Fax: +49.(0)8056.9020 - 20
Privacy Policy
Data Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation ("GDPR") is:
ISH Hutter GmbH
Gewerbegebiet Natzing 13
83125 Eggstätt
Germany
Represented by its Managing Director:
Peter Hutter
Contact Details
Phone: +49 (0)8056 9020-0
Fax: +49 (0)8056 9020-20
info(at)ish-hutter.de
General Privacy Notice
Thank you for visiting our website. We appreciate your interest in our company and are committed to protecting your privacy and safeguarding your personal data. The protection of your personal data is of great importance to us. We process your personal data confidentially, responsibly, and in accordance with the applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), as well as this Privacy Policy. We have implemented appropriate technical and organisational measures to ensure that your personal data is protected against unauthorised access, loss, misuse, or disclosure. Furthermore, our employees, business partners, and external service providers are contractually obliged to maintain confidentiality and to comply with all applicable data protection laws. Please note, however, that data transmission over the Internet, including communication by email, cannot be guaranteed to be completely secure. Although we take appropriate security measures, no method of electronic transmission or storage is entirely secure against unauthorised access by third parties.
Collection and Use of Personal Data
You may generally use our website without providing any personal data. We only collect and process personal data where you voluntarily provide such information to us, for example when you contact us, request information, or engage us to provide services. Where personal data is required to perform a contract, respond to your enquiry, or provide a requested service, we process only the data necessary for those purposes. Where necessary for the provision of our services, we may share your personal data with carefully selected third-party service providers, such as independent contractors or external service providers acting on our behalf. Such parties are contractually bound to process your personal data only in accordance with our instructions and applicable data protection legislation. Unless otherwise stated in this Privacy Policy or required by law, we do not sell, rent, or otherwise disclose your personal data to third parties. As a general rule, we do not transfer or process personal data outside the European Union (EU) or the European Economic Area (EEA).
Purpose of Processing
We process your personal data solely for the purposes for which it was collected and communicated to us. Depending on the circumstances, these purposes may include:
• providing our services;
• responding to enquiries;
• fulfilling contractual obligations;
• carrying out pre-contractual measures;
• complying with legal obligations; and
• safeguarding our legitimate business interests where permitted by law. Your personal data will not be processed for purposes incompatible with those described above unless we are legally permitted or required to do so, or you have given your prior consent.
Legal Basis for Processing
Where we process personal data, we do so only where there is an appropriate legal basis under Article 6 GDPR. Depending on the nature of the processing, this may include:
Consent (Article 6(1)(a) GDPR)
Where you have given us your consent to process your personal data for a specific purpose, processing is based on your consent. You may withdraw your consent at any time with effect for the future.
Performance of a Contract (Article 6(1)(b) GDPR)
Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, processing is based on Article 6(1)(b) GDPR.
Compliance with Legal Obligations (Article 6(1)(c) GDPR)
Where processing is necessary to comply with a legal obligation to which we are subject, such as obligations under tax or commercial law, processing is carried out on the basis of Article 6(1)(c) GDPR.
Protection of Vital Interests (Article 6(1)(d) GDPR)
In exceptional circumstances, processing may be necessary to protect the vital interests of you or another individual, for example in the event of a medical emergency occurring on our premises.
Legitimate Interests (Article 6(1)(f) GDPR)
Where appropriate, we process personal data on the basis of our legitimate interests, provided that these interests are not overridden by your interests or your fundamental rights and freedoms.
Our legitimate interests include, in particular:
• operating and improving our website;
• ensuring the security and integrity of our IT systems;
• providing our services efficiently;
• maintaining customer relationships;
• protecting our legal rights; and
• ensuring the efficient operation of our business.
Secure Data Transmission (SSL/TLS Encryption)
To protect the security of your personal data during transmission, this website uses SSL/TLS encryption. You can recognise a secure connection by the "https://" prefix in your browser's address bar and by the padlock icon displayed by your browser. SSL/TLS encryption helps protect data transmitted between your browser and our website against unauthorised access by third parties.
External Links
Our website may contain links to external websites operated by third parties for your convenience and additional information. Please note that we have no control over the content, availability, or privacy practices of such third-party websites. This Privacy Policy applies exclusively to our website and does not extend to external websites accessed via hyperlinks. We therefore recommend that you review the privacy policies of any third-party websites before providing any personal data.
Cookies
Our website uses cookies and similar technologies to improve functionality, enhance user experience, and ensure the secure operation of our website. Cookies are small text files that are stored on your device by your web browser. They do not damage your device and do not contain viruses or other malicious software. Some cookies are technically necessary for the operation of our website ("Essential Cookies"). These cookies are automatically deleted when you close your browser (session cookies), while others remain stored on your device until they expire or are deleted by you. Persistent cookies enable us to recognise your browser when you return to our website and to provide certain functions more efficiently.
You can configure your browser settings to:
• notify you whenever cookies are being set;
• allow cookies only in individual cases;
• block cookies entirely or for selected websites; or
• automatically delete cookies when your browser is closed.
Please note that disabling cookies may limit the functionality of certain parts of our website. Where cookies are strictly necessary for the operation of the website or for providing services expressly requested by you, they are processed on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in ensuring the secure and technically reliable operation of our website. Where additional cookies are used, for example for analytics or marketing purposes, they will only be used where legally required and, where applicable, only after obtaining your consent.
Server Log Files
Whenever you visit our website, certain technical information is automatically collected and stored by our hosting provider in server log files.
The information collected may include:
• browser type and version;
• operating system;
• referring URL;
• hostname of the accessing device;
• date and time of the server request; and
• IP address.
This information is processed solely for the purpose of ensuring the stability, security, and proper operation of our website. The data is not combined with other personal data or used to identify individual users. The legal basis for this processing is Article 6(1)(f) GDPR, as we have a legitimate interest in ensuring the reliable operation, security, and continuous optimisation of our website.
Google Maps
Our website uses Google Maps, a mapping service provided by Google LLC. The integration of Google Maps enables us to display interactive maps and allows visitors to locate our premises more easily. To provide this service, your IP address and certain technical information are generally transmitted to Google servers. Depending on Google's infrastructure, such information may also be processed on servers located outside the European Economic Area. We have no influence over the scope of the data collected or the subsequent processing carried out by Google. The use of Google Maps is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in providing an informative and user-friendly website. Where required by applicable law, Google Maps will only be activated after you have provided your consent via our cookie consent tool. Further information about Google's processing of personal data can be found in Google's Privacy Policy: <https://www.google.de/intl/de/policies/privacy/
Contact Regarding Data Protection
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the contact details provided above or in our Legal Notice (Imprint). We will be pleased to assist you with any questions relating to your rights under applicable data protection legislation.
Recruitment and Job Applications
We process the personal data of applicants solely for the purpose of managing and conducting the recruitment process. Applications may be submitted electronically, for example by email or through an online application portal where available. The personal data provided by applicants will be processed exclusively for assessing their suitability for the advertised position and for carrying out the recruitment procedure. Where an employment relationship is established, the applicant's personal data will be retained and further processed for the purpose of administering the employment relationship in accordance with applicable legal requirements. If no employment contract is concluded, application documents and personal data will be deleted once the recruitment process has been completed, unless statutory retention obligations apply or the applicant has expressly consented to a longer retention period for future employment opportunities.
Your Rights as a Data Subject
Under the General Data Protection Regulation (GDPR), you are entitled to a number of rights regarding the processing of your personal data. To exercise any of the rights described below, you may contact us at any time using the contact details provided in this Privacy Policy.
Right to Withdraw Consent
Where the processing of your personal data is based on your consent, you may withdraw that consent at any time with future effect. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Right of Access
You have the right to obtain confirmation as to whether we process personal data relating to you. Where this is the case, you have the right to receive access to your personal data together with information including:
• the purposes of processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;
• the envisaged retention period or the criteria used to determine that period;
• your rights to rectification, erasure, restriction of processing, and objection;
• your right to lodge a complaint with a supervisory authority;
• the source of the personal data where it was not obtained directly from you; and
• information about any automated decision-making, including profiling, where applicable.
Where personal data is transferred to a third country or an international organisation, you also have the right to be informed about the safeguards applied to such transfers.
Right to Rectification
You have the right to request the correction of inaccurate personal data concerning you without undue delay. You also have the right to request that incomplete personal data be completed where appropriate.
Right to Erasure ("Right to be Forgotten")
You have the right to request the deletion of your personal data where:
• the data is no longer necessary for the purposes for which it was collected;
• you withdraw your consent and there is no other legal basis for processing;
• you object to the processing and there are no overriding legitimate grounds for continuing the processing;
• your personal data has been processed unlawfully;
• deletion is required to comply with a legal obligation; or
• the personal data was collected in relation to information society services offered to a child under Article 8 GDPR.
Where we have made your personal data public and are required to erase it, we will take reasonable steps, taking available technology and implementation costs into account, to inform other controllers processing that data of your request to erase any links to, copies of, or replications of the personal data, where required by law.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data where:
• you contest the accuracy of the data;
• the processing is unlawful, but you oppose its deletion;
• we no longer require the data, but you need it for the establishment, exercise, or defence of legal claims; or
• you have objected to the processing and verification of overriding legitimate grounds is still pending.
Right to Data Portability
Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object, at any time, to the processing of your personal data where such processing is based on Article 6(1)(f) GDPR (legitimate interests), provided that the reasons for the objection arise from your particular situation. This also applies to profiling based on these provisions. Upon receipt of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
Please note that ISH Hutter GmbH does not carry out profiling activities.
Automated Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This right does not apply where the decision:
• is necessary for entering into or performing a contract between you and us;
• is authorised by European Union or Member State law and such law provides appropriate safeguards for your rights, freedoms, and legitimate interests; or
• is based on your explicit consent.
We do not use automated decision-making systems, including profiling, that produce legal effects concerning you or similarly significantly affect you.
Right to Lodge a Complaint with a Supervisory Autority
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
You may exercise this right in particular in the Member State:
• of your habitual residence;
• of your place of work; or
• where the alleged infringement occurred.
The right to lodge a complaint does not affect any other administrative or judicial remedies available to you.
The contact details of German supervisory authorities can be found on the website of the:
Federal Commissioner for Data Protection and Freedom of Information (BfDI) https://www.bfdi.bund.de
Final Information
We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements, technical developments, or our services. The current version of this Privacy Policy is always available on our website.