Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the website of the HEIN Reinraum GmbH, which can be reached under the domain www.hein-reinraum.de.

Who is responsible and how do I contact you?

Person responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

HEIN Reinraum GmbH
Daimlerstrasse 12
38112 Braunschweig

Telephone: 0531 230 469 - 0

Email: datenschutz@hein-reinraum.de

Data protection officer

AGAD Service GmbH
Waldring 43-47
44789 Bochum

Dr. Nils Helmke

Email: datenschutz@hein-reinraum.de

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behavior when visiting a website. Information for which we cannot establish a connection to you personally (or only with disproportionate effort), e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, query, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose for processing is achieved and there are no legitimate grounds for further data retention. During each processing operation, we will inform you about the specific retention period and the retention criteria. Regardless of that, we may occasionally store your personal data for the establishment, exercise or defence of legal claims and due to statutory retention obligations.

We only pass on your personal data that we process on our website to third parties if this is necessary to fulfill the purposes and in the individual case is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, in individual cases we pass on personal data to third parties if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

To the extent that we use service providers to operate our website who process personal data on our behalf in accordance with Article 28 of the GDPR, these may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.

Cookies are small text files that we send to the browser of your device and stored there when you visit our website. As an alternative to using cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we can, for example, recognize the browser you are using when you visit our website again and transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our Internet offering more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager of this website.

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

• Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
• Correction in accordance with Article 16 GDPR of incorrect or incomplete data stored by us;
• Deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is;
• Restriction of processing in accordance with Art. 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse its deletion because you need it to assert, exercise or defend legal claims or You have objected to the processing in accordance with Article 21 of the GDPR.
• Data portability in accordance with Article 20 of the GDPR, as long as you provide us with personal data within the scope of your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR or on the basis of a contract in accordance with Article 6 Paragraph 1 Letter b of the GDPR -GVO and these were processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as long as this is technically feasible.
• Objection in accordance with Art. 21 GDPR against the processing of your personal data, provided that this is based on Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate reasons for the processing can be proven or if the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.
• Revocation of your consent in accordance with Article 7 Paragraph 3 of the GDPR with effect for the future.
• Complain to a supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

Hereinafter we will inform you about each processing operation, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective retention period. An automated decision in individual cases, including profiling, does not take place.

6.1 Provision of the website

Nature and scope of processing

When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

• IP address of enquiring computer
• Date and time of access
• Date and time of access
• Website from which access is made (referrer URL)
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Purpose and Legal Basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Article 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to processing due to the exception under Article 21 (1) GDPR. To the extent that further storage of log files is required by law, processing is carried out on the basis of Article 6 Paragraph 1 Letter c GDPR. There is no legal or contractual obligation to provide the data, although accessing our website is technically not possible without providing the data.

Storage duration

The aforementioned data will be stored for the duration of the website display and, for technical reasons, for a maximum of one year.

6.2 Contact form

Nature and scope of processing

On our website, you can contact us via a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and Legal Basis

The processing of your data by using our contact form is carried out for the purpose of communicating and processing your request based on your consent in accordance with Article 6 (1) (a) GDPR. If your request relates to an existing contractual relationship with us, the processing will be carried out for the purpose of fulfilling the contract on the basis of Article 6 Paragraph 1 Letter b GDPR. There is no legal or contractual obligation to provide your data, but processing your request is not possible without providing the information in the mandatory fields. If you do not wish to provide this information, please contact us by other means.

Storage duration

If you use the contact form based on your consent, we will store the data collected for each request for a period of three years, starting with the completion of your request or until you revoke your consent.

If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of three years from the end of the contractual relationship.

6.3 Microsoft Clarity

Nature and scope of processing

On our website we use Microsoft Clarity, a web analysis service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Clarity helps us better understand and analyze the use of our website in order to improve the user experience.

Microsoft Clarity uses cookies and similar technologies to collect information about how users interact with our website. This may include tracking mouse movements, clicks, screen activity and other interactions on the website.

Purpose and Legal Basis

The use of Microsoft Clarity serves to optimize the functionality and user-friendliness of our website. The legal basis for processing is your consent in accordance with Article 6 (1) (a) GDPR.

Storage duration

Microsoft Clarity stores the processed data for up to 13 months. You can deactivate Microsoft Clarity's use of cookies by adjusting the settings here. Further information can be found in Microsoft's privacy policy: https://privacy.microsoft.com/de-de/privacystatement

6.4 Embedding YouTube videos

Nature and scope of processing

We have included YouTube videos in our online offering that go to www.youtube.com are stored and can be played directly from our website. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are integrated in “extended data protection mode”, so that no data about you as a user is transferred to YouTube if you do not play the videos. Data is only transferred when you play the videos. We have no influence on this data transfer.

When you play the video, cookies are stored on your device. YouTube thereby receives the information that you have accessed the corresponding subpage of our website; Furthermore, those under § 6.1. the above-mentioned data is transmitted.

This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be associated with your YouTube profile, you must log out before activating the button.

Purpose and Legal Basis

The legal basis for data processing is your consent in accordance with Article 6 (1) (a) GDPR. YouTube saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the creation of these user profiles. To object to data collection, click here: Object to data collection

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube. Further information can be found in Google's privacy policy.

6.5 Google Analytics

Nature and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our site, the sub-pages visited and the time spent by visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users again.

This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Article 6 Paragraph 1 Letter a. GDPR.

Storage duration

We have no control over the actual retention period of the processed data, which is determined by Google Ireland Limited. For more information, please see the Google Analytics Privacy Policy: https://policies.google.com/privacy  https://policies.google.com/privacy.

6.6 Consent Management

Nature and scope of processing

We have integrated a tool for so-called consent management on our website to request consent for data processing or the use of cookies or comparable functions.

This gives you the opportunity to grant or reject your consent to certain functionalities of our website, e.g. for the purposes of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalized advertising. You can give or reject your consent for all functions or give your consent for individual purposes or individual functions.

The settings you have made can also be changed later. When using the tool, personal data as well as information about the end devices used, such as the IP address, are processed.

Purpose and Legal Basis

The purpose of integrating the tool and the associated data processing is to allow the users of our website to decide whether to set cookies and to offer the opportunity to change settings that have already been made as part of the further use of our website. The legal basis for the processing is Art. 6 Para. 1 lit. c in conjunction with Art. 6 Para. 1 lit. a in conjunction with Art. 7 Para. The processing of the data helps us fulfill our legal obligations (e.g. obligation to provide proof). Our legitimate interests in processing lie in storing user settings and preferences regarding the use of cookies and other functionalities. The data collected is only processed locally on the server and is not passed on to third parties.

Storage duration

The tool stores your data as long as your user settings are active, for a maximum of one year.

6.7 WooCommerce

Nature and scope of processing

Our online shop is based on the WooCommerce technology from WooCommerce Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86 Ireland and sets cookies on your system in which information is stored during your website visit. These are necessary for the shopping cart functionality on the website, enable the shopping cart to be saved and retrieved in the database and contain information about the products that the visitor has viewed.

Purpose and Legal Basis

The use of WooCommerce is based on our legitimate interests, i.e. interest in the functionality and ability to order via our online shop in accordance with Art. 6 Para. 1 lit. f. GDPR.

Storage duration

The cookies are usually so-called session cookies, which are volatile after the browser is closed. However, the specific storage period cannot be influenced by us, but is determined by WooCommerce. Further information can be found in the privacy policy for WooCommerce: https://docs.woocommerce.com/document/woocommerce-cookies/ and https://automattic.com/de/privacy/

6.8 HubSpot

Nature and scope of processing

We offer you the opportunity to book consultation appointments with our experts on our website. To schedule an appointment, we need your first and last name, as well as your email address, so we can contact you and schedule your appointment.

Appointment registration, as well as subsequent confirmation and reminders via automated emails, are handled by a service provided by our service provider HubSpot. Your information will also be processed in our customer relationship management system, which is also provided by HubSpot.

HubSpot Inc. is a software company from the USA (HubSpot Inc. Two Canal Park, USA, Cambridge, MA 02141, USA). Our contractual partner is the branch HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin (https://legal.hubspot.com/de/impressum).

This software provider works on our behalf and may therefore also view (receive) your data to the extent necessary. A data processing agreement has been concluded with HubSpot. Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy.  

Legal basis for data processing

The legal basis for processing your personal data when booking an appointment is your consent in accordance with Art. 6 (1) (a) GDPR. Your personal data is processed in our CRM system in accordance with Art. 6 (1) (b) GDPR to fulfill a contract or to implement pre-contractual measures.

Storage duration

If you have submitted your data via the registration form and thus registered for an appointment, your data will be stored in our CRM system for the duration of the customer relationship and then deleted.

6.9 Use of PayPal as a payment service provider

Nature and scope of processing

We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg).

The processing of the data specified in this section is neither legally nor contractually required. If you use PayPal, we will transmit the following data to PayPal where necessary: ​​first name, last name, address, email address, and telephone number. Without the transmission of your personal data, we cannot process a payment via PayPal. You have the option of choosing a different payment method.

PayPal conducts credit checks for various services, such as direct debit payments, to ensure your willingness and ability to pay. For this purpose, your data (name, address, date of birth, bank account details) is shared with credit agencies. We have no influence over this process and only receive the result, whether the payment was processed, declined, or pending review.

Purpose and Legal Basis

Offering PayPal as a payment method is in line with our legitimate interest in offering an efficient and secure payment method in accordance with Art. 6 (1) (f) GDPR. In this context, data will be transferred in accordance with Art. 6 (1) (b) GDPR, to the extent necessary for the performance of the contract.

PayPal's credit check is in line with PayPal's legitimate interest pursuant to Art. 6 (1) (f) GDPR and serves the purpose of executing the contract pursuant to Art. 6 (1) (b) GDPR. Further information on options for objecting to and removing data from PayPal can be found at: PayPal Privacy Policy.

Storage duration

Your data will be stored until the payment is completed. This includes the period required to process refunds, debt collection, and fraud prevention. In addition, the statutory retention periods for business documents apply, such as Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB).

6.10 Order form & customer account

Nature and scope of processing

If you place an order on our website and optionally open a customer account, we collect your email address, as well as your name, address details, telephone number, company name and optionally the sales tax identity number and store this information together with the order form. Date and your IP address. In the course of contract processing, personal data will also be passed on to third parties if this is necessary.

Purpose and Legal Basis

We process your data for the purpose of contract processing based on your consent in accordance with Article 6 Paragraph 1 Letter b GDPR. Your customer account can be deleted at any time and can be done by revoking it in accordance with Art. 7 Para. 3 GDPR to the above address of the person responsible.

Storage duration

After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or reserve the right to further use of your data as permitted by law on our part became.

6.11 Google reCAPTCHA

Nature and scope of processing

On our website, we have integrated components of Google reCAPTCHA. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or was automatically generated by a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. During this process, your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated queries from human ones. This data is processed exclusively for the above-mentioned purposes and to ensure the security and functionality of Google reCAPTCHA.

Purpose and Legal Basis

The use of the service is based on our legitimate interests, i.e. to protect the transmission of forms in accordance with Art. 6 Para. 1 lit. f. GDPR.

Storage duration

We have no control over the specific retention period of the processed data. This is determined by Google Ireland Limited. You can find further information in the privacy policy of Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

6.12 Wordfence

Nature and scope of processing

We use Wordfence, a security plugin for the WordPress content management system. Wordfence is provided by Defiant Inc., 1700 Westlake Ave N, STE 200, Seattle, Washington 98109, USA. Wordfence helps us, among other things, to protect our website from unauthorized access and attacks with a firewall and malware scanners. When you access our website, Wordfence establishes a connection to Defiant Inc. servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security of this website.

Purpose and Legal Basis

The use of Wordfence is based on our legitimate interests in accordance with Article 6 Paragraph 1 Letter f of the GDPR, i.e. our interest in the secure provision of our website and protection against attacks. We have concluded so-called standard contractual clauses with Defiant Inc. for the transfer of data to the USA.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Defiant Inc. Further information can be found at https://www.wordfence.com/help/general-data-protection-regulation/#agreement-to-new-terms-and-privacy-policies.