1. General data protection information
We maintain presences on various social media, which you can reach via corresponding buttons on our website or by visiting the pages of the respective providers directly. If you visit one of these presences, personal data is almost always transmitted to the provider of the social network. Personal data is data with which you can be personally identified. The following information informs you about the respective collection and processing of the data, the purpose of data collection and your rights as a data subject.
We also operate our own company website(s) on the Internet. From our presence on the various social media channels, you will be directed to this/these page/s via a link. All information on data protection for our website(s) can be found at https://www.hiwin.de/datenschutz/.
If you contact us by e-mail, telephone or fax, your request including all resulting personal data (name, request) will be stored and processed by us for the purpose of handling your request. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. We will not pass on this data without your consent. This data is processed on the basis of Art. 6 para. 1 letter b GDPR insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 letter a GDPR) and/or on our legitimate interests (Art. 6 para. 1 letter f GDPR), since we have a legitimate interest in the effective processing of the requests addressed to us.
The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Please note that user data may also be transferred to a server in a third country and thus be processed outside the European Union. It is possible that, in addition to the storage of the data you specifically entered in this social media channel, other information may also be processed by the social network provider.
Storage duration
Data collected directly by us via social media will be deleted from our systems as soon as the purpose for storing it ceases to apply, you request that we delete it, revoke your consent to storage or the purpose for storing the data ceases to apply. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions as well as statutory retention periods remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly. You will find information on this in the data protection declarations of the providers; the links can be found in our respective data protection information.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your previously granted consent at any time. For this purpose, it is sufficient to inform us informally by e-mail or, if it concerns data that a social network itself collects as its own responsible party, directly to the respective social network. The legality of the data processing carried out until the time of revocation remains unaffected by the revocation.
Right of appeal to the responsible supervisory authority
In the event of violations of data protection laws, the data subject concerned has a right of appeal to the responsible supervisory authority. The responsible supervisory authority in data protection matters is the data protection officer of the federal state in which our company is located. A list of the data protection officers and their contact details can be found by clicking on the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct, block or delete this data. For this as well as for further questions regarding personal data, you can contact us at any time at the address given in the legal information.
Changes to these data protection regulations
This data protection declaration is continuously adapted to the respective developments in data protection. The new data protection declaration will then apply for your next visit.
Transfer and further processing of personal user data to/in the USA and third countries
If, in exceptional cases, your data is also processed in countries outside the European Union (i.e. in so-called third countries), this will take place if you have expressly consented to this or if it is necessary for our service provision to you or if it is required by law (Art. 49 GDPR). Furthermore, your data will only be processed in third countries if certain measures are taken to ensure that an adequate level of data protection exists (e.g. adequacy decision of the EU Commission or so-called suitable guarantees, Art. 44ff. GDPR). With regard to the ruling of the European Court of Justice "Schrems II" (C-311/18) of July 16, 2020 and the resulting consequences for the export of personal data to the US, we follow the relevant guidance issued by the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information of September 7, 2020 in the 2nd edition.
2. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company.
Christoph Boser
E-mail: datenschutz@hiwin.de
Tel: 0781 932 78 0
3. Privacy information regarding “HIWIN GmbH” Facebook company page
We operate a "HIWIN GmbH" Facebook company page at www.facebook.com. Jointly responsible for the operation of this Facebook company page in terms of the GDPR General Data Protection Regulation are
(a) Facebook Ireland Ltd. (hereinafter "Facebook"), 4 Grand Canal Square, Dublin 2, Ireland
b) HIWIN GmbH, Brücklesbünd 1, 77654 Offenburg, Germany, Telephone +49 (0) 781 932 78 0, e-mail info@hiwin.de
During a visit to our Facebook page, Facebook, as the responsible party, collects personal data of the user, for example through the use of cookies. Such data collection by Facebook can also take place when people visit this Facebook page who are not logged in or registered with Facebook. The manner in which this data was collected and processed is the responsibility of Facebook. This of course also applies to the processing of the data, which is carried out exclusively for the purposes of Facebook.
The processing of your data when contacting or interacting with our Facebook page or its contents is carried out by us on the basis of Art. 6 para. 1 letter f GDPR. Our legitimate interest is to answer your request. If you the purpose of your contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 letter b GDPR.
We process the data provided by you in this context and any data that may be accessible to us in order to safeguard our legitimate interests in contact and communication with our interested parties, which predominate when weighing up interests. This also includes our legitimate interests in data processing in accordance with Art. 6 para. 1 letter f GDPR.
For visitors to our company page who are not logged in/registered with Facebook, Facebook automatically determines and saves your IP address when you visit the site. Facebook also automatically sets cookies. According to Facebook, the so-called datr cookie is used to identify the web browser that establishes the connection to the Facebook page and plays a key role in protecting the social network from malicious activity. The datr cookie has a period of validity of two years, but can be deleted via the browser settings.
For visitors who are not registered and logged in with Facebook, Facebook automatically determines and saves your IP address when you visit the site. Facebook also sets the datr cookie explained above. If you are a member of Facebook and are logged in at the same time with your Facebook profile when you visit our company page, the c_user cookie is also activated. Facebook then links your visit to our company page to your personal user account. This enables Facebook to track your user behaviour.
According to its own statements, Facebook processes user data for the following purposes: Advertising, analysis, creation of personalized advertising, creation of user profiles and market research.
We expressly point out that we have no knowledge of the scope and content of the data collected by Facebook, nor of its processing and use or, if applicable, transmission to third parties by Facebook. We also do not have full access to the data collected by Facebook or the profile data of the user/visitor to our Facebook page. We ourselves can only see the public information in a user profile. At this point, we refer to the option for each user to actively hide the "Likes" in their own Facebook settings or to stop following our Facebook page in order to no longer be listed as a fan of this Facebook page.
We would also like to expressly point out that Facebook Ireland is able to track your user behaviour (across devices for registered users) beyond the Facebook and Instagram platforms on other websites using the applied cookies. This applies to both registered and non-registered users of the Facebook and Instagram platforms.
Personal data is transmitted to us via Facebook if users actively communicate this data via the message function on Facebook. The user data, such as surname and first name, are used by us to answer the user requests, but are not stored beyond that purpose.
Facebook Insights
Facebook provides us with anonymous statistics about the use of the Facebook page (non-personal data). We are provided with data such as trends in the number of followers, reach of and interactions with specific posts, ad performance, "Like" information, page activity, video views, post reach, comments, shared content, responses, percentage of men and women, country and city of origin, language or demographics. These statistics do not allow us to draw conclusions about individual users. The statistics are used by us to continuously optimise our online offer on Facebook with regard to the interests of our users. Users can use their Facebook settings to decide how targeted advertising is displayed to them. Facebook Ireland provides the essence of the page Insights supplement to data subjects, only Facebook Ireland makes decisions regarding the processing of Insights data and implements them. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the person responsible and storage period of cookies on user end devices.
When you call up the company page, Facebook automatically saves information in a log file that your browser sends to Facebook. If you are a member of Facebook and do not want Facebook to collect information about you through our company page and link it to your membership information stored on Facebook, you must:
• Log out of Facebook before you visit our company page
• Delete the cookies present on the device
• Exit and restart your browser
In this way, according to Facebook, all Facebook information by which you can be identified is deleted.
You can assert your rights as a data subject under the GDPR primarily with Facebook Ireland or with us. The duties of the responsible persons resulting from the joint responsibility can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
The transfer and further processing of personal user data to/in third countries, such as the US, as well as the associated potential risks for users cannot be ruled out by us as the operator of the Facebook company page. With regard to the ruling of the European Court of Justice "Schrems II" (C-311/18) of July 16, 2020 and the resulting consequences for the export of personal data to the US, we follow the relevant guidance issued by the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information of September 7, 2020 in the 2nd edition.
For more information about data collection by Facebook and further processing as well as your rights regarding this, please see Facebook's privacy information:
Facebook (Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA):
For fan pages: Agreement on joint processing of personal data (Art. 26 para. 1 GDPR) https://www.facebook.com/legal/terms/page_controller_addendum
Facebook privacy policy: https://www.facebook.com/about/privacy/,
Opt-Out option: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com/,.
4. Privacy information regarding “HIWIN GmbH” Instagram company page
We operate a "HIWIN GmbH" Instagram company page at www.instagram.com. Instagram is a service of Facebook Ireland. Jointly responsible for the operation of this Instagram company page in terms of the GDPR General Data Protection Regulation are
(a) Facebook Ireland Ltd. (hereinafter "Facebook"), 4 Grand Canal Square, Dublin 2, Ireland
b) HIWIN GmbH, Brücklesbünd 1, 77654 Offenburg, Germany, Telephone +49 (0) 781 932 78 0, e-mail info@hiwin.de
During a visit to our Instagram page, Facebook, as the responsible party, collects personal data of the user, for example through the use of cookies. Such data collection by Facebook can also take place when people visit our Instagram page who are not logged in or registered with Facebook or Instagram. The manner in which this data was collected and processed is the responsibility of Facebook. This of course also applies to the processing of the data, which is carried out exclusively for the purposes of Facebook.
The processing of your data when contacting or interacting with our Instagram page or its contents is carried out by us on the basis of Art. 6 para. 1 letter f GDPR. Our legitimate interest is to answer your request. If you the purpose of your contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 letter b GDPR.
We process the data provided by you in this context and any data that may be accessible to us in order to safeguard our legitimate interests in contact and communication with our interested parties, which predominate when weighing up interests. This also includes our legitimate interests in data processing in accordance with Art. 6 para. 1 letter f GDPR.
For visitors to our company page who are not logged in/registered with Facebook, Facebook automatically determines and saves your IP address when you visit the site. Facebook also automatically sets cookies. According to Facebook, the so-called datr cookie is used to identify the web browser that establishes the connection to the Facebook page and plays a key role in protecting the social network from malicious activity. The datr cookie has a period of validity of two years, but can be deleted via the browser settings.
For visitors who are not registered and logged in with Facebook, Facebook automatically determines and saves your IP address when you visit the site. Facebook also sets the datr cookie explained above. If you are a member of Facebook and are logged in at the same time with your Facebook profile when you visit our company page, the c_user cookie is also activated. Facebook then links your visit to our company page to your personal user account. This enables Facebook to track your user behaviour.
According to its own statements, Facebook processes Instagram and Facebook user data for the following purposes: Advertising, analysis, creation of personalized advertising, creation of user profiles and market research.
Our Instagram page gives you the opportunity to respond to our posts, comment on them and send us private messages. Please check carefully what personal data you share with us through our Instagram page. If you want to prevent Facebook from processing personal data that you have submitted to us, please contact us by other means.
We expressly point out that we have no knowledge of the scope and content of the data collected by Facebook, nor of its processing and use or, if applicable, transmission to third parties by Facebook. We also do not have full access to the data collected by Facebook or the profile data of the user/visitor to our Instagram page. We ourselves can only see the public information in a user profile.
We would also like to expressly point out that Facebook Ireland is able to track your user behaviour (across devices for registered users) beyond the Facebook and Instagram platforms on other websites using the applied cookies. This applies to both registered and non-registered users of the Facebook and Instagram platforms.
Personal data is transmitted to us via Facebook if users actively communicate this data via the message function on Facebook. The user data, such as surname and first name, are used by us to answer the user requests, but are not stored beyond that purpose.
Instagram Insights
Facebook provides us with anonymous statistics about the use of the Instagram page (non-personal data). We are provided with data such as trends in the number of followers, reach of and interactions with specific posts, ad performance, "Like" information, page activity, video views, post reach, comments, shared content, responses, percentage of men and women, country and city of origin, language or demographics. These statistics do not allow us to draw conclusions about individual users. The statistics are used by us to continuously optimise our online offer on Instagram with regard to the interests of our users. Users can use their Instagram settings to decide how targeted advertising is displayed to them. Facebook Ireland provides the essence of the page Insights supplement to data subjects, only Facebook Ireland makes decisions regarding the processing of Insights data and implements them. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the person responsible and storage period of cookies on user end devices.
When you call up the company page, Facebook automatically saves information in a log file that your browser sends to Facebook. If you are a member of Facebook and do not want Facebook to collect information about you through our company page and link it to your membership information stored on Facebook, you must:
• Log out of Facebook before you visit our company page
• Delete the cookies present on the device
• Exit and restart your browser
In this way, according to Facebook, all Facebook information by which you can be identified is deleted.
You can assert your rights as a data subject under the GDPR primarily with Facebook Ireland or with us. The duties of the responsible persons resulting from the joint responsibility can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
The transfer and further processing of personal user data to/in third countries, such as the US, as well as the associated potential risks for users cannot be ruled out by us as the operator of the Facebook company page. With regard to the ruling of the European Court of Justice "Schrems II" (C-311/18) of July 16, 2020 and the resulting consequences for the export of personal data to the US, we follow the relevant guidance issued by the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information of September 7, 2020 in the 2nd edition.
For more information about data collection by Facebook for its Instagram service and further processing as well as your rights regarding this, please see Instagram's privacy information:
Data protection information at https://help.instagram.com/519522125107875
Opt-Out option: https://help.instagram.com/155833707900388
Cookie information about Facebook at https://www.facebook.com/policies/cookies/
Cookie information about Instagram at https://help.instagram.com/1896641480634370?ref=ig