusively based on Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
For more information on the handling of user data, please see YouTube’s Privacy Policy at: https://policies.google.com/privacy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.
CDN provided by creoline GmbH (cstatic.io)
Our website uses a Content Delivery Network (CDN) provided by creoline GmbH, Bergstraße 9a, 48341 Altenberge. A CDN is a network of high-performance servers that cache content at various locations around the world. A CDN essentially has two functions. First, it is designed to deliver content as quickly as possible, and second, to reduce the load on the web host by distributing data traffic. To enable this, your IP address, HTTP host, timestamp, and other browser information are transmitted to the provider. Our CDN does not use cookies. No data is transferred outside the EU or outside a country for which the European Commission has issued an adequacy decision. The legal basis for using the service is Art. 6(1)(f) of the GDPR (legitimate interest). You can view the privacy policy of creoline GmbH here: https://www.creoline.com/de/legal/privacy8.
8. E-Commerce
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data to establish, define the terms of, and modify our contractual relationships. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user. The legal basis for this is Article 6(1)(b) of the GDPR.
The collected customer data will be deleted upon completion of the order or termination of the business relationship and after the expiration of any applicable statutory retention periods. Statutory retention periods remain unaffected.
Data Transfer for Shipping Goods
When you order goods from us, we disclose your personal data to the shipping company entrusted with the delivery. Only data necessary for the respective service provider to fulfill its task is disclosed. The legal basis for this is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
5. Analyseværktøjer og reklamer
We offer you the opportunity to apply for a position with us. We provide information about this data processing here: https://hartje.de/datenschutzerklaerung-bewerber/
