Data privacy policy

As the operator of this online service, we, HIRO LIFT, Hillenkötter + Ronsieck GmbH, Meller Str. 6, 33613 Bielefeld, managing director, Constantin Hein, are responsible for processing your personal data as a user of our online service within the meaning of the General Data Protection Regulation (GDPR). We take the protection of your privacy and personal data very seriously. We therefore process your personal data in accordance with the contents of this data privacy policy as well as the GDPR.

With this data privacy policy, we would like to inform you about the kind of personal data we process about you, for which purpose this is done and based on which legal basis the processing is permitted.

Data protection officer

You can reach our data privacy officer at:
datenschutz(at)hirolift.de

Personal data

Personal data is all information relating to an identified or identifiable natural person. This includes all information about your identity, such as your name, email address or postal address and online identifiers. However, information that cannot be linked to your identity (such as the number of users of the online service) is not personal data.

Generally speaking, you can use our online service without disclosing your identity or personal data. However, personal data will be collected from you for some of the services offered.

Storing personal information

Your data is stored by us on particularly well-protected servers. These are protected by technical and organisational measures that are taken against loss, destruction, access, modification or distribution of your data by unauthorised persons. Access to your data is only possible for a few authorised persons. They are responsible for the servers' technical, commercial or editorial support.

Your rights as a data subject

You can exercise the following rights at any time by using the contact details provided by our data privacy officer:

  • information about your data stored with us and its processing (Art. 15 GDPR),
  • correction of inaccurate personal data (Art. 16 GDPR),
  • deletion of your data stored with us (Art. 17 GDPR),
  • restriction of data processing if we are not yet allowed to delete your data, owing to statutory obligations (Art. 18 GDPR),
  • objection to the processing of your data by us (Art. 21 GDPR) and
  • data transferability, provided that you have consented to data processing and have concluded a contract with us (Art. 20 GDPR).

If you have provided us with your consent, you can revoke it at any time with effect for the future. You may, at any time, file a complaint with a supervisory authority, e.g. the competent supervisory authority of the federal state in which you reside or the authority responsible for us. A list of the supervisory authorities (for the non-public sector) with their addresses can be found here.


Collection of general information when you visit our website:

Nature and purpose of the processing:

When you access our website, i.e. when you do not register or otherwise submit information, then information that is general in its nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, this information is processed for the following purposes:

  • ensuring a hitch-free connection to the website,
  • ensuring the trouble-free use of our website,
  • evaluation of system safety and stability, in addition to
  • for other administrative purposes.

We do not use your data to draw conclusions about your person. This kind of information is evaluated statistically by us if necessary, in order to optimise our Internet appearance and the technology behind it.

Legal basis:

Processing is carried out in accordance with Art. 6 Par. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.

Storage duration:

Your computer’s IP address is only stored for the time of use of the online service and is subsequently deleted or made anonymous by truncation. The remaining data is stored for a limited duration not exceeding seven days.

Provision prescribed or required:

The provision of the aforementioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.


Use of cookies

We use cookies. They are small text files that are stored on your computer and that store certain settings and data for exchange with the online service from us via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier. There are different types of cookies depending on content and storage duration. Most of the cookies we use are so-called “session cookies” that are deleted when your browser session ends. In addition, there are also some persistent cookies that we use to recognise you as a visitor. Many cookies come directly from us; in addition, individual cookies are also stored and evaluated by service providers (so-called “third party cookies”).

Some cookies are technically necessary to enable you to use our online service. We collect and save the following data with these cookies:

  • language settings
  • content of an online form
  • information to identify or authenticate the user

Furthermore, we use cookies on our website that enable an analysis of your user behaviour, so-called “analysis cookies”. We collect and save the following data with these cookies:

  • frequency of page visits
  • use of website functions
  • Data collected with cookies is pseudonymised so that allocating the data to the respective user is no longer possible.

The legal basis for processing data with cookies is Article 6 Para. 1 f GDPR.

Cookies enable us to recognise your computer and to make any possible default settings immediately available. Cookies help us to improve our online service and to offer you a better and user-friendly service. The use of cookies is necessary to make using our online services easier for you. Some functions can only be offered to by using cookies. This includes the online form.

We use analysis cookies to improve and optimise the quality of our online services and its content and to check and improve the reach and retrievability of our online service.

These purposes simultaneously justify the legitimate interest within the meaning of Article 6 Para. 1 f GDPR.

The technically necessary cookies used by us are so-called “session cookies”, which are automatically deleted at the end of the browser session. The remaining cookies are stored on your computer. You can delete these stored cookies yourself at any time. Furthermore, most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it informs you as soon as cookies are sent. Please note that you potentially may only be able to use our online service to a limited extent or not at all if you refuse the storage of cookies.

We use the following programs to analyse user behaviour for the aforementioned purposes, which in turn use cookies as explained. The stored data is deleted as soon as it is no longer required for the aforementioned purposes.

Storage duration and cookies used:

The following cookies may be used on our websites when you allow us to use cookies through your browser settings or consent:

Cookie:Storage duration:
Google Analytics28 days
Google Ads28 days
Bing Ads28 days

Insofar as these cookies may (also) have a bearing on personal data, we will inform you of this in the following sections. You can delete individual cookies or the entire cookie stock via your browser settings. In addition, you will receive information and instructions on how these cookies can be deleted or how their storage can be blocked in advance. Depending on your browser provider, you will find the necessary information at the following links:


Comment function

Nature and purpose of the processing:

If users leave comments on our website, the time of their creation and the user name previously chosen by the website visitor are stored in addition to this information. This is for our security, as we may be held liable for illegal content on our website, even if it has been created by users.

Legal basis:

The processing of the data entered as comments is done on the basis of a legitimate interest (Art. 6 Par. 1 lit. f GDPR). By providing the comment function, we would like to facilitate uncomplicated interaction for you. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

Recipient:

The recipients of the data may be order processors.

Storage duration:

The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case when communication with the user has been completed, and the company can infer from the circumstances that the relevant facts have been conclusively clarified.

Provision prescribed or required:

Provision of your personal data is voluntary. Without you providing your personal data, we cannot grant you access to our comment function.


Contact form

Nature and purpose of the processing:

The data you enter is stored for the purpose of individual communication with you. To do so, it is necessary to provide a valid e-mail address and your name. This is used to assign the query and to subsequently answer it. Additional data entry is optional.

Legal basis:

The processing of the data entered in the contact form is carried out on the basis of a legitimate interest (Art. 6 Par. 1 lit. f GDPR). By providing the contact form, we would like to enable an uncomplicated contact establishment for you. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of carrying out pre-contractual measures (Art. 6 Par. 1 lit. b GDPR).

Recipient:

The recipients of the data may be order processors.

Storage duration:

Data will be deleted at the latest 6 months after processing the request. When a contractual relationship arises, we are subject to complying with the legal retention periods according to Commercial Code and will delete your data after these periods.

Provision prescribed or required:

Provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.


Use of Google Analytics

Nature and purpose of the processing:

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as: "Google"). Google Analytics uses so-called "cookies", thus text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymisation on these web pages, your IP address will be abbreviated by Google in advance within member states of the European Union or in other contracting states included in the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. Google will not associate your IP address transferred within the framework of Google Analytics with any other data held by Google.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are to be provided.

Legal basis:

The data is processed on the basis of the user's consent (Art. 6 Par. 1 lit. a GDPR).

Recipient:

The recipient of the data is Google, as the processor. We have concluded the corresponding contract with Google for this purpose.

Storage duration:

The data will be deleted as soon as it is no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary and based solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On for deactivating Google Analytics. In addition, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent Google Analytics from collecting cookies for this website and for this browser in the future, for as long as the cookie remains installed in your browser.

Profiling:

The tracking tool Google Analytics can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.


Embedded YouTube-Videos

Nature and purpose of the processing:

We embed YouTube videos on some of our websites. YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube") is the operator of the corresponding plugins. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This will tell YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can personally associate your browsing behaviour with you. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies which collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's Data Privacy Policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU_US Privacy Shield www.privacyshield.gov/EU-US-Framework

Legal basis:

Legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 Par. 1 lit. a GDPR).

Recipient:

Calling YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

If you have deactivated the storage of cookies for the Google Ad Program, you will not have to reckon with any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser. You can find further information on data privacy at "YouTube" in the provider's Data Privacy Policy: www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.


Google AdWords

Nature and purpose of the processing:

Our website uses Google Conversion Tracking. The operator of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Adwords places a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. If the user visits certain pages on our site and the cookie has not expired, we and Google may recognise that the user clicked on the ad and was directed to that page. Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked through the websites of AdWords customers. The information collected from the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for Conversion Tracking. Customers will know the total number of users who clicked on their ad and were directed to a page with a conversion tracking tag. However, they will not receive information that personally identifies users.

Legal basis:

Legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 Par. 1 lit. a GDPR).

Recipient:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected through the technical process with third parties. Our company does not contain any information from Google that could be used to identify the person concerned.

Storage duration:

These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. www.privacyshield.gov/EU-US-Framework.

Revocation of consent:

If you do not wish to participate in tracking, you can reject the setting of a cookie required for this - for example via browser settings that generally deactivate the automatic setting of cookies or set your browser so that cookies are blocked by the domain "googleleadservices.com". Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.


Bing Universal Event Tracking (UET) – Bing Ads

In our online offer we use Bing Ads, a program of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). This service enables us to track users' activity on our website when they arrive at our website through ads from Bing Ads. If you enter our website via such an ad, a cookie is placed on your computer. A Bing UET tag is integrated into our website. This is a code that is used in conjunction with the cookie to store some non-personal information about the use of the site. This includes, among other things, the time spent on the website, which areas of the website were accessed and the display used to access the website. No information regarding your identity is collected. The information collected is transferred to Microsoft servers in the USA and stored there for maximally 180 days.

For more information on Bing's analysis services, please visit the Bing Ads web site: help.bingads.microsoft.com.

For more information about privacy at Microsoft and Bing, see the Microsoft Privacy Policy: privacy.microsoft.com/de-de/privacystatement.


Use of Google Remarketing

Nature and purpose of the processing:

This website uses the remarketing function of Google Inc. the company operating the services of Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This function is used to present interest-related advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that are part of Google's advertising network. On these pages, advertisements can be presented to the visitor, which refer to contents that the visitor called up before on web pages, which use Google's Remarketing function.

Legal basis:

Legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 Par. 1 lit. a GDPR).

Recipient:

Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected through the technical process with third parties. Our company does not contain any information from Google that could be used to identify the person concerned.

Revocation of consent:

According to its own information, Google does not collect any personal data during this process. However, if you do not want Google's remarketing feature to work, you can always disable it by making the appropriate settings at support.google.com/adwordspolicy/answer/143465 . Alternatively, you can disable the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at www.networkadvertising.org/managing/opt_out.aspfolgen.

Provision prescribed or required:

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.


SSL encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Contract processors used

The following organisations, companies or persons have been commissioned to process data by the operator of this website:

  • Hillenkötter & Ronsieck Beteiligungs-GmbH, Meller Straße 6, 33613 Bielefeld
  • HDNET GmbH & Co.KG Ravensberger Str. 22, 33824 Werther
  • RZ OWL GmbH Herforder Str. 155a, 33609 Bielefeld

Changes to our privacy policy

We reserve the right to adapt this Data Privacy Policy so that it always complies with the current legal requirements or to implement changes to our services in the Data Privacy Policy, e.g. when introducing new services. Your renewed visit will then be subject to the new Data Privacy Policy

Questions to the Data Protection Officer

If you have any questions about data privacy, please send us an e-mail or contact the person responsible for data privacy in our organisation directly: Steve Mann datenschutz(at)hirolift.de

This data privacy policy was last updated in: January 2019