1. An overview of data protection
1.2 Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form. Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
1.3 Analytics and third-party tools
When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. We will inform you below about how to exercise your options in this regard.
2. General information and mandatory information
2.1 Data protection
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
2.2 Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Registration number: HRA 480655, District court: Stuttgart
VAT REG NO.: DE 142646601
Responsible for contents:
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
2.3 Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
2.4 Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
2.5 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
2.6 Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
2.7 Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
3. Data protection officer
For questions about privacy, please contact the following e-mail address:
HECO-Schrauben GmbH & Co. KG
4. Data collection on our website
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
4.2 Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be combined with data from other sources. The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
4.3 Contact form
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission. We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
4.4 Registration on this website
You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.
We will process the data provided during registration only based on your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed. We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.
Competitions are offered on our website. If you wish to participate, we will ask you for identification and contact details (e.g. name, date of birth, postal address, email address, etc. and any other information required for participation in the competition, e.g. answers to competition questions, etc.). We use this information in particular to carry out the competition. Further details are contained in the respective conditions of participation for the competitions. If you have consented to this in the course of participation, we shall also use the information for the purposes stated in the declaration of consent. Such processing operations are carried out on the basis of statutory provisions which allow us to process personal data to the extent necessary to carry out the competition (e.g. Art. 6 (1) (b) GDPR), or because you have given your consent (Art. 6 (1) (a) GDPR).
On our website, you have the opportunity to subscribe to our company newsletter. We use it to inform our customers and business partners at regular intervals about our company’s products and services. For subscription to our newsletter we use the double opt-in method. This means that after registration we send you an email to the address you have provided requesting confirmation that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to verify your registration and, if necessary, clarify potential misuse of your personal data. The only mandatory information required to send the newsletter is your email address. The provision of additional, separately marked, data is voluntary and is used to be able to address you personally. To send our newsletter, we use the CleverReach service (CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany). CleverReach is used to organise and manage the dispatch of our newsletter. For this purpose, the data you sent us when registering for our newsletter is stored by CleverReach in Germany or Ireland. CleverReach does not access the data of newsletter recipients and uses the data for no other purpose than for sending our newsletter. Further information is available in the privacy notice of CleverReach at: http://www.cleverreach.com/de/datenschutz/. By means of a tracking pixel contained in our newsletter, we can identify when an email has been opened and whether links contained in the email have been clicked on. This information is required to measure the success of our newsletter campaigns.
We base this data processing on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent to the storage and processing of your data within the scope of the dispatch of the newsletter at any time. To do this, simply click on the unsubscribe link in the newsletter itself or send a message to the following email address: firstname.lastname@example.org.
5. Social media
5.1 XING Plugin
HECO-SCHRAUBEN GMBH & CO. KG uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.
Please note that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). Facebook processes personal data about your account, your IP address and the end devices you use; cookies are used for data collection. These are small files that are stored on your end devices. Facebook describes in general terms what information it receives and how it is used in its data usage policy. Here you will also find information on how to contact Facebook, how to object and the setting options for advertisements. The data usage policy is available under the following link: https://www.facebook.com/about/privacy Facebook's complete data policy can be found here: https://www.facebook.com/full_data_use_policy
The information may be used by Facebook to provide us, as the operator of the Facebook pages, with statistical information such as gender and age distribution about the use of the Facebook page. In addition, Facebook can show you further information or advertisements according to your preferences. Facebook provides more information on this at the following link: https://www.facebook.com/help/pages/insights
The data collected about you in this context is processed by Facebook Ltd. and, if necessary, transferred to countries outside the European Union.
If you visit one of our websites on social media (e.g. Facebook), you will trigger the processing of your personal data. In this case, together with the operator of the respective social network, we are responsible for the data processing operations within the meaning of Article 26 of the General Data Protection Regulation (GDPR), provided that we actually make a joint decision with the operator of the social network about data processing and we also have an influence on the data processing. As far as possible, we have concluded joint responsibility agreements with the operators of the social networks in accordance with Art. 26 GDPR, in particular the Page Controller Addendum from Facebook Ireland Ltd. You can generally assert your rights (right of access pursuant to Art. 15 GDPR, right to rectification pursuant to Art. 16 GDPR, right to erasure pursuant to Art. 17 GDPR, right to restriction of processing pursuant to Art. 18 GDPR, right to data portability pursuant to Art. 20 GDPR and right to complain pursuant to Art. 77 GDPR) against us and against the operator of the respective social network (e.g. Facebook).
Please note that despite the shared responsibility under Art. 26 GDPR with the operators of social networks, we do not have full control over the data processing of the individual social networks. The company policy of the respective provider has a significant influence on our options. In the event of the assertion of data subject rights, we could only forward these requests to the operator of the social network.
How Facebook uses the data from visiting Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page are passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.
When accessing a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (for example as part of the “registration notification” function); Facebook may be able to assign IP addresses to individual users.
If you are currently logged in to Facebook as a user, there is a cookie with your Facebook ID on your end device. This enables Facebook to understand that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons integrated into websites, Facebook is able to record your visits to these website pages and to assign them to your Facebook profile. Based on this data, content or advertising can be offered that are tailored to you.
If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. In this way, Facebook information, through which you can be identified immediately, is deleted. This allows you to use our Facebook page without revealing your Facebook ID. If you access the interactive functions of the page (like, comment, share, messages etc.), a Facebook login screen appears. After you have logged in, Facebook will again recognise you as a specific user. Alternatively, you can use a different browser than usual to visit our Facebook page.
Information on how you can manage or delete existing information about yourself can be found on the following Facebook support pages: https://www.facebook.com/about/privacy#
As the provider of the information service, we do not collect and process any further data from your use of our service. You can find the current version of this privacy statement under the item “Data policy” on our Facebook page.
HECO-Schrauben GmbH & Co. KG uses the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA for the information service offered here.
Please note that you use this Instagram page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting or rating).
When you visit our Instagram page, Instagram records your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page.
The data collected about you in this context is processed by Instagram Inc. and, if necessary, transferred to countries outside the European Union Instagram describes in general terms what information it receives and how it is used in its data policy. Here you will also find information on how to contact Instagram and the setting options for advertisements. The data policy is available under the following link: https://help.instagram.com/519522125107875
How Instagram uses the data from visiting Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Instagram and is not known to us.
When accessing an Instagram page, the IP address assigned to your end device is transmitted to Instagram. According to Instagram, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Instagram also stores information about the end devices of its users (for example as part of the “registration notification” function); Instagram may be able to assign IP addresses to individual users.
If you are currently logged in to Instagram as a user, there is a cookie with your Instagram ID on your end device. This enables Instagram to understand that you have visited this page and how you have used it. This also applies to all other Instagram pages. Via Instagram buttons integrated into websites, Instagram is able to record your visits to these website pages and to assign them to your Instagram profile. Based on this data, content or advertising can be offered that are tailored to you.
If you want to avoid this, you should log out of Instagram or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. In this way, Instagram information, through which you can be identified immediately, is deleted. This allows you to use our Instagram page without revealing your Instagram ID. If you access the interactive functions of the page (like, comment, messages etc.), an Instagram login screen appears. After you have logged in, Instagram will again recognise you as a specific user.
Information on how you can manage or delete existing information about yourself can be found on the following Instagram help section.
As the provider of the information service, we do not collect and process any further data from your use of our service. You can find the current version of this privacy statement under the item “Data policy” on the respective Instagram page.
6.1 Google Analytics
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.com/intl/en/policies/privacy/.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
6.2 General information
You can configure your browser in such a way that you are informed about the placement of cookies and only allow cookies in individual cases, exclude cookies in certain cases or generally exclude them and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
7. Plugins and tools
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.
7.2 Google Maps
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.
8. Changes to the privacy statement
We reserve the right to amend this privacy statement if the legal situation or this online offer or the type of data collection changes. However, this only applies to declarations relating to data processing. If the consent of the user is necessary or elements of the privacy statement include a provision on the contractual relationship with users, amendment of the privacy statement can only take place after obtaining the user’s consent.
Therefore, please inform yourself about this privacy statement if necessary, especially if you share personal data.
Last revised: 17/05/2018
Data protection for competitions
(as at: 31 December 2019)
HECO-Schrauben GmbH & Co. KG, Dr.-Kurt-Steim-Strasse 28, D-78713 Schramberg, Germany (hereinafter referred to as “HECO” or “we”) conducts the competition. It is subject to these Conditions of Participation.
1. Data Controller
The Data Controller in terms of data protection law is:
2. Data Protection Officer
The Data Protection Officer of the Data Controller is:
HECO-Schrauben GmbH & Co. KG
Data Protection Officer
78713 Schramberg, Germany
3. Scope and purpose of data processing
To participate in the competition, you must send us your email address and postal address using the entry form/entry card.
Therefore we collect the following data from you when you participate:
- Email address
- Postal address
We process the personal data of the participants to carry out the competition, among other things to determine whether you are eligible to participate and to identify and notify the winners. If we do not collect the above-mentioned data, it is not possible to participate in the competition or to contact us with regard to a prize notification.
The winners will be determined randomly at the end of the competition and will be notified by HECO via email. The main prize will be handed over to the winner personally by our sales force; for this purpose an appointment must be made.
In the event of a prize notification, we shall also request the following data from you via email:
- Telephone number
- Mobile number
The aforementioned data, which we request from you in the event of a prize notification, is used exclusively for sending the respective prize. If you do not provide us with the aforementioned data, it will not be possible to send the prize.
4. Legal basis of the processing
Execution of the competition
The data processing serves exclusively the purpose of carrying out the competition. The legal basis for the processing of personal data for the performance of this obligation is therefore Art. 6 (1( (b) of the EU General Data Protection Regulation (GDPR).
We evaluate the results of the competition to measure the efficiency and relevance of the campaign. We determine the success of the competitions in order to continuously improve our marketing activities in your interest and plan new measures.
The legal basis for the described data processing is Article 6 (1) (f) of the General Data Protection Regulation (balancing of interests based on our interest in measuring the success of competitions).
5. Recipients of the personal data
As a matter of principle, the data collected by us will not be disclosed to third parties, unless the disclosure is necessary for the execution of the competition or the sending of the prize and a data transfer permit under data protection law has been obtained.
HECO also uses other service providers for the processing of personal data, including the sending of emails, the storage of your data in a secure computer centre and the maintenance and analysis of databases.
All processors have been carefully selected, support HECO strictly in accordance with instructions and only receive access to your data to the extent and for the required period of time that is necessary for the provision of the services or to the extent to which you have consented to the data processing and use.
6. Storage duration
After the end of the competition, your data processed by us within the framework of the competition will be deleted within 60 days.
7. Your rights as a data subject
Insofar as HECO processes personal data from you, you are in particular entitled to the following rights as a data subject under data protection law.
You can request information about your personal data processed by us.
If your information is not (or is no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request completion.
You have the right to demand the erasure of your data. Please note that a claim for erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to store your data.
Restriction of processing
You have the right to request that the processing of your data be restricted. Please note that a claim for restriction of processing depends on the existence of a legitimate reason.
If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing of your data for reasons arising from your particular situation. In the event of an objection, we will no longer process your data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to complain
You are entitled to lodge a complaint with the competent data protection supervisory authority if you do not agree with the processing of your data.
You have the right to receive personal data that you have given us in an electronic format.