Privacy policy
Click here for the data privacy policy governing Hans Hennig GmbH: www.hanshennig.de
We are delighted that you are visiting our website. Data protection and data security are very important to us when users visit our website. We would like to take this opportunity to inform you about the personal data we capture when you visit our website and what we use this data for.
We kindly ask you to read through this Privacy Policy regularly because changes in legislation or in our internal processes might mean we have to amend it.
Pursuant to the General Data Protection Regulation and other national data privacy laws in the member states of the EU and other data privacy regulations, the data controller is:
Körting Hannover GmbH
Badenstedter Strasse 56
30453 Hanover, Germany
Germany
Tel.: +49 (0)511 2129 0
E-mail: info@koerting.de
Website: www.koerting.de
1. Personal data
Personal data is information that can be used to obtain personal or factual information about you, such as your name, address, telephone number or e-mail address. Information that we cannot associate with you is not personal data.
2. Capturing, processing and using personal data
We only use your personal data to give you comprehensive service via the website, or to answer your request for contact. You can also use our website without having to disclose your identity to us.
3. Statistical analysis
We do not carry out any direct analysis that is connected with you as a person. We reserve the right to carry out a statistical analysis of anonymised data sets. Such analysis is performed to improve the website and for statistical purposes. In the process, general information is recorded, for example, when one of the pages on our website was viewed or which page was visited the most frequently. This data does not allow any conclusions to be drawn about the user’s identity.
4. Sharing personal data with third parties
Your personal data will not be shared with third parties for purposes other than those listed below. We only share your personal data with third parties in the following cases:
- When you have given your consent to us doing so as outlined in art. 6, section 1, sentence 1 a of the GDPR,
- When, pursuant to art. 6, section 1, sentence 1, b of the GDPR, processing is necessary to perform a contract with you,
- When, pursuant to art. 6, section 1, sentence 1, c of the GDPR, processing is required to comply with a legal obligation,
- When pursuant to art. 6, section 1, sentence 1, f of the GDPR, sharing the data is required and there is no reason to assume that you have an overriding legitimate interest in your data not being shared.
In our company, access to personal data is granted to people who require it to fulfil our contractual and legal obligations. People we appoint to process orders, service providers and agents can receive data for these purposes.
Recipients of personal data outside of our company may include: direct subsidiaries and our agents, payment service providers, data deletion services, tax and legal advisory services, entities that request information from us in order to enforce the law or in order to prosecute administrative offences within the scope of their legal powers (e.g. police, public prosecutors, courts).
5. Cookies/analysis tools and plug-ins
5.1. Cookies
This website uses cookies. A cookie is a small file (text file), which your browser stores on your device when instructed to do so by a website you visit. The purpose of cookies is to make the website more user friendly, effective and secure. We place these cookies, which are called first-party cookies.
This website uses different types of cookies. Some of these cookies are placed by third parties.
GDPR states that we can store cookies on your device if these are required to operate it. We require your consent to all other types of cookies. The legal basis on which we process your personal data with the aid of cookies depends on whether we ask you for your consent. If you consent to the use of cookies, the legal basis for processing your data is the consent given (art. 6, section 1, a, GDPR). Otherwise, the data processed with the aid of required cookies will be captured on the basis of our legitimate interests (e.g. in order to operate our website without any problems and in a proper manner and to make improvements to it) pursuant to art. 5 section 1, f GDPR.
You can change or revoke your consent at any time by clicking on the cookie information on our website.
5.1.1. Essential cookies
When accessing our website, users are informed that essential cookies are used. In this context, a reference is also made to this Privacy Policy.
Essential cookies help make using a website possible by enabling basic functions such as page navigation and access to website forms. The website cannot function properly without these cookies.
We have a legitimate interest in storing these cookies to ensure that we can provide our services without any technical errors and in the best possible way. Pursuant to art. 6, section 1, f of the GDPR, the cookies are stored automatically and in an anonymised way.
When you close your browser, these cookies are deleted again automatically (these are called session cookies).
The majority of browsers accept cookies automatically by default. If you do not wish our cookies to be stored on your device, please disable cookie storage for our website on your browser or set your browser so that cookies are not stored on your device by default.
5.1.2. Performance cookies
When visiting our website, users are informed that cookies are used for performance purposes and consent to processing personal data used in this context is obtained. In this context, a reference is also made to this Privacy Policy.
Performance cookies are used to improve the quality of our website and its content. Performance cookies tell us how the website is used and therefore allow us to improve our platform consistently.
The legal basis for processing personal data using cookies for performance purposes is art. 6 section 1, a of the GDPR if users have given their consent.
After consent is granted, the data is captured in an anonymised manner and only used for Google Analytics.
5.1.3. Marketing cookies
When viewing our website, users are informed that cookies are used for marketing purposes and their consent to processing of personal data used in this respect is obtained. In this context, a reference is also made to this Privacy Policy.
Marketing cookies come from external advertising companies and are used to collect information about the websites visited by users, e.g. to create target-group-driven advertising for users. Therefore, this data is shared with third parties.
The legal basis for processing personal data using cookies for marketing purposes is art. 6 section 1 a of the GDPR, if users have given their consent.
After consent has been granted, the data is captured and only used to embed our YouTube videos.
5.2. Integration of analysis tools and plug-ins
5.2.1. Google Analytics
This website uses Google Analytics, a web-analysis service belonging to Google Inc. (hereinafter referred to as Google).
Google Analytics uses cookies, which are text files placed on your device and help the website analyse how you use it. The information generated by the cookie about how you use the website is usually forwarded to a Google server in the US and stored there. IP anonymisation has been enabled on this website so that, within the member states of the European Union or other signatory states to the Agreement on the European Economic Area, the Google users’ IP addresses are truncated beforehand. The full IP address will only be forwarded to a Google server in the US and truncated there in exceptional cases; therefore, we would like to point out that, in certain circumstances, data processing as part of Google Analytics may also take place in the US outside EU jurisdiction. Please note the following in this regard: according to the European Court of Justice, there is currently no “adequate protection” to EU standards of personal data processed in the US. In particular, there is a risk that your data may be processed by US authorities for monitoring and control purposes and that you may not have any legal recourse to object to these measures.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage. The IP address sent by Google Analytics from your browser will not be combined with other Google data.
We only use Google Analytics if you have given us your consent. If you have provided consent to the use of performance cookies on our website, we would like to point out that Google may also combine the usage data with information and personal data from other Google services, such as search history, personal accounts, user data from other devices, and any other data Google has about the user.
You can prevent cookies being stored by making an appropriate setting in your browser software; however, we would like to point out that you might not be able to use all this website’s functions if you do so.
Furthermore, you can also opt out of Google capturing the data generated by the cookie and relating to your usage of the website (including your IP address) and to Google processing this data by downloading and installing the browser plugin available under the following link. The current link is:
https://tools.google.com/dlpage/gaoptout?hl=en
Alternatively, you can prevent Google Analytics capturing the data by disabling the performance cookies in the cookie settings.
Please note that you will have to make the setting on each device and for each different browser.
This website uses the "gat._anonymizeIp();" function, which ensures that IP addresses are anonymised when data is collected. Therefore, no link can be made to a particular person.
The following data can be captured:
- IP address, in a truncated, anonymised form
- Referrer URL
- The frequency and duration of visits to pages
- Pages and subpages visited
- Information about location
- Device information
- Browser information
- Usage data
- Date and time of the visit
For further information about the third party’s data controller, Google Ireland Limited, contact:
Address: Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Terms: https://marketingplatform.google.com/about/analytics/terms/us/
Privacy policy: https://policies.google.com/privacy?hl=en-US
5.2.3. Google Tag Manager
If you have consented to the use of Google Analytics (for more details see point 5.2.1), we will use the Google Tag Manager in conjunction with Google Analytics. The Google Tag Manager allows us to manage website tags in an organised and simplified way via an interface so that we can, for instance, integrate Google Analytics. The Google Tag Manager tool is a domain that does not use cookies itself and captures no personal data. The Google Tag Manager deploys others tags (e.g. Google Analytics), which, in turn, might capture data. However, the Google Tag Manager does not handle this data. If Google Analytics is disabled at a domain or cookie level, it is also disabled for all tracking tags that the Google Tag Manager deploys.
For further information about the third party’s data controller, Google Ireland Limited, contact:
Address: Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Privacy policy: https://policies.google.com/privacy?hl=en-US
Google Tag Manager terms of service: https://marketingplatform.google.com/intl/en/about/analytics/tag-manager/use-policy/
5.2.3. YouTube plug-in
We use YouTube.com to add our own videos and make them available to the public. YouTube is an offering provided by a third party not affiliated to us, Google Ireland Limited: Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
We embed videos stored on YouTube directly in our website. In this process, YouTube website content is displayed in parts of the browser window. However, YouTube videos can only be accessed by clicking on them separately. This is called framing. If you visit a (sub) page on our website, on which YouTube videos are embedded in this way, a connection is made to the YouTube servers and the content is provided on the website via a notification to your browser.
YouTube content can only be embedded in “privacy-enhanced mode”. YouTube provides this mode itself and it ensures that no data about you as a user is transmitted to YouTube if you do not play the videos. The data mentioned in the following paragraph is not forwarded until you play the videos. We have no influence over this data transmission.
When you visit the website, YouTube is notified that you have visited the relevant subpage of our website. Furthermore, data listed under point 6 is transmitted. This happens regardless of whether YouTube provides a user account which you are signed into or no user account exists. If you are logged in to Google, your data is linked with your account. If you do not wish any data to be linked with your profile on YouTube, you need to log out before enabling the button. YouTube stores your data as user profiles and uses it for advertising, market research and/or demand-driven design of its website. This type of analysis is carried out in particular (even in the case of users who are not signed in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to these user profiles being created, but you must contact YouTube to do so.
We would like to point out that, in certain circumstances, Google might process data associated with YouTube in the US outside EU jurisdiction. Please note the following in this regard: according to the European Court of Justice, there is currently no “adequate protection” to EU standards of personal data processed in the US. In particular, there is a risk that your data may be processed by US authorities for monitoring and control purposes and that you may not have any legal recourse to object to these measures.
Further information on the purpose and scope of data collection and processing can be found in the YouTube/Google privacy policy. This will also provide further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en-US.
5.3. Cookies used
The following cookies are used on our websites:
Cookie name |
Description |
Duration stored for |
PHPSESSIONID |
Essential first-party cookie: Captures session-related information about individual (sub-)page retrievals when our websites are visited |
End of session |
csrf_contano_csrf_token |
Essential first-party cookie: its purpose is to safeguard the website from cross-site-request forgery (csrf) attacks. |
End of session |
cms_cookies_saved |
Essential first-party cookie: stores the current cookie setting of the website visitor concerned (consent status). |
1 month |
cms_cookies |
Essential first-party cookie: stores the current cookie setting of the website visitor concerned (consent status). |
1 month |
_ga |
Analytical third-party cookie: Enables Google Analytics to distinguish between users in order to collect data on the number of page views |
2 years since the last page visit |
_gid |
Analytical third-party cookie: Enables Google Analytics to distinguish between users in order to collect data on the number of page views |
1 day since the last page visit |
_gat_gtag |
Analytical third-party cookie: Enables Google Analytics to slow down the speed of requests on websites with a lot of traffic. |
10 minutes since the last page visit |
6. Logfiles
When visiting and using our website, our web server stores certain protocol information about this process in a file (log file). In particular, log files contain the following information:
- The user’s IP address
- Date, time of use
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (actual page)
- Access status/http status code
- Quantity of data transferred in each case
- Website the request comes from (or referrer website)
- Browser
- Product and version information about the browser and operating system used (called user agent),
We evaluate these data sets only for statistical purposes, to improve the website, for system security reasons (e.g. prevention of fraud) and to diagnose errors. Log files containing personal data will be deleted after 7 days at the latest. The legal basis for data processing is art. 6 section 1 sentence 1 f of the GDPR.
7. Contacting Körting via a contact form, e-mail, post, fax, telephone
You can contact us via various channels if you have any questions. When using the contact form, a valid e-mail address and your name are mandatory so that we know who the request comes from and can respond to it. Data processing when you contact us is carried out pursuant to art. 6 section 1 sentence 1, a of the GDPR because you have given your consent voluntarily or on the basis of our legitimate interest in answering your request pursuant to art. 6 section 1, f of the GDPR. We will only use and store your data to process the contact you seek with us. Processing the personal data that you voluntarily send us will be restricted or it will be deleted after we have answered your request. Processing of the data will be restricted when your request has been dealt with and legal obligations to keep it exist. If you contact us in order to conclude a contract, art. 6, section 1, b of the GDPR (performance of contracts) is another legal basis for processing data.
8. Hyperlinks to other websites
Our website also has hyperlinks to websites belonging to other companies. In these cases, you will be redirected from our website directly to the website of the other providers. The different URL is one way to identify that this has taken place. We cannot take responsibility for how your data is handled on external websites, as we have no influence on how these companies comply with data privacy regulations. Please visit the websites concerned for information on how these companies handle your personal data.
9. Security measures
As regards the technical administration of the website, we have taken technical and organisational steps to protect your data from intentional or accidental manipulation, access by unauthorised third parties, loss, deletion or modification. When you visit our website, we use the popular SSL (Secure Socket Layer) method in conjunction with the highest encryption level supported by your browser. Usually this is a 256-bit encryption level. A locked padlock on your browser’s status bar indicates whether a page on our website is transmitted in an encrypted form. We will consistently improve our website’s security as technology progresses. We would like to point out that online data transmission (e.g. when communicating by e-mail) can pose security risks. It is not possible to fully protect data from access by third parties. It is the users’ responsibility to protect the data provided by them from fraud by encrypting it or using another method.
10. Rights of data subjects
As a data subject you have the following right:
- under art 15 of the GDPR to request information about your personal data that we process. In particular, you may request information on the purposes of the processing, the category of the personal data, the categories of recipients your data has been or will be disclosed to, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing and objection to processing, the right to lodge a complaint and the right to find out the source of your data it has not been collected by us,
- Pursuant to art. 16 of the GDPR, to immediately request the rectification of incorrect or incomplete personal data stored by us,
- pursuant to art. 17 of the GDPR, to demand erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to meet a legal obligation, for reasons of public interest or to assert, exercise or defend legal entitlements,
- pursuant to art. 18 of the GDPR, to demand restriction in processing of your personal data if you contest the accuracy of the data, if processing is unlawful but you oppose erasure of the data deleted and we no longer require the data, but you require such data for the assertion, exercise or defence of legal entitlements or you have objected to processing pursuant to art. 21 GDPR,
- pursuant to art. 20 of the GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another data controller,
- pursuant to art. 7 section 3 of the GDPR to revoke the consent you gave at any time. As a result, we are no longer permitted to continue data processing that was based on this consent in the future and
- you may lodge a complaint to a supervisory authority pursuant to art. 77 of the GDPR. You can normally contact the supervisory authority responsible at our registered place of business.
The supervisory authority responsible for us is:
Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstrasse 5
30159 Hanover, Germany
Phone: + 49 511 120-4500
Fax: + 49 511 120-4599
E-mail: poststelle(at)lfd.niedersachsen.de
Internet: www.lfd.niedersachsen.de
11. Right to object
If your personal data is processed due to legitimate interests pursuant to art. 6 section 1 sentence 1, f of the GDPR, you have the right to object to your personal data being processed pursuant to art. 21 of the GDPR if there are reasons arising from your own personal circumstances or you are objecting to direct marketing. In the latter case you have a right to object at any time and we will comply even if you do not state that any special personal circumstances exist.
If you wish to exercise your right to revoke or object to processing of your personal data, just send us an e-mail.
If you exercise your right to object, we will cease processing the data concerned. However, we reserve the right to continue processing the data if we can prove compelling reasons for doing so and which outweigh your interests and rights or if such processing serves to assert, exercise or defend legal entitlements.
12. Information about your data; correction, deletion and restriction of processing
We are happy to inform you, on request at any time, whether and which data we store about you. If, despite our efforts to ensure correct and up-to-date data, incorrect data is stored by us, we will rectify it immediately upon your request.
Should you wish the stored data to be deleted, this will be done at your request within the framework of the legal requirements. If statutory retention obligations continue to apply, e.g. after proper business processing or after we have given a final reply to your inquiries, we will restrict processing of your data. Insofar as commercial and tax law retention periods have to be complied with, it is possible that certain data will need to be stored for up to ten years. However, we would like to point out that when retention periods expire, there may be no automatic obligation to delete the data, as there may still be a legitimate interest in storing it, e.g. in order to furnish information in the event of legal disputes and to ensure the preservation of evidence under the statute of limitations.
Do you have any questions about data privacy? Then please contact our data protection officer:
Christoph Wegener
Badenstedter Strasse 56
30453 Hanover, Germany
datenschutz@koerting.de
Publication date: February 2021