Privacy Statement and Information regarding Data Protection

(last edit on April 25, 2023)

This privacy statement applies for the processing of all your personal data by HALLHUBER GmbH (for simplification hereinafter referred to as "HALLHUBER"). The protection of your personal data is very important to us. We respect your privacy and are thus committed to data protection. HALLHUBER provides this data privacy declaration in order to inform you about our privacy policy and privacy practices. In addition, we want you to understand how to determine, in what form your data are collected and for what purposes these data are used. We have structured our website in such a way that you can usually visit HALLHUBER online, without having to identify or provide any personal data. You can also retrieve this statement in the respectively updated form on our HALLHUBER web pages.

1. Responsibility for Data Processing and data protection officer

Responsible for the processing of your data is:
HALLHUBER GmbH,
Taunusstraße 21
80807 München
Germany

Customer Service: E-Mail service[@]hallhuber.com or over the phone

00800 – 99999 29 9

Monday to Friday, 08:00 a.m. - 08:00 p.m.
Saturday 09:00 a.m. - 04:00 p.m.

For efficient processing of your requests (e.g. deletion of data), please contact [datenschutz@hallhuber.de].

You can reach our data protection officer via the following contact details:

PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please name the company to which your inquiry relates. Please refrain from enclosing sensitive information such as a copy of an ID card with your inquiry.

2. Purposes and Legal Bases of Data Processing

HALLHUBER processes the data we receive from you in compliance with the European and national data protection regulations, in particular the European General Data Protection Regulation (GDPR). The purposes and legal bases for processing of your data are the following:

- Performance of a contract (purchase order and order execution)

- Recording of the delivery of goods and services

- Compliance with legal obligations

- Handling of complaints

- Implementation of the loyalty card program HALLHUBER CARD and/or maintaining an online account after registration or consent

- Newsletter dispatch via email after registration or consent

- Vested, justified interests in data processing pursuant to Art. 6 (1) f GDPR:

Promotional address of existing customers
Customer aftercare
Information regarding marketing campaigns and new products

3. Data Collection

This privacy statement relates to personal data, the collection of non-personal data as well as the statistical analyses based thereon.

Personal data

means information relating to an identified or identifiable natural entity; identifiable is any natural entity that can be identified directly or indirectly, in particular by way of an allocation to a specific identifier such as a name, an identification number, location data, an online identification or one or several special features, that are an expression of the physical, physiological, genetic, psychological, economic, cultural and social identities of such natural entity.

HALLHUBER uses personal data in order to be able and take into account your requirements and interests in a better way and offer better service. If you provide us with these personal data, you can be sure that we will use them exclusively for an optimization of HALLHUBER’s personal customer care. We highly appreciate the confidence placed in us. HALLHUBER will not sell or lend your personal data to third parties for marketing purposes or provide these data to any third party.

On some of the HALLHUBER websites you can order products or services, request information, subscribe to marketing or support documents, or apply for a job with HALLHUBER. On these pages you might be asked to specify the following personal data: Name, address, phone number, email address, user IDs and passwords, account and transaction data, credit card data, preferred contact address, training and career as well as application details.

In order to customize our websites, services and our communication and to improve our products and services, we might under some circumstances also ask you to specify your personal and professional interests, demographic data as well as the sharing of experiences that you had with our products or services. The provision of such additional pieces of information is voluntary.

Non-personal data

mean data regarding the website use and the service operation that cannot be allocated to any specific personal identity. HALLHUBER collects and analyses non-personal data in order to analyse the use of the websites by the respective visitors.

Non-personal data might also include pages, for instance, that are visited on the HALLHUBER websites, clear URL that are retrieved within any website, browser type or screen resolution. Most of the non-personal data are collected through cookies or other analysing technologies. The HALLHUBER websites are using cookies, web beacons and other technologies for data analysis and customization services.

4. Data Usage

HALLHUBER uses personal data in order to provide an improved service and be able to take into account your requirements and interests in a better way. An automated decision making including profiling is not taking place. Profiling only takes place for the purpose of advertising our own products.

We are particularly using your data to support your transactions and orders, to communicate with you, offer you services and support, keep you posted about current services and campaigns and to customize special offers and some of the HALLHUBER websites or tailor the offer to your needs. Personal data are processed in order processing and for customer care, and – where necessary – we also forward the to third parties such as companies supporting us in customer support, in the delivery of our products as well as the preparation and dispatch of our advertising materials (processing of data). Credit card data are exclusively used for processing payment transaction and for averting cases of fraud.

Personal data collected online can also be combined with information that you are providing to HALLHUBER through other sources, for instance our customer support.

Any personal data provided to HALLHUBER can be transmitted across boundaries within the European Economic Area for the purpose of data fusion and data storage as well as the efficient use of the CRM system.

Non-personal data are collected in order to get insight in the usability, performance and effectivity of the HALLHUBER website. By means of such data we can improve the user friendliness, usability and content of the website.

Customer Relationship Management / HALLHUBER CARD

HALLHUBER uses a system for the administration and care of customers referred to as "CRM". This also includes the HALLHUBER CARD customer loyalty programme (see terms and conditions at https://www.hallhuber.com/de/hallhuber-card/teilnahmebedingungen/).
Depending on the customer relation, we differentiate between

- visitor orders

- regular customers

- customers receiving newsletters

- loyalty card owners (HALLHUBER CARD)

The customer information is processed in this respect within the framework of the HALLHUBER CRM. Depending on the customer status, these data include name, address, contact data, shopping cart, orders, vouchers, complaints, payment methods and raffle participations.

With your consent, HALLHUBER will send newsletters to your e-mail address in order to inform you about its own products and services. You give your consent when you register for the newsletter. Once you have registered, you will receive an e-mail with a confirmation link. Simply click on this link to complete your subscription to the newsletter. You can revoke your registration and consent at any time, with effect for the future. One way to revoke your consent is by clicking the unsubscribe link at the end of each newsletter. It is also possible to revoke your consent by calling or e-mailing our Customer Service team (see section 1 above).

For users with an active newsletter subscription, HALLHUBER uses the newsletter tracking tool by Emarsys to analyse how the newsletter is used. By means of an embedded tracking pixel, HALLHUBER can recognise whether and when a newsletter was opened by a user and which links contained in the e-mail were opened by the user. This enables us to automatically determine which newsletter content our customers find especially interesting. We use the results from these pseudonymised analyses exclusively to better adapt prospective newsletters to our subscribers’ interests.

For users with an active newsletter subscription, HALLHUBER also uses the Web Extend tool by Emarsys in conjunction with cookies and JavaScript to record website usage and enable us to provide individualised content in the HALLHUBER newsletter. Pseudonymous profiling is carried out within this framework. All data collected by Web Extend on the HALLHUBER website and recorded in the Web Extend database is either anonymous (pre-login) or pseudonymised (post-login). You can revoke your consent to the use of the Web Extend function by sending an e-mail to our Customer Service team. This will not affect the other aspects of your active newsletter subscription.

E-mail marketing

For users with an active newsletter subscription an/or and active HALLHUBER card, HALLHUBER uses the newsletter tracking tool by Emarsys to analyse how the newsletter is used. By means of an embedded tracking pixel, HALLHUBER can recognise whether and when a newsletter or HALLHUBER card e-mail was opened by a user and which links contained in the e-mail were opened by the user. This enables us to automatically determine which e-mail content our customers find especially interesting. We use the results from these pseudonymised analyses exclusively to better adapt prospective e-mails to our subscribers’ interests.

For users with an active newsletter subscription and/or an active HALLHUBER card, HALLHUBER also uses the Web Extend tool by Emarsys in conjunction with cookies and JavaScript to record website usage and enable us to provide individualised content in the HALLHUBER newsletter or the HALLHUBER card e-mail. Pseudonymous profiling is carried out within this framework. All data collected by Web Extend on the HALLHUBER website and recorded in the Web Extend database is either anonymous (pre-login) or pseudonymised (post-login). You can revoke your consent to the use of the Web Extend function by sending an e-mail to our Customer Service team. This will not affect the other aspects of your active newsletter subscription or participation in the HALLHUBER card programme.

Purchase on account using Afterpay

Afterpay is a service operated by Arvato Payment Solutions GmbH, located at Gütersloher Str. 123, 33415 Verl, Germany. Within the strict confines of cases where you choose the purchase on account payment method, you agree to us providing information to Afterpay to process the purchase. Afterpay will evaluate your submissions and, in response to any legitimate request, will forward this information to credit agencies. Your data will of course be collected, processed and stored with the greatest care and in compliance with the applicable data protection regulations. You can find more information about this on the Afterpay website (www.afterpay.de/datenschutz).

Obtaining purchase ratings (eKomi)

In order to perpetually improve our internal quality management and our customer support, together with the independent rating service provider eKomi we offer our clients a simple possibility for rating their purchases. By sending your order you agree that along with the emails pertaining to your order you will also receive an email for rating your order. A link will bring you to a rating form, which you can use to provide us with your feedback. With the supply of your rating you agree that we can forward individual order data to eKomi, such as the ordered quantities, for the purposes described herein. Ratings will be verified by eKomi for inadmissible and/or unlawful content before being published. We reserve the right not to publish or to fully or partially remove ratings with such contents. For technical reasons it might take up to 24 hours until the rating ends up at eKomi in an anonymized way. As the quality of the incoming ratings is utterly important to us, it is only possible to render such rating once an article was indeed acquired in the online shop. eKomi shall take all necessary measures that serve the security and the protection of your data. With your forwarding of a rating you are granting us the non-exclusive, free of charge, permanent and irrevocable right to use, copy, revise, publish, translate, reproduce and integrate in other works your rating.

5. Cookies and third party media companies

In some circumstances, HALLHUBER uses third-party media companies to place advertising for HALLHUBER products and services on the websites of other companies. If you have visited a website on which HALLHUBER advertisements appear, the online media company concerned may place a cookie or a web beacon on your computer. In this way, the online media company can recognise the computer if it revisits the website and it can ascertain how advertising campaigns are received by users. This data is anonymous and is not linked to personal data on the user’s computer or to the HALLHUBER database. HALLHUBER does not have access to data that is collected by the online media company. To avoid online media companies placing cookies on your computer, you need to visit the websites of the individual media companies and remove the cookies according to instructions or set the appropriate cookie filter in your browser.

A “cookie” is a small data file that is transferred from a website to the hard disk of your computer. HALLHUBER sends cookies when you surf on our website, make a purchase, request or personalise information and when you register for certain services. If you accept cookies on our website, we have no access to your personal information but we can identify your computer. Cookies are generally divided into “session” and “permanent” cookies.

Session cookies do not remain on your computer when you leave our website or close your browser. The collected information helps us to analyse usage patterns and structures on our website. In this way, we can continue to optimise our website, by improving the content or personalisation, and make it easier to use.

Permanent cookies are those that remain on your computer. They are used to facilitate shopping, personalisation and registration services. Cookies can, for example, record your selected purchases while you continue shopping. Furthermore, you only need to enter your password once on websites that require a login. Permanent cookies can be manually removed by the user.

Most browsers accept cookies by default. Nevertheless, you can usually decline cookies or accept certain cookies selectively through your browser settings. If you deactivate cookies, in some circumstances certain features are no longer available to you on our website, and it is possible that some web pages will not display properly.

Web-Beacons

Some of the HALLHUBER websites and email newsletters in the HTML format are using web beacons in combination with cookies in order to produce overall statistics regarding the website use. A web beacon is an electronic, invisible image that is also referred to as one-pixel GIF or empty GIF. Web beacons can recognise specific information types on the Computer of any visitor, such as the cookie number of a visitor, time and date of the page view as well as a description of the page, on which the web beacon exists. You could make some of the web beacons unusable by refusing cookies that are associated with them.

Google

1) Google Remarketing

HALLHUBER uses Google AdWords Remarketing functions. We use it to promote this website in Google search results, as well as on third-party websites. The provider we use is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google”). For this purpose, Google places a cookie in your end device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. This cookie ID serves to clearly identify a web browser on a specific computer and not to identify a person. You can deactivate the use of cookies by Google by following the link provided and by downloading and installing the available plug-in: https://support.google.com/ads/answer/7395996?hl=en. You can find more information about Google Remarketing and Google’s data protection policy at: https://policies.google.com/technologies/ads?hl=en.

Google Conversions

We also use Conversion Tracking within the scope of the Google AdWords service. When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer or end device. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. The information collected via conversion cookies is used to compile conversion statistics for AdWords customers that have opted for conversion tracking.

You can prevent cookie storage by changing the settings in your browser software; we would, however, like to point out that by doing so, you might not be able to use all of the functions on this website to their full extent. In addition to this, you can disable interest-based ads on Google and interest-based ads on the web (within the Google Display Network) in your browser by enabling the "off" button at https://adssettings.google.com/anonymous?hl=en_GB&ref=privacy-policy or by opting out at www.aboutads.info/choices/. You can find more information about your Google setting options and data privacy regarding this at https://policies.google.com/privacy?hl=en&gl=de.

2) Google Tag Manager

HALLHUBER uses Google Tag Manager. This Google service allows website tags to be managed via an interface. The service only uses tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this information. Deactivation at the domain or cookie level will remain in effect for all tracking tags, as long as they are implemented with the Google Tag Manager.

3) Google Analytics

HALLHUBER uses Google Analytics to analyse website usage. The data collected is used to improve and align our website and advertising material with the needs of the users. Google processes the website usage data on our behalf and is contractually obligated to take measures to ensure the confidentiality of the processed data, which is transferred to a Google server in the USA. Google complies with the data protection provisions of the EU-US Privacy Shield agreement. Google Analytics stores cookies in its web browser for a period of two years following your last visit. These cookies contain a randomly generated user ID, with which you can be recognised during future visits to the website. The recorded data is stored together with the randomly generated User ID, making it possible to evaluate pseudonymous user profiles. This user-related data is automatically deleted after 38 months. Other data is stored in aggregated form for an unlimited period of time. If you do not agree with this data being collected, you can prevent this by installing the browser add-on to deactivate Google Analytics (this only needs to be installed once): https://tools.google.com/dlpage/gaoptout?hl=en

econda Web Analysis

For the purpose of designing and optimizing this website, anonymized or pseudonymized data is collected and stored by solutions and technologies of econda GmbH (Zimmerstraße 6, 76137 Karlsruhe, www.econda.de) and user profiles are created from this data using pseudonyms. Econda works on our behalf. A transfer of the data to third parties or a transfer to third countries is excluded.

The following data is collected:

Information on the device used
Information on pages viewed within the website visit
Anonymized information within the order process
Anonymized information on access data

Data processing purposes:

Analytics
Optimization

For this purpose, cookies can be used which enable the recognition of an Internet browser. However, user profiles are not merged with data about the bearer of the pseudonym without the visitor's express consent. In particular, IP addresses are rendered unrecognizable immediately after receipt, which makes it impossible to assign user profiles to IP addresses.

The analysis of user behavior is carried out in accordance with article 6 paragraph 1 letter f DSGVO. The company has a legitimate interest in carrying out a range measurement in order to continuously optimize the online presence.

Visitors to this website can object to this data collection and storage for the future at any time here: https://www.econda.de/en/data-protection/revocation-for-data-storage/

The objection applies only to the device and the web browser on which it was set, please repeat the process on all devices if necessary. If you delete the opt-out information from the cookie and local memory, anonymized or pseudonymized data will be transmitted to econda again.

Click here for further information: https://www.econda.de/en/data-protection/

trbo personalization, optimization and testing

We use the services of trbo GmbH, Leopoldstraße 41 in 80802 Munich. You can revoke your consent at any time with future effect. In the event of revocation, trbo undertakes to delete the personal data immediately, unless deletion is contrary to mandatory legal obligations to retain data. The revocation as well as the request for information can be made informally by post to trbo GmbH, Leopoldstraße 41, 80802 Munich, Germany, or at any time by e-mail to the electronic mailbox info@trbo.com. You can unsubscribe from the trbo tracking here: https://www.trbo.com/en/

You can object to the storage of your anonymised visitor data so that it will no longer be collected in the future. User profiles are collected in compliance with the provisions of the German Telemedia Act and created on the basis of user IDs (pseudonyms). The IP addresses are not used for this purpose and the analysis of user behaviour using the full IP addresses expressly does not take place. The user has the option of objecting to the creation of usage profiles by sending an e-mail to info@trbo.com. In the data protection provisions, trbo clearly refers to the creation of pseudonymous usage profiles and gives the user the option of objecting in a clear form. The pseudonymised usage data is automatically deleted at the user's request or if storage is no longer necessary.

Further information can be found in the data protection regulations of trbo, available at https://www.trbo.com/en/privacy-policy/.

Facebook

Visitor activity pixel

When you are visiting our page, we apply the visitor activity pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") on https://www.hallhuber.com/eu/. By means of said pixel we can track the users‘ actions once they have seen or clicked on a Facebook advertisement. In this manner we can measure the effectiveness of Facebook advertisements for statistical and market research purposes. The data thus collected remain anonymous for us, this means that we cannot look at or read out the personal data of individual users. These data, however, are saved and processed by Facebook, which we are notifying you about in accordance with our respective knowledge. Facebook has the possibility to connect these data with their Facebook accounts and use them also for their own advertising purposes in accordance with the data usage guideline of Facebook. For further information in this respect go to https://www.facebook.com/about/privacy/.

Pixel Opt-Out activate/deactivate

With the following button you can agree or disagree to the use of the Facebook "visitor action pixel”: Facebook Opt Out Facebook Opt In

General preference management regarding the user specific web targeting, Custom Audiences

Facebook uses cookies, web beacons and other storage technologies for the provision of measurements and target addressing of advertisements. Facebook thereby collects and receives information from our website and other spots on the Internet. If you want to object to such storing of information, you can use the following link: https://www.youronlinechoices.com/uk/. Communication tools of Facebook are used on our website, in particular Website Custom Audiences. The Facebook Cookie is addressed for the product Website Custom Audiences.

Further information regarding the purpose and extent of the data collection and the further processing and use of the data by Facebook as well as the setting possibilities for protecting your privacy can be derived from the Facebook data protection please refer to the Facebook data protection guidelines or use the following link to deactivate the tools: https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads

Contentsquare

If you give us your consent, interaction data of the website visitor is collected on this website by means of technologies of Content Square SaaS in pseudonymized form for marketing purposes and for optimizing the user-friendliness of the website by using cookies. The information generated by the cookie about your use of the website is usually transmitted to a Contentsquare server and stored there. The IP address transmitted by your browser is not merged with other data from Contentsquare. Contentsquare guarantees the shortening of your IP address so that all data is collected anonymously. The following cookies are stored by Contentsquare: _cs_id, to recognize returning website users (up to 13 months) _cs_s, a session cookie that is created at the beginning of the website visit, and deleted 30 minutes after the last page view The use of Contentsquare is based on your consent preferences.

6. Data Transmission

HALLHUBER will not sell or lease your personal data to any third party or provide them to any third party, respectively. HALLHUBER transmits customer data within the HALLHUBER organisation and to HALLHUBER’s business partners, however, exclusively for the purpose described in the section "How are your data used?".

HALLHUBER cooperates with third-party service providers and third-party providers in order to be able and ensure entire products, services and customers solutions as defined above in section "4. Data Usage". The Offerer and the Service Provider are obliged to treat all data obtained from HALLHUBER confidentially and exclusively use them for the purpose of the services and the business transactions on behalf of HALLHUBER. In order to provide our customers with the best possible service, HALLHUBER may change its service providers, or they conclude partner agreements with additional service providers.

In all other respects, HALLHUBER will not forward personal data to any third party without your explicit consent, unless they are obliged to do so because of legal provisions.

HALLHUBER could merge with another company or be taken over by any such company, and some or all of the corporate assets associated therewith could be taken over as well. If such a combination or takeover takes place, HALLHUBER will take every effort to inform you in due course in case of the transmission of your personal data to the merging company or the acquiring company so as to secure the optimal service in the future as well.

7. Duration of Data Processing

HALLHUBER uses your personal data for the duration of your business relation. This can have different characteristics, namely in case of

- participation in the loyalty card program HALLHUBER CARD and/or online accounts throughout the duration of the participation

- participation in the newsletter dispatch until the deregistration or the revocation of your rendered consent

- an online purchase up to two years following your last purchase

Criteria for defining the duration of the data processing are regularly your consent to such processing, the legal requirements regarding the retention periods, and our assessment from our CRM system.

In addition, we are obliged by law to retain invoice-relevant information for up to 10 years. These personal data may not be deleted even on your request.

8. Right to Information, Correction, Deletion and Restriction of Processing

HALLHUBER makes any effort to correctly store your personal data. We have implemented technologies, control processes and guidelines that are provided to ensure a correct storage of customer data. Insofar as you have registered for the respective functionalities, we are granting you access to your personal data and enable online access, so that you can adjust specific data whenever this is necessary. For protecting your private sphere and for your safety we also take the necessary measures for verifying your identity (for instance by requiring a password and a user ID) before granting access to your data. It might be that only authorized persons can access some pages of the HALLHUBER websites under certain circumstances, in that they insert a specific password or any other personal identification. You can show and change your personal data most effectively by going back to the website on which you originally provided your data, and by following the instructions on this website.

You have a right to information, correction and limited processing regarding the personal data stored by us. Deletion is taking place if there are no retention duties. As long as the retention obligations exist, a restriction of the processing can be arranged for.

9. Right to Object, Data Portability and Revocation of a Consent

You are entitled to object to data processing and to data portability. In case the data processing is based on a consent, for instance the consent to establish contact via email, this consent may be revoked at any time with effect for the future.

10. Right of Appeal before the Regulatory Authority

You are entitled to appeal to one of the regulatory authorities in charge. The contact data for your competent Regulatory Authority are the following:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority, BayLDA), Promenade 27, 91522 Ansbach.

11. Necessity of the Provision of Data

The provision of your personal data is necessary in order to carry out the business transaction, in particular with respect to your activities in the HALLHUBER Online Shop, the online account, the loyalty card program HALLHUBER CARD or the Newsletter. In case the data are not provided, the use of the aforementioned function is only partially possible or completely impossible.

12. Changes in this Statement and Your Consent

In case of updates in the Online Privacy Statement of HALLHUBER, we shall provide these changes and update the modification date of this document accordingly. In this way you will know at any time which data we are collecting, how the collected data are used and what options you have.

With the use of our Websites and the usage of our services you agree to the instant privacy statement.