Data privacy notices
ESAU & HUEBER GmbH
86529 Schrobenhausen, Germany
Phone +49 8252 8985-0
– hereinafter referred to as ESAU & HUEBER –
Contact details of the data protection officer
ITs Hein GmbH
Kulmbacher Str. 27b
D-95460 Bad Berneck
Phone +49 9273 50139-0
The website operator or website provider collects data about access to the website and stores this data as server log files. The following data is recorded:
- Site visited on our domain
- Date and time of the server enquiry
- Type and version of browser used
- Operating system used
- Referrer URL
- Host name of the accessing computer
- IP address
A combination of this data with other data sources will not be made. The basis for processing personal data is Article 6 (1f) GDPR. Our legitimate interest is in improving the stability and functionality of our website. Your personal data will not be used for any other purpose or transferred to third parties. According to the information of our provider, the log files will be deleted after seven days.
Browser settings in conjunction with cookies can be found according to the browser you are using under the following links:
Internet Explorer: windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Data provided via the contact form, including your contact details, will be stored for the purpose of processing your enquiry and for any follow-up questions. This data will not be disclosed to third parties without your express consent. The legal basis for processing this data is our legitimate interest in responding to your request based on Article 6 (1f) GDPR. If your contact refers to the performance of a contract, the legal basis for processing this data is based on Article 6 (1f) GDPR. Your data will be deleted after processing your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified. Statutory provisions – in particular retention periods – shall be unaffected.
This website uses Facebook social plugins operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). These plugins can be recognised by the Facebook logo or by the terms “Like” and “Share” in the Facebook colours (blue and white). For information on all Facebook plugins, click the following link: developers.facebook.com/docs/plugins
We use the “DoubleClick” solution to better protect your personal data. As such, the plug-ins are initially deactivated. Use of the “DoubleClick” solution prevents connection to the Facebook servers being established when opening this website. When activating the plugins, which results in giving your consent (Article 6 (1a) GDPR) to data transmission, a connection to the Facebook servers is established. The plugin transmits data, including your IP address, to Facebook. The website operator has no influence on the type and scope of the data that the plugin transmits to the Facebook servers.
In our opinion, Facebook receives information about which websites you are currently and have previously visited. By integrating plugins, Facebook also receives information about your browser having accessed the respective page of our website. This refers to visitors who do not have a profile on Facebook or are not currently logged into Facebook. The data collected (including your IP address) is transmitted by your browser directly to a Facebook Inc. server in the USA and stored there. Interaction with the plugins is transmitted directly to the Facebook servers and stored there. Interactions will also be posted on Facebook and displayed there to your contacts.
You have the right to withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, this revocation has no influence on the data that has already been transmitted to Facebook.
This website uses embedded videos to display and play videos of the YouTube platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04E5W5, Ireland. We provide these videos to better showcase our product portfolio and to give our customers an insight into our manufacturing and logistics processes.
We use the embedded videos in the extended data protection mode, which, according to the provider, activates the collection, processing and storage of personal data only when the videos are played back. When playing the respective YouTube video, YouTube sets cookies to collect information about user behaviour. According to information, YouTube cookies are used to capture video statistics, prevent fraud and improve user friendliness. If you are signed in to Google and click on a video, the data may be linked directly to your Google account. If you do not want the information to be linked or assigned to your Google account, log out of your Google account in advance. Google nevertheless creates a user profile (even for users who are not logged in) and evaluates it. The basis for processing this data is Article 6 (1f) GDPR. Google has a legitimate interest in displaying personalised advertising, market research and designing its website. You have the right to object to the collection and processing of these user profiles (right of objection). You must send your objection to YouTube directly. Please note that when using YouTube, personal data may also be sent to the servers of Google LLC. (USA).
Regardless of whether the embedded videos are played back, every time you visit this website a connection to Google servers may be established, which could trigger further data processing without our influence.
We have obtained your consent to process your personal data pursuant to Article 6 (1a) GDPR. You can withdraw your consent provided to us at any time with effect for the future by deactivating this service in the Consent Tool cookie used on the website.
This website uses Google (Universal) Analytics exclusively with the extension “_anonymizelp()”. This guarantees anonymisation by abbreviating the IP address and consequently preventing the address being linked directly to an individual. In exceptional circumstances, the full IP address will be transmitted to and abbreviated on a server of Google LLC. in the USA. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with the website and Internet use. The IP address transmitted by your browser when using Google (Universal) Analytics will not be combined with any other data from Google.
Our website uses the function “Demographic Characteristics” from Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the website users. This data comes from interest-based advertising by Google and visitor data from third-party providers. Mapping of the data to a specific person is not possible. The aforesaid processing, in particular the setting of Google Analytics cookies, will only be carried out if you have expressly consented to the processing of your personal data pursuant to Article 6 (1a) GDPR. Without your express consent, Google Analytics will not be used during your visit to the website.
You can withdraw your consent provided to us at any time with effect for the future. Withdraw your consent provided to us by deactivating this service in the Consent Tool cookie used on the website. We have concluded a commissioned data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and to not transmit this data to third parties.
For the transmission of data from the EU to the USA, Google invokes so-called standard data protection clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The operator/provider of this website has no influence on this data transmission.
Google Maps is used in the interest of an appealing presentation of our online offers and to ensure that the locations indicated by us on the website are easy to find. This constitutes a legitimate interest within the meaning of Article 6 (1f) GDPR. Insofar as corresponding consent has been requested, data processing is based exclusively on Article 6 (1f) GDPR; you can withdraw your consent provided to us at any time.
This website uses MyFonts, an Internet-based web design service provided by MyFonts from Monotype Imaging Holding Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA, to display text and fonts correctly. This means that your browser loads the required backgrounds (fonts) into your browser cache when you access a website.
MyFonts calculates its claim to remuneration for the provision of the fonts according to the number of website visits. We use a tracking pixel, i.e. a single-pixel image file, which is stored on our website, to enable access count measurement and to count website visits that have taken place.
Insofar as personal data is processed during the described processing activity, it is done pursuant to Article 6 (1f) GDPR. The website operator has a legitimate interest in determining the access figures for the proper determination of the remuneration claim.
Processing of personal data
The website operator only processes your personal data if this is permitted by law or you have consented to the processing of personal data concerning you. Personal data refers to all information used to identify you, and which is traceable to you. You can also visit this website without having to reveal personal information. However, in order to improve our online service, we store (without any direct personal reference) your access data (see above) to this website. Anonymisation of the data does not allow any conclusions to be drawn about your person. In principle, your personal data will not be transmitted to a country outside the European Union or to an international organisation. We do not use any automated decision-making processes pursuant to Article 22 GDPR. Should we use these processes in individual cases, we will inform you of this separately, insofar as this is required by law.
We only process applicant data for the purpose of and within the scope of the application process in accordance with the legal requirements. Applicant data is processed for the performance of a contract within the scope of the application process pursuant to Article 6 (1b) GDPR and Article 6 (1f) GDPR, insofar as data processing becomes necessary for us, e.g. within the scope of legal procedures (in Germany, Section 26 of the German Federal Data Protection Act also applies).
Applicants will be provided with separate data protection information after receipt of their application documents.
Your data privacy rights
Since your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:
You have the right to information (pursuant to Article 15 GDPR) about the personal data concerning you that we have stored and how this data is processed, about any data transmission to other bodies and about the duration of the storage. You may also receive extracts or copies to exercise your right to information.
If the data is inaccurate or no longer necessary for the purposes for which it was collected, you may request the rectification (pursuant to Article 16 GDPR), erasure (pursuant to Article 17 GDPR) or restriction (pursuant to Article 18 GDPR) of personal data concerning you.
If you have asserted the right to rectification, erasure or restriction (pursuant to Article 16, 17 or 18 GDPR) of the processing of the data vis-à-vis the data controller, then the latter is obliged to communicate this rectification, erasure or restriction to all recipients to whom the personal data has been disclosed, unless this proves to be impossible or would involve disproportionate effort. You have the right to demand that the data controller informs you about these recipients.
You have the right to data portability (pursuant to Article 20 GDPR). Accordingly, you have the right to receive the personal data concerning you, which you have provided to a data controller, in a standard, structured and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided if the processing is based on consent or on a contract and the processing is carried out by automated means. In exercising this right to data portability, you shall also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
IF YOUR PARTICULAR PERSONAL SITUATION SHOULD GIVE RISE TO REASONS AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU, YOU HAVE THE RIGHT TO OBJECT (PURSUANT TO ARTICLE 21 GDPR) TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU, PROVIDED THAT PROCESSING IS BASED ON A LEGITIMATE INTEREST. IN THIS CASE WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNING YOU UNLESS COMPELLING LEGITIMATE GROUNDS FOR PROCESSING ARE DEMONSTRATED.
If you have expressly consented to the processing of personal data concerning you (pursuant to Article 6 (1a) GDPR), you have the right to withdraw your consent at any time (pursuant to Article 7 (3) GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority in the Member State where you reside, the Member State in which your place of work is located or where the alleged infringement took place, if you consider that the processing of your personal data infringes the General Data Protection Regulation (GDPR).
Where possible, your applications made in exercise of your rights should be sent in writing to the address stated above or directly to our data protection officer. If you have any concerns or questions about the processing of personal data and information concerning you, you can contact our data protection officer (see above for contact details).
Storage period of personal data
The storage period of personal data is determined by the legal basis, the purpose of processing and, under certain circumstances, the statutory retention periods.
The legal basis for processing personal data is Article 6 (1a) GDPR:
This data is stored until the data subject withdraws his or her consent.
The legal basis for processing personal data is Article 6 (1b) GDPR:
If there are statutory retention periods in conjunction with the performance of a contract which are processed pursuant to Article 6 (1b) GDPR, this personal data will be duly erased after expiry of the statutory retention period, insofar as it is no longer necessary for the performance of a contract or entering into a contract.
The legal basis for processing personal data is Article 6 (1f) GDPR:
In the case of personal data processed pursuant to Article 6 (1f) GDPR, we retain this data until the data subject exercises his or her right to object. Unless our legitimate grounds for processing override the interests, rights and freedoms of the data subject. We will continue to process the personal data for the establishment, exercise or defence of legal claims.
Insofar as no specific storage periods are specified in the above data protection information, stored personal data will be erased and no longer processed where the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
Lodging complaints about the processing of your personal data
If you have any concerns or questions about the processing of personal data and information concerning you, you can contact our data protection officer (see above for contact details) or the relevant supervisory authority.
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
91522 Ansbach, Germany
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300