Privacy policy


1. An overview of data protection

1.1 General

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

1.2 Data collection on our website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form. Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.

1.3 Analytics and third-party tools

When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. We will inform you below about how to exercise your options in this regard.

2. General information and mandatory information

2.1 Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy. The use of our website is usually possible without providing personal information. The collection of any personal data (such as name, address or email address), is as far as possible, done on a voluntary basis. This data is not forwarded to third parties without your explicit consent. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens. 

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

2.2 Notice concerning the party responsible for this website

The party responsible for processing data on this website is: 

HECO-Schrauben GmbH & Co. KG
Dr-Kurt-Steim-Str. 28
D-78713 Schramberg
Telephone: 0049 7422 989 0
Fax: 0049 7422 989 200
E-mail: info@heco-schrauben.de

Registration number: HRA 480655, District court: Stuttgart 
VAT REG NO.: DE 142646601

Responsible for contents:

Achim Carstanjen 

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

2.3 Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

2.4 Right to file complaints with regulatory authorities

If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

2.5 SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

2.6 Information, blocking, deletion

As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.

2.7 Opposition to promotional emails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

3. Data protection officer

For questions about privacy, please contact the following e-mail address: 

HECO-Schrauben GmbH & Co. KG
Dr.-Kurt-Steim-Straße 28
D-78713 Schramberg
Germany
E-Mail: datenschutzbeauftragter@heco-schrauben.de

4. Data collection on our website

4.1 Cookies

Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser. 

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site. 

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website. 

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 paragraph 1, letter f of DSGVO. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.

4.2 Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are: 

  • Browser type and browser version 
  • Operating system used Referrer URL 
  • Host name of the accessing computer 
  • Time of the server request 
  • IP address 

These data will not be combined with data from other sources. The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

4.3 Contact form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission. We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

4.4 Registration on this website

You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration. 

We will process the data provided during registration only based on your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed. We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

4.5 Competitions

Competitions are offered on our website. If you wish to participate, we will ask you for identification and contact details (e.g. name, date of birth, postal address, email address, etc. and any other information required for participation in the competition, e.g. answers to competition questions, etc.). We use this information in particular to carry out the competition. Further details are contained in the respective conditions of participation for the competitions. If you have consented to this in the course of participation, we shall also use the information for the purposes stated in the declaration of consent. Such processing operations are carried out on the basis of statutory provisions which allow us to process personal data to the extent necessary to carry out the competition (e.g. Art. 6 (1) (b) GDPR), or because you have given your consent (Art. 6 (1) (a) GDPR).

4.6 Newsletter

On our website, you have the opportunity to subscribe to our company newsletter. We use it to inform our customers and business partners at regular intervals about our company’s products and services. For subscription to our newsletter we use the double opt-in method. This means that after registration we send you an email to the address you have provided requesting confirmation that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to verify your registration and, if necessary, clarify potential misuse of your personal data. The only mandatory information required to send the newsletter is your email address. The provision of additional, separately marked, data is voluntary and is used to be able to address you personally. To send our newsletter, we use the CleverReach service (CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany). CleverReach is used to organise and manage the dispatch of our newsletter. For this purpose, the data you sent us when registering for our newsletter is stored by CleverReach in Germany or Ireland. CleverReach does not access the data of newsletter recipients and uses the data for no other purpose than for sending our newsletter. Further information is available in the privacy notice of CleverReach at: http://www.cleverreach.com/de/datenschutz/. By means of a tracking pixel contained in our newsletter, we can identify when an email has been opened and whether links contained in the email have been clicked on. This information is required to measure the success of our newsletter campaigns. 

We base this data processing on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent to the storage and processing of your data within the scope of the dispatch of the newsletter at any time. To do this, simply click on the unsubscribe link in the newsletter itself or send a message to the following email address: info@heco-schrauben.de.

5. Social media

5.1 XING Plugin

Our website uses features provided by the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING features is accessed, your browser establishes a direct connection to the XING servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored nor is usage behavior evaluated. For more information about data protection and the XING Share button, please see the XING privacy policy at https://www.xing.com/app/share?op=data_protection.

5.2 Facebook

HECO-SCHRAUBEN GMBH & CO. KG uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here. 

Please note that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). Facebook processes personal data about your account, your IP address and the end devices you use; cookies are used for data collection. These are small files that are stored on your end devices. Facebook describes in general terms what information it receives and how it is used in its data usage policy. Here you will also find information on how to contact Facebook, how to object and the setting options for advertisements. The data usage policy is available under the following link: https://www.facebook.com/about/privacy Facebook's complete data policy can be found here: https://www.facebook.com/full_data_use_policy 

The information may be used by Facebook to provide us, as the operator of the Facebook pages, with statistical information such as gender and age distribution about the use of the Facebook page. In addition, Facebook can show you further information or advertisements according to your preferences. Facebook provides more information on this at the following link: https://www.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and, if necessary, transferred to countries outside the European Union. 

If you visit one of our websites on social media (e.g. Facebook), you will trigger the processing of your personal data. In this case, together with the operator of the respective social network, we are responsible for the data processing operations within the meaning of Article 26 of the General Data Protection Regulation (GDPR), provided that we actually make a joint decision with the operator of the social network about data processing and we also have an influence on the data processing. As far as possible, we have concluded joint responsibility agreements with the operators of the social networks in accordance with Art. 26 GDPR, in particular the Page Controller Addendum from Facebook Ireland Ltd. You can generally assert your rights (right of access pursuant to Art. 15 GDPR, right to rectification pursuant to Art. 16 GDPR, right to erasure pursuant to Art. 17 GDPR, right to restriction of processing pursuant to Art. 18 GDPR, right to data portability pursuant to Art. 20 GDPR and right to complain pursuant to Art. 77 GDPR) against us and against the operator of the respective social network (e.g. Facebook).
Please note that despite the shared responsibility under Art. 26 GDPR with the operators of social networks, we do not have full control over the data processing of the individual social networks. The company policy of the respective provider has a significant influence on our options. In the event of the assertion of data subject rights, we could only forward these requests to the operator of the social network. 

How Facebook uses the data from visiting Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page are passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us. 

When accessing a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (for example as part of the “registration notification” function); Facebook may be able to assign IP addresses to individual users. 

If you are currently logged in to Facebook as a user, there is a cookie with your Facebook ID on your end device. This enables Facebook to understand that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons integrated into websites, Facebook is able to record your visits to these website pages and to assign them to your Facebook profile. Based on this data, content or advertising can be offered that are tailored to you. 

If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. In this way, Facebook information, through which you can be identified immediately, is deleted. This allows you to use our Facebook page without revealing your Facebook ID. If you access the interactive functions of the page (like, comment, share, messages etc.), a Facebook login screen appears. After you have logged in, Facebook will again recognise you as a specific user. Alternatively, you can use a different browser than usual to visit our Facebook page. 

Information on how you can manage or delete existing information about yourself can be found on the following Facebook support pages: https://www.facebook.com/about/privacy# 

As the provider of the information service, we do not collect and process any further data from your use of our service. You can find the current version of this privacy statement under the item “Data policy” on our Facebook page.

5.3 Instagram

HECO-Schrauben GmbH & Co. KG uses the technical platform and services of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA for the information service offered here. 

Please note that you use this Instagram page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting or rating). 

When you visit our Instagram page, Instagram records your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. 

The data collected about you in this context is processed by Instagram Inc. and, if necessary, transferred to countries outside the European Union Instagram describes in general terms what information it receives and how it is used in its data policy. Here you will also find information on how to contact Instagram and the setting options for advertisements. The data policy is available under the following link: https://help.instagram.com/519522125107875 

How Instagram uses the data from visiting Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Instagram and is not known to us. 

When accessing an Instagram page, the IP address assigned to your end device is transmitted to Instagram. According to Instagram, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Instagram also stores information about the end devices of its users (for example as part of the “registration notification” function); Instagram may be able to assign IP addresses to individual users. 

If you are currently logged in to Instagram as a user, there is a cookie with your Instagram ID on your end device. This enables Instagram to understand that you have visited this page and how you have used it. This also applies to all other Instagram pages. Via Instagram buttons integrated into websites, Instagram is able to record your visits to these website pages and to assign them to your Instagram profile. Based on this data, content or advertising can be offered that are tailored to you. 

If you want to avoid this, you should log out of Instagram or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. In this way, Instagram information, through which you can be identified immediately, is deleted. This allows you to use our Instagram page without revealing your Instagram ID. If you access the interactive functions of the page (like, comment, messages etc.), an Instagram login screen appears. After you have logged in, Instagram will again recognise you as a specific user. 

Information on how you can manage or delete existing information about yourself can be found on the following Instagram help section. 

As the provider of the information service, we do not collect and process any further data from your use of our service. You can find the current version of this privacy statement under the item “Data policy” on the respective Instagram page. 

If you have any questions about our information service, you can contact us at Tel. +49 (0)7422/989-0 or info@heco-schrauben.de.

6. Analytics

6.1 Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.com/intl/en/policies/privacy/.

IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser Plugin
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. 

Objecting to the collection of data 
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. . For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.


6.2 General information

You can configure your browser in such a way that you are informed about the placement of cookies and only allow cookies in individual cases, exclude cookies in certain cases or generally exclude them and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

7. Plugins and tools

7.1 YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.

7.2 Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.

8. Changes to the privacy statement

We reserve the right to amend this privacy statement if the legal situation or this online offer or the type of data collection changes. However, this only applies to declarations relating to data processing. If the consent of the user is necessary or elements of the privacy statement include a provision on the contractual relationship with users, amendment of the privacy statement can only take place after obtaining the user’s consent. 

Therefore, please inform yourself about this privacy statement if necessary, especially if you share personal data. 

Last revised: 17/05/2018

Data protection for competitions

(as at: 31 December 2019) 

HECO-Schrauben GmbH & Co. KG, Dr.-Kurt-Steim-Strasse 28, D-78713 Schramberg, Germany (hereinafter referred to as “HECO” or “we”) conducts the competition. It is subject to these Conditions of Participation. 

 This privacy policy applies to the processing of personal data in the context of the implementation of the Promotion. In addition, please refer to HECO's general privacy policy (see www.heco-schrauben.com). 

1. Data Controller

The Data Controller in terms of data protection law is: 

HECO-Schrauben GmbH & Co. KG
Dr.-Kurt-Steim-Strasse 28
78713 Schramberg, Germany
Tel.: +49 (0) 7422 / 989-0
Fax: +49 (0) 7422 / 989-200
Email: info@heco-schrauben.de 

2. Data Protection Officer 

The Data Protection Officer of the Data Controller is: 

HECO-Schrauben GmbH & Co. KG
Data Protection Officer
Dr.-Kurt-Steim-Strasse 28 
78713 Schramberg, Germany 
Email: datenschutzbeauftragter@heco-schrauben.de 

3. Scope and purpose of data processing

To participate in the competition, you must send us your email address and postal address using the entry form/entry card.
Therefore we collect the following data from you when you participate: 

  • Email address 
  • Name
  • Postal address 

We process the personal data of the participants to carry out the competition, among other things to determine whether you are eligible to participate and to identify and notify the winners. If we do not collect the above-mentioned data, it is not possible to participate in the competition or to contact us with regard to a prize notification. 

The winners will be determined randomly at the end of the competition and will be notified by HECO via email. The main prize will be handed over to the winner personally by our sales force; for this purpose an appointment must be made.

In the event of a prize notification, we shall also request the following data from you via email: 

  • Telephone number
  • Mobile number 

The aforementioned data, which we request from you in the event of a prize notification, is used exclusively for sending the respective prize. If you do not provide us with the aforementioned data, it will not be possible to send the prize. 

4. Legal basis of the processing 

Execution of the competition 

 The data processing serves exclusively the purpose of carrying out the competition. The legal basis for the processing of personal data for the performance of this obligation is therefore Art. 6 (1( (b) of the EU General Data Protection Regulation (GDPR). 

Results monitoring 

We evaluate the results of the competition to measure the efficiency and relevance of the campaign. We determine the success of the competitions in order to continuously improve our marketing activities in your interest and plan new measures. 

The legal basis for the described data processing is Article 6 (1) (f) of the General Data Protection Regulation (balancing of interests based on our interest in measuring the success of competitions).

5. Recipients of the personal data

As a matter of principle, the data collected by us will not be disclosed to third parties, unless the disclosure is necessary for the execution of the competition or the sending of the prize and a data transfer permit under data protection law has been obtained. 

HECO also uses other service providers for the processing of personal data, including the sending of emails, the storage of your data in a secure computer centre and the maintenance and analysis of databases. 

All processors have been carefully selected, support HECO strictly in accordance with instructions and only receive access to your data to the extent and for the required period of time that is necessary for the provision of the services or to the extent to which you have consented to the data processing and use. 

6. Storage duration

After the end of the competition, your data processed by us within the framework of the competition will be deleted within 60 days. 

7. Your rights as a data subject

Insofar as HECO processes personal data from you, you are in particular entitled to the following rights as a data subject under data protection law. 

Information 

You can request information about your personal data processed by us. 

Rectification

If your information is not (or is no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request completion. 

Erasure 

You have the right to demand the erasure of your data. Please note that a claim for erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to store your data. 

Restriction of processing 

You have the right to request that the processing of your data be restricted. Please note that a claim for restriction of processing depends on the existence of a legitimate reason. 

Objection 

If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing of your data for reasons arising from your particular situation. In the event of an objection, we will no longer process your data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

Right to complain 

You are entitled to lodge a complaint with the competent data protection supervisory authority if you do not agree with the processing of your data. 

Data portability 

You have the right to receive personal data that you have given us in an electronic format.

Contact
HECO-Topix-Plus
Multi-Monti-Plus