Thank you for visiting our website and for your interest in our company. Protecting your privacy while you are using our website is an important matter for us. Whenever we use your personal data, we therefore adhere strictly to the applicable provisions of data protection legislation. Below you will find information about the collection and use of your personal data when you use our website. What is personal data? The term “personal data” is defined in the German Federal Data Protection Act (BDSG (new version)) and in the European General Data Protection Regulation (GDPR). According to this definition, it is individual pieces of information about the personal or material circumstances of a specific or identifiable natural person. It includes, for example, your name, address, telephone number, email address and date of birth. You can visit our website without providing any personal information. We do not store any personal data in this connection. We merely evaluate statistical data in order to improve our service, which does not allow any inferences to be drawn about your identity. Whenever personal data is collected on our site (such as your name, address or email), this is always done on a voluntary basis. This data is not passed on to third parties without your express consent.
On the following pages, we would like to inform you about how we process your personal data and the rights you have under data protection regulations.
The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection legislation of the Member States and other data protection provisions is:
Helmes Maschinenbau GmbH + Co. KG
Behälter-, Apparate- und Anlagentechnik
Bergstraße 1
57518 Betzdorf
Germany
Tel.: +49 (2741) 91070-0
E-Mail: info@helmes-betzdorf.de
Website: www.helmes-betzdorf.de
The controller’s data protection officer is:
Sven Giesler
desegna Business IT Solutions
Eickhoffstr. 6
57234 Wilnsdorf
Germany
Tel.: +49 (2737) 216179-0
E-Mail: datenschutz@desegna.de
Website: www.desegna.de
As a matter of principle, we collect and use personal data of our users only insofar as is required to provide a functioning website and for our content and services. The collection and use of the personal data of our users generally occurs only with the consent of the user. An exception to this applies in cases where obtaining consent in advance is not possible for practical reasons and processing of the data is permitted under the legal regulations.
Where we obtain the consent of the data subject for processing of personal data, Art. 6(1) point (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. If processing of personal data is required to fulfil a contract to which the data subject is a contracting party, Art. 6(1) point (b) GDPR serves as the legal basis. This also applies to processing which is necessary to take steps prior to entering into a contract. If processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1) point (c) GDPR serves as the legal basis. If processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1) point (d) GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and the interests, basic rights and freedoms of the data subject do not override the aforementioned interest, Art. 6(1) point (f) GDPR serves as the legal basis for processing.
The personal data of the data subject is erased or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond that point if this has been stipulated by the European or national legislator in ordinances, laws or other regulations under EU law to which the controller is subject. Data is also blocked or erased when a storage period specified by the aforementioned regulations expires, unless it is necessary to continue storing the data to conclude or fulfil a contract.
Every time our website is accessed, our system automatically collects data and information from the computer system of the end device being used for access.
The following data is collected in this context:
• Information about the browser type and version used
• The user’s operating system
• The date and time of access
• The user’s IP address
• Websites from which the user’s system accesses our site
The data is also stored in our system’s logfiles. The user’s IP addresses and other data that allows allocation of the data to a specific user are not included in this. This data is not stored with other personal data of the user.
The legal basis for temporary storage of the data is Art. 6(1) point (f) GDPR.
Temporary storage of the IP address by the system is necessary to facilitate delivery of the website to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
This purpose also includes our legitimate interest in the data processing in accordance with Art. 6(1) point (f) GDPR.
The data is erased as soon as it is no longer required to achieve the purpose of its collection. Where the data is collected to make the website available, this is the case when the session in question comes to an end.
Collection of the data to provide the website and storage of the data in logfiles is essential for the operation of the website. There is therefore no option to object on the part of the user.
Our website does not use any cookies.
A contact form is provided on our website that can be used for electronic contact. If a user makes use of this option, the data entered on the form is transmitted to us and stored. That data includes:
• Name
• Email address
• Message
At the time when the message is sent, the following data is also stored:
• Date and time of registration
Your consent to processing of the data is obtained in the course of the submission process, and reference is made to this privacy policy.
Contact via the email address provided is also possible. In this case, the user’s personal data transmitted with the email is stored.
The data is not passed on to third parties in this context. The data is used exclusively to process the conversation.
The legal basis for processing the data where the user’s consent has been obtained is Art. 6(1) point (a) GDPR.
The legal basis for processing the data that is transmitted when sending an email is Art. 6(1) point (f) GDPR. If the aim of the email is to conclude a contract, an additional legal basis for the processing is Art. 6(1) point (b) GDPR.
Processing of the personal data from the form serves the sole purpose of responding to the query. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure that our IT systems are secure.
DThe data is erased as soon as it is no longer required to achieve the purpose of its collection. For the personal data from the contact form and the data sent by email, this is the case when the conversation with the user in question is concluded. The conversation is concluded when the circumstances indicate that the matter in question has been finally clarified.
The personal data additionally collected during the submission process is erased at the latest after a period of seven days.
The user has the option to withdraw their consent to processing of the personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In a case such as this, the conversation cannot be continued. A further conversation is then only possible by post. All personal data that has been stored in the course of contact with the user is erased in this case.
Our website uses Google Fonts for consistent presentation of certain font types. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you access our site, your browser loads the fonts required directly from our webserver so that they can be displayed correctly on your end device. No data collection or transmission takes place in this context.
This website uses Google Maps to display maps and to generate a plan of how to find us. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
For the use of the functions of Google Maps, it is necessary to transmit the address details you enter in the route planning to a Google server in the USA, where it is stored. The provider of this site has no control over such data transmission.
At the time of submission of the route request, the following data is also stored:
• IP address
Your consent to processing of the data is obtained in advance, and reference is made to this privacy policy. You will find information about the data collected and the purpose of its collection in Google’s privacy policy at: https://www.google.com/intl/de/policies/privacy. The additional terms of use for Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html.
The legal basis for processing the data where the user’s consent has been obtained is Art. 6(1) point (a) GDPR.
Integration of Google Maps into our website serves the purpose of providing our customers with a simple tool to plan their journey to our company. The data entered in this connection is not passed on by us.
The data is erased as soon as it is no longer required to achieve the purpose of its collection. You can prevent transmission of your data to Google by disabling “JavaScript” in your browser. In that case, however, no maps can be displayed.
When your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to the controller:
You may demand from the controller confirmation of whether personal data relating to you is being processed by us.
If such processing is taking place, you may demand that the controller provide you with the following information:
(1) the purpose for which the personal data is being processed;
(2) the categories of personal data that are being processed;
(3) the recipients or categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
(4) the planned storage period for your personal data or, if specific information about this is not available, the criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of your personal data, a right to restriction of the processing by the controller and a right to object to that processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data, if the personal data was not collected from the data subject;
(8) the existence of an automated decision-making process including profiling in accordance with Art. 22(1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, the scope and the intended effects of processing of this sort for the data subject.
You have the right to demand information about whether your personal data is sent to a third country or an international organisation. In this context, you can demand to be notified of the appropriate guarantees in connection with the transmission pursuant to Art. 46 GDPR.
You have a right to rectification and/or completion in respect of the controller, insofar as your personal data that is being processed is inaccurate or incomplete. The controller must carry out the rectification promptly.
Under the following conditions, you may demand restriction of the processing of the personal data relating to you if:
(1) you contest the accuracy of the personal data concerning you, for a period that allows the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
(3) the controller no longer requires the personal data for the purpose of processing but you require it to establish, exercise or defend legal claims; or
(4) you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been established whether the legitimate interests of the controller override your reasons.
If the processing of your personal data is restricted, apart from its storage the data may be processed only with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the restriction of processing under the above requirements is limited, you will be notified by the controller before the restriction is lifted.
a) Erasure obligation
You may demand that the controller erase the personal data relating to you promptly, and the controller is obliged to erase the data promptly, if one of the following reasons applies:
(1) Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing was based in accordance with Art. 6(1) point (a) or Art. 9(2) point (a) GDPR and there is no other legal basis for the processing.
(3) You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
(4) Your personal data has been processed unlawfully.
(5) The erasure of your personal data is required to fulfil a legal obligation under EU law or the law of a Member State to which the controller is subject.
(6) Your personal data was collected in relation to an offer of information society services, in accordance with Art. 8(1) GDPR.
(7) Information provided to third parties
Where the controller has made the personal data relating to you public and is obliged pursuant to Art. 17(1) GDPR to erase it, the controller, taking account of available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.
b) Exceptions
The right to erasure does not exist insofar as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to comply with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Art. 9(2) and Art. 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
If you have exercised your right to rectification, erasure or restriction of processing in respect of the controller, the latter is obliged to notify each recipient to whom the personal data relating to you has been disclosed of that rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed of those recipients by the controller.
You have the right to receive the personal data relating to you which you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to which the personal data has been provided, where:
(1) the processing is based on consent pursuant to Art. 6(1) point (a) GDPR or Art. 9(2) point (a) GDPR or on a contract pursuant to Art. 6(1) point (b) GDPR and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for purposes of direct marketing, your personal data will no longer be used for those purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the time of its withdrawal.
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or significantly affects you in a similar way. This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and the controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
These decisions must not be based on the special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Art. 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points (1) and (3), the controller must implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or non-judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The supervisory body with which the complaint is lodged will inform the complainant about the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
We reserve the right to amend this privacy policy at any time, taking account of the applicable data protection regulations. Version as of December 2022.