Privacy policy
1. Data privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this site. Personal data is any information that allows you to be personally identified. For more information on data privacy, please refer to our privacy policy below.
Data collection on this site
Who is responsible for collecting data on this site?
The website operator handles the processing of data on this site. Please refer to the legal notice on this website for their contact details.
How do we collect your data?
On the one hand, your data is collected when you give it to us. For example, this can be data you enter into a contact form.
Other data is collected by our IT systems automatically or subject to your consent when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or the time at which the page is visited). This data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure that the website can function correctly. Other data can be used to analyse your user behaviour.
What are your rights with regard to your data?
You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you can revoke this consent at any time for the future. In addition, you have the right to request that the processing of your personal data be restricted in certain circumstances. You are also entitled to lodge a complaint with the competent supervisory authority.
You can contact us at any time at the address provided in the legal notice about this and if you have further questions about data privacy.
Analysis tools and tools of third-party providers
When you visit this site, your browsing behaviour can be statistically analysed. This is primarily carried out with so-called analysis programs.
You’ll find detailed information on these analysis programs in the privacy policy below.
2. Hosting and content delivery networks (CDN)
External hosting
This site is hosted by an external service provider (host). The personal data collected on this site is stored on the host’s servers. In particular, this could include IP addresses, contact requests, meta and communication data, contract data, contact information, names, data about the website traffic, and other data generated by a website.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) b) GDPR) and to ensure that our website is provided securely, rapidly and efficiently by a professional provider (Art. 6 (1) f) GDPR).
Our host will only process your data to the extent that is necessary to meet our performance obligations, and shall comply with our instructions regarding this data.
We use the following host:
Mittwald CM Service GmbH & Co. K
Königsberger Strasse 4–6
32339 Espelkamp
Data processing agreement
In order to ensure data privacy-compliant processing, we have entered into a data processing agreement with our host.
3. General information and mandatory information
Data privacy
The operators of these pages take the protection of your personal data very seriously. We handle your personal information confidentially and in accordance with the statutory data privacy regulations and this privacy policy.
When you use this website, various items of personal data are collected. Personal data is information that allows you to be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please be aware that data transfer on the internet (for example when communicating via e-mail) may be subject to security vulnerabilities. You cannot completely protect your data from being accessed by third parties.
Information about the controller
The controller responsible for data processing on this site is:
Hufa Dichtungsgesellschaft mbH
Linde 13
D-51399 Burscheid
Tel.: +49 (0)2174 - 76 28-0
E-mail: info@hufa.de
The controller is the natural person or legal entity which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses etc.).
Storage period
Unless a more specific storage period is specified within this privacy policy, we retain your personal data until the purpose of the data processing no longer applies. If you make a legitimate request for erasure or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. storage periods under tax or commercial law); in the latter case, the data will be deleted when these reasons come to an end.
Legally required data privacy officer
We have appointed a data privacy officer for our company.
SEL-COM IT-Dienstleistungen
Owner Selman Sezek
Herderstr. 8
D-40721 Hilden
Tel.: +49 (0)2103 9773378
E-mail: datenschutz@sel-com.de
Information on the transfer of data to the USA
Our websites include tools provided by companies based in the USA. When these tools are active, your personal data can be transferred to the US servers of the respective companies. Please be aware that the USA is not a safe third country in terms of EU data privacy law. US companies are obligated to hand personal data over to security authorities without you, as the data subject, being able to take legal action against this. Therefore, the possibility cannot be ruled out that US authorities (e.g. intelligence services) will process, analyse and permanently store any data of yours that is located on US servers for monitoring purposes. We have no influence over these processing activities.
Revoking your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent that you have already granted at any time. The legality of the processing performed before you revoke your consent is not affected by the revocation.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA IS PROCESSED ON THE BASIS OF ART. 6 (1) E) OR F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 (1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU DO SO, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the case of infringements of GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you require the data to be transferred directly to another data controller, this will only be done to the extent that is technically feasible.
SSL or TLS encryption
This page uses SSL or TLS encryption to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the padlock symbol in your browser line.
If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Access, erasure and correction
Within the framework of the statutory provisions, you have the right to access, free of charge, your saved personal data, its origin and recipients and the purpose of the data processing, and, if applicable, a right to have this data corrected or deleted. If you have any questions about this topic or any other questions relating to your personal data, you can contact us at the address provided in the legal notice at any time.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can exercise this at any time by contacting us at the address provided in the legal notice. The right to a restriction of processing exists in the following cases:
- If you contest the accuracy of your personal data stored by us, we usually need time to verify this. During the verification period, you have the right to request that the processing of your personal information be restricted.
- If the processing of your personal data has been/is unlawful, you may request that the processing of your personal data be restricted instead of the data being deleted.
- If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request that the processing of your personal information be restricted instead of the data being deleted.
- If you have made an objection under Art. 21 (1) GDPR, your interests must be weighed against our interests. You have the right to request that the processing of your personal data be restricted until it is determined whose interests prevail.
If you have restricted the processing of your personal information, such personal data may, with the exception of storage, only be processed with the your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or of a Member State.
Objection to advertising e-mails
Use of contact details published as part of the obligatory legal notice is hereby prohibited for the purpose of sending advertisements and information that are not expressly requested. The website operators explicitly reserve the right to take legal action in the event of unsolicited advertising, such as spam e-mails.
4. Data collection on this site
Cookies
Our web pages use so-called “cookies”. Cookies are small text files and do no harm to your device. They can be stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies in are automatically deleted after the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies of third-party companies can also sometimes be stored on your device when you access our site (third-party cookies). These enable us or you to use particular services of the third-party company (e.g. cookies for handling payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions do not function without them (e.g. the shopping basket function or the viewing of videos). Other cookies serve to analyse the user behaviour or to display advertising.
Cookies that are necessary for the execution of electronic communications (necessary cookies) or for the provision of certain functions desired by you (functional cookies, e.g. for the shopping basket function) or for the optimisation of the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6 (1) f) GDPR, unless a different legal basis is indicated. The website operator has a legitimate interest in storing cookies to provide technically correct and optimised services. If consent to the storage of cookies is requested, the relevant cookies will be stored exclusively on the basis of this consent (Art. 6 (1) a) GDPR); the consent can be revoked at any time.
You can configure your browser to let you know when cookies are set, allow cookies only on a case-by-case basis, reject cookies in certain cases or in general, and enable automatic deletion of cookies when the browser is closed. Disabling cookies may restrict the functionality of this site.
If cookies of third-party companies are used or if cookies are used for analysis purposes, we will inform you of this separately within the framework of this data policy and, if applicable, request your consent.
Cookie consent with Usercentrics
This website uses the Usercentrics cookie consent technology to obtain your consent to the storage of certain cookies on your device and to the use of certain technologies and to document this in a data privacy-compliant manner. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).
When you enter our website, the following personal data will be transferred to Usercentrics:
- your consent or the revocation of your consent
- your IP address
- information about your browser
- information about your device
- the time of your visit to the website
Usercentrics also stores a cookie in your browser in order to be able to assign the granted consent or the revocation thereof to you. The data collected in this way will be stored until you ask us to delete it, you delete the Usercentrics cookie itself, or the purpose for the data storage no longer applies. Mandatory statutory periods remain unaffected.
Usercentrics is used to obtain the consent required by the law for the use of certain technologies. The legal basis for this is Art. 6 (1) Sentence 1 c) GDPR.
Data processing agreement
We have concluded a data processing agreement with Usercentrics. This is a contract required by data privacy law that guarantees that Usercentrics processes the personal data of the visitors to our website only in accordance with our instructions and in compliance with GDPR.
Server log files
The provider of the web pages automatically collects the information that your browser sends to us automatically and saves it in server log files. This information is:
- the browser type and browser version
- the operating system used
- the referrer URL
- the host name of the accessing computer
- the time of the server request
- the IP address
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 (1) f) GDPR. The site operator has a legitimate interest in the technical accuracy and optimisation of the site – the server log files must be recorded for this purpose.
Contact form
If you send us enquiries via the contact form, your details on that form, including the contact details provided there, will be saved by us to enable your enquiry to be processed and in case there are any follow-up questions. We will not pass on this data without your consent.
This data will be processed on the basis of Art. 6 (1) b) GDPR if your enquiry is related to the fulfilment of a contract or is required for the performance of pre-contractual actions. In all other cases, processing is based on our legitimate interest in the effective handling of enquires directed to us (Art. 6 (1) f) GDPR) or your consent (Art. 6 (1) a) GDPR), where requested.
We will retain the data that you enter in the contact form until you request us to delete it, you revoke your consent to the storage of the data, or the purpose for the data storage no longer applies (e.g. after the processing of your enquiry is completed). Mandatory statutory provisions – especially storage periods – remain unaffected.
Enquiries by e-mail, phone or fax
If you contact us by e-mail, telephone or fax, your enquiry, including all personal data (name, enquiry) resulting from the contact process, will be stored and processed by us for the purpose of handling your enquiry. We will not pass on this data without your consent.
This data will be processed on the basis of Art. 6 (1) b) GDPR if your enquiry is related to the fulfilment of a contract or is required for the performance of pre-contractual actions. In all other cases, processing is based on our legitimate interest in the effective handling of enquires directed to us (Art. 6 (1) f) GDPR) or your consent (Art. 6 (1) a) GDPR), where requested.
We will retain the data that you send us via contact enquiries until you request us to delete it, you revoke your consent to the storage of the data, or the purpose for the data storage no longer applies (e.g. after the processing of your enquiry is completed). Mandatory legal requirements – especially statutory storage periods – remain unaffected.
5. Analysis tools and advertising
Google Analytics
This site takes uses features of the Google Analytics web analysis service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyse the behaviour of the visitors to the website. The website operator receives a variety of usage data, e.g. page views, time spent on the site, operating systems used and origin of the user. These items of data are combined by Google in a profile that is assigned to the respective user or their device.
Google Analytics uses technologies that allow the user to be recognised for the purpose of analysing the user behaviour (e.g. cookies or device fingerprinting). The information about your use of this website that is collected by Google is usually transferred to a Google server in the USA, where it is stored.
This analysis tool is used on the basis of Art. 6 (1) f) GDPR. The site operator has a legitimate interest in analysing the user behaviour to optimise both its website and advertising. If the corresponding consent has been requested (e.g. consent to the storage of cookies), the data is processed exclusively on the basis of Art. 6 (1) a) GDPR; the consent can be revoked at any time.
The data is transferred to the USA on the basis of the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymisation
We have enabled IP anonymisation on this site. Your IP-address will be shortened by Google within EU Member States or in other states party to the Agreement on the European Economic Area before it is sent to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your usage of the website, create reports on website activities and provide further services relating to website and internet usage for the operator of this website. The IP address transmitted from your browser within the framework of Google Analytics will not be merged with other Google data.
Browser plug-in
You can prevent your data being collected and processed by Google by downloading and installing the browser plug-in that is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on the handling of user data by Google Analytics in the Google data privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.
Contract data processing
We have concluded a data processing agreement with Google and fully implement the strict regulations of the German data privacy authorities when using Google Analytics.
Demographics and interests in Google Analytics
This website uses the Google Analytics “Demographics and interests” function so that it can show the visitors to the website appropriate advertisements within the Google advertising network. This function can create reports that include statements on the age, gender and interests of the visitors to the website. This data comes from Google’s interest-based advertising and from visitor data from third-party providers. This data cannot be assigned to a particular person. You can opt out of this function at any time via the ad settings in your Google account and you can generally prohibit Google Analytics from collecting your data as presented under “Objection to the recording of your data”.
Storage period
Any data stored by Google at the user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. Details are available under the following link: https://support.google.com/analytics/answer/7667196?hl=de
6. Plug-ins and tools
YouTube with advanced data privacy
This site contains YouTube videos. The operator of the web pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the advanced data privacy mode. According to YouTube, this mode does not allow YouTube to store any information about the visitors to this site before they view the video. On the other hand, the advanced data privacy mode does not necessarily preclude the forwarding of data to YouTube partners. Therefore, YouTube – irrespective of whether you view a video – establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server will be informed which pages you have visited. When you are logged in to your YouTube account, you are allowing YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
After you start a video, YouTube can also store various cookies on your device or use comparable recognition technology (e.g. device fingerprinting). In this way, YouTube can receive information about visitors to this website. Amongst other things, this information is used to collect video statistics, to improve user friendliness and to prevent attempted fraud.
Where applicable, other data processing operations, over which we have no influence, can be triggered after you start a YouTube video.
YouTube is used in the interests of an attractive presentation of our website. This is a legitimate interest in terms of Art. 6 (1) f) GDPR. If the corresponding consent has been requested, the data is processed exclusively on the basis of Art. 6 (1) a) GDPR; the consent can be revoked at any time.
You can find further information on data privacy at YouTube in its privacy policy at: https://policies.google.com/privacy?hl=de.
Google Web Fonts (local hosting)
This page uses web fonts provided by Google for the uniform presentation of fonts. The Google fonts are installed locally. There is no connection to Google servers.
You can find further information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
Google Maps
This page uses the Google Maps map service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To take advantage of Google Maps features, it is necessary for your IP address to be stored. This information is usually transferred to a server in the USA and stored there. The provider of this website has no control over this data transfer.
Google Maps is used for the attractive presentation of our online websites and to make it easy to find the locations indicated by us on the site. This is a legitimate interest in terms of Art. 6 (1) f) GDPR. If the corresponding consent has been requested, the data is processed exclusively on the basis of Art. 6 (1) a) GDPR; the consent can be revoked at any time.
The data is transferred to the USA on the basis of the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on how to use user data, see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
7. Our own services
Handling applicant data
We offer you the opportunity to send us a job application (e.g. by e-mail, by post, or via the online application form). The following information will inform you of the scope, purpose and use of your personal information collected during the application process. We guarantee that your data will be collected, processed and used in accordance with the applicable data privacy laws and other statutory provisions, and that your data will be treated as strictly confidential.
Scope and purpose of the data collection
When you submit an application, we will process your personal data (e.g. contact and communication information, application documents, interview notes, etc.), to the extent necessary to make a recruitment decision. The legal basis for this is Section 26 German Federal Data Protection Act (BDSG) (latest revision) in accordance with German law (initiation of an employment relationship), Art. 6 (1) b) GDPR (general initiation of a contract) and – if you have given consent – Art. 6 (1) a) GDPR. Consent can be revoked at any time. Your personal information will only be shared with people involved in processing your application within our company.
If the application is successful, the data you submitted will be stored in our data processing systems for the purpose of the execution of the employment relationship on the basis of Section 26 BDSG (latest revision) and Art. 6 (1) b) GDPR.
Data retention period
If we do not offer you a job, if you refuse a job offer or withdraw your application, we reserve the right to retain the data submitted by you for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Art. 6 (1) f) GDPR). The data will then be deleted and the physical application documents destroyed. The data is primarily retained for the purpose of evidence in the event of a legal dispute. If it is clear that the data will be required after the 6-month period has elapsed (e.g. due to a looming or pending legal dispute), the data will not be deleted until the purpose for further retention no longer applies.
Longer retention periods are also possible if you have provided the corresponding consent (Art. 6 (1) a) GDPR) or where statutory retention periods preclude deletion.
Inclusion in the pool of applicants
If we do not offer you a job, there is the possibility of including you in our pool of applicants. If you are included in the pool of applicants, all the documents and information from the application will be transferred to the pool of applicants so that you can be contacted in the event of suitable vacancies.
You’ll be included in the pool of applicants exclusively on the basis of your express consent (Art. 6 (1) a) GDPR). The submission of your consent is voluntary and bears no relation to the ongoing application process. The data subject can revoke their consent at any time. In this case, the data from the pool of applicants will be irrevocably deleted, provided that no statutory grounds for storage exist.
The data from the pool of applicants is irrevocably deleted no later than two years after consent is granted.
