Privacy policy
To us, you matter as a person, not just as a data record! That’s why we limit our data processing to only what is truly necessary—not just because the law requires it, but because it’s part of our philosophy.
Data Controller
HATEC GmbH | Oberharthausener Str. 14 | 94333 Geiselhöring/Pönning
You can contact our Data Protection Officer by email at datenschutz@neumeier-edv.de,, keyword: Hatec
Below you will find our privacy policy for:
Users of our Website
When you visit our website, your personal data is automatically processed. Here is an overview of the purposes of processing and the legal bases in accordance with Article 13 of the EU General Data Protection Regulation (GDPR):
Purpose(s) of data processing
Technical security and defense against attempted attacks
Legal basis(es) for reading/storing data from the user’s device
Section 25(2)(2) of the German Teleservices Data Protection Act (TTDSG)
Legal basis(es) for the processing of personal data
Legitimate interest in the reliable operation of the website: Art. 6(1)(f) GDPR
Recipients or categories of recipients to whom data is disclosed
Web hosting provider
Data transfer to a third country and legal basis(es) therefor
Does not occur
Data retention period or criteria for determining the retention period
14 days
Purpose(s) of data processing
Management of consents to data processing
Legal basis(es) for reading/storing data from the user’s device
Section 25(2)(2) TTDSG
Legal basis(es) for the processing of personal data
Legal obligation: Article 6(1)(c) GDPR in conjunction with the Federal Court of Justice (BGH) ruling of May 28, 2020 – I ZR 7/16
Recipients or categories of recipients to whom data is disclosed
None
Data transfer to a third country and legal basis(es) therefor
Does not occur
Data retention period or criteria for determining the retention period
14 days
Purpose(s) of data processing
To enable you to contact us
Legal basis(es) for reading/storing data from the user’s device
Section 25(2)(2) of the German Teleservices Data Protection Act (TTDSG)
Legal basis(es) for the processing of personal data
When you contact us, the purpose and legal basis for the processing are determined by the reason for your contact. For example, if you submit an inquiry to us or have a question as a customer, the legal basis is Article 6(1)(b) of the GDPR.
Recipients or categories of recipients to whom data is disclosed
Web hosting provider
Data transfers to a third country and the legal basis(es) for such transfers
Does not occur
Data retention period or criteria for determining the retention period
For as long as required by the respective purpose of processing.
Participants on Teams-Meetings
We use Microsoft Teams to conduct audio/video conferences, webinars (live events), online meetings, job interviews, etc. (hereinafter: “Teams meetings”).
The following privacy notice applies to Teams meetings initiated by us.
Note: If you use the Microsoft homepage to join Teams or download the Teams app, Microsoft is responsible for data processing. You can find Microsoft’s privacy statement here: https://privacy.microsoft.com/de-de/privacystatement
All information provided here applies solely to HATEC GmbH. In a Teams meeting, we take all technically feasible and reasonable security measures to protect your data. However, we have no control over how any external participants may handle the data you provide. Please keep this in mind when providing sensitive information.
Information on Data Protection
Purpose(s) of Data Processing
- Conducting meetings, presentations, and training sessions with prospective clients, customers, suppliers, and partners
- Job interviews
Legal basis(es) for data processing
- Processing to fulfill a contract or carry out pre-contractual measures: Art. 6(1)(b) GDPR
- Initiation of employment relationships: Section 26 of the Federal Data Protection Act (BDSG)
Recipients or categories of recipients to whom data is disclosed
Microsoft Ireland Operations Ltd., One Microsoft Place, S. County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Recipients may also include third parties if you instruct us to disclose data to them.
Data transfers to a third country and the legal basis(es) for such transfers
United States – European Union Standard Data Protection Clauses: Art. 46(2)(c) of the GDPR.
Data retention period or criteria for determining the retention period
90 days
Information for meeting participants
Chat data
You may have the option to use the chat feature. Any text you enter will be displayed to all participants.
Shared screen content
You may have the option to share your screen. Your screen content will be visible to all participants.
Shared files
You may have the option to share files. All participants may have the option to download and process these files. We will process your files only for the purpose for which you made them available.
Audio/Video Data
To enable audio and video functions, data from the microphone and video camera you use for Teams will be processed for the duration of the Teams meeting. You can turn off or mute the camera or microphone yourself at any time via the Microsoft Teams app. Audio or video data is generally not recorded; for external participants, the recording function is disabled in accordance with applicable policies.
Deviations from Standard Data Processing
If we intend to process data from Teams meetings in a manner that deviates from the information provided above, we will ask for your consent in advance.
Users of our Social Media Channels
Below, we provide an overview of which of your personal data is processed when you visit these profiles and the legal basis for such processing.
When you visit our profiles, your data is also processed by the operator of the respective social network. This applies even if you do not have an account yourself. Please note that the specific processing operations, the scope, and the purpose of the processing by the social network operator are not fully transparent to us either. Therefore, please always refer to the privacy policy of the respective operator as well.
When you visit our profiles on social networks, we or the social network process the following personal data:
- the data publicly available on your social media profile, such as (depending on your personal settings) username, place of residence, occupation, employer, etc., provided you are logged into your account
- Detailed information on what data the individual networks process can be found at the links to the respective providers listed above
- Your IP address
Please note that social networks set cookies. The data may also be transferred to other countries. You can find more detailed information about this on the respective provider’s website.
Another data controller (alongside us) for data processing is:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
We are joint controllers pursuant to Art. 26 of the GDPR as well as the Facebook Page Insights Addendum: https://www.facebook.com/legal/terms/page_controller_addendum
Information on data processing by Facebook can be found here:
https://www.facebook.com/privacy/explanation
Facebook combines your IP address with other information it collects via cookies and provides us, as the operator of the Facebook page, with statistical information about the use of this Facebook page (so-called Page Insights). This consists of aggregated data that reveals how users interact with the page. These Page Insights may be based on personal data collected by Facebook in connection with a user’s visit to or interaction with this Facebook page and its content. Facebook provides further information on this here: https://www.facebook.com/help/pages/insights.
Using Page Insights, we can perform an anonymous analysis of reach, page views, time spent watching video posts, user actions (likes, comments, sharing posts), as well as age, gender, and location (as specified by users in their respective Facebook profiles). For the analysis of reach, settings can be adjusted or appropriate filters applied regarding the selection of a time period, the examination of a specific post, and demographic groupings. This data is anonymized, aggregated, and abstracted. Therefore, no conclusions can be drawn about individual users. The analysis serves to optimize the content on the Facebook page for public relations purposes.
Your data is processed on the basis of Article 6(1)(f) of the GDPR.
Another party responsible (alongside us) for data processing is:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland
We are joint controllers pursuant to Art. 26 of the GDPR.
Information on data processing by Twitter can be found here:
https://twitter.com/de/privacy
Use of the Twitter microblogging service is at your own risk. This applies in particular to interactive features such as sharing or rating.
Twitter processes the data you have entered in your Twitter profile. This includes, among other things:
- Name
- Username
- Email address, phone number
- Contacts from your address book, if you sync it.
In addition, Twitter evaluates the content you share and analyzes it using analytics tools such as Twitter Analytics or Google Analytics. This includes topics that interest you, messages you send, your location (if applicable) based on geolocation data (e.g., GPS, Galileo), information about wireless networks, and your IP address. Twitter uses this information to provide you with advertisements or other content. We have no influence over the analysis and evaluation of this data; this takes place solely within Twitter’s sphere of control.
We can only view certain tweet-related activities related to our content. This includes, for example, the number of profile or link clicks generated by or on a specific tweet.
Please note that Twitter also collects information when you view content, even if you do not have a Twitter account. This includes log data such as your IP address, browser type, operating system, information about the previously visited website (referrer URL), your location (if applicable), your mobile carrier, information about your device, search terms you entered, and information collected via cookies. If you have a Twitter account, Twitter can associate this information with your profile and serve you advertisements based on this information. You can restrict Twitter’s data processing in your Twitter account settings.
We have no influence over the nature and scope of the data processed by Twitter, nor over its disclosure to third parties.
To the extent that we process your data on our Twitter profile, this is done on the basis of Article 6(1)(f) of the GDPR.
We use the technical platform and services provided by Xing, New Work SE, Dammtorstraße 30, 20354 Hamburg, to present our company and, where applicable, to establish contact with prospective clients or job applicants. The legal basis for this is Article 6(1)(f) of the GDPR.
When you contact us, the purpose and legal basis for processing are determined by the reason for your inquiry. For example, if you submit a request to us or have a question as a customer, the legal basis is Article 6(1)(b). In other cases, we may inform you separately about the data processing.
We have no influence over the content or scope of the use of the data collected by Xing.
Information on data processing by Xing can be found here: https://privacy.xing.com/de/datenschutzerklaerung
Applicants
Purpose(s) of data processing
- To assess whether you are a suitable candidate for the advertised position.
- To exercise or defend legal claims
Should data processing for other purposes be considered, we will inform you separately.
Legal basis(es) for the processing of personal data
- Initiation of an employment relationship: Section 26 BDSG
- Exercise or defense of legal claims: Art. 6(1)(f) GDPR
Recipients or categories of
recipients to whom data is disclosed
None
Data transfer to a third country and legal basis(es) therefor
Does not occur
Data retention period or criteria for determining the retention period
6 months
Prospective customers, customers, suppliers, business partners
Purposes and Legal Bases for Data Processing
- Initiation or performance of contractual relationships: Art. 6(1)(b) GDPR
- Compliance with legal requirements and retention obligations: Art. 6(1)(c) GDPR
- Exercise or defense of legal claims: Art. 6(1)(f) GDPR
- Promotion of our products: Art. 6(1)(f) GDPR
If we process data based on consent, we will inform you separately when obtaining your consent. The legal basis in such cases is Art. 6(1)(a) GDPR.
Recipients or categories of recipients to whom data is disclosed
As a general rule, your personal data will only be disclosed to third parties if this is necessary for the performance of the contract with you, if the disclosure is permissible based on a balancing of interests within the meaning of Article 6(1)(f) of the GDPR, we are legally obligated to do so, or you have given your consent in this regard. We naturally comply with the legal requirements regarding data transfers to third parties.
Data transfer to a third country and the legal basis(es) for such transfer
Does not occur
Data retention period or criteria for determining the retention period
We process your data only for as long as is necessary for the respective purpose. To the extent that statutory retention obligations exist (e.g., under commercial or tax law), the relevant personal data will be stored for the duration of the retention obligation. The legal basis for this is Article 6(1)(c) of the GDPR in conjunction with the respective legal provision.
Newsletter
Purpose(s) of data processing
Information about HALLER Metall’s products, events, and news.
Legal basis(es) for the processing of personal data
Consent of the data subject
Recipients or categories of recipients to whom data is disclosed
Service providers for newsletter distribution
Transfer of data to a third country and legal basis(es) for such transfer
Does not occur
Data retention period or criteria for determining the retention period
Until consent is revoked
Your Rights as a Data Subject
Right to Withdraw Consent
If we process your data based on your consent, you have the right, pursuant to Art. 7(3) of the GDPR, to withdraw this consent at any time with future effect. The lawfulness of the processing carried out up until your withdrawal remains unaffected.
Right of Access
You may request access to your personal data processed by us in accordance with Article 15 of the GDPR. In your request for access, please specify your inquiry to help us compile the necessary data. Please note that your right of access may be restricted under certain circumstances in accordance with statutory provisions (in particular Section 34 of the German Federal Data Protection Act (BDSG)).
Right to Rectification
If the information concerning you is not (or no longer) accurate, you may request rectification pursuant to Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.
Right to Erasure
You may request the erasure of your personal data under the conditions set forth in Article 17 of the GDPR. Your right to erasure depends, among other things, on whether we still need the data concerning you to comply with legal requirements.
Right to Restriction of Processing
Under the provisions of Article 18 of the GDPR, you have the right to request a restriction on the processing of the data concerning you.
Right to Data Portability
Under Article 20 of the GDPR, you have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller.
Right to Object
If the processing of your personal data is based on Article 6(1)(f) of the GDPR, you have the right to object to the processing under Article 21 of the GDPR.
Right to lodge a complaint
If you believe that we have failed to comply with data protection regulations when processing your data, you may lodge a complaint with a data protection supervisory authority pursuant to Article 77 of the GDPR. The Bavarian State Office for Data Protection Supervision (www.baylda.de) is the competent authority for us.
