Privacy policy

In this privacy policy, we inform you about the processing of your personal data. If you wish to change your data protection settings (grant consent or revoke consent already granted), click on the cookiebot icon to change your settings.

Responsible

Heinze Consulting GmbH, Industriestraße 29-31, 82194 Gröbenzell, Germany, steffen.heinze@h-cons.com, 004981425063388

Data Protection Officer

You can reach our data protection officer at: Attn. Steffen Heinze, Industriestraße 29-31 82194 Gröbenzell Telephone: 004981425063388 E-mail address: steffen.heinze@h-cons.com

Hosting

Host Europe GmbH We host our website with our processor Host Europe, Host Europe GmbH, Hansestrasse 111, 51149 Cologne, Germany. Connection data is processed for the purpose of providing and delivering the website. For the sole purpose of delivering and providing the website, the data is not stored beyond the call. The legal basis for data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the “website” service expressly requested by you by calling it up) in accordance with Art. 6 para. 1 lit. f GDPR. To operate the website, the connection data and other personal data are also processed as part of various other functions and services. Detailed information on this is provided in this privacy policy for the individual functions and services.

Server Log Files

Connection data is processed for the purpose of monitoring the technical function and increasing the operational security of our web host. The duration of processing is limited to 365 days. The legal basis for data processing is the legitimate interest (absolute technical necessity of a server log file as a basic database for error analysis and for security measures in the context of the “website” service expressly requested by you) in accordance with Art. 6 para. 1 lit. f GDPR.

Contact form

On our website, you have the option of contacting us directly using a contact form. After submitting the contact form, the personal data entered by you will be processed by the controller for the purpose of processing your request on the basis of the consent you have given by submitting the form in accordance with Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. a GDPR until revoked. There is no legal or contractual obligation to provide the personal data. The only consequence of not providing it is that you will not be able to submit your request and we will not be able to process it.

Registration form

We offer you a registration option on our website. After submitting the registration, the data provided in the registration form will be processed by us for the purpose of contract fulfillment on the basis of the contract concluded with the registration in accordance with. Art. 6 para. 1 lit. b GDPR for the term of the contract. There is no legal or contractual obligation to provide the personal data. The only consequence of not providing the data is that registration is not possible. Data will not be transferred to third parties.

Security services

On this website, we use the services of security service providers such as Captcha services to avoid non-human and automated entries.

Google reCAPTCHA

If you give your consent, we process your personal data with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of avoiding non-human and automated input. In doing so, we enable the service to set cookies, collect connection data and data from your web browser. We also enable the service to calculate a user ID to uniquely identify the user as part of the advertising network operated by Google. Data is stored on your device for a period of up to two years. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you do not give your consent, you will not be able to use reCaptcha and the associated forms. You can revoke any consent you have already given by changing the data protection settings. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.

Embeddings

YouTube

If you give your consent, we process your personal data with the service YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of playing videos on our website. We enable the service to collect connection data, to collect data from your web browser and to place an advertising cookie. By placing advertising cookies, Google is able to calculate an individual user ID for each user. This personal data, which is suitable for unambiguous identification, is then processed within the advertising network operated by Google. The Google Group transfers your personal data to the USA. The legal basis for the transfer of data to the USA is your consent in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling. Insofar as Google carries out further independent processing of the data, in particular in the context of Google’s advertising network, Google is solely responsible for this. Details can be found in Google’s privacy policy. The only consequence of not granting consent is that the YouTube service will not be made available to you. You can revoke any consent you have already given by changing the data protection settings. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Google Maps

If you give your consent, we process your personal data with the service Google Maps, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of displaying interactive maps on our website. We enable the service to collect connection data, to collect data from your web browser and to place an advertising cookie. By placing advertising cookies, Google is able to calculate an individual user ID for each user. This personal data, which is suitable for unambiguous identification, is then processed within the advertising network operated by Google. Insofar as Google carries out further independent processing of the data, in particular within the Google advertising network, Google is solely responsible for this. Details can be found in Google’s privacy policy. The only consequence of not giving your consent is that the Google Maps service will not be made available to you. You can revoke any consent you have already given by changing the data protection settings. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.

Webshop

We offer you the opportunity to purchase products directly via our online store. In the context of the web store, the data entered by you as well as data on products selected by you are processed by the controller for the purpose of making the offer, concluding the contract, fulfilling the contract and fulfilling any post-contractual obligations prior to conclusion of the contract on the basis of the pre-contractual relationship initiated by you and after conclusion of the contract on the basis of the contract pursuant to Art. 6 para. 1 lit. a GDPR. Art. 6 para. 1 lit. b GDPR. If the purchase of our products was made via an existing customer account or a customer account was created to process the purchase, your personal data will be processed until your customer account is deleted. In the case of customers who have purchased our products via a guest profile, your personal data will be processed until the expiry of the statutory retention obligations. Your data will be further processed for the purpose of direct marketing in forms that do not require consent, such as the addressed postal dispatch of advertising, until you object. There is no legal or contractual obligation to provide personal data. However, the provision is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Shopping baskets of non-registered users will be deleted after a maximum of 14 days. The user accounts of registered users remain valid until the account is deleted by the user. Contract data will be processed until the limitation period for possible post-contractual obligations expires. Payments are processed with: The payment options are shown in the payment overview.

Tag Manager

Google Tagmanager

If you give your consent, we process your personal data with the service Google Tag Manager, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of triggering, controlling and managing other services on our website. In this specific case, the above-mentioned service is to be controlled via the Google Tag Manager. Failure to give consent therefore has exactly the same effect as described for the above service. You can revoke any consent you have already given by changing the data protection settings. We enable Google Tag Manager to collect connection data and data from your web browser. These are used by Google to further develop the service. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.

Analysis services

Google Analytics

If you give your consent, we process your personal data with the service Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of error analysis and statistical evaluation of our website. Failure to give your consent has no direct effect on the function of the website, but without statistical data it will be more difficult for us to further develop the website. You can revoke any consent you have already given by changing the data protection settings. We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analysis software and store data on your end device. The service anonymizes the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics to correct errors and to further develop our website. The data on your end device is stored for a period of up to two years. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The Google Group transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent in accordance with Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR in conjunction with §25 TTDSG. You were already informed before giving your consent that the USA does not have a level of data protection equivalent to the standards of the EU. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.

WP Statistics

For the purpose of searching for and analyzing errors, evaluating usage and deriving measures for the future development of our website, we process your data using the local analysis software WP-Statistics, WordPress. As this service is a local analysis tool, no personal data is forwarded to the service provider or to third parties. In addition, your personal data is anonymized immediately after collection. Personal data is therefore not stored beyond the first processing step. The legal basis for data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the “website” service expressly requested by you by calling it up) in accordance with Art. 6 para. 1 lit. f GDPR.

Newsletter services

No newsletter is currently offered.

Brevo Chat

We use Brevo Chat (hereinafter: “Brevo Chat”) to process user inquiries via chat. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

When using Brevo Chat, cookies and other recognition technologies (e.g. IDs) are used. This enables us to recognize you on your next visit and to assign your previous chat history to you.

The messages sent to us will remain with us until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

The use of Brevo Chat is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in processing your inquiries as quickly, reliably and efficiently as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. for device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Further information can be found in Brevo’s privacy policy: https://www.brevo.com/de/legal/privacypolicy/.

Right of objection

If your personal data is processed on the basis of legitimate interest, you have the right to object to this processing. If there are no compelling legitimate grounds for the processing on our part, the processing of your data on the basis of this legal basis will be discontinued. You also have the right to object to the processing of your personal data for the purpose of direct marketing. If you object, your personal data will no longer be processed for the purpose of direct marketing. The legality of the data processed prior to the objection is not affected by the objection.

Right of withdrawal

You have the right to withdraw your consent at any time by changing the data protection settings. In the case of consent to receive electronic advertising, you can withdraw your consent by clicking on the unsubscribe link. In this case, processing will be discontinued unless there is another legal basis. The legality of the data processed up to the point of withdrawal is not affected by the withdrawal.

Rights of data subjects

You also have the right to information, correction, deletion and restriction of the processing of your personal data. If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability. You also have the right to lodge a complaint with the supervisory authority. You can find more information about the supervisory authorities in the European Union here.