Unsere Möbellinien und Formsprachen für Ihren künftigen Verkaufsraum repräsentieren einen eigenständigen Lebens- und Einrichtungsstil. Alle Produkte aus der HAUFF-Produktwelt vereint Qualität auf höchstem Niveau und zeitlose Eleganz. Anhand der 5 folgenden Fragen möchten wir Ihnen eine Orientierungshilfe geben.
Unsere Möbellinien und Formsprachen für Ihren künftigen Verkaufsraum repräsentieren einen eigenständigen Lebens- und Einrichtungsstil. Alle Produkte aus der HAUFF-Produktwelt vereint Qualität auf höchstem Niveau und zeitlose Eleganz. Anhand der 5 folgenden Fragen möchten wir Ihnen eine Orientierungshilfe geben.
Viel Spaß dabei!
Zeitlose Formen mit modernem Erscheinungsbild
Geordnete Abläufe, Ordnung, Struktur
Jedes Projekt ist einzigartig und hochgradig individuell, denn der Verkaufsraum ist Ihre persönliche Visitenkarte nach außen! Hierbei unterstützen wir Sie gern durch individuelle Planung und gezielte Vorbereitung für einen reibungslosen Projektverlauf.
Bitte geben Sie Ihre Daten an:
Mit dem Absenden willigen Sie darin ein, regelmäßig über Angebote von Hauff informiert und persönlich beraten zu werden. Hierfür gelten unsere Datenschutzbedingungen für den Newsletter.
We are very happy that you are interested in our company. Data protection is a particularly high priority for the management of the U.H. Spezialmöbel und Ladenbau GmbH. The use of the U.H. Spezialmöbel und Ladenbau GmbH website is possible without entering any personal data. However, if a data subject wants to use particular services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, email address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to U.H. Spezialmöbel und Ladenbau GmbH. In this privacy statement, our company would like to inform the public about the nature, scope and purposes for which we collect, use and process personal data. Furthermore, this privacy statement shall inform data subjects about their rights.
As the controller, the U.H. Spezialmöbel und Ladenbau GmbH has implemented numerous technical and organisational measures to ensure the most comprehensive protection possible of personal data processed via this website. Nevertheless, the transmission of data over the Internet may, as a general rule, have security gaps, meaning that comprehensive protection cannot be ensured. For this reason, every data subject is free to transmit personal data to us by alternative means, for example, via telephone.
The privacy statement of the U.H. Spezialmöbel und Ladenbau GmbH is based on the terms used by the European legislator in relation to the adoption of the General Data Protection Regulation (GDPR). Our privacy statement should be easy for members of the public, as well as our customers and business partners, to read and understand. To ensure this, we would like to explain the terms used beforehand.
We shall use the following terms in this privacy statement, as well as other documents:
a) Personal data
Personal data is any information concerning an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
A data subject is any identified or identifiable natural person whose personal data are processed by the controller.
c) Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
e) Profiling
Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Data controller or controller
A data controller or controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processors
A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
(i) Recipient
A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. However, public authorities that may receive personal data in the context of a specific inquiry in accordance with Union or Member State law shall not be considered as recipients.
j) Third parties
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and other persons who, under the direct responsibility of the controller or processor, are authorised to process the personal data.
k) Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member States of the European Union and other provisions relating to data protection is:
U.H. Spezialmöbel und Ladenbau GmbH
Auf der Wasch 1a
23611 Bad Schwartau
Germany
Phone: +49 451 200 98 0
Email: info@hauff.com
Website: www.hauff.com
The data protection officer responsible for the processing is:
Tomas Arent
U.H. Spezialmöbel und Ladenbau GmbH
Auf der Wasch 1a
23611 Bad Schwartau
Germany
Phone: +49 451 200 98 43
Email: arent@hauff.com
Website: www.hauff.com
Any data subject can contact our data protection officer directly at any time with any enquiries or suggestions relating to data protection.
The U.H. Spezialmöbel und Ladenbau GmbH website uses cookies. Cookies are text files that are stored on a computer system via an Internet browser.
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.
Through the use of cookies, the U.H. Spezialmöbel und Ladenbau GmbH can provide the users of this website with more user-friendly services that would not be possible without placing cookies.
A cookie can be used to optimise the information and offers on our website with the user in mind. As previously stated, cookies allow us to recognize our website’s users. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies will not have to re-enter their access data every time he or she visits the website, as this job is taken over by the website and the cookie stored on the user's computer system. Another example is the cookie relating to a shopping basket in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping basket by means of a cookie.
The data subject can prevent the placing of cookies by our website at any time using a corresponding setting on the browser he or she is using, thereby permanently objecting to the placing of cookies. Furthermore, cookies that have previously been placed can be erased at any time via an Internet browser or other software programmes. This can be done in all commonly-used Internet browsers. If the data subject deactivates the placing of cookies in the Internet browser being used, there is a possibility that not all functions of our website will be fully usable.
The website of the U.H. Spezialmöbel und Ladenbau GmbH collects a series of general data and information every time a data subject or automated system accesses the website. This general data and information is stored in the server log files. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website through which an accessing system reaches our website (so-called referrer), (4) the sub-websites, that are accessed via an accessing system on our website, (5) the date and time the website is accessed, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve the purpose of averting danger in the event an attack on our information technology systems.
When using this general data and information, the U.H. Spezialmöbel und Ladenbau GmbH shall not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website in the correct form, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for a criminal prosecution in the event of a cyber attack. Therefore, the U.H. Spezialmöbel und Ladenbau GmbH statistically evaluates anonymously collected data and information, with the aim of increasing the data protection and data security of our company, and to ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.
Google Tag Manager
On our website we use "Google Tag Manager", a service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Tag Manager allows us, as marketers, to manage website tags via a single interface. The Google Tag Manager tool, which implements the tags, is a cookieless domain and does not collect any personal data itself. Google Tag Manager triggers other tags, which may, in turn, collect data. Google Tag Manager does not access this data. If a deactivation has taken place at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.
Google has made itself subject to the Privacy Shield Agreement concluded between the European Union and the USA and has had itself certified. As a result, Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Details of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Further information on data protection can be found on the following Google websites:
Privacy policy: http://www.google.de/intl/de/policies/privacy
Google Tag Manager FAQs: https://www.google.com/intl/de/tagmanager/faq.html
Google Tag Manager Terms of Service: https://www.google.com/intl/de/tagmanager/use-policy.html
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow for an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
IP anonymisation
We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within Member states of the European Union or in other States Party to the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be transmitted to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
Browser plugin
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, please note that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be placed to prevent the collection of your data when you visit this website in the future: Disable Google Analytics.
Further information on the handling of user data by Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Contract data processing
We have concluded a contract data processing agreement with Google and implement the strict requirements of the German data protection authorities in full when using Google Analytics.
Demographics on Google Analytics
This website uses the “demographics” function of Google Analytics. This allows reports to be created that contain statements regarding the age, gender and interests of the visitors to the sites. This data is derived from interest-based advertising by Google as well as from visitor data from third-party providers. This data cannot be attributed to a specific person. You can disable this function at any time via the ad settings on your Google account or stop your data from being collected by Google Analytics in general, as described in the section "Objection to data collection".
Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device features of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature makes it possible to link the advertising audiences created using Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted for you based on your previous usage and browsing behaviour on one device (e.g. your mobile phone) can also be displayed on one of your other devices (e.g. your tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalised advertising messages can be displayed on every device where you log in with your Google Account.
To support this feature, Google Analytics collects Google-authenticated IDs from users, which are temporarily linked to our Google Analytics data to determine and create audiences for cross-device advertising.
You can object to cross-device remarketing/targeting permanently by disabling personalised advertising on your Google Account. You can do this by following this link:https://www.google.com/settings/ads/onweb/.
The summary of the collected data in your Google Account shall be exclusively on the basis of your consent, which you can give or revoke with respect to Google (Art. 6(1)(a) GDPR). In the case of data collection processes that are not merged with your Google Account (e.g. due to the fact that you do not have a Google Account or have objected to the merging), the collection of the data shall be based on Art. 6(1)(f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymous analysis of website visitors for advertising purposes.
Further information and the provisions on privacy can be found in Google's privacy policy at:https://www.google.com/policies/technologies/ads/.
The data subject has the option to register on the website of the controller by providing personal data. The personal data that is transmitted to the controller is determined by the relevant input mask used in the registration. The personal data entered by the data subject is collected and stored by the controller for its own purposes and exclusively for internal use. The controller may arrange for its transfer to one or more processors, such as a parcel service provider, who shall also use the personal data exclusively for internal use, which is to be attributed to the controller.
The IP address assigned by the Internet service provider (ISP) of the data subject, as well as the date and time of registration are also stored when he or she registers on the website of the controller. The storage of this data takes place in a context in which it is the only way to prevent the misuse of our services and, if necessary, to allow for the investigation of any crimes that have been committed. In this respect, the storage of this data is necessary to safeguard the controller. As a general rule, this data is not passed on to third parties unless there is a legal obligation to do so or if the disclosure serves the purpose of a criminal investigation.
The registration of the data subject, with personal data being provided voluntarily, serves the purpose of allowing the controller to offer the data subject content or services that, due to the nature of what is involved, can only be offered to registered users. Registered persons are free to amend the personal data provided during registration at any time or to have it completely erased from the controller’s database.
The controller shall provide each data subject with information regarding what personal data is stored in relation to the data subject at any time, upon request. Furthermore, the controller shall rectify or erase personal data at the request or notice of the data subject, insofar as this does not conflict with any statutory retention obligations. In this context, all employees of the controller shall be at the disposal of the data subject as contact persons.
On the U.H. Spezialmöbel und Ladenbau GmbH website, users are given the option of subscribing to our company newsletter. The personal data that is transmitted to the controller when the newsletter is ordered is determined by the input mask used for this purpose.
The U.H. Spezialmöbel und Ladenbau GmbH informs its customers and business partners about the company’s offers on a regular basis, by means of a newsletter. The company newsletter may only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter to be sent. For legal reasons, a confirmation email will be sent to the email address once it has been entered by a data subject for the first time for the purpose of receiving the newsletter, as part of a double opt-in procedure. This confirmation email serves the purpose of checking whether the holder of the email address, as the data subject, has authorized the sending of the newsletter.
When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the time and date of registration. The collection of this data is necessary to make it possible to track any (possible) misuse of a data subject's email address at a later point in time and therefore provides the controller with legal protection.
The personal data collected as part of the newsletter registration will be used for the exclusive purpose of sending our newsletter. Furthermore, subscribers to the newsletter may receive information via email if this is necessary for the operation of the newsletter service or registering for it, as may be the case in the event of changes to the newsletter service or a change to the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. The data subject can cancel their subscription to our newsletter at any time. The consent to the storage of personal data that the data subject has given us for the purpose of sending the newspaper can be withdrawn at any time. A corresponding link can be found in each newsletter for the purpose of withdrawing consent. Furthermore, you can unsubscribe from the newsletter at any time directly on the controller’s website or inform the controller you wish to do this in another way.
The newsletter of the U.H. Spezialmöbel und Ladenbau GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be performed. Based on the embedded tracking pixel, the U.H. Spezialmöbel und Ladenbau GmbH may see if and when an email was opened by a data subject, and which links in the e-mail were accessed by data subjects.
Such personal data, which is collected through the tracking pixels contained in the newsletters, is stored and evaluated by the controller to optimise the sending out of the newsletter and to tailor the content of future newsletters to the interests of the data subject even more effectively. This personal data is not be passed on to third parties. Data subjects are entitled to withdraw the separate declaration of consent given in this regard via the double opt-in procedure. After the withdrawal, this personal data will be erased by the controller. The U.H. Spezialmöbel und Ladenbau GmbH shall automatically consider the act of unsubscribing from the newsletter as a revocation.
Due to legal provisions, the website of the U.H. Spezialmöbel und Ladenbau GmbH contains information that allows you to quickly get in touch with our company electronically, as well communicating with us directly. This also includes a general email address. If a data subject contacts the controller via email or a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data, transmitted on a voluntary basis by a data subject to the controller, is stored for the purposes of processing the enquiry or contacting the data subject. This personal data is not passed on to third parties.
The controller shall process and store personal data of the data subject only for the time that is necessary to achieve the purpose of storage or if it has been provided for by the European legislator, or another legislature, in the form of laws or regulations to which the controller is subject.
If the storage purpose no longer applies or if a storage period stipulated by the European legislator or another competent legislature expires, the personal data shall be routinely blocked or erased in accordance with the legal provisions.
a) Right to confirmation
Each data subject has the right, granted by the European legislator, to obtain a confirmation from the controller regarding whether the personal data concerning him or her is being processed. If a data subject wishes to exercise this right of confirmation, he or she may contact any employee of the controller at any time.
b) Right of access
Each data subject has the right, granted by the European legislator, to obtain information from the controller at any time about the personal data stored concerning him or her and a copy of this information, free of charge. Furthermore, the European legislator has granted the data subject access to the following information:
Furthermore, the data subject has a right of access to information regarding whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain access to information about the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, he or she may contact any employee of the controller at any time.
c) Right to rectification
Each data subject has the right, granted by the European legislator, to obtain the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right, taking into account the purposes of the processing, to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may contact any employee of the controller at any time.
d) Right to erasure (right to be forgotten)
Each data subject has the right, granted by the European legislator, to obtain from the controller the erasure of personal data concerning him or her without undue delay, where one of the following grounds applies and insofar as the processing is not necessary:
The personal data has been collected or otherwise processed for purposes for which it is no longer necessary. The data subject withdraws consent on which the processing is based according Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing. The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR. The personal data has been unlawfully processed. The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR. If one of the aforementioned grounds applies, and a data subject wishes to obtain the erasure of personal data stored by U.H. Spezialmöbel und Ladenbau GmbH, he or she may contact any employee of the controller at any time. An employee of U.H. Spezialmöbel und Ladenbau GmbH shall ensure that the erasure request is complied with without delay.
If the personal has have been made public by U.H. Spezialmöbel und Ladenbau GmbH and the controller is obliged, pursuant to Article 17 (1) GDPR, to erase the personal data, U.H. Spezialmöbel und Ladenbau GmbH, taking account of the available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the published personal data that the data subject has requested the erasure by these other controllers of any links to, or copy or replication of, this personal data, provided that the processing is not necessary. Employees of U.H. Spezialmöbel und Ladenbau GmbH will arrange for the necessary steps to be carried out in individual cases.
e) Right to restriction of processing
Each data subject has the right, granted by the European legislator, to obtain the restriction of processing from the data controller, where one of the following conditions has been met:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. The processing is unlawful, the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead. The controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims. The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. If one of the aforementioned conditions is met and a data subject wishes to obtain the erasure of personal data stored by U.H. Spezialmöbel und Ladenbau GmbH, he or she may contact any employee of the controller at any time. The U.H. Spezialmöbel und Ladenbau GmbH employee will arrange for the restriction of the processing.
f) Right to data portability
Each data subject has the right, granted by the European legislator, to receive personal data concerning him or her, which the data subject has provided to a controller in a structured, commonly used and machine-readable format. It also has the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, where the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.
The data subject may contact any employee of the U.H. Spezialmöbel und Ladenbau GmbH at any time to assert the right to data portability.
g) Right to object
Each data subject has the right, granted by the European legislator, to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) GDPR. This also includes profiling based on these provisions.
U.H. Spezialmöbel und Ladenbau GmbH shall no longer process the personal data if there is an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If U.H. Spezialmöbel und Ladenbau GmbH processes personal data for the purposes of direct marketing, the data subject shall have the right to object to the processing of personal data concerning him or her for such marketing at any time. This also includes to profiling to the extent that is related to such direct advertising. If the data subject submits an objection to U.H. Spezialmöbel und Ladenbau GmbH in relation to the processing for direct marketing purposes, U.H. Spezialmöbel und Ladenbau GmbH shall no longer process the personal data such purposes.
Where personal data are processed at U.H. Spezialmöbel und Ladenbau GmbH for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, the data subject, on grounds relating to his or her particular situation, shall also have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The data subject may contact any employee of the U.H. Spezialmöbel und Ladenbau GmbH or another employee directly to exercise the right to object. The data subject is also free to exercise his or her right to object in the context of the use of information society services, notwithstanding Directive 2002/58/EC, by automated means using technical specifications.
h) Automated individual decision-making, including profiling
Each data subject has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, where the decision (1) is not necessary for entering into, or performance of, a contract between the data subject and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is not based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the U.H. Spezialmöbel und Ladenbau GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wishes to exercise the rights relating to automated individual decision-making, he or she may contact any employee of the controller at any time.
i) Right to withdraw consent under data protection law
Each data subject has right, granted by the European legislator, to withdraw his or her consent to the processing of personal data at any time.
If the data subject wishes to exercise the right to withdraw consent, he or she may contact any employee of the controller at any time.
The controller collects and processes the personal data of applicants for the purpose of handling the application process. The processing may also be carried out electronically. This is particularly the case if an applicant submits the appropriate application documents to the controller electronically, for example via email or an online form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. If the controller does not conclude an employment contract with the applicant, the application documents automatically be erased two months after he or she is notified of the rejection, provided that the erasure does not conflict with any other legitimate interests of the controller. Another legitimate interest in this sense may be, for example, meeting a burden of proof in proceedings under the German General Act on Equal Treatment (AGG).
On this website, the controller has integrated components of the company “Facebook”. Facebook is a social network.
A social network is a social meeting place that is operated on the Internet, an online community that generally allows users to communicate with each other and interact within a virtual space. A social network can act as a platform for sharing opinions and experiences and allows the online community to provide personal or business-related information. Facebook enables users of the social network to create private profiles, upload photos and network via friend requests, among other things.
The operator of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller shall be Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages of this website is accessed that is operated by the controller and on which a Facebook component (Facebook plugin) has been integrated, the web browser on the data subject’s information technology system will receive an automatic prompt from the relevant Facebook component to download a corresponding representation of itself from Facebook. A complete overview of all Facebook plugins can be found athttps://developers.facebook.co.... As part of this technical process, Facebook receives information about which specific subpage of our website is being visited by the data subject.
If the data subject is logged in to Facebook at the same time, Facebook recognises the specific subpage of our website the data subject is visiting each time he or she views our website, for the entire duration of the data subject’s visit to our website. This information is collected by the Facebook component and attributed by Facebook to the corresponding Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, such as the "Like" button, or if the data subject writes a comment, Facebook attributes this information to the personal Facebook user account of the data subject and stores this personal data.
Therefore, if the data subject is logged into Facebook at the same time that our website is viewed, Facebook always receives a notification via the Facebook component that the data subject has visited our website. This takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not wish for this data to be transmitted to Facebook in such a way, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.
The data policy published by Facebook, which is published under https://de-de.facebook.com/abo... provides information about the collection, processing and use of personal data by Facebook. Furthermore, it explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to prevent data from being transmitted to Facebook. Such applications can be used by the data subject to prevent data from being transmitted to Facebook.
This site uses the map service “Google Maps” via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary for your IP address to be saved. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest an appealing presentation of our online offers and making the places we specify on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
More information how user data is handled can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
On this website, the controller has integrated Google AdWords. Google AdWords is an Internet advertising service that allows advertisers to place ads both in Google's search engine results and in Google Network. Google AdWords allows an advertiser to define certain keywords in advance. This is used to display an ad in Google's search engine results only if the user uses the search engine to retrieve a search result that is relevant to the keywords. In the Google Network, the ads are distributed by means of an automatic algorithm, taking into account the previously-defined keywords on websites relevant to the subject.
The operator of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying interest-based advertising on the websites of third-party companies and in the search engine results of the Google search engine, as well as by displaying third-party advertising on our website.
If a data subject reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the data subject by Google. We previously explained what cookies are above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. Provided that it has not yet expired, the conversion cookie is used to track whether certain subpages have been accessed on our website, such as the shopping basket from an online shop system. Using the conversion cookie, both we and Google can tack whether a data subject who came to our website via an AdWords ad generated a conversion, i.e. completed or cancelled a purchase of goods.
The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. We use these visit statistics, in turn, to determine the total number of users who have been referred to us via AdWords ads, i.e. to determine the success or failure of the particular AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other advertising customers of Google AdWords receive information from Google that could be used to identify the data subject.
The conversion cookie is used to store personal information, such as the websites visited by the data subject. Each time you visit our website, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
As stated above, the data subject can prevent the placing of cookies by our website at any time using a corresponding setting on the browser he or she is using, thereby permanently objecting to the placing of cookies. Adjusting the settings of the Internet browser used in this way would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie previously placed by Google AdWords can be erased at any time via your Internet browser or other software programmes.
Furthermore, the data subject has the option of objecting to interest-based advertising by Google. For this purpose, the data subject must access the link www.google.de/settings/ads from each of the Internet browsers he or she uses and select the desired settings there.
Further information and the applicable data protection provisions of Google can be found athttps://www.google.de/intl/de/....
On this website, the controller has integrated components of the LinkedIn Corporation. LinkedIn is an Internet-based social network that enables users to connect with existing commercial contacts and make new business contacts. LinkedIn has over 400 million registered users in more than 200 countries. This means that LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
The operator of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.
Every single time our website, which is equipped with a LinkedIn component (LinkedIn plugin), is accessed, this component causes the browser used by the data subject to download a corresponding representation of itself. Further information on the LinkedIn plug-ins can be found athttps://developer.linkedin.com.... As part of this technical process, LinkedIn receives information about which specific subpage of our website is being visited by the data subject.
If the data subject is logged in to LinkedIn at the same time, LinkedIn recognises the specific subpage of our website the data subject is visiting each time he or she views our website, for the entire duration of his or her visit to our website. This information is collected by the LinkedIn component and attributed by LinkedIn to the corresponding LinkedIn account of the data subject. If the data subject clicks on a LinkedIn button integrated on our website, LinkedIn attributes this information to the personal LinkedIn user account of the data subject and stores this personal data.
Therefore, if the data subject is logged into LinkedIn at the same time that our website is viewed, LinkedIn always receives a notification via the LinkedIn component that the data subject has visited our website. This takes place regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not wish for this data to be transmitted to LinkedIn in such a way, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our website.
LinkedIn offers under the option of unsubscribing from email messages, SMS messages, and targeted ads, as well as managing ad settings at https://www.linkedin.com/psett.... LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, who may place cookies. Such cookies can be rejected athttps://www.linkedin.com/legal.... The applicable privacy policy of LinkedIn is available athttps://www.linkedin.com/legal.... LinkedIn's cookie policy is available athttps://www.linkedin.com/legal....
On this website, the controller has integrated components of Xing. Xing is an Internet-based social network that enables users to connect with existing commercial contacts and make new business contacts. Individual users can create a personal profile for themselves on Xing. Companies can, for instance, create company profiles or publish job offers on Xing.
The operator of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Each time one of the individual pages of this website that is operated by the controller and on which a Xing component (Xing plugin) has been integrated is accessed, the web browser on the data subject’s information technology system will receive an automatic prompt from the particular Xing component to download a corresponding representation of itself from Xing. Further information about the Xing plug-ins can be found at https://dev.xing.com/plugins. As part of this technical process, Xing receives information about which specific subpage of our website is being visited by the data subject.
If the data subject is logged in to Xing at the same time, Xing recognises the specific subpage of our website the data subject is visiting each time he or she views our website, for the entire duration of his or her visit to our website. This information is collected by the Xing component and attributed by Xing to the corresponding Xing account of the data subject. If the data subject clicks on one of the Xing buttons integrated on our website, such as the “Share” button, Xing attributes this information to the personal Xing user account of the data subject and stores this personal data.
Therefore, if the data subject is logged into Xing at the same time that our website is viewed, Xing always receives a notification via the Xing component that the data subject has visited our website. This takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject does not wish for this data to be transmitted to Xing in such a way, he or she can prevent the transmission by logging out of his or her Xing account before accessing our website.
The privacy policy published by Xing, which is available at https://www.xing.com/privacy, provides information about the collection, processing and use of personal data by Xing. Furthermore, Xing has published a privacy notice for the XING Share Button at https://www.xing.com/app/share....
On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that allows video publishers to post video clips free of charge, and allows other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why full film and television programmes, as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website that is operated by the controller and on which a YouTube component (YouTube video) has been integrated is accessed, the web browser on the data subject’s information technology system will receive an automatic prompt from the particular YouTube component to download a corresponding representation of itself from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/abo.... As part of this technical process, YouTube and Google receive information about which specific subpage of our website is being visited by the data subject.
If the data subject is logged in to YouTube at the same time, YouTube recognises the specific subpage of our website the data subject is visiting when he or she accesses a subpage that contains a YouTube video. This information is collected by YouTube and Google and attributed to the corresponding YouTube account of the data subject.
Therefore, if the data subject is logged into YouTube at the same time that our website is viewed, YouTube and Google always receive a notification via the YouTube component that the data subject has visited our website. This takes place regardless of whether the data subject clicks on the YouTube video or not. If the data subject does not wish for this data to be transmitted to YouTube and Google in such a way, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.
The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/...provides information about the collection, processing and use of personal data by YouTube and Google.
Art. 6(1)(a) GDPR provides the legal basis for the processing operations in which we obtain consent for a specific purpose of the processing. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing shall be based on Art. 6(1)(b) GDPR. The same applies to such processing operations that are necessary in order to take steps prior to entering into a contract, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing shall be based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured in our company meaning that his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. In this case, the processing would be based on Art. 6(1)(d) GDPR. Lastly, processing operations may be based on Art. 6(1)(f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases have this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that those interests are not overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this context, it took the view that a legitimate interest could be assumed where the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).
If the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest shall be to carry out our business activities in support of the well-being of all our employees and shareholders.
The duration of the storage of personal data shall be determined by the respective legal retention period. After that period has come to an end, the corresponding data will be routinely erased, provided that it is no longer required for the performance or initiation of the contract.
Please note that the provision of personal data is partly required by law (e.g. tax regulations) and may also result from contractual provisions (e.g. information regarding a contractual partner). Sometimes, for a contract to be concluded, it may be necessary for a data subject to provide us with personal data, which must then be processed by us. For example, the data subject shall be obliged to provide us with personal data if our company concludes a contract with him/her. Failure to provide the personal data would make it impossible for the contract to be concluded with the data subject. The data subject must contact one of our employees before he or she provides personal data. Our employee shall explain to the data subject, on a case-by-case basis, whether the provision of the personal data is legally or contractually necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences failure to provide the personal data would have.
As a responsible company, we do not use automatic decision-making or profiling. This sample privacy policy has been drawn up by the privacy policy generator of the Deutschen Gesellschaft für Datenschutz (German Society for Data Protection), in cooperation with the media law firm WILDE BEUGER SOLMECKE | Rechtsanwälte.