Data privacy statement

We are pleased that you are visiting our website. Principally, using A1-Hydraulics’ websites is possible without providing any personal data. Depending on the service selected it may become necessary that you as the person concerned will send us personal data. In the case that the processing of your personal data is indispensable and there is no legal basis for such processing, we will obtain consent from the person concerned.

A1-Hydraulics GmbH employs the processing of personal data, such as name, street, house number, postcode, city, email address, or telephone number of the person in question, in accordance with the European General Data Protection Regulation as well as with current local statutory data protection regulations. In this data privacy statement we would like to explain to you the type, extend and purpose of the personal data processed by us. Furthermore, we would like to inform you about the rights you have vis-à-vis A1-Hydraulics GmbH with this data protection statement.

We implemented technical and organizational measures which shall ensure an as complete protection as possible of the personal data processed on this website. However, it is not possible to ensure absolute protection with web-based processes. Therefore, personal data may also be communicated by alternative means, e.g. by phone.

1. Definition

In this data privacy statement you will find terms which were employed by the European directive and regulatory authority when enacting the General Data Protection Regulation. Our data privacy statement shall be easily readable and comprehensible for each visitor as well as for our customers and business partners. In order to facilitate the comprehensibility beforehand, we will explain certain terms.

In our data privacy statement you will find, inter alia, the following terms among:

a) personal data
Personal data means any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) data subject
Data subject is any identified or identifiable natural person, whose personal data are being processed by the for the processing responsible controller.

c) processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

e) profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) pseudonymisierung
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g) controller
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

h) processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

j) third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k) consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of the controller

The responsible controller within the meaning of the European General Data Protection Regulation and further applicable data protection laws as well as other regulations concerning data protection within the member states of the European Union is:

A1 Hydraulics GmbH
Rudolf-Diesel-Str. 1
42477 Radevormwald
Germany

Phone: +49 2195 929 75-0
Fax: +49 2195 929 75-29

Email: info@a1-hydraulics.com
Website: https://www.a1-hydraulic.com

3. Name and address of the data protection officer

The data protection officer of the responsible controller is:

Sebastian Biermann
ANKA Rechtsanwaltsgesellschaft mbH
Kaninenberghöhe 50
45136 Essen
Germany

Tel.: +49 201- 2463660
E-Mail: datenschutz@a1-hydraulics.com
Website: https://www.datenschutzrecht-essen.de/

Data subjects may contact the data protection officer with queries and/or suggestions regarding data protection at any time.

4. Cookies

The website of A1-Hydraulics GmbH uses cookies. These cookies are text files which are saved by your browser and stored on your computer. Examples of browsers are Microsoft Internet Explorer, Google Chrome, or Mozilla Firefox.

A lot of cookies contain a so-called cookie ID. A cookie ID is the cookie’s unique identification. It consists of a character string due to which websites and servers may be matched to the specific browser that stored the cookie. Visited websites and servers recognize the data subject’s individual browser and distinguish between other browsers. Consquently, you may be recognized and identified due to the unique cookie ID.

By using cookies A1-Hydraulics GmbH is able to offer the visitors and users of its website user-friendly services, which would not be available without setting cookies.
Information and offers on our website may be optimized for the visitor by the set cookies. As already mentioned cookies enable us to recognize users of our website. Recognition facilitates the usage of our website for the user. For example, the user of a website with cookies does not need to enter his/her access data each time when revisiting, because they are stored on the cookie that is saved on user’s computer. When speaking of cookies it is also necessary to mention the shopping cart of online shops. These remember the virtual shopping cart’s contained articles by employing a cookie.

At any time you may prevent our website from setting cookies by appropriately adjusting your browser software. Thus, you object permanently to the setting of cookies. Already existing cookies may be deleted anytime by employing browser or other software programs. This function is available with all common browser softwares. If the setting of cookies in the employed browser is deactivated, it is possible that the features of our website cannot be fully used.

5. General collection of data and information

Every time when being accessed by a data subjet or an automated system our website collects a range of general data and information, which will be saved in the server’s log files. Information that may be collcted:

(1) the browser types and versions used,

(2) the operating system used,

(3) the website from that an accessing system arrives at our website,

(4) the subsites of our website that are navigated by the accessing system,

(5) the date and time oft he access to our website,

(6) your IP address,

(7) the internet service provider oft he accessing system, and

(8) other similar data and information which server to avert danger in the case of attacks on our IT infrastructure.

When using these information we do not draw conclusions about the data subject. These information are rather necessary in order to

(1) display the content of our website correctly,

(2) optimize the content of our website and our ads,

(3) ensure the permanent functionality of our IT systems and the technology hosting our website, and

(4) provide the law enforcement agencies with the necessary information for prosecution in the case of a cyber attack. These anonymously collected data and information will be analyzed statistically with the aim of improving the company’s data protection and data safety. This guarantees an ideal level of protection for the personal data processed by us. The anonymous data on the server’s log file are stored separately from all personal data provided by a data subject.

etracker

The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated by etracker on behalf of the provider of this website is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject to the strict German and European data protection laws and standards. In this regard, etracker was independently checked, certified and awarded with the ePrivacyseal data protection seal of approval.

The data processing is based on Art. 6 Section 1 lit f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, the data that may possibly allow a reference to an individual person, such as IP address, registration or device IDs, will be anonymised or pseudonymised as soon as possible. etracker does not use the data for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time by clicking on the slider. The objection has no disadvantageous consequences. If no slider is displayed, the data collection is already prevented by other blocking means.

Further information on data protection with etracker can be found here.

6. Contact via this website

In consequence of legal requirements our website contains particulars which entable you to establish quick electronical contact to our company as well as direct communication with us; this also includes an email address. As far as the data subject contacts us via email or contact form the transmitted personal data will be stored automatically. Such personal data transmitted on a voluntary basis by the data subject will be stored for processing or for contacting the data subject and will not be passed on to third parties.

7. Routine deletion and blocking of personal data

We process and store the data subject’s personal data only for the period of time that is required to fulfill the purpose for which it has been stored or as far as it is required by the European directive and regulatory authority or by another legislator to whose law we are subjected to.

In the case that the purpose of storage is no longer applicable or if the mandatory retention period required by the European directive and regulatory authority or another relevant legislator ceases, we shall delete or block all personal data in accordance with the legal regulations.

8. Legal rights of data subject

a) Right to obtain confirmation
Each data subject is entitled to obtain the confirmation from the controller of the existence or not of personal data concerning the same. If you want to claim the the right to obtain confirmation, you may contact a member the responsible controller’s staff or datenschutz@a1-hydrauics.com at any time.

b) Right of access to information

Anytime you may obtain from us free information on the personal data stored about you as well as a copy of these information. In addition, the European directive and regulatory authority grants you the following information:

the purposes of the processing
the categories of personal data concerned by the processing
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
the right to lodge a complaint with a supervisory authority
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

In addition, you are entitled to obtain information whether or not personal data have been transferred to a third country or to an international organization. Where this is the case, the data subject has the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

If a data subject cares to assert the right of information, he or she may contact a member of the controller’s staff or written an email to datenschutz@a1-hydraulics.com at any time.

c) Right to rectification

Likewise, you are entitled to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

In the case that a data subject intents to assert the right of rectification, he or she may contact a member of the controller’s staff or written an email to datenschutz@a1-hydraulics.com at any time.

d) Right to erasure (“right to be forgotten”)

Furthermore, the European directive and regulatory authority entitles you to obtain from the controller the erasure of personal data concerning you without undue delay, as far as one of the following grounds applies and where processing the data is not necessary:

the personal data have been unlawfully processed
the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1) of the GDPR, or point (a) of Article 9 (2) of the GDPR, and where there is no other legal ground for the processing.
the data subject objects to the processing pursuant to Article 21 (1) of the GDPR, or the data subject objects to the processing pursuant to Article 21 (2) of the GDPR.
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
the personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) of the GDPR.

Provided that one of the above mentioned reasons can be applied and you wish to have personal data which are stored with us erased, you may contact a member of the controller’s staff anytime. Our staff member shall arrange that your personal data will be erased without undue delay.

In the event that your personal data have been made public by us and we as the controller are obliged to erase the personal data pursuant to Article 17 (1) of the GDPR, we shall take reasonable steps - while taking account of available technology and the cost of implementation - including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data, where the processing is not necessary. A member of our staff shall take all necessary steps in each case.

e) Right to restriction of processing

You are entitled to obtain from the controller restriction of processing where one of the following applies:

you have objected to processing pursuant to Article 21(1) and the verification, whether the legitimate grounds of the controller override yours, is still pending.
the processing is unlawful and you oppose to the erasure of the personal data and request the restriction of their use instead.
we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims.
the accuracy of the personal data is contested by yourself, for a period enabling the controller to verify the accuracy of the personal data

Provided that one of the above mentioned points applies and you want to request the restriction of processing of the data stored with us, you may anytime contact a staff member of the controller. The employee of the A1-Hydraulics GmbH shall arrange for the restriction of processing.

f) Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6 (1) of the GDPR or point (a) of Article 9 (2) of the GDPR or on a contract pursuant to point (b) of Article 6 (1) of the GDPR; and the processing is carried out by automated means. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, while asserting your right pursuant to Article 20 (1) of the GDPR you are entitled to obtain that your personal data are transferred directly from one controller to another, where technically possible and as far as the rights and freedoms of others are not affected by this.

In order to assert your right to data portability you may contact a staff member of our company at any time.

g) Right to object

The European directive and regulatory authority entitles you to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) of the GDPR, including profiling based on those provisions.

In the case of objection we cease to process your personal data, unless we can provide compelling and legitimate reasons for processing. These have to outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In the case that you object to the processing of your personal data for direct marketing purposed, we shall not anylonger process your personal data for these purposes.

Furthermore, where A1-Hydraulics GmbH processes personal data for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) of the GDPR, you have the right to object, on grounds relating to your particular situation, to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In order to assert your right of objection you may contact any staff member of A1-Hydraulics GmbH directly. Moreover, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may also exercise his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling

Each data subject, whose personal data are processed, is granted the right by the European directive and regulatory authority not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

This shall not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between the data subject and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
(3) is based on the data subject’s explicit consent.

If the decision:
(1) is necessary for the conclusion or completion of a contract between the data subject and the controller;
(2) or, is made with your explicit consent

A1-Hydraulics GmbH shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

In the case that the data subject wants to assert his or her right with relation to automated decision-making, he or she may contact a staff member of A1-Hydraulics GmbH at any time.

i) Right to revoke the declaration of consent

Each data subject affected by the processing of personal data is granted the right by the European directive and regulatory authority to withdraw at any time his or her consent to the processing of his or her personal data.

If the data subject chooses to assert his or her right to revoke his or her declaration of consent, he or she may contact a staff member of A1-Hydraulics GmbH anytime.

9. Data protection concerning applications and the application process

We collect and process personal applicant data for the purpose of handling the application process. The processing may also be done electronically. This is often the case, if the applicant sends his or her application via email, or if the applicant uses an application form on the website for transferring his or her data to the controller. In the event of entering into an employment contract with an applicant, the transferred data shall be stored in consideration of legal regulations for the purpose of employment. If there is no contract of employment concluded with the applicant, applications shall be deleted automatically two months after the rejection of a job application has been declared; provided that no other legitimate interests of the controller oppose deletion. Along these lines other legitimate interest may be the burden of proof in proceedings under the General Equal Treatment Act.

10. Legal basis for processing

We consider point a of Article 6 (1) of the GDPR to be the legal basis for our company’s processings for which we seek consent for a specific purpsose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, e.g. processings that are necessary for the delivery of goods or the performance of any other service or compensation, the processing is based on point b of Article 6 (1) of the GDPR. The same is applicable to processing that is necessary for the performance of pre-contractual measures, e.g. in cases of inquiries to our products or services. Is our company subjected to legal obligations which demand the processing of personal data, e.g. the fulfillment of fiscal obigaionts, the processing is based on point c of Article 6 (1) of the GDPR. In some cases the processing of personal data may become necessary, if your vital interests or that of another natural person have to be protected. This would be the case, for example, if a visitior was hurt on our premises and in consequence his or her name, age, health insurance data, or further vital information had to be passed to a doctor, a hospital, or another third party. In this case the processing would be based on point d of Article 6 (1) of the GDPR. Thereon are based all proceedings which are not included in any of the legal bases mentioned before, if the processing is necessary for the preservation of a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processings are permitted particularly, because the European legislator especially mentioned them. In this respect he holds the view pursuant to recital 47 (2) of the GDPR that a legitimate interest could be assumed, if the data subject is a customer of the controller.

11. Legitimate interests in processing pursued by the controller or a third party

If the processing of personal data is based on point f of Article 6 (1) of the GDPR, our legitimate interest is the performance of our business in favor of the welfare of our employees.

12. Storage period in which personal data are stored

The storage period of personal data is based on the respective legal retention period. After the expiry of the retention period respective data shall be routinely deleted, provided that they are no longer necessary for the contractual performance or contractual initiation.

13. Legal or contractual regulations for the provision of personal data and possible consequences of non-provision

We inform you that the provision of personal data is partially mandatory (e.g. fiscal regulations) or may arise from contractual arangements (e.g. information on the contracting party). It may be necessary for the conclusion of a contract that you provide us with personal data, which in consequence have to be processed by us. For example, you are obliged to provide us with personal data, so that we conclude a contract with you. Non-provision of personal data would result in the non-realization of the contract. Before providing personal data you have to contact a member of our staff. Our staff explains to the data subject case-related, whether the provision of personal data is legally or contractually required, or necessary for the conclusion of the contract, if there is an obligation to provide personal data; and which consequences the non-provision of personal data might have.

14. Version of the data privacy statement

We reserve the right to modify our data privacy statement with legislative amendments. Therefore, always observe the date of the latest modification.

Last modification of the statement, 23.05.2018