![[Translate to Englisch:] Datenschutz von Hymmen](/fileadmin/user_upload/Header/header-datenschutz-agb-impressum-suche-1920x1050.jpg "[Translate to Englisch:] Datenschutz von Hymmen")
Privacy policy
We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the website of Hymmen GmbH Maschinen- und Anlagenbau, which can be accessed under the domain www.hymmen.com and the various subdomains ("our website").
Who is responsible and how do you contact us?
Buisness in charge
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Hymmen GmbH Maschinen- und Anlagenbau
Theodor-Hymmen-Straße
333613 Bielefeld
Phone: +49 521 5806 0
E-Mail: info@hymmen.com
Data Protection Officer
Tim Walter
Mein-Datenschutzbeauftragter.de
Rudolf-Diesel-Straße 1023617 Stockelsdorf
Germany / Schleswig-Holstein
Phone: +49 451 160 852 35
E-Mail: tim.walter@hub24.de
What is it about?
This privacy policy meets the legal requirements for transparency in the processing of personal data. It includes any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behaviour when visiting a website. Information that we cannot (or only with a disproportionate effort) connect to your person, e.g. through anonymization, is not classified as personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We inform you in the individual processing operations about the specific storage periods or criteria for storage. Regardless, we store your personal data in individual cases to assert, exercise or defend legal claims and in the presence of statutory retention obligations.
Who gets my data?
We only pass on your personal data, which we process on our website, to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, we pass on personal data to third parties in individual cases if this serves the establishment, exercise or defence of legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.
Insofar as we use service providers for the operation of our website who process personal data in accordance with Article 28 GDPR in the context of order processing on our behalf, these may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.
Do you use cookies?
Cookies are small text files that we sent to the browser of your device during your visit of our website and stored there. As an alternative to the use of cookies, information may also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses, so that, for example, we are able to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing operations.
What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:
- Information pursuant to Article 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing and a copy of your data;
- Correction pursuant to Article 16 GDPR of incorrect or incomplete data stored by us;
- Deletion in accordance with Article 17 GDPR of the data stored by us, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Restriction of processing in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you reject its deletion because you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Article 21 GDPR.
- Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 para. 1 lit. a GDPRor on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as far as this is technically feasible.
- Objection pursuant to Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing are proven or the processing is carried out to assert, exercise or defend legal claims. Insofar as the right to object to individual processing operations does not exist, this is stated there.
- Revocation in accordance with Article 7 (3) GDPR of your consent with effect for the future.
- Complaint pursuant to Article 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
How is my data processed in detail?
Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.
Provision of the website
Type and scope of processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
IP address of the requesting computerDate and time of accessName and URL of the retrieved fileWebsite from which access is made (referrer URL) Browser used and, if applicable, the operating system of your computer, as well as the name of your access providerOur website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf for the purpose of in accordance with Article 28 GDPR.
Purpose and legal basis
The processing takes place to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability based on Art. 6 para. lit. f GDPR. The collection of data and the storage in log files is absolutely necessary for the operation of the website. There is no right to object to processing due to the exception under Article 21 (1) GDPR. Insofar as the further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to access our website without providing the data.
Storage period
The aforementioned data will be stored for the duration of the display of the website.
Information obligations for applicants pursuant to Art. 13 and Art. 14 GDPR
On our website we publish job offers to which you can apply by e-mail. If you decide to apply for an open position, we process the personal data you provide and transmitted to us exclusively for the purpose of carrying out the application process.
The legal basis for the processing of your personal data in the context of the application process is § 26 para. 1 in conjunction with paragraph 2 BDSG.
In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by employment law has expired. The period begins with the dispatch of the cancellation. If you have expressly consented to the further use of your data for a later approach regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.
If an employment relationship is established following the application process, the data will initially continue to be stored as far as necessary and permissible and then transferred to the personnel file.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if you have consented. A transfer to a third country is not intended.
The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or a contract for an employment relationship with us. However, as part of your application, you should only provide such personal data as is necessary for the commencement and execution of the application. If you do not provide us with personal data when applying, we cannot make a decision on the establishment of an employment relationship.
Please note that applications that you send to us by e-mail will be transmitted unencrypted. In this respect, there is a risk that unauthorized persons can intercept and use this data.
Presence on social media platforms
In order to be able to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about our offered services, we use the presence in social networks. When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as exists in the EU cannot be guaranteed in all countries outside the EU.
In this context, it can lead to risks for you as a user if the transmitted data is processed in so-called third countries with an inadequate level of data protection.
This makes it difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.
In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible that government agencies access personal data without us or you knowing. It is unlikely to be possible to enforce your rights in the USA.
In addition to the respective provider of a social network, we also collect and process personal user data on so-called "fan pages". With this note, we inform you about which data we collect from you on our social media appearances, how we use it and how you can object to the use of data . The respective data processing purposes and data categories can be found in the respective offer, which is listed in more detail below.
The social media activities operated by us and described in more detail below are carried out on the basis of a balance of interests in accordance with Art. 6 para. 1 lit. f) GDPR.
In order to realize this, cookies are used, which record user behavior and enable profiling of the user.
A specific list of the processing purposes of user data can be found in the data protection information of the respective providers. By making the appropriate settings in your user account, your profile formation may be restricted, at least in moderation. For the exact procedure, please read the corresponding data protection information of the respective provider.
The relevant platforms are:
Platform | Responsible body | Data protection information of the platform operators |
Meta Platforms Ireland Ltd 4 Grand Canal | ||
YouTube | Google Ireland Limited | |
New Work SE | ||
LinkedIn Ireland Unlimited Company | ||
Kununu | NEW WORK AUSTRIA XING |
Hymmen GmbH Maschinen- und Anlagenbau operates profiles on the listed platforms to draw attention to products and services and to interact with customers, interested parties and other users of the platform.
In this context, the platform operators also use certain data that they have collected from users of the platform (e.g. whether a photo on a profile has been "liked" or commented on) to create aggregated usage statistics and make them available to the respective operators of the profile (so-called "insights" or "Analytics"). As a profile operator, we also receive such usage statistics. The information that we receive as a profile operator does not allow any conclusions to be drawn about individual users. The profile operator itself has no access to personal data processed by the platform operators for the compilation of usage statistics. Only the respective platform operator determines which data is processed for these purposes and in what way. As a profile operator, Hymmen GmbH Maschinen- und Anlagenbau can neither legally nor factually influence the processing by the platform operators.
For processing in connection with the compilation of usage statistics, Hymmen GmbH Maschinen- und Anlagenbau and the respective platform operator shall be deemed to be joint controllers within the meaning of Art. 26 GDPR.
Where possible, there are agreements on joint responsibility with the respective platform operators.
In addition, data processing by Hymmen GmbH Maschinen- und Anlagenbau as profile operator takes place only to a very limited extent:
- Processing of usernames and comments that are deleted for violation of netiquette. These will be retained within the limitation period as proof required in legal disputes.
- Processing of user names and individual messages when you contact us via messenger services
- Processing of usernames when participating in competitions. For this purpose, the relevant conditions of participation apply.
- Processing of user names and postings in the context of inquiries and, if necessary, obtaining consent to the re-posting of images
- Recruiting potential applicants on career platforms
For these purposes, we usually only process your name, message content, comment content and the profile information you provide "publicly".
Other third-party providers we use:
Google CDN
Type and scope of processing
We use Google CDN to properly provide the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to make content of our online offer, especially files such as graphics or scripts, available faster with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in secure and efficient provision and the optimisation of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, see the privacy policy for Google CDN: https://policies.google.com/privacy.
Google Fonts
Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, connect to servers of Google Ireland Limited, whereby your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
Google reCaptcha
Type and scope of processing
We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated queries from human ones. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.
Purpose and legal basis
The use of Google reCaptcha is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
YouTube NoCookie
Type and scope of processing
We have integrated YouTube NoCookie on our website. YouTube NoCookie is a component of the video platform of YouTube, LLC where users can upload content, share it over the Internet and receive detailed statistics.
YouTube NoCookie allows us to integrate content from the platform into our website.
YouTube NoCookie uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the listened content and to create reports. If a user is registered with YouTube, LLC, YouTube NoCookie can assign the videos played to the profile.
When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.
Purpose and legal basis
YouTube NoCookie is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube NoCookie: https://policies.google.com/privacy.
Youtube
Type and scope of processing
We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform where users can upload content, share it over the Internet, and receive detailed statistics.
YouTube Video allows us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the listened content and to create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile.
When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.
Purpose and legal basis
YouTube is used based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
In addition, prior to such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. For more information, see the privacy policy for YouTube video: https://policies.google.com/privacy.
Google APIs
Type and scope of processing
We use Google APIs from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to access other services and data from Google Ireland Limited . Your IP address will be transmitted to Google Ireland Limited. Please note that there is a separate section in this Privacy Policy for each additional service we use from Google Ireland Limited.
Purpose and legal basis
The use of Google APIs is based on our legitimate interests, i.e. interest in optimising our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision of the European Commission (e.g. in the USA), we have agreed other suitable guarantees within the meaning of Art. 44 et seq. GDPR with the recipients of the data. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.
We would like to point out that in the case of transfers to third countries, risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not be aware) may exist.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, see the Google API Privacy Policy: policies.google.com/privacy.