1. Introduction

With the following information we would like to give you, as the “person concerned”, an outline of the processing of your personalized data by us and your rights under the data protection laws. The use of our internet website is fundamentally possible without revealing your personalized data.  However, and in as much as you wish to take advantage of our special services via our website, processing your personalized data may become necessary. Should such processing of personal data become necessary and should there be no legal base for such processing, then we generally obtain your permission.

The processing of personalized data, for example your name, address or email address, is in accordance with the General Data Protection Regulations (GDPR) and is conform with the country-specific valid data protection regulations for Hack Formenbau GmbH“. Through this data protection declaration, we would like to inform you of the extent and objectives of the personalized data gathered, used and processed by us.

As the people responsible, we have undertaken countless technical and organisatory measures in order to give complete protection as far as is possible to the personal data processed via this website. However, internet-based data communication can, in principle, present security breaches so that absolute protection cannot be guaranteed.  For this reason, we give you the opportunity to transmit personal data to us by alternative methods, for example by telephone or post.

2. Person Responsible

The person responsible within the meaning of the GDPR is the:

Hack Formenbau GmbH

Wielandstraße 11, D-73230 Kirchheim unter Teck, Deutschland

Telephone: +49 7021 9756-0

Email: info@hack-formenbau.de

Agent for the person responsible: Gunnar Hack, Wolfgang Hack (chief executive)

3. Data Protection Officer

The data protection officer can be reached as follows:

Georg Manz

Telephone: +49 7021 9756-0

Email: data-protection@hack-formenbau.de

You may contact our data protection officer directly at any time concerning questions and suggestions relating to data protection.

4. Definitions

The data protection declaration is based on the definitions which were used by the European Directives and Regulations when they issued the General Date Protection Regulations (GDPR). Our data protection declaration is meant to be easily read and understood by the general public as well as our customers and business partners. In order to guarantee this, we would first of all like to explain the definitions used.

In this data protection declaration we use, amongst others, the following terms:

1. Personalized Data

Personalized data is all the information referring to an identified or identifiable natural person.   A natural person is one who is regarded as identifiable directly or indirectly as one with an allocated identification such as a name, an identification number, location data, online identification data or with one or more specific features which are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural person.

2. Person Concerned

The person concerned is every identified or identifiable natural person whose personally concerned data is being processed by the person responsible for the processing (our company).

3. Processing

Processing is every process carried out with or without the assistance of an automated process or any series of procedures in connection with personalized data such as the gathering, the recording, the organizing, the putting in order, the storing, the customization or alteration, the selection, the calling up, the utilization, the disclosure by means of forwarding, the circulation or any other form of deployment, comparison or linking up, restriction, deletion or obliteration.    

4. Limitation of Processing

The limitation of processing is the marking of stored personalized data with the objective of limiting future processing.

5. Profiling

Profiling is every sort of automated processing of personalized data whereby this personalized data is utilized in order to assess certain personal aspects which refer to a natural person, in particular those aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or change of address of this natural person in order to make analyses or predictions.

6. Pseudonymization

Pseudonymization is the processing of personalized data in such a way that such personalized data cannot be associated with the specific person concerned without bringing in additional information provided that such additional information is stored separately and is subjected to technical and organizational measures guaranteeing that the personalized data cannot be allocated to an identified or identifiable natural person.

7. Order Processor

The order processor is a natural or legal person, authority, institution or any other office processing the personalized data on behalf of the person responsible.

8. Recipient

The recipient is a natural or legal person, authority, institution, or any other office to whom the personalized data is disclosed regardless of whether this concerns a third party or not. Authorities receiving possible personalized data within the framework of a particular inquiry in accordance with Union Law or with the Law of the Member States, however, shall not be considered to be recipients.

9. Third Party

The third party is any other natural or legal person, authority, institution or any other office apart from the person concerned, the person responsible, the order processor and those persons who are authorized to process the personalized data under the immediate responsibility of the person responsible or of the order processor.

10. Compliance

Compliance is every indication of intention given voluntarily by the person concerned for the  specific case in an informed and unmistakable manner in the form of a declaration or any other clearly defined confirming action with which the person concerned makes it quite clear that they agree to the processing of the personalized data concerning themselves.

5. Legal Basis for Processing

Art. 6 (1) (a) GDPR (in connection with § 15 sec. 3 TMG German Teleservices Act) serves our company as legal basis for processing operations for which we obtain permission for a particular processing purpose.

Should the processing of personalized data be necessary for the completion of a contract whose contractual partner you are, as is the case for example in processing operations necessary for the supply of goods or the performance of any other particular service or service in return (quid pro quo) then the processing is on the basis of Art. 6 (1) (b) GDPR. The same also applies for such processing operations necessary for pre-contractual measures, for example in cases of queries concerning our products or services.

Should our company be subjected to a legal obligation by which the processing of personalized data becomes necessary, for example to comply with tax obligations, then the processing is based on Art. 6 (1) (c) GDPR.

In rare cases, the processing of personalized data can become necessary in order to protect the vital interests of the person concerned or another natural person. This would be the case, for instance, if a visitor to our company were to be injured and consequently his name, age, details of medical insurance or other vital information had to be given to a doctor, hospital or other third party. In such a case, processing would be on the basis of Art. 6 (1) (d) GDPR.

Ultimately, processing operations could be based on Art. 6 (1) (f) GDPR. Processing operations not included in any of the above mentioned legal bases are based on these legal grounds when processing is necessary to preserve/conserve the justified interests of our concern or a third party provided that the interests, basic rights and constitutional rights of the concerned do not predominate. We are allowed such processing operations because they are specifically mentioned by the European legislator. In this respect, he takes the view that justified interest can be assumed when you are a customer of our concern (Recital 47 Clause 2 GDPR).

6. Communication of Data to a Third Party

Communicating your data to a third party for any other than for the following reasons will not take place.

We only give your personalized data to a third party if and when:

1. you have given your express consent according to Art. 6 (1) (1) (a) GDPR,
2. the disclosure in accordance with Art. 6 (1) (1) (f) GDPR for the protection of our justified interest is allowed and when there is no reason to assume that you have a substantial, interest, worthy of protection, in the non-disclosure of your data,
3. in the event of there being a legal obligation for disclosure in accordance with Art. 6 (1) (1) (c) GDPR, as well as
4. this is legally allowed and in accordance with Art. 6 (1) (1) (b) GDPR necessary for the settlement of contractual relationships with you.

In order to protect your data and to enable us to disclose your data in third countries (outside the EU/EEA European Economic Area), we have completed agreements covering the processing of contracts on the basis of the standard contractual clauses of the European Commission. 

7. Technology

7.1 SSL/TLS-Encryption

This page utilizes SSL and/or TLS encryption to guarantee the security of data processing and for the protection of communication of confidential contents, such as for instance orders, login data or contact queries which you send to us as operator. An encrypted link can be recognized by the “https://” in the address field of the browser instead of “http://” and on the padlock icon in your browser field.

We utilize this technology to protect your conveyed data.

7.2 Data Collection during a Visit to the Website

When visiting our website for merely information gathering, in other words, when you do not register or pass on other information to us, then we only collect such data as is transferred to our server by your browser (in so-called “server-log-files”). By each call-up by yourself or an automated system, our website collects a series of general data and information. This general data and information is stored in the log-files of the server. The following can be recorded

1. types and versions of browsers used,
2. the operating system used by the accessing system,
3. the website from which the accessing system reaches our website (the so-called referrer),
4. the sub-websites which are directed to our website by an accessing/controlling system,
5. the date and time of access to our website,
6. a shortened internet protocol address (anonymized IP address),
7. the internet service provider of the accessing system.

By using this general data and information we are not able to draw any conclusions regarding your person.  This information is in fact needed in order to:

1. correctly deliver the contents of our internet website,
2. optimize the contents of our internet website as well as its promotion,
3. guarantee the permanent functionability of our IT system and the technology of our website as well as
4. be able to provide law enforcement agencies with the necessary information for prosecution in case of a cyber-attack.

The data and information gathered by us is, on the one hand, for statistical purposes with the objective of increasing data protection and the data security in our company in order to finally safeguard an optimal level of protection for the personalized data processed by us. The anonymous data of the server log-files are stored separately from the other personalized data provided by the person concerned. 

The legal basis for the data processing is Art. 6 (1) (1) (f) GDPR. Our legitimate interest follows from the purposes for data collection listed above.

8. Cookies

8.1 General Comments on Cookies

We use cookies on our website. These are small files automatically created by your browser and stored on your IT system (laptop, tablet, smartphone or similar) when you visit our website.

Information is stored in the cookies which, each time, reveal the link with the specific end device in use. This, however, does not mean that we thus receive direct knowledge of your identity.

The use of cookies serves on the one hand to help us to ensure that your use of our services is more pleasant. So we make use of so-called session-cookies in order to know that you have already visited individual pages of our website. They are automatically deleted once you have left our website.

In addition, we also make use of temporary cookies to optimize the ease of use. They are stored on your device for a certain pre-determined amount of time. Should you visit our page again in order to make use of our services, then it is automatically recognized that you have already visited us, which entries and settings you have made and there is no need for you to enter them again.

We also use cookies to gather statistics on the use of our website with the objective of analyzing the optimization of our services. When you visit us again, these cookies enable us to automatically recognize that you have already visited our site. These cookies are also automatically deleted after a pre-determined amount of time.

8.2 Legal Basis for the Use of Cookies

The data processed by cookies necessary for the proper function of the website are thereby essential to maintain our legitimate interests or those of a third party in accordance with Art. 6 (1) (1) (f) GDPR.

All other cookies are allowed when you have given us your permission to do so via our opt-in cookie banner within the meaning of Art. 6 (1) (a) GDPR.

9. Contents of our Internet Website

9.1 Establishing Contact / Contact Form

Within the framework of establishing contact with us (e.g. per contact form or email) personally identifiable data is compiled. The information compiled in the case of a contact form can be seen from the respective form. This data is gathered and utilized purely for the purpose of answering your queries and/or for establishing contact and the technical administration linked to it. The legal basis for the processing of data is our legitimate interest in answering your queries in accordance with Art. 6 (1) (f) GDPR. Should the objective of your contacting us be the conclusion of a contract, then the legitimate legal basis for processing is Art. 6 (1) (b) GDPR. Your data is deleted once the processing of your query is completed and this is also the case when it can be concluded from the circumstances that the facts concerned have been clarified and there is no legitimate obligation to preserve records.

9.2 Job Application Management / Career Centre

We gather and process personalized data from applicants for the purpose of dealing with job application procedures. Processing can be carried out by electronic methods. This is particularly the case when a job applicant transmits the suitable application documents to us electronically for instance by email or by a web form that can be found on the website. If we conclude an employment contract with an applicant, then the data transmitted for the purpose of coming to agreement on the employment relationship are stored in compliance with statutory regulations. If an employment contract with the applicant is not concluded, then the application documents are automatically deleted two months after notification of the decision to reject the application, provided that there are no special legitimate interests on our part. Other legitimate interest in this sense is, for example, the burden of proof in a procedure in accordance with the German Equal Treatment Act (AGG).

The legal basis for processing your data is Art. 88 GDPR in conjunction with § 26 (1) Federal Data Protection Act (BDSG).

10. Newsletter Transmission

10.1 Newsletter Transmission to Existing Customers

Once you have allowed us to make use of your email address when purchasing goods and/or services, we reserve the right to regularly send you special offers of similar goods and/or services to those you have already purchased by email. To do this, according to § 7 (3) Unfair Competition Act (UWG) we do not need to obtain special permission from you. In this respect the data processing is done solely based on our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. Should you, at the beginning, have objected to our using your email address for this reason, then there will be no transmission of any mail. You are entitled at any time and with effect for the future to object to the use of your email address for the aforementioned data protection officer by sending a message of objection to the responsible person mentioned at the beginning. You will only be charged with transmission costs in accordance with the basic rate. After receiving your objection, the use of your email address for advertising purposes will cease immediately.

10.2 Sendinblue

This website utilizes Sendinblue for the transmission of newsletters. The provider is the Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

Sendinblue is a service by which, among other things, the transmission of newsletters can be organized and analyzed. The data submitted by you in order to subscribe to the newsletter are stored on the servers of Sendinblue in Germany.

Should you not wish for analysis through Sendinblue then you must discontinue the newsletter. We have inserted a suitable link in each newsletter for you to use. In addition, you can cancel the newsletter directly on the website.

Permission given by you can be withdrawn at any time. You can prohibit processing by cancelling the newsletter. You can also prevent the storage of cookies by making the appropriate adjustment to the settings of your web browser. By deactivating JavaScript in your web browser or by installing a JavaScript blocker (e.g. https://noscript.net or https://www.ghostery.com) you can also prohibit the storage and transfer of personalized data. We would like to point out, however, that by using these methods, it is possible that not all the functions of our website will remain available.

With the assistance of Sendinblue we are able to analyze our newsletter campaigns. Thus we are able, for example, to see whether a newsletter edition has been opened and which links, where appropriate, have been clicked on. In this way we are able to determine which links have been clicked on particularly frequently.

In addition, we are able to determine whether, after opening/clicking, certain predefined actions have been performed (conversion rate). In this way we are able, for instance, to determine whether you have made a purchase after clicking onto the newsletter.

Sendinblue also enables us to sub-divide (cluster) newsletter recipients based on various categories. In this way the newsletter recipients can be divided into various groups, e.g. age, gender or place of residence. Which means that the newsletters can be better adapted to the different target groups.

Comprehensive information concerning the function of Sendinblue can be obtained from the following link: https://www.newsletter2go.de/features/newsletter-software/.

Data processing follows on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time. The legitimacy of any data processing operations which have already been carried out remain unaffected by the withdrawal of consent.

The data stored with us concerning the newsletter are stored by us up to your cancellation of the newsletter after which they are deleted from our servers as well as from the servers of  Sendinblue. Data stored by us for other reasons (e.g. email addresses for the members’ area) remain unaffected.

Full particulars can be gathered from Sindinblue’s data protection regulations under: https://www.newsletter2go.de/features/datenschutz-2/.

11. Our Activities in social Networks

So that we are able to communicate with you in social networks and inform you of our services we are represented by our own sites. When you visit one of our social media sites we, together with the respective social media platform, are mutually responsible for the processing operations initiated concerning personalized data in the sense of Art. 26 GDPR.

At the same time, we are not the original provider of these sites, but we rather utilize them purely within the framework of the opportunities offered to us by the respective provider.

Which is why we, as a precaution, point out that your data may possibly also be processed outside the European Union and/or the European Economic Area. Utilization can therefore contain risks for your data protection because the preservation of your rights e.g. to information, deletion, objection, etc., could become difficult and processing in the social networks frequently directly results in advertising or analysis of user behavior by the provider without our being able to influence them.  Should user profiles be created by providers then cookies are often set and/or the user profile is matched with your own member profile in social networks (providing you are logged in to them).

The described processing operations concerning personalized data follow in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order for us to be able to communicate with you and/or you are able to inform yourselves of our services by a contemporary method. Should you as user need to give your consent to the respective provider concerning data processing then this refers to the legal basis of Art. 6 (1) (a) GDPR together with Art. 7 GDPR.

Because we have no access to the data files of providers, we wish to point out that you should assert your rights (e.g. to information, correction, deletion, etc.) at best  directly with the respective provider. Below, we have listed the respective providers of social networks used by us giving you further information on processing your data in the social networks and the opportunity of exercising your right to enter an objection and/or right of withdrawal (so-called opt-out):

11.1 Facebook

(Joint) Person responsible for data processing in Europe:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data protection declaration (data policy):

https://www.facebook.com/about/privacy

Opt-out and advertising settings:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

https://de-de.facebook.com/about/privacy/

11.2 LinkedIn

(Joint) Person responsible for data processing in Europe:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Data protection declaration:

https://www.linkedin.com/legal/privacy-policy

Opt-out and advertising settings:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

11.3 YouTube

(Joint) Person responsible for data processing in Europe:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection declaration:

https://policies.google.com/privacy

Opt-out and advertising settings:

https://adssettings.google.com/authenticated

11.4 XING

(Joint) person responsible for data processing in Germany:

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland

Data protection declaration:

https://privacy.xing.com/de/datenschutzerklaerung

Information enquiries for XING members:

https://www.xing.com/settings/privacy/data/disclosure

12. Web Analysis

12.1 Google Analytics

We use Google Analytics on our website, a web analysis service of Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereafter known as „Google“). In this connection, pseudonymized user profiles are created and cookies (see point „Cookies“) are used. The information gathered by the cookies concerning your use of websites such as

1. browser type and version,
2. operating system used,
3. referrer URL (the page previously visited),
4. host name of the accessing computer (IP address),
5. time of server query,

are transmitted to a server of Google in the USA and stored there. The information is used to analyze usage of the website, to compile reports concerning website activities and to provide additional information concerning the services linked to internet usage for market research and need-based configuration of the internet website. This information is also passed on, where necessary, to third parties provided that this is legally prescribed or if and when this data is processed under contract. Under no circumstances is your IP address merged with any other data from Google. IP addresses are made anonymous so that attribution is not possible (IP-masking).

You can prevent the installation of cookies by making the respective adjustments in the browser software; nevertheless we would like to point out that in such a case, it might be that not all functions of the website can be used to their full extent.

These processing operations are only carried out when your express consent in accordance with Art. 6 (1) (a) GDPR has been given.

In addition, you can prevent the acquisition of the data gathered by the cookies and by your visiting the website (incl. your IP address) as well the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, in particular with browsers of mobile end devices, you can also prevent the acquisition of data by Google Analytics by clicking onto the following link: deactivate Google Analytics. By doing this, an opt-out cookie is set which prevents future collection of your data during visits to this website. The opt-out cookie is only valid in this browser and only for our website and is deposited on your device. If you delete cookies in this browser, you will need to set the opt-out cookie anew.

Further information concerning data protection in connection with Google Analytics can be found for example in the Google Analytics help site (https://support.google.com/analytics/answer/6004245?hl=de).

13. Plugins and other Services

13.1 Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for the illustration of interactive geographic maps, designed to visually represent geographic information. By using this service, for example, our location can be displayed and a possible approach be facilitated.

By simply calling up those sub-pages integrated in the maps from Google Maps, information concerning your utilization of our website (such as for instance your IP address) is transmitted to the server of Google in the USA and stored there. This happens regardless of whether Google allocates a user account onto which you have logged or whether there is no user account. When you are logged into Google your data is allocated directly to your account. If you do not want the allocation to be made with your Google profile, then you will need to logout of the Google user account. Google stores your data (even for non-logged-on users) as a user profile and analyses them. You are entitled to a right of objection against the creation of this user profile, whereby you will need to contact Google directly to exercise such a right.

If you are not agreeable to the future transmission of your data to Google within the framework of using Google Maps, then there is also the option of completely deactivating the web service of Google Maps by switching off the JavaScript application in your browser. Google Maps and thereby also the map display will not be usable on this internet page.

These processing procedures follow solely on the issuance of express consent in accordance with Art. 6 (1) (a) GDPR.

Google’s terms of use can be viewed under https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for  Google Maps can be found under https://www.google.com/intl/de_US/help/terms_maps.html

Comprehensive information concerning data protection in connection with the use of Google Maps can be found on Google’s internet site („Google Privacy Policy“): https://www.google.de/intl/de/policies/privacy/

13.2 YouTube (Videos)

We have integrated components from YouTube into this internet page. YouTube is an internet video portal which enables video publishers to upload video clips free of charge and gives other users the chance of observing, evaluating and commenting on them. YouTube allows the publication of all types of videos which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be called up via the internet portal.

The company operating YouTube is the YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC is a subsidiary company of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By calling up one of the individual pages of this internet site which are operated by us and in which a YouTube component (YouTube video) has been integrated, the internet browser on your IT system is automatically prompted to download a representation of the respective YouTube component from YouTube. Further information concerning YouTube can be obtained under https://www.youtube.com/yt/about/de/. Within the framework of this technical procedure, YouTube and Google get to know which concrete sub-pages of our internet site have been visited by you.

Provided that the person concerned is logged into YouTube at the same time, YouTube recognizes by means of a sub-page contained in a YouTube video, which concrete sub-page of our internet site you are visiting. This information is collected by YouTube and Google and  assigned to your YouTube account.

Via the YouTube components, YouTube and Google always receive notification that you have visited our internet site when you are on our website and logged into YouTube simultaneously; this occurs regardless of whether you click onto a YouTube video or not. Should you not want transmission of this information to YouTube and Google, then you can prevent such transmission by making sure you are logged out of your YouTube account before calling up our internet site.

These processing operations  follow strictly and solely by granting express permission according to Art. 6 (1) (a) GDPR.

The data protection regulations published by YouTube which are available under  https://www.google.de/intl/de/policies/privacy/, provide insight into the collection, processing and utilization of personalized information by YouTube and Google.

14. Your Rights as Person Concerned

14.1 Right to Confirmation

You have the right to demand confirmation from us whether data is being processed  relating to you as a concerned person.

14.2 Right to Information Art. 15 GDPR

You have the right to receive from us, at no charge, information stored relating to you as the person concerned as well as a copy of such data in accordance with the relevant legal regulations.

14.3 Right of Correction Art. 16 GDPR

You have the right to demand correction of any incorrect personalized data concerning you. In addition, you have the right, under consideration of the objectives of the processing, to demand the completion of any incomplete personalized data.

14.4 Deletion Art. 17 GDPR

You have the right to demand from us that the personalized data concerning yourself be immediately deleted provided that there is a statutory basis for it and provided that the processing and/or storage is not essential.

14.5 Restriction of Processing Art. 18 GDPR

You have the right to demand from us the restriction of processing when there is a legal requirement.

14.6 Data Portability Art. 20 GDPR

You have the right to receive the personalized information concerning yourself which you have made available to us in a structured, conventional and machine-readable format. You also have the right to transfer this information to another responsible person without  hindrance by us, to whom the personalized information has already been provided, provided processing  is based on the consent given in accordance with Art. 6 (1) (a) GDPR or Art. 9 Abs. 2 (a) GDPR or on a contract in accordance with Art. 6 (1) (b) GDPR and processing is made with the assistance of automated procedures, provided that the processing is not essential for the exercise of a task in the public interest or is made during the exercise of official authority which has been transferred to us.

Further, when exercising your right of portability in accordance  with Art. 20 (1) GDPR you have the right to effect the direct transfer of personalized information from one third party to another responsible person, provided that this is technically feasible and provided that the rights and freedoms of other persons are not compromised by them.

14.7 Right to Object Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personalized data concerning yourself based on Art. 6 (1) (e), (data processing in the public interest) GDPR or (f) (data needed for the performance of a task carried out for reasons of weighing interests).

This also applies to profiling based on these regulations in the sense of Art. 4 (4) GDPR.

If you make an objection, then your personalized data will no longer be processed, unless we can prove compelling and justified reasons for processing which reasons override your interests, rights and freedoms or when the processing serves the enforcement, exercise or defense of legitimate rights.

In individual cases we process personalized data to carry out direct advertising. You can make objection at any time against the processing of personalized data for reasons of such advertising. This also applies for profiling, provided it is in connection with such direct advertising. If you make your objection to processing for reasons of direct advertising clear to us then we will no long use personalized data for this purpose.

In addition, you have the right, arising from reasons provided by your particular situation, to make objection to the processing of your personalized data which are used for scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR  unless such processing is necessary for fulfilling tasks  for public benefit.

You are at liberty, in connection with the use of the services of the information society,  regardless of the directive 2002/58/EC, to exercise your right of objection by means of automated processes by which technical specifications are used.

14.8 Revocation of Consent under Data Protection Regulations

You have the right to revoke consent to the processing of personalized data at any time with effect for the future.

14.9 Making a Complaint with a Regulatory Authority

You have the right to make a complaint about our processing of your personalized data with the respective regulatory authority for data protection.

 14.10 Right of Information

In accordance with Art. 15 GDPR you have the right to demand the information concerning your personalized data which has been processed by us.  In particular you can demand information concerning the reasons for processing, the category of personalized data, the category of recipients to whom your data was or will be revealed, the planned period of storage, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data provided that these were not compiled by us, as well as the existence of automated decision-making including profiling and, as circumstances require, meaningful information concerning their details.

15. Routine Storage, Deletion and Blocking of Personalized Data

We process and store your personalized data only for that period of time which is necessary to achieve the purpose of storage or for the period of time planned for by the regulations governing our concern.

Should the reason for storage no longer be required or should the prescribed period expire, then the personalized data is routinely blocked or deleted in accordance with the legal regulations.

16. Duration of Storage of Personalized Data

The criteria for the duration of storage of personalized data is the respective legal retention period. Upon expiry of the period, the respective data is routinely deleted provided it is no longer needed to fulfill contractual obligations or for contract initiation.

17. Actuality and Alterations to the Data Protection Declaration

This data protection declaration is currently valid and is effective from: December 2021.

Through the ongoing development of our internet website and offers or by reason of altered regulatory or alternatively official guidelines it may become necessary to change this data protection declaration. The respective current data protection declaration on the website under „https://hack-formenbau.de/datenschutz“ can be called up and printed out.