Data protection declaration
Data Protection Notice
This notice provides you with information on how Wimmer Hartstahl GmbH & Co KG („we“) will process your personal data.
1. Purposes for which we process your data
We will process your personal data set out in Point 2 below for the following purposes:
a) Business relationship with our customers and suppliers
b) To transmit information to those interested in our products / the company
c) To meet legal or regulatory requirements
d) To handle rental activities in our online rental park
e) To handle sales activities using our bucket configurator
f) To transmit information to us via our contact forms
g) For employee administration
h) To select applicants
We collect this data during the ordering process or in connection with inquiries or contacts made to us.
The provision of your personal data is voluntary, but necessary to process an order.
2. Processed data categories and legal basis of the processing
We process the following categories of your personal data exclusively on the basis of your consent according to Article 6(1)(a) of the General Data Protection Regulation (“GDPR"):
Address and contact data (including telephone numbers and e-mail addresses) as well as job-related data (for example the specialist field in which you work):
name, address, e-mail address, telephone number, position, place of work. We do not process any sensitive (“special”) data categories, with the exception of data from employees of Wimmer Hartstahl GmbH & Co KG and applicants.
3. Transfer of your personal data
In principle, we do not transmit any data provided to us for processing to third parties without the express consent of the person concerned or
without expressly announcing this transmission.
4. Retention periods
Your personal data will only be kept for as long as we reasonably consider necessary for achieving the purposes set out under Point 1 above and as is permissible
under applicable law. We will, in any case, retain your personal data for as long as there are statutory retention obligations or potential legal claims are not yet time-barred.
5. Your rights in connection with your personal data
Under applicable law, you have, among others, the rights (under the conditions set out in applicable law): (i) to check whether and what kind of personal data we hold
about you and to request copies of such data, (ii) to request correction, supplementation or deletion of your personal data that is inaccurate or processed in non-compliance with applicable requirements, and (iii) to request us to restrict the processing of your personal data, (iv) in certain circumstances, to object for legitimate reasons to the processing of your personal data or to revoke consent previously granted for the processing, (v) to request data portability, (vi) to know the identities of third parties to which your personal data are transferred, and (vii) to lodge a complaint with the competent authority.
6. Our contact details
Please address your requests or questions concerning the processing of your personal data to:
Wimmer Hartstahl Gesellschaft m.b.H. & Co. KG
E-Mail: [email protected]
Last updated in July 2021
Legal information about the website
Legal information about the website
1. General information on data collection on the website
Who is responsible for data recording on this website?
The data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice of this website.
How do we record your data?
On the one hand, your data is recorded when you provide it to us. This can be data that you enter in a contact form, for example.
Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time the page was accessed). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is recorded to ensure that the website works without any errors. Other data can be used to analyse your user habits.
What rights do you have regarding your data?
You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to demand the correction, blocking or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right of appeal to the responsible supervisory authority.
Analysis tools and third-party tools
2. Data protection information and mandatory information
We would like to point out that data transmission over the internet (e.g. communication by e-mail) may pose the risk of security loopholes. Complete protection of data against access by third parties is not possible.
The person responsible for data processing on this website is:
Wimmer Hartstahl Gesellschaft m.b.H. & Co. KG
E-Mail: [email protected]
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your saved personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address provided in the legal notice.
Objection to promotional emails
Objection to the use of contact data published within the scope of the legal notice obligation to send promotional content and information material not expressly requested is hereby submitted. The operators of this website expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, for example by spam e-mails.
Data recording on our website
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purposes of processing the enquiry and in the event of follow-up enquiries. We will not pass on this data without your consent.
The processing of the data entered in the contact form is thus exclusively based on your consent (art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal notification sent to us by e-mail is sufficient. The legality of the data processing operations carried out up to revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically sends to us. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time the server was accessed
This data is not merged with other data sources. The recording of this data takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – for this purpose, the server log files must be recorded.
Analysis tools and advertising
Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc., located in 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. To do so, cookies are used that enable an analysis of their users' use of the website. The information generated hereby is transmitted to a Google server in the USA and stored there. You can prevent this by setting up your browser so that no cookies are stored.
We have concluded a corresponding contract for commissioned data processing with the provider.
Our concern in terms of the GDPR (legitimate interest) is the improvement of our offer and our website. Since the privacy of our users is important to us, the user data is anonymised.
Your IP address is recorded, but pseudonymised immediately (e.g. by deleting the last 8 bits). This means that only a rough localisation is possible.
The data processing is carried out on the basis of the legal provisions of § 96 para 3 TKG as well as Art. 6 para. 1 lit a (consent) and/or f (legitimate interest) of the GDPR.
In addition, Google is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The user data is stored for a period of 14 months.
Detailed information on data use by Google, your options for settings and objection can be found on the following Google websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use websites or apps of our partners"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.de/settings/ads "Manage information Google uses to show you ads").
We use the maps of the "Google Maps" service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use fonts ("Google Fonts") from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Our concern in terms of the GDPR (legitimate interest) is the improvement of our offer and our website. Therefore, we use the marketing and remarketing services (in short "Google marketing services") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google's marketing services allow us to target advertisements for and on our website to present users with only those ads that potentially reflect their interests. To do this, Google executes a code and uses so-called (re-)marketing tags, with the help of which an individual cookie is stored in the user's browser. For more information on cookies, see above.
The information collected may also be combined by Google with such information from other sources. If the user subsequently visits other websites, they can be shown ads tailored to their interests.
In addition, Google Analytics collects the IP address of the user, but pseudonymises it immediately (e.g. by deleting the last 8 bits). This means that only a rough localisation is possible; the ads are not managed and displayed for a specific person, but for the cookie holder, regardless of who this cookie holder is. Of course, this does not apply if a user has explicitly allowed Google to process the data without this pseudonymisation. The information collected about users by Google marketing services is transmitted to Google and stored on Google's servers in the USA. The user's IP address is not merged with the user's data within other Google offerings.
Furthermore, we use the "Google Tag Manager" to integrate the analysis and marketing services offered by Google into our website and to manage them centrally.
You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as to the setting of Hotjar tracking cookies on other websites by clicking this opt-out link.
Our pages use features from CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.
We operate online presences within social networks and platforms in order to be able to communicate with users, interested parties and customers who are active there. When accessing these networks and platforms, the terms and conditions and data processing policies of the respective operators apply.
Use of Facebook social plugins
Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offer as well as the analysis, optimisation and economic operation of our website. Therefore, we use social plugins ("plugins") of the social network facebook.com, which are operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can display content such as graphics, text articles or videos or elements for interaction on the website. You can recognise them by one of the Facebook logos ("f" on a corresponding background, the "thumbs up" sign or the terms "Like" or "Gefällt mir") or the marking with the addition "Facebook Social Plugin". You can view the list and appearance of Facebook social plugins here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
LinkedIn is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).
Videos from the "YouTube" platform may also be integrated into our website. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
You are basically entitled to the rights of information, deletion, restriction, data portability, withdrawal and objection. If you believe that the processing of your data violates data protection legislation or your data protection rights have otherwise been violated in any way, you can submit a complaint to the supervisory authority. In Austria, this is the data protection authority.