Privacy Policy

I. General information

SIMPEX HYDRAULIK GmbH (hereinafter also referred as „we“) as the operator of the website www.simpexhydraulik.de, considers the protection of your personal data to be a very serious matter. When you vist our website, various personal Data are processed depending on the type and scope of use. Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name. This includes information such as the name, address, telephone number, date of birth or IP addresses.

With this privacy policy, we inform you in accordance with Art. 12 ff. GDPR, which personal data is processed when you use our website. In particular, you will find information below about what data we collect in connection with your visit to and use of our website, what we use the collected data for and for what purposes the data is collected. In addition, you will find information on the rights to which you are entitled in connection with the processing of your personal data.

We reserve the right to adapt this privacy policy with effect for the future, in particular in the case oft the further development of our website, the use of new technologies or changes to the legal basis or the corresponding jurisdiction. This privacy policy applies to all pages of www.simpexhydraulik.de. It does not extend to any linked websites or Internet presences of other providers.

II. Controller

The controller pursuant to Art. 4 (7) GDPR is

SIMPEX HYDRAULIK GmbH

Chopinstraße 5

04103 Leipzig

Tel.: +49 (0) 341 230 855 0

Fax.: +49 (0) 341 230 855 66

E-Mail: info.leipzig@simpexhydraulik.de

 

III. Data protection officer

If you have any questions about data protection with regard to our company or this website, you can contact our data protection officer:

GP Data GmbH

Rechtsanwalt Stephan Schuldt (Lawyer)
Mädler-Passage, Aufgang B
Grimmaische Str. 2-4
04109 Leipzig

Tel.: +49 341 231062-25
Fax: +49 341 231062-30

E-Mail: s.schuldt@gp-data.de

IV. Data security

For security reasons and to protect your personal data during transmission to us, we use SSL or TLS encryption to protect your data against access by unauthorized persons. You can recognize an encrypted connection by the string https:// and the lock symbol in the address line of your browser.

V. Purposes and legal bases of the processing

1. Visiting our website – server log files

For the purpose of the technical provision auf our website, it is necessary that we process certain information automatically transmitted by your browser so that our website can be displayed in your browser and you can use our website. This information is automaticly collected each time you visit our website and is automatically stored in so-called “server log files”. The information transmitted by your browser and stored in the server log files is the following information

  • Browser type an version;
  • Operating system used;
  • Website from which access is made (referrer URL);
  • Host name of the accessing computer;
  • Date and time of access;
  • IP address.

The storing of the aforementioned Information is necessary for the provision of a functional website an to ensure system security for technical reasons. In addition to the above-mentioned purposes, we use server log files exclusively for the needs-based design and optimization of our website, purely statistically and without any inference to your person. This data is not merged with other data sources, nor is the data evaluated for marketing purposes.

The data collected in the context of the use of our website is stored for the period of time for which this data is required to achieve the above-mentioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.

If you visit our website to find out about or use our range of services, the basis for the temporary storage and processing of the aforementioned data is Article 6 (1) lit. b GDPR which permits the processing of data for the performance of a contract or to take steps to entering into a contract. In addition, Art. 6 (1) lit. f GDPR serves as the legal basis for the temporary storage of the technical access data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

2. Contact

2.1. Request by e-mail or telephone

If you contact us by e-mail or telephone, your enquiry including all personal data resulting from it (name, contact details) will be stored and processed for the purpose of processing your enquiry.

The processing of the aforementioned data is based on Art. 6 (1) lit. b GDPR, insofar as your enquiry is related to the establishment or implementation of a contractual relationship. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if such consent has been requested.

The data provided or sent by you in the context of the enquiry will be stored by us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

3. Use of cookies and associated plugins/tools

In some cases we use so-called ‘cookies’ on our website. Cookies do not cause any damage to the end device used by you and not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure and to enable the provision of certain functions. Cookies are small text files that are stored on the end device you are using. A cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you return to the website.

You can refuse the use of cookies and also delete cookies at any time by making the appropriate settings on your device.

  • Most browsers are preset to automatically accept cookies. You can change this default setting by activating the "do not accept cookies" setting in your browser. You can obtain more information on this from your browser provider.
  • You can delete existing cookies at any time. For more information on deleting cookies, please contact your browser provider.
  • Like the use of cookies, their rejection or deletion is also linked to the device used and also to the browser used in each case. You must therefore reject or delete the cookies for each of your devices and, if you use several browsers, also for each browser separately.

If you activate the function "do not accept cookies" in your browser, it is possible that not all functions of our website or individual functions will only be available to you to a limited extent.

We have divided the cookies we use into the following categories:

Necessary cookies

Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Cookie name, provider, description and expiry:
 
cms_cookies, operator of the website, saves the privacy settings of the visitor, 7 days
 
cms_cookies_saved, operator of the website, saves the privacy settings of the visitor, 7 days
 
Csrf_https_contao_csrf_token, operator of the website, increases the security of the website against CSFR attacks (Cross Site Forgery Requests), end of the session
 
Marketing cookies end cookies of external media

Marketing cookies are used to follow visitors on websites. The intention is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and advertising third parties.

Cookies from external media relate to cookies that occur, for example, when embedding Google Maps or YouTube videos.

Cookie name, provider, description and expiry:

_1P_JAR, Google, Used to optimize advertising by Google DoubleClick to provide ads that are relevant to users, improve campaign performance reports or prevent a user from seeing the same ads more than once. 30 days.

CONSENT, Google, This cookie is used to support Google advertising services. 19 years

NID, Google, Google uses this cookie to store customer preferences. Based on web searches performed and actions taken, relevant advertising is served to the user. 6 months.

We store necessary cookies on the basis of our legitimate interest in storing cookies for the technically error-free and optimised provision of our services pursuant to Art. 6 (1) lit. f GDPR. We store marketing cookies and cookies from external media exclusively on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR.

3.1  Cookie management

This website uses a "cookie management" to obtain your consent to store certain cookies in your browser and to document this in a data protection compliant way.

When you enter our website, cookies are set in which the consent you have given or the revocation of this consent is stored.

To revoke the consent you have given, you can delete the cookies set in your browser. Once the cookies have been deleted, you will be asked again for your cookie consent when you re-enter/reload the website. Alternatively, you can revoke the consent you have given by selecting the following link or change your selection:

https://www.simpexhydraulik.de/?_cmsscb=1&_cmselid=cms_ce_2253

The data collected is generally stored for a period of one year, otherwise until you request us to delete it or until you delete the cookies yourself.

The stored data will not be forwarded.

Cookie management is used to obtain the legally required consent for the use of cookies.

3.2  Google Maps

In order to display geographical information, we use the Google Maps API. When using Google Maps, Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) also collects, processes and uses data on the use of the Maps function by visitors to the websites. Your data will only be forwarded if you have given us your consent to the transfer in accordance with Art. 6 (1) lit. a GDPR. If you do not give your consent to the transmission when you call up the website, Google Maps will only be displayed to you if you consent to the data processing by clicking on the information window. You can revoke your consent at any time with effect for the future. You can find further information on revoke your consent in this data protection declaration under the section ("Cookie management").

For more information on data processing by Google, please refer to Google's privacy policy:

https://policies.google.com/privacy

Insofar as personal data is transmitted to the USA when using Google Maps, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

3.3 Google Fonts

In order to ensure a consistent presentation of fonts, we use so-called "web fonts" on this site, which are provided for the European region by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

No login or registration is required to use the Google fonts. Also, no cookies are stored in your browser in connection with the use of Google Fonts. The information required to display the fonts is requested via the domains "fonts.googleapis.com" and "fonts.gstatic.com" provided by Google. According to Google, the request for fonts is completely separate from all other Google services, which is why, according to Google, no Google account data is transmitted to Google in connection with the use of Google Fonts.

We use Google Web Fonts to ensure a consistent presentation of fonts on our website without having to upload them to our web server. All fonts provided by Google are optimized for use on websites, which in particular enables faster loading times.

When you visit our website, a connection is established to the domains "fonts.googleapis.com" and "fonts.gstatic.com" provided by Google in order to reload the fonts required for the correct presentation of our website. This transmits (personal) data to Google. The data transmitted to Google is in particular your IP address, which enables Google to recognize that you have visited our website. Google also stores information about which fonts are accessed and how often. The results are published by Google on internal analysis pages such as Google Analytics.

In addition, in connection with the use of Google Fonts, information such as language settings, IP address, browser version, browser screen resolution and browser name is automatically transmitted to Google. Whether this data is stored by Google cannot be clearly determined and is not clearly communicated by Google.

Google stores requests for one day on servers operated by Google, which are mainly located outside the European Union. The retrieved "font files" are stored by Google for one year. Google's aim here is to improve the loading times of websites.

If you have given your consent to the use of Google Fonts, the processing and transmission of your personal data is based on your consent, Art. 6 (1) lit. a GDPR.

Furthermore, we have a legitimate interest in using Google Fonts to improve our online service, Art. 6 (1) lit. f GDPR. Nevertheless, we only use Google Fonts if you have given us your consent to do so.

Insofar as personal data is transmitted to the USA when using Google Maps, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy:

https://www.google.com/policies/privacy/

4. Application

We provide contact information for (initiative) applications on our website, which is to be used for electronic contact within the scope of the application process.

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG and, if applicable, Art. 6 (1) lit. b GDPR for the initiation or implementation of contractual relationships.

Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 (1) lit. c GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 (1) lit. f. GDPR. The legitimate interest results, among other things, from the duty of proof in proceedings under the German General Equal Treatment Act (AGG). If you give us express consent to process personal data for specific purposes, this processing is lawful on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoken at any time with effect for the future.

If an employment relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with § 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

The application procedure requires applicants to provide us with applicant data. The required applicant data results from the respective job description and the usual application documents such as cover letter, CV and certificates. In addition, applicants may voluntarily provide us with additional information.

We only pass on your personal data within our company to departments and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.

We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out.

Otherwise, data will only be passed on to recipients outside the company if this is permissible under the legal provisions, if the transfer is necessary to fulfil legal obligations or if we have your consent.

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

In the event that you have consented to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent.

If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

5. Further processing purposes

5.1. Legal compliance

We also process your personal data in order to fulfil other legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. We process your personal data in accordance with Art. 6 (1) lit. c GDPR to fulfil a legal obligation to which we are subject.

5.2. Enforcement

We also process your personal data in order to be able to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences. In this context, we process your personal data to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences (legitimate interest).

VI. Recipient of Data

Within our company, those departments that need your data to fulfil our contractual and legal obligations will have access to it. The service providers and vicarious agents we use (e.g. technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary, taking into account the requirements of data protection law. In some cases, the recipients receive your personal data as processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently under their own data protection responsibility and are also obliged to comply with the requirements of the GDPR and other data protection regulations.

Finally, in individual cases we transmit personal data to our advisors in legal or tax matters, whereby these recipients are obliged to maintain special confidentiality and secrecy due to their professional status.

VII. Duration of data storage

We initially process and store your personal data for the duration of the respective purpose of use (see above for the individual processing purposes). This may also include the periods of initiating a contract (pre-contractual legal relationship) and processing a contract. On this basis, personal data is regularly deleted within the framework of the fulfilment of our contractual and/or legal obligations, unless its further processing for a limited period is necessary for the following purposes:

  • Fulfilment of legal storage obligations, e.g. arising from the German Commercial Code (§§ 238, 257 (4) HGB) and the German Fiscal Code (§ 147 para. 3, 4 AO). The periods specified there for retention or documentation are up to ten years.
  • Preservation of evidence considering the statute of limitations. According to §§ 194 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

VIII. Your rights

As a data subject, you have the following rights under the legal conditions:

1. Right of access

You are entitled to request confirmation from us at any time within the scope of Art. 15 GDPR as to whether we are processing personal data relating to you; if this is the case, you are also entitled within the scope of Art. 15 GDPR to receive information about this personal data as well as certain other information (in particular, processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate guarantees) and a copy of your data. The restrictions of § 34 BDSG apply.

2. Right to rectification

Pursuant to Art. 16 GDPR, you are entitled to demand that we correct personal data stored about you if it is inaccurate or incorrect.

3. Right to erasure ("right to be forgotten")

You have the right to demand that we delete personal data relating to you without delay under the conditions of Art. 17 GDPR. The right to deletion does not exist, among other things, if the processing of your personal data is necessary, e.g. for the fulfilment of a legal obligation (e.g. statutory retention obligations) or for the assertion, exercise or defence of legal claims. Furthermore, the restrictions of § 35 BDSG apply.

4. Right to restriction of processing

You are entitled to demand that we restrict the processing of your personal data under the conditions of Art. 18 GDPR.

5. Right to data portability

You are entitled, under the conditions of Art. 20 GDPR, to demand that we hand over to you the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

6. Right of revocation

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by the revocation of consent. An informal communication, e.g. by e-mail to us, is sufficient to declare the revocation.

7. Right to object

You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we have to stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection. We will consider an objection to any direct marketing measures immediately and without weighing up the existing interests again.

Information about your right to object according to Art. 21 GDPR

You have the right to object at any time to the processing of your data that is carried out on the basis of Art. 6 (1) lit. f GDPR (data processing on the basis of legitimate interests) or Art. 6 (1) lit. e GDPR (data processing in public interest), if there are grounds for doing so that arise from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made form-free and should preferably be addressed to:

 

SIMPEX HYDRAULIK GmbH

Chopinstraße 5

04103 Leipzig

Tel.: +49 (0) 341 230 855 0

Fax.: +49 (0) 341 230 855 66

E-Mail: info.leipzig@simpexhydraulik.de

 

8. Right to lodge a complaint with a supervisory authority

Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. In particular, you can lodge a complaint with the supervisory authority responsible for us (Saxon Data Protection Commissioner; https://www.saechsdsb.de/kontakt) or any other supervisory authority. A list of the data protection supervisory authorities and their contact details can be found in the following link:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

9. Other concerns

For further data protection questions and concerns, please contact our data protection officer using the contact details above.

IX. Duty to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or answer your enquiries to us. Personal data that we do not necessarily need for the above-mentioned processing purposes are marked accordingly as voluntary information.

X. Automated decision making/profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).