Introduction
Thanks for visiting our website and showing an interest in our products. We take the protection and integrity of your personal data very seriously. In this privacy notice, we provide information on how we collect your personal data when you use our website and how we process your data.
Personal data refers to information on your personal or professional circumstances, namely your name, date of birth, computer ID, email address, phone numbers or postal address. Hakle GmbH collects, processes and uses (hereinafter referred to as: ‘processes’) personal data disclosed on your part to the extent that the processing in question is required to establish, perform or end a contractual or similar obligations with you. The above obligations shall arise if you register to receive a newsletter, participate in surveys, contests, competitions, product tests or prize draws, if you want to receive product samples or contact us to obtain information on our company or products. In the above cases, we process your personal data in order to handle your enquiry in accordance with Art. 6 (1) lit. a, b GDPR.
Name and address of the data controller
The controller responsible for processing your data on our website in accordance with the General Data Protection Regulation is:
Hakle GmbH
Kappeler Str. 51
40597 Düsseldorf
e-mail: kontakt@hakle.de
You can use the following details to contact our data protection officer:
datenschutz@hakle.de
Cookies
We use cookies to improve your experience. Cookies are small text files which are stored on your computer by your web browser and improve your visit to our website. We use cookies to improve our understanding of how visitors use our website and make our website easier to use. For instance, cookies help us determine whether you have already visited a page of our website. Cookies also enable us to determine whether you have previously visited our website or are a new user. These types of cookies do not store your personal data. You can set your browser to prevent any cookies from being placed on your device or ask you whether you consent to cookies each time you visit our website. You can delete all cookies that have already been placed on your device at any time. You can find more information in the help pages from your web browser provider available at the following links: Google Chrome, Firefox, Microsoft EDGE, Safari.
Type of cookies used:
| Name | Type | Description | Duration |
|---|---|---|---|
| Google Analytics | after visitor confirmation | When the Hakle homepage is started for the first time, a “cookie banner” appears, which asks for permission to activate this cookie. You can allow or deny this in the banner. Details see below. | |
| __utma | Contains a randomly generated User-ID. With this ID, Google Analytics can recognize returning users on this website and merge data from previous visits. | 2 years | |
| __utmz | This cookie stores information about which source (from which other website or advertisement) a user last visited the website. | 6 months | |
| Cookie to remember the cookie settings | technically | infinite | |
| WPML language selection cookiee | technically | We offer the Hakle homepage in German and English. The cookie stores your language selection. | infinite |
| Prescreen Cookies | after visitor confirmation | If you wish to apply via our homepage, use the application management system Prescreen. A workflow is started which uses various cookies. You have to confirm this before starting the workflow. For more details see https://hakle.jobbase.io/policy | infinite |
Hakle online shop:
(under review)
How do we use your personal data?
Personal data may either be voluntarily disclosed by you when you use our website or – in the case of usage data – automatically collected when you use our website. We may need to collect certain personal data in order to provide or ensure proper functioning of our services or website.
Subscribing to our newsletter:
- We process the following personal data to send our newsletter to you: First name, surname, email address
- Legal basis: Art. 6(1) lit. a GDPR
- Retention period: We process your personal data if you have signed up to receive our newsletter. You can unsubscribe from our newsletter at any time by clicking the unsubscribe link in each newsletter or emailing us at news@hakle.de. Your data will then be erased.
Marketing:
- Anonymised marketing analyses
- Advertising purposes
- Surveys
- Use of email addresses to invite our customers to participate in product testing
Displaying website content:
When you visit our website/online shop, we collect the following data, which is technically necessary to display our website and guarantee its stability and functionality:
Display language
Cookie that stores your language preference (DE/EN) when you visit our homepage or shop.
Google Analytics
Collection of information on your visit to our website to improve our website.
We collect the following data for the above purpose:
- Anonymised personal data:
Device identification and online ID, other usage data; Name of the internet provider, your IP address, the website you previously visited, information you have accessed on our website, the date and time of your visit to our website, the used operating system and version of the respective browser. - Legal basis for the processing:
Processing is necessary for the purposes of our legitimate interests in accordance with Art. 6(1) , lit. a, b GDPR. - Retention period:
We process the analysis of your personal data for a maximum of one year after your last visit to our website.
Which recipients do we disclose your personal data to?
Hakle GmbH may be required to disclose your personal data to external providers within the EU for the shipment of items or product samples, the distribution or advertising materials or the execution of competitions (e.g. DHL or UPS) in order to process your query. Hakle makes sure that external service providers use your personal data as per Art. 28 GDPR and in compliance with our Privacy Notice.
We shall not sell or hire out your personal data to third parties without your consent. However, we reserve the right to disclose information on you where required to do so by the bona fide authorities or law enforcement agencies.
Data transfers to third countries
We also make sure that we only appoint processors within the EEA. However, in certain cases, the tools we use transfer data to third countries that already collect data on the basis of your consent/registration (e.g. Facebook, Instagram) or the transfer of which you have agreed to by consenting to cookies on our website (Google Analytics).
Hakle online shop
We aim to offer our customers the maximum possible security on our website. To this end, we exclusively engage the services of processors and service providers situated in the European Economic Area. For instance, we use a programme provided by the German software manufacturer Shopware for our online shop, which is hosted on dogado GmbH servers.
Data processing when you register for the Hakle shop
You can register as a customer for the Hakle shop by creating a password-protected customer account. Check the input form filled in during the registration process to see which data is processed in relation hereto. This data is solely used for the internal permanent storage of your personal data in a password-protected customer account. When you register, we store your IP address along with the date and time of your registration.
Data processing in relation to orders
We process your data in relation to orders to ensure all elements of the order process run smoothly. The legal basis in this regard is Art. 6 (1) lit. b GDPR. Check the input form filled when placing the order to see which data is processed in relation hereto.
In order to perform our contractual duties, we may need to transfer data to our payment providers or the appointed credit institute. These transfers are governed by the selected payment method.
The following payment methods are available:
- Klarna (Pay now/purchase by invoice)
In order to offer Klarna as a payment method, we disclose your personal data, including your contact and order information, to Klarna. This allows Klarna to determine whether to offer you the payment options provided by Klarna and to modify the payment options to your requirements. You can find more information on Klarna here. Klarna treats your personal information in compliance with the pertinent privacy regulations and according to the Klarna Privacy Notice. - PayPal
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you select to pay using PayPal, your data required for the payment process will be automatically transferred to PayPal. This typically concerns the following data:
Name, address, company, email address, landline and mobile number, IP address
Data disclosed to PayPal may be forwarded by PayPal to credit agencies in certain cases. This data is forwarded in order to check your identity and creditworthiness. PayPal may also disclose your data to third parties where necessary to perform its contractual duties or for contracted data processing. You can learn more about privacy at PayPal in its Privacy Statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
The above data processing takes place on the legal basis of Art. 6(1) lit. b GDPR as the processing is required for payment via PayPal and, accordingly, the performance of contractual duties. - Credit card/Stripe
If you select to pay using the payment option offered by the payment provider Stripe, your payment will be processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we shall disclose your data provided during the order process along with information related to your order (name, address, account number, sort code, credit card number (where applicable), invoice amount, currency and transaction number) in accordance with Art. 6(1) lit. b GDPR. We solely disclose your data to Stripe Payments Europe Ltd. to process your payment and only to the extent required in this respect. Click below to find more information on data protection at Stripe: https://stripe.com/de/privacy#translation. - Apple Pay
If you opt to pay using the payment method Apple Pay provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, your payment will be processed by the Apple Pay feature on your end device operated with iOS, watchOS or macOS by charging the order to a credit card stored in Apple Pay. Apple Pay uses security features integrated in the hardware and software of your device to protect your transactions. In order to authorise a payment, you will need to enter the code set for payments and verify the transaction using the Face ID or Touch ID feature on your device.
Data you disclose during the order process along with information on your order will be disclosed to Apple in encrypted form to process your payment. Apple will once again encrypt this data with a developer-specific code before transmitting it to the payment provider for the payment card stored in Apple Pay to carry out the payment. Encryption ensures that only the website on which the purchase was made is able to access the payment information. Once the transaction has been effected, Apple will send your device account number and a transaction-specific dynamic security code to the original site to confirm the payment.
In the event that your personal data is processed as part of the above data transfers, this processing exclusively takes place to process payment as per Art. 6(1) lit. b GDPR.
Apple stores anonymised transaction data, including the approximate amount of the purchase, the approximate date and time, and whether the transaction was successfully completed. Anonymisation prevents any links being drawn to your person. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to make a purchase on Safari on your Mac, your Mac and the authorising device will communicate via an encrypted channel on Apple’s servers. Apple does not process or store this information in a format that can be used to identify you personally. You can opt out of the option to use Apple Pay on your Mac in your iPhone settings. Go to ‘Wallet & Apple Pay’ and deactivate ‘Allow Payments on Mac’.
Click below to find more information on data protection at Apple: support.apple.com/de-de/HT203027. - Google Pay
If you select the payment method Google Pay provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’), your payment will be processed via the Google Pay app on your device operated with Android 4.4 (KitKat) or later and featuring an NFC function, by charging one of the payment cards stored in Google Pay or a payment system verified in Google Pay (e.g. PayPal). You will first need to unlock your mobile device using one of the verification tools (facial recognition, password, fingerprint or pattern recognition) to authorise payments over €25 on Google Pay.
Data you disclose during the order process along with information on your order will be disclosed to Google to process your payment. Google will then transfer your payment information stored in Google Pay to the original website on which a successful payment was verified in the form of a unique transaction code. The transaction code does not contain any information on the actual payment information for the payment method stored in Google Pay, but instead constitutes and is transmitted as a single-use numerical token. Google solely acts as an intermediary to process payments for all transactions made via Google Pay. Transactions are solely carried out between the user and original website by charging the payment method stored in Google Pay.
In the event that your personal data is processed as part of the above data transfers, this processing exclusively takes place to process payments as per Art. 6(1) lit. b GDPR.
Google reserves the right to collect, store and analyse certain process-specific information for every transaction concluded via Google Pay. This includes the date, time and amount of the transaction, the distributor’s location and description, a description of the sold goods or services provided by the distributor, photos you have attached to the transaction, the name and email address of the buyer and seller, or the sender and recipient, the payment methods used, your explanation for the reason behind the transaction and the offer associated with the transaction.
According to Google, this processing exclusively takes place on the basis of Art. 6(1) lit. f GDPR in light of its legitimate interest in proper accounting, verifying request data and optimising and ensuring the functionality of the Google Pay feature.
Furthermore, Google reserves the right to merge the collected process data with other information collected and stored by Google for the use of other Google services.
The terms of use for Google Pay can be found here: payments.google.com/payments/apis-secure/u/0/get_legal_document.
Please visit the following link to learn more about data protection from Google Pay: payments.google.com/payments/apis-secure/get_legal_document. - EPS
EPS is an online payment option available to Austrian customers who have accounts at the top 25 Austrian banks.
During the payment process, EPS will transfer you to your banks payment infrastructure. You can pay using EPS if you use the online payment system for online purchases. EPS offers a highly secure way to pay online. No additional registrations or access codes are required, and the service is not subject to any extra fees.
Note: EPS payment is only available for orders within Austria. - iDEAL
iDEAL is a standard payment method for secure direct online payments between bank accounts and is one of the most popular payment methods in the Netherlands. Every Dutch visitor to the Hakle shop with access to online banking through one of the affiliated Dutch banks can use iDEAL for quick and easy payment.
Note: iDEAL payment is only available for orders within the Netherlands.
Competitions
Who is responsible for hosting competitions?
Hakle bears exclusive responsibility for hosting competitions. You can find the contact information for Hakle under the heading Name and address of the data controller.
Which personal data do we collect from you?
In order to execute and analyse competitions, we solely use personal data that you disclose yourself on social media platforms such as Facebook or Instagram, or disclose to us in relation to a competition and your participation therein, which constitutes consent to the use of your personal data as per Art. 6(1) lit. a. The data in question solely pertains to name and address information along with your email address.
How do we use your personal data?
We solely use your personal data to execute the competition and determine the winner, as well as to send the prize in the post and for marketing purposes to continually improve our marketing activities to your benefit.
On which legal bases do we collect and process your data?
We collect and process your personal data in order to balance interests based on our interest in analysing the success of promotional activities as per Art. 6(1) lit. f.
Which recipients do we disclose your personal data to?
We have partnered up with the agency Serviceplan Public Relations & Content GmbH & Co. KG, which is likewise required to comply with the terms of the GDPR as a processor and which prepares marketing-related analyses on our behalf. We do not disclose or intend to sell any personal data to third parties or third countries.
When do we erase your personal data?
Once the competition is over, we shall erase your personal data collected and processed in relation to the competition within three months, provided continued storage is not required by statutory retention periods.
Terms of participation
You can find the terms of participation for the respective competition on our homepage, Facebook or Instagram pages.
Which rights are you entitled to?
You are entitled to the following rights with regard to your personal data.
Information, Art. 15 GDPR: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to receive information on certain aspects of the processing and a copy of the personal data.
Rectification, Art. 16 GDPR: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Erasure, Art. 17 GDPR: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay under certain circumstances. For instance, this right shall apply if you revoke your consent or if the personal data in question is no longer required for the purposes for which it was collected or otherwise processed.
Restrict data processing, Art. 18 GDPR: Under certain circumstances, you have the right to request that the processing of your personal data is restricted. For instance, this right shall apply if you express doubt as to the accuracy of your personal data or the processing is unlawful.
Data portability, Art. 20 GDPR: You have the right to receive the personal data you have provided us with in a structured, conventional and machine-readable format, or to request the unimpeded transfer thereof to another data controller, provided this is technically possible.
The above provision applies to the extent that the processing of your personal data involves the use of automated processes and the processing takes place on the basis of your consent as per Art. 6(1) lit. a GDPR or Art. 9(2) lit. a, or on the basis of a contractual agreement as per Art. 6(1) lit. b.
Objection, Art. 21 GDPR: You have the right to object to the processing of your personal data for direct advertising purposes at any time. In addition, you reserve the right to object to the processing of your data in the presence of certain circumstances on the basis of your legitimate interests.
Withdrawing consent: You have the right to withdraw your consent to the processing of your personal data at any time without stating grounds. The withdrawal shall not have any implications with regard to the legality of the processing carried out on the basis of your consent prior to the withdrawal thereof.
Complaints: You are entitled to lodge a complaint with the competent data supervisory authorities if you are of the opinion that data processing carried out by us is in violation of the law or we have failed to observe your rights, as listed above, to the necessary extent, for instance.
How can you contact us to exercise your rights?
If you want to get in touch with us to exercise your rights, you can contact us at
Hakle GmbH
Kappeler Str. 51
40597 Düsseldorf
or send us an email: datenschutz@hakle.de
Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
We use the following online tools on our website
Google Analytics
The Hackle website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google uses cookies, text files that are stored on your device and permit an analysis of your use of the website. The information generated by the cookie about your use of this website will generally be transmitted to a Google server in the USA and stored there. IP anonymisation ensures your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity. The truncated IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.
You can object to the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google’s collection and use of data generated by cookies relating to your use of the website (incl. your IP address) and the consequent processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can prevent the collection of your data by Google Analytics by opting out thereof in your cookie settings, which are displayed in the cookie banner when you first visit our website.
For more information on Google’s terms of use and privacy policy, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html. Please note that on this website, Google Analytics code is supplemented by “gat._anonymizeIp();” to ensure the anonymised collection of IP addresses (IP masking).
Facebook/Instagram pages
We use the technical platform and services of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland for the informational services we provide thereon.
We use these pages to provide information on and market our products and services. Periodically, we may organise various types of competitions in which you can participate. We also operate these pages to receive feedback on how we can improve our products. Accordingly, we encourage our customers to comment and engage in open discussions on this platform.
As all comments are publicly accessible, it is crucial that they remain respectful and do not include any humiliation, unethical or otherwise inappropriate language, and comply with Facebook’s terms of use or the governing law. We reserve the right to delete any comments that we deem to be inappropriate or unlawful. Please let us know if you come across any comments that could be regarded as inappropriate or unlawful.
For the main part, Facebook/Instagram is responsible for the processing of personal data on its social networks. However, we bear joint responsibility for comments posted by us and other individuals on our pages.
If you post a comment on our pages, we kindly ask you not to disclose any information on other individuals, particularly if you have not obtained their express consent thereto in advance. Under no circumstances should you mention sensitive personal data, for instance, data about your health or the health of others in your comments.
You can learn which data is processed by Facebook for which purposes in the Facebook privacy policy at de-de.facebook.com/policy.php and the Instagram privacy policy at: www.instagram.com/legal/terms/.
We have no influence on the type and extent of data processed by Facebook, the type of processing and use or transfer of this data to third parties. To this end, we accordingly do not have the ability to control the above aspects.
When you use Instagram, Facebook shall collect, transfer, store, publish and use your data and transfer it to the United States, Ireland or any other nation state in which Facebook maintains a business presence, where it will subsequently be stored and used, regardless of your place of domicile.
In this regard, Facebook shall process data you have voluntarily disclosed, such as your name and user name, email address and phone number.
Facebook also analyses the content you share to determine topics of interest to you, stores and processes confidential messages you send to other users and is able to determine your location using GPS data, wireless network information or your IP address to send you advertising or other content.
Data transfer to third countries (Facebook) – to be updated in the near future
An adequacy decision of the EU commission has been issued for the level of data protection granted in the US under the terms of the EU-US Privacy Shield (Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield, notified under document C(2016) 4176).
Facebook Inc. has agreed to the principles of the EU-US Privacy Shield Framework. You can find more information below: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC
YouTube channel
The data controller uses components from YouTube on this website. YouTube is an online video portal that allows video publishers to upload video clips free of charge and other users to view, rate and comment them free of charge. YouTube permits the publication of all kinds of videos, which is why full film and TV episodes, along with music videos, trailers and videos made by users themselves are accessible on the online portal.
YouTube is a service provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time a user visits one of the individual pages on this website that features a YouTube component (YouTube video) and is operated by the data controller, the web browser on the data subject’s IT system is automatically prompted by the respective YouTube component to download the corresponding YouTube components from YouTube. You can find more information on YouTube at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information on the specific subpages of our website visited by the data subject.
Provided the data subject is not simultaneously logged into YouTube, YouTube can identify which subpage of our website the data subject is on when the data subject visits a subpage containing a YouTube video. YouTube and Google shall collect this information and assign it to the data subject’s YouTube account.
Accordingly, YouTube components ensure YouTube and Google are always informed that the data subject has visited our website if the data subject is also logged into YouTube when they visit our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject would like to opt out of this form of sharing data with YouTube and Google, they can log out of their YouTube account prior to visiting our website.
The privacy policy published by YouTube, available at https://www.google.de/intl/de/policies/privacy/, provides further information on the collection, processing and use of personal data by YouTube and Google.
Prescreen applicant management
In order to make the application process as simple and transparent as possible, we use the application management system provided by Prescreen for all applications on the Hakle homepage. In addition, our ‘Job vacancies’ and ‘Training positions’ pages contain a plugin which lists our currently vacant positions. Clicking on one of the list entries for a vacant position displays the job description and another button starts the application process via Prescreen. The data collected is stored on servers operated by Prescreen. The corresponding Privacy Conditions can be viewed prior to starting the application workflow.
Hakle homepage
We use WordPress as the platform for our homepage. WordPress is one of the world’s most popular tools for website design. Our homepage is hosted on servers operated by ALL-INKL.COM – Neue Medien Münnich situated in Germany.
Updates and modifications
We reserve the right to update or modify sections of this privacy notice without prior notification. We therefore recommend that you read the current privacy notice before using our website to ensure you are aware of any modifications or updates.
Last updated on: 09/03/2022