This website is provided by Hydro Building Systems Germany GmbH, Einsteinstraße 61, 89077 Ulm, Germany. Hydro Building Systems Germany GmbH is one of five business operations of the company Hydro (referred to as 'Hydro' in accordance with these provisions).
Hydro is the supervisory authority for processing the personal data collected on this website. Hydro respects the privacy of its users and processes all personal data in accordance with the EU General Data Protection Regulation (GDPR) and other relevant laws. The website is managed by Episerver DXC, on behalf of Hydro.
This Privacy Notice is designed to help you understand what personal data we collect about you, why we collect it, what purposes we use it for and what rights you have when it comes to using, accessing and correcting this data.
1. Data controller
The data controller, in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR), is Hydro Building Systems Germany GmbH, Einsteinstraße 61, 89077 Ulm, Germany, firstname.lastname@example.org (see our legal notices).
2. Contact details for the data protection officer
If you have any questions relating to data privacy, please contact our data protection officer:
intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg [Germany]
3. Collecting and processing personal data
If you only access our website to gain information, i.e. if you do not register on the website or provide us with information in any other way, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following information about you which is technically necessary to enable us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6 (1)(f) of the GDPR.
–IP address, date and time of request, time difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred, website making the request, browser, operating system and its interface, language and version of the browser software.
4. Contacting us by email or using our contact form
4.1 Requests and other purposes
When you contact us by email or using our contact form, the data you provide (your email address and possibly also your name and telephone number) will be stored by us in order that we can answer your questions. Insofar as we request you to enter information on the contact form which is not necessary to enable us to contact you, these entry fields always will be indicated as 'optional'. This information enables us to substantiate your request and to process it better. This information is provided exclusively on a voluntary basis and with your consent, in accordance with Article 6 (1)(a) of the GDPR. Insofar as this information relates to communication channels (for example, email address, telephone number), you also provide your consent for us to contact you, if necessary, via these communication channels, in order to respond to your request. You can withdraw this consent at any time, with future effect.
We will delete all data arising in this context once it is no longer necessary for this to be stored, or we will restrict the processing of this data if it is subject to statutory retention requirements.
4.2 Seminars and training
You can register yourself or your employees for our seminars via another contact form. When you register, the information provided by you (email address, participant's name and company details) is stored by us so that we are able to answer your questions. Insofar as we request you to enter information on the contact form which is not necessary to enable us to contact you (in this case 'comments'), these entry fields will be indicated as 'optional'. Data is processed in order to fulfil a contract, however at the least in order to implement pre-contractual measures; this occurs on the basis of your request in accordance with Article 6 (1)(b) of the GDPR.
Also, we will delete all data arising in this context once it is no longer necessary for this to be stored, or we will restrict the processing of this data if it is subject to statutory retention requirements.
5. Job applications
You can apply for a job with our company electronically, in particular via email. We will, of course, only use your information in order to process your application and will not forward this information on to third parties. Please be aware that unencrypted emails are not transmitted with access protection.
If you have applied for a certain position and it has already been filled or we consider you to be even more suited to another job, we would like to forward your application within the company. Please let us know if you agree to us forwarding your application in this case.
Your personal data will be deleted immediately once the application process is complete or after a maximum of six months, unless you have explicitly consented to us storing your data for a longer period or in the case that the application process has resulted in us concluding a contract with you. The legal basis for this is Article 6 (1)(a), (b) and (f) of the GDPR and Section 26 of the German Federal Data Protection Act [BDSG].
When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard drive assigned to the browser you are using and which provide certain information to the location setting the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make your experience of using the internet more user-friendly and effective.
The legal basis for processing personal data using cookies is Article 6 (1)(f) of the GDPR. The legitimate interest of the data controller is to facilitate the user-friendly and effective design of their website.
This website uses the following types of cookies, the scope and function of which are explained below:
6.1 Transient cookies
These cookies are deleted automatically when you close your web browser. These include, in particular, session cookies. These save a session ID, which can be used to assign different requests from your browser to a common session. These cookies allow us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.
6.2 Persistent cookies
These cookies are automatically deleted after a specified period of time, which may differ depending on the type of cookie. You can delete these cookies at any time by going to the security settings in your web browser.
6.3 Preventing cookies
You can configure your browser settings according to your own wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that if you do so you may not be able to use all the functions of this website.
Furthermore, when accessing our website via the cookie banner, you can press the 'I do not agree' button. This sets a 'do not track' cookie, which ensures that no unnecessary cookies are set.
7. Use of social plugins
Content from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), as well as for example YouTube and Google Maps, is embedded within this online offering. This always requires the providers of such content (hereinafter referred to as 'third-party providers') to know the IP address of the users. This is because without this IP address they would not be able to send the content to the browser of the respective user. The IP address is therefore required in order for this content to be presented. We endeavour only to use content, whose respective providers use this IP address solely in order to deliver the content. However, we do not have any influence over whether the third party stores this IP address, for example, for statistical purposes. In the event that we become aware of this, we will inform our users. The legal basis for this is Article 6 (1)(f) of the GDPR. The legitimate interest is the analysis, optimisation and cost-effective operation of our online offering.
8. Website analysis
We make use of various services for the purposes of analysing and optimising our website, and these are presented below. In this way, we are able, for example, to analyse how many users visit our site, what information is most sought-after and how users find the offering. Among other things, we collect data regarding which website was used to access our website (referrer), which sub-pages of our website were accessed and how often and for what duration a sub-page was viewed. This helps us to design and improve our offerings to be more user-friendly. The data collected is not intended to personally identify individual users. Anonymous, or at most pseudonymous, data are collected. The legal basis for this is Article 6 (1)(f) of the GDPR.
The legitimate interest of the data controller is to optimise their website by means of website analysis programs.
8.1 Google Analytics
This website uses Google Analytics, a web-analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; this includes the use of the Universal Analytics operating mode. In this way, we are able to assign data, sessions and interactions across multiple devices to a single pseudonymous user ID and therefore to analyse the activities of a user across different devices.
8.2 LinkedIn Analytics
This website uses conversion tracking technology as well as the retargeting function provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. This technology allows visitors to this website to play personalised advertisements on LinkedIn. It also enables the generation of anonymous reports about the performance of these ads and information about website interaction. In order to do this, the LinkedIn Insight Tag is included on our website, which enables connection to the LinkedIn server when you visit this website and are simultaneously logged into your LinkedIn account.
LinkedIn's Privacy Notice https://www.linkedin.com/legal/privacy-notice contains more information about how LinkedIn collects and uses your data and about the methods and rights you have for protecting your privacy interests. When you are logged into LinkedIn, you can deactivate data collection at any time by clicking the link: https://www.linkedin.com/psettings/enhanced-advertising.
This website uses Hotjar, an analysis software provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar enables us to measure and evaluate usage behaviour on our website. The information generated about your visit to our website by means of the tracking code and cookie are transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following information: device-dependant data.
The following information may be recorded by your device and your browser:
- the IP address of your device (collected and stored in an anonymous format)
- your email address, including your first name and family name, if you have made these available to us on our website
- screen size of your device
- device type and browser information
- geographical location (country only)
- your preferred language for viewing our website
- log data
The following data are automatically collected by our servers when Hotjar is used:
- referring domain
- pages visited
- geographical location (country only)
- your preferred language for viewing our website
- date and time the website was accessed
Hotjar will use this information to evaluate your use of our website, generate reports about this usage and to provide other services relating to website usage and online evaluation of the website. In order to provide its services, Hotjar also uses third-party services, such as Google Analytics and Optimizely. These third parties may store information sent by your browser during your visit, for example, cookies or IP requests. For specific information on how Google Analytics and Optimizely store and use your data, please refer to their privacy policies. You can prevent Hotjar from collecting data here.
We use the Pardot Marketing Automation System (Pardot MAS) provided by Pardot LLC, 950 E. Paces Ferry Rd. Suite 3300 Atlanta, GA 30326, USA (Pardot). Pardot is a Salesforce software module for collecting and evaluating website usage by visitors.
Further information is available at: https://www.google.de/policies/privacy/
You can deactivate the generation of a pseudonymised user profile at any time by configuring your browser so that cookies from the domain 'pardot.com' are not accepted. However, this may result in restrictions to the functionality and usability of our website.
We use the Rapidmail newsletter tool provided by Rapidmail GmbH Augustinerplatz 2 79098 Freiburg, Germany.
Rapidmail generates a unique, pseudonymised user profile for you. For this purpose, cookies are used to facilitate recognition of your web browser.
You can find information about this in the privacy policies available at Rapidmail.de https://www.rapidmail.de/datenschutz
Use of the BAUFRAGEN.DE platform
We use the services of the BAUFRAGEN.DE platform in our web presence. You can ask questions to WICONA via online chat.
You can find information about this in the BAUFRAGE.DE privacy policies.
9.1 Google DoubleClick
If you do not wish to receive user-based advertisements, you can disable these by using Google's ad preferences.
10. Your rights
You have the following rights with regard to personal data relating to you:
10.1 General rights
You have the right to be informed about your personal data, the right to rectification and erasure of that data, the right to restrict and object to processing, and the right to data portability. Insofar as processing is based on your consent, you have the right to withdraw that consent with future effect.
10.2 Rights when data is processed for legitimate interests
In accordance with Article 21 (1) of the GDPR, you have the right, at any time and for reasons relating to your own personal circumstances, to raise an objection against the processing of your personal data, which is carried out on the basis of Article 6 (1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1)(f) of the GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on this regulation. If you make an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms, or in the case that the data processing serves the establishment, exercise or defence of legal claims.
10.3 Rights in the case of direct advertising
Inasmuch as we process your personal data in order to pursue direct advertising, you have the right, at any time and in accordance with Article 21 (2) of the GDPR, to raise an objection to the processing of your personal data for the purpose of this means of advertising; this also applies to profiling, insofar as this relates to direct advertising.
If you object to your data being processed for the purpose of direct advertising, we will no longer process your data for this purpose.
10.4 Right of appeal to a supervisory authority
You also have the right to appeal to a supervisory authority with regard to the processing of your personal data carried out by us.
11. Data transfer
Your personal data will not be transferred to third parties unless we are legally obliged to do this, the disclosure of data is required for executing the contractual relationship, or you have previously expressly consented to your data being disclosed.
External service providers and partner companies, e.g. online payment providers or shipping companies commissioned with delivery, will only receive your personal data if this is necessary for processing your order. In these cases, however, the data transfer is limited to the minimum required. Insofar as our service providers come into contact with your personal data, within the context of order processing in accordance with Article 28 of the GDPR, we will ensure that they comply with the provisions of the data privacy laws in the same way. Please also refer to the privacy policies of the providers. Each service provider is responsible for the content of third-party services; we therefore check the services for compliance with legal requirements, to the extent which can be reasonably expected of us.
We attach great importance to processing your data within the EU/EEA. However, it may be the case that we use service providers who process data outside of the EU/EEA. In these cases, we will ensure that the recipient provides a suitable level of data protection before your personal data is transferred to them. This means that an EU Standard Contract or other adequate provision, such as the EU Privacy Shield, is in place which achieves a level of data protection that is comparable to the standards within the EU.
12. Data privacy
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in keeping with technological progress.