Privacy policy

The controller within the meaning of Art. 4 (7) GDPR is the Hoval Group, headquartered in Vaduz, Liechtenstein, and the companies associated with it. An overview of the companies belonging to the group can be found on www.hoval.com.

You can reach our data protection officer at dpo@hoval.com.

1. Legal basis for processing

• Insofar as we require the consent of the data subject for the processing of personal data, Art. 6 (1) a) GDPR serves as the legal basis.
• In the case of the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
• Insofar as the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 (1) c) GDPR serves as the legal basis.
• If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, Art. 6 (1) f) GDPR serves as the legal basis for the processing.

2. Storage period and data deletion

The personal data of the data subject will be deleted as soon as the purpose and/or legal basis of storage no longer applies.

3. Transmission and recipients

The personal data will only be disclosed to any recipients to the extent necessary in the context of the processing:

• We are required to disclose personal information if it is necessary to comply with the law, for the purposes of law enforcement, or to comply with court orders.
• We work together with external partners in the context of commissioned data processing in accordance with Art. 28 GDPR. These are carefully selected by us and contractually bound in accordance with the requirements of the GDPR and are checked if necessary.
• Within the group of companies, the data may be processed for administrative purposes.

A transfer of personal data to countries outside the EU-EEA will only take place if:

• an adequacy decision pursuant to Art. 45 GDPR has been issued for this third country, or
• appropriate data protection measures have been agreed with the recipient of the data in a legally binding manner, whereby a copy of these agreements can be requested at the contractual address of the data protection officer, or
• the data subject has consented to the transfer of data, or
• we are entitled to transfer data for another reason in accordance with Art. 49 GDPR.

1. Description and scope of data processing

Every time our website is accessed, our website system automatically processes data and information from the accessing computer.

The following data is mainly collected:

• information about the type of browser and the version used,
• the user's operating system,
• the user's internet service provider,
• the user's IP address,
• date and time of access,
• websites from which the user's system reaches our website,
• Web pages that are accessed by the user's system through our website.

This data is not stored together with other personal data of the user.

2. Legal basis and purpose of data processing

The legal basis for the temporary storage of the data and log files is our legitimate interest in accordance with Art. 6 (1) f) GDPR.

The temporary storage of the IP address by the system is necessary in order to enable the website to be presented to the user. For example, the user's IP address must be processed for the duration of the session.

The processing is also carried out to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.

3. Duration of storage

Data relating to the provision of the website will be deleted after the end of the visit to our website.

In accordance with Art. 11 GDPR, further storage is possible after anonymization. In this case, the IP addresses of the users are alienated in such a way that it is no longer possible to assign the calling client.

4. Possibility of objection

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website.

Consequently, there is no possibility of objection on the part of the user.

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is called up again.

A detailed explanation of cookies and how they work can be found on the "all about cookies" website at: https://www.allaboutcookies.org/

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• Items in a shopping cart
• Login Information
• Language
• Keywords

We also use the following types of cookies and similar technologies on our website that enable an analysis of users' surfing behaviour:

• Google Analytics; Detailed information on the terms of use and the privacy policy of Google Analytics can be found at: http://www.google.com/analytics/terms/de.html
• Google AdWords Conversion Tracking and Google Remarketing; Detailed information on the terms of use and privacy policy of Google Maps/Earth API can be found at: https://developers.google.com/maps/terms and http://www.google.com/policies/privacy
• Google +1; For detailed information on Google+'s terms of service and privacy policy, please visit: https://policies.google.com/privacy?hl=de
• Facebook Remarketing / Retargeting; Detailed information on Facebook's terms of use and privacy policy can be found at: https://www.facebook.com/about/privacy

The user data collected in this way is pseudonymised by means of technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with other personal data of the users.

In addition, the following plugin is integrated into our website:

• Youtube; Detailed information on Youtube's terms of use and privacy policy can be found at: https://policies.google.com/privacy?hl=de

When opening the website with this plugin, the user's data (e.g. IP address, etc.) is automatically transmitted to the external service. If the user is also logged into an account of the respective service provider, content from our website can be linked to the respective profile. The service provider can assign the visit to our website to the user account of the data subject.

We expressly point out that we have no knowledge of the content of the transmitted data or its use by the social network

Furthermore, plugins from the following social networks are integrated into our website:

• Youtube; Detailed information on Youtube's terms of use and privacy policy can be found at: https://policies.google.com/privacy?hl=de
• LinkedIn; Detailed information on LinkedIn's terms of use and privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy
• Facebook; Detailed information on Facebook's terms of use and privacy policy can be found at: ttps://www.facebook.com/privacy/explanation
• Instagram; Detailed information on Instagram's terms of use and privacy policy can be found at: https://privacycenter.instagram.com/policy/

If the user activates the plugin while logged in to the account of the respective social network, content of our website can be linked to the respective profile, which allows the social network to assign the visit to our website to the user account of the data subject.

We expressly point out that we have no knowledge of the content of the transmitted data or its use by the social network.

When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings.

2. Legal basis and purpose of data processing

The legal basis for the processing of personal data using technically necessary cookies and for the processing of personal data using cookies for analysis purposes is a legitimate interest of our company in accordance with Art. 6 (1) f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes and plungins is Art. 6 (1) a) GDPR if the user has given his consent in this regard.

3. Duration of storage

Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

The transmission of Flash cookies cannot be prevented via the settings of the browser, but can be prevented by changing the settings of the Flash Player.

4. Possibility of objection

The use of cookies can be prevented by the user concerned at any time.

1. Description and scope of data processing

On our website it is possible to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us. These are essentially the contact details of the data subject.

In addition, the following data will be collected during registration:

• IP address of the accessing computer
• Date and time of registration

For the processing of the data, your consent will be obtained as part of the registration process and reference will be made to this privacy policy.

If the user purchases goods or services on our website and stores his e-mail address, this can subsequently be used by us to send a newsletter.

2. Legal basis and purpose of processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 (1) a) GDPR if the user has given his consent.

The legal basis for sending the newsletter as a result of the sale of goods or services is a legitimate interest of our company in accordance with Art. 6 (1) f) GDPR.

The collection of the user's personal data serves to deliver the newsletter and, in the case of existing customers, to inform them about innovations and information provided by the controller.

3. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address will therefore be processed for the purpose of sending the newsletter until the user objects to the processing or withdraws his consent.

4. Possibility of objection

The subscription to the newsletter can be terminated by the user concerned at any time. To this end, there is a corresponding note in each newsletter. You can also contact the Data Protection Officer at any time.

1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored.

These are essentially your contact details and your access data according to the input mask as well as the IP address of the user as well as the date and time of registration.

2. Legal basis and purpose of data processing

The legal basis for the processing of the data is Art. 6 (1) a) GDPR if the user has given his consent.

If the registration serves the fulfilment of a contract or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 (1) b) GDPR.

Registration of the user is required for various services on our website.

3. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose.

For the data collected during the registration process for the performance of a contract or for the implementation of pre-contractual measures, this is the case when there is no longer any lawfulness for the storage.

4. Possibility of objection

The user has the option of having the user account deactivated at any time by requesting them to our data protection officer.

The data subject can adjust and change the contact details at any time in the user account.

1. Description and scope of data processing

Electronic contact is possible via the e-mail address provided by us and the contact form. In this case, the personal data provided by the user and the content of the correspondence will be processed.

2. Legal basis and purpose of data processing

The legal basis for the processing of the data transmitted in the course of sending an e-mail or a contact form is a legitimate interest of our company in accordance with Art. 6 (1) f) GDPR.

Depending on the content of the correspondence and your request, the e-mail or contact form is aimed at concluding a contract, so the additional legal basis for the processing is, for example, Art. 6 (1) b) GDPR.

The processing of personal data in the context of an e-mail contact or contact form serves to process correspondence and your request.

3. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

If the data is for the performance of a contract or for the implementation of pre-contractual measures, this is the case when there is no longer any lawfulness for the storage.

4. Possibility of objection

In the event of an objection, the correspondence cannot be continued.

1.Description and scope of data processing

We process your personal data for the purpose of conducting competitions if you wish to participate. In order to participate in competitions, we process your contact details. Depending on the orientation of the competition, further data such as photos or similar will be processed.

2. Legal basis and purpose of data processing

This processing is carried out on the basis of your consent in accordance with Art. 6 (1) a) GDPR to participate in the competition. Your personal data will be processed until you withdraw your consent. If you take part in a competition, we process your personal data so that we can transmit the prize to you, if necessary, and to fulfil the conditions of participation. This processing is carried out on the basis of Art. 6 (1) b), the fulfilment of our contractual relationship.

3. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected or as soon as the terms and conditions of participation explicitly stipulate otherwise (further use of photos, for example).

4. Revocation of consent or withdrawal from the competition

In the event of a revocation, they can no longer be considered for the competition.

The user has the right to access the personal data concerned, as well as to rectification, deletion, limitation or objection and the right to data portability.

You can exercise your rights with our Data Protection Officer, who will review and process the request.

Hoval Aktiengesellschaft

9490 Vaduz

Liechtenstein

dpo@hoval.com

Last updated on September 28, 2020