DATA PROTECTION POLICY

Responsible

for data processing within the meaning of the General Data Protection Regulation (DSGVO) and other provisions of data protection law is

Hoffmann Mineral GmbH
Münchener Str. 75
86633 Neuburg
Deutschland

Phone: +49 8431 53-0
E-Mail: info@hoffmann-mineral.com
Internet: www.hoffmann-mineral.de

Data Protection Officer

of those responsible:

Ms Vera Schneider
E-mail: datenschutz@hoffmann-mineral.de  

otherwise reachable under the contact details of the responsible person.

Protection of your personal data

Data protection and the protection of your personality are important to us. Accordingly, we only process personal data in accordance with the applicable legal provisions for data protection and data security, in particular the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). In doing so, we are guided by the principle of data avoidance and data economy. We require our employees to maintain confidentiality and secrecy.

Our website can be used without registration, i.e. without actively disclosing your identity or manually entering personal data. Nevertheless, personal data is collected each time you visit our website. It may also be necessary to provide your personal data in the course of use, e.g. when you contact us. The following data protection declaration informs you about the processing of your personal data when using our website, the measures taken to protect your data and your rights as a data subject.

General principles for the processing of personal data

1. Description of the processing of personal data

We use IT systems on our websites to provide services to our users, where we process the personal data described in more detail below.
 

2. Legal bases for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis in conjunction with a concretising special enabling norm.

If the processing is necessary to protect a legitimate interest of the controller or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
 

3. Disclosure of data, processors, external providers

Data transmission

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties

  • if you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
  •  if the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO,
  • if this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO.

Processor

The transfer of your data to order processors only takes place within the framework of the legal provisions, in particular in accordance with Art. 28 DSGVO. We have concluded a service agreement as well as a valid contract for commissioned processing with all processors. The processor will only process the personal data on our instructions and for the purposes described, in particular for the fulfilment of the contract.

Your data is protected against loss, misuse and unauthorised or unauthorised access, disclosure, modification or deletion. We log access, collect access passwords and encrypt data unless this fundamentally affects our services.

External providers and links

On our website, you may also find information and/or services from other providers who collect personal data as part of their offers. Please note that we are not responsible for the processing of this data, but only the external provider, where other conditions may apply.

This website may contain links to websites of other providers. Please note that this privacy policy applies exclusively to our website. We cannot check whether external providers comply with the applicable data protection regulations.
 

4. Data deletion and storage period

The personal data of the data subjects will be deleted or blocked as soon as the purpose of the storage no longer applies, e.g. the storage of the data is no longer necessary for the performance of a contract or for an overriding legitimate interest. Storage may also take place if this is provided for by the European or national legislator in regulations, laws or other provisions to which the responsible party is subject. Accordingly, the data will be deleted or blocked if a storage period prescribed by the aforementioned standards expires.

Visit our website

1. Description and scope of data processing

When you visit our website www.hoffmann-mineral.com, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automatic deletion:

  • IP address of the user (requesting computer)
  • Date and time of access
  • Name and URL of the accessed file/page
  • Website from which the access is made (referrer URL)
  • Browser used and the operating system of your computer
  • Name of your access provider

The log files contain IP addresses or other data that allow an assignment to a user and are therefore predominantly classified as personal data.
 

2. Purpose of the data processing

The above data will be processed by us for the following purposes:

  • Ensuring a smooth connection of the website
  • Ensuring a comfortable use of our website
  • Evaluations of system security and stability
  • Evaluation of user behaviour
  • Other administrative purposes

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. In this specific context, we do not use the collected data for the purpose of drawing conclusions about your person for marketing purposes. These purposes result in our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO.

Anonymous information may be statistically analysed by us in order to optimise our website and the technology behind it. In addition, we use cookies or other analysis services when you visit our website. You will find more detailed explanations on this below in this data protection declaration.
 

3. Legal basis of the data processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b DSGVO, as a user relationship exists, as well as Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the data processing purposes described above.
 

4. Duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is generally the case when the respective session has ended. If IP addresses are stored in log files in an unabbreviated form, the personal data is deleted or anonymised after seven days at the latest. Storage beyond this is possible in connection with cookies or analysis services. In this case, the IP addresses of the users are deleted or shortened so that it is not possible to assign the calling client. You will find more detailed explanations on this below in this data protection declaration.
 

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Forms on the website, bookings, enquiries, contact, newsletter

If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent to process your personal data for the purpose of contacting you. This serves the purpose of assigning the enquiry and subsequently answering it.

The following personal data is collected and processed in the various forms:

REGISTRATION FORM
first name, last name, address, phone number, e-mail

CONTACT FORM
company, title, first name, last name, department, industry, e-mail, telephone number, street, house number, postcode, city, country, your message

SAMPLE ORDER
company, title, first name, surname, department, street, postcode, city, country, telephone, e-mail, use of sample, industry, sample, order quantity


We process the personal data to process your enquiries, to provide the services you have requested and to ensure compliance with laws and regulations.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a and b DSGVO, as in each case your consent for the use of a form or the sending of information is given and/or a contractual service is provided.

The personal data collected will be stored for as long as is necessary for the purposes described. Insofar as the data is subject to statutory storage obligations, for example in accordance with the AO or the HGB, it must be stored for six or ten years. Otherwise, the general storage principles described above apply.

Newsletter

1. Description and scope of data processing

On our website, you have the option of subscribing to a free newsletter. When registering for the newsletter, the following data is collected via the input mask and transmitted to us:

  • Name of the user
  • IP address of the calling computer
  • Date and time of registration
  • Information about the browser type and version used
  • The operating system of the user

During the registration process, your consent for the processing of data is obtained by the double opt-in procedure (double consent) with reference to this privacy policy. After the first act of consent, the user receives a confirmation e-mail for the second consent. The verified user gives the website operator permission to send him newsletters by e-mail. This procedure forms the basis for legally secure e-mail marketing. Consent for the newsletter can also be obtained by other means, e.g. in writing or by e-mail.

Based on your consent, we will use the personal data we hold to inform you about our products, services and events.

For the dispatch of the newsletter, the data is passed on to external service providers by way of order processing and deleted again after the dispatch has been completed. The data is used exclusively for sending the newsletter.
 

2. Purpose of the data processing

The collection of the e-mail address and other personal data of the user serves to send the newsletter as well as to prevent misuse of the services or the e-mail address used.
 

3. Legal basis of the data processing

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a and b DSGVO, as your consent has been given for the sending of information and a contractual service is provided.
 

4. Duration of the storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.
 

5. Possibility of objection and removal

You can revoke your consent at any time with effect for the future and cancel the newsletter, both via the unsubscribe link in the individual mailings and informally, e.g. to info@hoffmann-mineral.com. You can find more information on consent in the chapter "Rights of the data subject".

Cookies, plugins and web analytics

In the following, we describe in detail which cookies, analysis tools and plugins we use, which data is processed in the process and how you can deactivate the analysis tools. The term "cookies" is also used as a generic term for plugins and analysis tools of all kinds.

1. What are cookies?

Cookies are used when using our website. Cookies are small files that are automatically created by the browser and stored on the user's end device (laptop, tablet, smartphone or similar) when visiting the website. Cookies do not cause any damage to the end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. Cookies can be automatically recognised and read during a current visit or during the next visit. However, this does not mean that the site operator gains direct knowledge of the user's identity.

Cookies make visiting the website more user-friendly by remembering personal settings or serve the advertising interests of the site operator. Cookies make it possible, in particular, to determine the frequency of use and number of users of the pages, to analyse behaviour patterns of page use, but also to make our offer more customer-friendly. So-called session cookies are used, among other things, to recognise that the user has already visited individual pages of the website. These are automatically deleted after the page is left.

When you leave our site and go to third party sites, cookies may also be set by the target site. We are not legally responsible for these cookies. For the use of these cookies by third parties and the information stored in them, please compare the data protection declarations there.
 

2. Legal basis for cookies, analysis tools and plugins

We may store cookies on your device if they are technically necessary for the operation of the website. Necessary cookies help to make a website usable by enabling basic functions such as page navigation or language selection. The website cannot function in part without such cookies. The data thereby processed for the named purposes serve to protect our legitimate interests that prevail in the context of a balancing of interests and are therefore necessary in accordance with the principle of proportionality. The legal basis for technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with. § 25 para. 2 no. 2 TTDSG.

For all other cookie types, we require your consent. You can specifically select these as explicit opt-in consents in a dialogue window (cookie consent window) during your first visit to our website. This sets a cookie in your system that contains your cookie settings and signals to our system which cookies have been accepted each time you visit our website. You can change or revoke your cookie settings on our website at any time. Instructions on how to deactivate cookies can be found below. The legal basis for all other cookie types is Art. 6 para. 1 p. 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent.

If you delete all cookies, this will have the effect that the cookie with your cookie settings will also be deleted, so that you will have to determine your cookie preferences again. Limiting cookies may result in limited functionality of the website.
 

3. How do we use cookies, analytics tools and plugins? Purpose of data processing

Within the scope of cookies, analysis tools and plug-ins, the name of the Internet service provider, requested files, IP address, access to individual pages, browser type, screen resolution, colour depth, operating system, search terms and reference pages from which you have accessed our websites are processed, among other things.

The data contained in session cookies or other cookies are processed by us for the following purposes:

  • Ensuring the smooth operation of the website
  • Ensuring a comfortable use of our website
  • System security and stability
  • for other administrative or promotional purposes

The data collected may be processed and used to improve the marketing of the websites, to increase the user-friendliness of the websites and for other optimisation purposes. The analysis required for marketing and optimisation purposes generally does not allow any direct conclusions to be drawn about your person or personal data. In particular, no names, addresses, telephone numbers or other data that can be directly assigned to individuals are stored. The analysis only provides aggregated data, such as the number of visitors and page views.

Among other things, cookies allow us to adapt our website to your wishes, to establish connections between different calls to our website or to save your password in the browser so that you do not have to re-enter it each time.

Cookies may also be used for targeted advertising. Third-party vendors and automated data collection tools may also be permitted to use cookies to help us deliver our own content and ads and measure the effectiveness of our advertising efforts. For registered users, the information collected on our websites is not anonymous. This information may be used in conjunction with other information we know or infer about you, such as your preferences, to provide content, services and advertisements tailored to you.

We currently use the cookies listed and described in more detail in our Cookie Policy on our website.
 

4. Duration of the storage

Some cookies are deleted at the end of the browser session, i.e. after the browser is closed (so-called session cookies). Other cookies remain on the end device and make it possible to recognise the user on the next visit (persistent cookies). The specific duration of storage can be found in our cookie policy and in the overview in the cookie settings of your web browser. In all other respects, the general storage principles outlined above apply.
 

5. Deactivation of cookies

You can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies may mean that you cannot use all the functions of a website.

If you want to exclude cookies from being used, set your browser to delete cookies from your hard drive, block all cookies or warn you before a cookie is stored so that you can decide on a case-by-case basis whether you want the cookie. Each browser differs in the way it manages cookie settings. They are described in more detail in the help menu of each browser. There it is explained how you can change your cookie settings. You can find the respective browser information e.g. under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies 
Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen,
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen,
https://support.mozilla.org/de/kb/Cookies-blockieren 
Firefox für Android: https://support.mozilla.org/de/kb/cookies-aktivieren-deaktivieren-firefox-android 
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac 
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 
Opera: https://help.opera.com/de/latest/web-preferences/ 

 

You will also find the options for deactivation directly in the description of the cookies, plugins and tracking measures.

CONSENT WITH CONSENTMANAGER

Our website uses the ConsentManager consent technology to obtain your consent to the storage of certain cookies on your device or for the use of certain technologies and data protection legislation compliant documentation of the former. The party offering this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter referred to as “ConsentManager”).

Whenever you visit our website, a connection to ConsentManager’s servers will be established to obtain your consent and other declarations regarding the use of cookies. Moreover, ConsentManager shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the ConsentManager cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

ConsentManager uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.

SHOW

Matomo

This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. Matomo uses “cookies”, i.e. text files placed on your computer that enable an analysis of your use of the website.

The information that the cookie generates about your use of our internet presence is stored on a server in Germany.

The IP address is anonymised immediately following processing and prior to storage. You can prevent the installation of cookies by changing the settings in your web browser. Please be advised that the adjusted settings may mean that some website functions may no longer be available.

You may decide whether an explicit web analytics cookie may be stored on your browser to allow the website provider to collect and analyse various statistical data.

You may decide here whether a unique web analytics cookie may be stored in your browser in order to allow the operator of the website to collect and analyse various statistical data.

If you want to opt out, click the following link to install the Matomo deactivation cookie on your browser.

Your visit to this website is currently captured by Matomo Web Analytics. You have to deactivate your cookies to ensure that your visit is no longer captured. For this, follow the links in the section on “cookies”.

You can also disable the tool here: https://add-factory.de/analytics/index.php?module=CoreAdminHome&action=optOut&language=en

Google Maps

This website uses Google Maps to display maps and to create directions. Google Maps is a service of Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). If you use the advanced functions of Google, for example by clicking on the map displayed, you are using a Google service outside our sphere of influence. In this case, the guidelines and information provided by Google in this context will apply.

 On the Google website you will find further information on the Google Terms of Use, additional terms of use for Google Maps/Google Earth, the legal notices for Google Maps/Google Earth, and the Google Privacy Policy. In the privacy policy, you will find information on what data is collected for what purpose and what Google does with this data.

The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the US, Google concludes the EU standard contractual clauses with its customers, see here as well as here. The wording of the EU standard data protection clauses can be found at https://gsuite.google.com/terms/mcc_terms.html. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. This commits Google to comply with the standards and regulations of European data protection law.

The legal basis for the processing and transmission of personal data to Google is your consent pursuant to Art. 6 para. 1 S. 1 lit. a DSGVO is your consent. Furthermore, we also base the use of Google on Art. 6 para. 1 lit. f DSGVO, as the processing serves the user convenience of the website and is therefore necessary to protect our legitimate interests.

The general deactivation of cookies is described in the Cookies section.

Recaptcha

In order to protect the forms on this website, we use the "reCAPTCHA" service of Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google". The use of this service makes it possible to distinguish whether the corresponding input is of human origin or is misused through automated machine processing. The integration of the service requires the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. If you wish to prevent this, you must block the saving of cookies in your browser. The use of the information obtained is in accordance with Google's terms of use:

https://www.google.com/intl/de/policies/privacy/

The general deactivation of cookies is described in the Cookies section.

Google Tag Manager

We use the Google Tag Manager service from Google. "Google" is a group of companies and consists of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC.

We have concluded an order processing contract with Google. The Google Tag Manager is an auxiliary service and itself only processes personal data for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. For more information on the Google Tag Manager, please refer to Google's privacy policy.

Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google on the basis of the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.

The legal basis for the processing and transmission of personal data to Google is Art. 6 para. 1 sentence 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent. Furthermore, we also base the use of Google on Art. 6 para. 1 lit. f DSGVO, as the processing is carried out to analyse user behaviour and is therefore necessary to protect our legitimate interests.

Google Ads

This website uses Google Ads, an online advertising programme for the targeted placement of advertisements by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter "Google").

Google Ads enables us to use so-called keyword targeting, i.e. the advertising targeting of page users during search queries in search engines at the time of their engagement with the searched topic. This allows us to display our advertisements in the Google search engine or on the websites of third party providers when the page user enters certain search terms in the Google search engine.

In addition, Google Ads enables us to target specific target groups. In online marketing, targeting means addressing precisely defined target groups. Based on the user data collected by Google (e.g. user locations, interests, etc.), we can display targeted advertisements. As a result, we as the operator of the website can quantitatively evaluate which search terms have led to the display of our advertisements and how many advertisements have led to a corresponding click behaviour.

Google Ads uses cookies that are stored on your terminal device, in particular in the browser, when you click on one of our Google Ads advertisements. The use of cookies serves to evaluate user behaviour. Consequently, we pass on data to Google for processing and must conclude an order processing contract with Google in accordance with Art. 28 DSGVO.

You can object to data processing at any time or prevent the storage of cookies by setting your browser software accordingly (see in detail above). However, we would like to point out that in this case not all functions of this website can be used to their full extent.

We have no influence on how, to what extent and for how long Google processes the accruing data. According to information from Google, the data is stored on secure servers and processed in encrypted form. In many cases, the cookies are stored for 30 days to three months. Further information on the use of cookies by Google can be found here.

We have concluded an order processing agreement with Google regarding Google Ads. The details of the commissioned data processing, in particular regarding contractual terms, deletion, etc., can be found here.

Google transmits data to third countries, although we have no detailed knowledge of this. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the USA, Google concludes the EU standard contractual clauses, see here as well as here, each with a variety of further data protection information. The wording of the EU standard data protection clauses can be found, for example, here or here. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. Through the Data Privacy Framework and the standard contractual clauses, Google undertakes to comply with the standards and regulations of European data protection law.

The legal basis for the processing of personal data by the Google Ads service is Art. 6 para. 1 sentence 1 lit. a DSGVO, § 25 para. 1 TTDSG, insofar as you have given your consent. Furthermore, we also base the use of Google Ads on Art. 6 (1) lit. f DSGVO, as the processing of the data is carried out to optimise offers, service and marketing measures and therefore serves to protect our legitimate interests.

Further information on data protection in connection with Google Ads can be found here and in Google's general data protection declaration.

Privacy policy YouTube

YouTube is a social network and online video portal of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for all data processing in the European area.

Our website uses plugins and embedded videos from YouTube.

If you visit our websites with a YouTube plugin, a connection is established to the YouTube server and it is communicated which of our pages you are visiting. Videos from YouTube are displayed on our website using a framing technology and can be played directly there. This service is inactive by default, but you can activate and deactivate it at any time by giving your consent. As soon as you activate the consent button with a click and thereby declare your consent to view the content from YouTube, the connection to YouTube is established.

Through the embedding technique, YouTube sets at least one cookie in the user's browser and thus automatically collects personal data of the website visitors, such as the IP address and the behaviour on the page, which are transmitted to Google. The legal basis for the processing of the data is your consent pursuant to Art.6 para. 1 lit. a DSGVO.

The data collected is processed by Google and may also be transferred to countries outside the European Union. We have no influence on the type and scope of the data processed by Google, the use or the transfer of this data to third parties, in particular to countries outside the European Union.

The data processing and transmission by Google takes place regardless of whether or not you have a user account with YouTube or Google. If you are logged in to a user account, your data will be directly assigned to this account. If you do not wish this, you must log out of your user account before visiting our YouTube site or playing a video. The data transmitted to Google will be stored by Google in the form of user profiles and used for advertising and market research purposes as well as for personalised design. With the help of this evaluation, Google can generate demand-optimised advertising (even for users who are not logged in). You can object to the creation of these user profiles. To do so, you must contact Google.

YouTube does not provide its own privacy policy, but refers to Google's privacy policy for the use of YouTube. In Google's privacy policy, you can find out more about data processing by Google as well as your rights and setting options and change your settings yourself. The processing of personal data by Google also takes place in the USA. To ensure an adequate level of data protection for data transfers to the USA, Google concludes the EU standard contractual clauses with its customers, see here and here. The wording of the EU standard data protection clauses can be found at https://gsuite.google.com/terms/mcc_terms.html. Google is also certified under the EU-U.S. Data Privacy Framework. A current certificate can be viewed here. This obliges Google to comply with the standards and regulations of European data protection law.

For more information about how we process personal data and what rights you have in this regard, please see this privacy notice. With regard to data processing by YouTube, we ask you to use the YouTube email address or contact options directly to exercise your rights. With regard to our data processing, you will find the contact options above.

We use YouTube in connection with the "extended data protection mode" function in order to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "enhanced data protection mode" function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.

Without this "enhanced data protection", a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.

Rights of the data subject

You have the different rights outlined below based on the data protection regulations.

1. Right to information

You have the right to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
 

2. Right of rectification

In accordance with Art. 16 DSGVO, you have the right to demand the immediate correction of incorrect or completion of your personal data stored by us.
 

3. Right to erasure

You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
 

4. Right to restriction of processing

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO if the accuracy of the data is disputed by you, the processing is unlawful but you object to its erasure, we no longer require the data but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.
 

5. Right to data portability

You have the right, in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
 

6. Right to revoke the declaration of consent under data protection law

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your declaration of consent under data protection law at any time. As a result, we may no longer continue the data processing based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If you wish to exercise your right of revocation, it is sufficient to send a corresponding notification via all known communication channels, in particular also by e-mail to info@hoffmann-mineral.com.

7. Right to complain to a supervisory authority

You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters. In Bavaria this is

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach

Phone: 0981/180093-0
E-mail: poststelle@lda.bayern.de
Internet: https://www.lda.bayern.de

A list of the competent data protection authorities of the Laender (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
 

8. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you wish to exercise your right of objection, it is sufficient to notify us accordingly via all known communication channels, in particular also by e-mail to info@hoffmann-mineral.com.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defence of legal claims. This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.
 

9. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller,

(2) is authorised by Union or Member State legislation to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is done with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

Data security

We use the widespread SSL encryption (Secure Socket Layer) in the TLS standard (Transport Layer Security) in connection with the highest encryption level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Purpose and legal basis of data processing

The security measures described are used on the basis of Art. 6 (1) sentence 1 lit. f, Art. 32 DSGVO. The data processed in this way is necessary for security purposes to protect our legitimate interests as well as the interests of third parties in accordance with Art. 6 (1) sentence 1 lit. f DSGVO.

Questions to the Data Protection Officer

If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly: Ms Vera Schneider, e-mail: datenschutz@hoffmann-mineral.de

Up-to-dateness and amendment of this privacy policy

This data protection declaration is valid as of July 2023. Due to the further development of our website and offers, e.g. the introduction of new services, or due to changed legal or official requirements, it may become necessary to change this data protection declaration. We therefore reserve the right to adapt the data protection declaration at any time with effect for the future. The new data protection statement will then apply to your next visit. We recommend that you read the current data protection declaration from time to time. The current data protection declaration can be found on our website at https://www.hoffmann-mineral.com/privacy-policy