Privacy Policy

Responsible body for the collection, processing and use of your data is the HOMMBRU GmbH, Eschenstrasse 6, 08468 Reichenbach. If you wish to object to the collection, processing or use of your data by HOMMBRU GmbH in accordance with this Privacy Policy as a whole or for individual measures, you can send your objection by e-mail or letter to the following contact details:
 

HOMMBRU GmbH
Eschenstrasse 6
08468 Reichenbach – Germany
E-Mail: kontakt@hommbru.com

General

We take the protection of your personal data seriously. We want you to know when we collect what information and how we use it, so the following is how you handle your information. As our web pages evolve and new technologies are implemented, changes to this privacy policy may be required. Therefore, we recommend that you read this privacy policy from time to time.

This Privacy Policy explains the nature, scope and purpose of the processing of personal information within our online offering and the related websites, features and content (collectively referred to as “online offer” or “website”).

With regard to the terminology used, e.g. “Personal data” or their “processing”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Data collection and processing

You can visit our site without giving any personal information. We only store access data without personal reference such as the name of your Internet service provider, the page from which you visit us, or the name of the requested file. These data are evaluated solely for the purpose of improving our offer and do not allow any conclusion on your person.

The personal data of the users processed in the context of this online offer, ie the prospective customer and visitor of our online offer, includes inventory data (first and last name, postal code, e-mail address, telephone, IP address) as well as content data (your details in the questionnaire).

We process personal data of users only in compliance with the relevant data protection regulations. This means that users’ data will only be processed if they have a legal permit. That is, especially if the data processing for the provision of our contractual services (eg processing of inquiries) as well as online services required or required by law, a consent of the users exists, as well as due to our legitimate interests (ie interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art. 6 (1) lit. DSGVO, in particular in the range measurement and collection of access data and use of third-party services.

Please note that the legal basis of the consents Art. 6 para. 1 lit. a. and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the performance of contractual measures Art. 6 para. 1 lit. b. DSGVO, the legal basis for processing in order to fulfill our legal obligations Art. 6 para. 1 lit. c. DSGVO, and the legal basis for processing in order to safeguard our legitimate interests Art. 6 para. 1 lit. f. DSGVO is.

Safety measures

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

Disclosure of data to third parties and third parties

A transfer of data to third parties is only within the scope of legal requirements. We give the data of users to third parties only on the basis of a gem. Art. 6 para. 1 lit. a) DSGVO granted consent or if this is based on Art. 6 para. 1 lit. b) GDPR is required for contract purposes or based on legitimate interests in accordance with Art. Art. 6 para. 1 lit. f. DSGVO on the economical and effective operation of our business operations.

If we use subcontractors to provide our services, we will take appropriate legal precautions and appropriate technical and organizational measures to protect personal data in accordance with applicable law.

In the context of this Privacy Policy, if content, tools or other means are used by other providers (collectively referred to as “Third Party Providers”) and their registered office is located in a third country, it can be assumed that the data will be transferred to the countries of residence of the third party providers. Third countries are countries in which the GDPR is not a directly applicable law, i. E. basically countries outside the EU or the European Economic Area. The transfer of data to third countries occurs either when there is an adequate level of data protection, user consent or other legal authorization.

Provision of contractual services

We process inventory data (e.g., names and addresses as well as user contact information) and content data (questionnaire information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. Art. 6 para. 1 lit b. DSGVO.

As part of the use of our online services store the IP address and the time of each user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A passing on of this data to third parties takes place as far as a legal obligation acc. Art. 6 para. 1 lit. c DSGVO exists or based on legitimate interests acc. Art. 6 para. 1 lit. f. DSGVO on the economical and effective operation of our business operations.

contact

When contacting us (via contact form), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed.

User information can be stored in our Customer Relationship Management System (“CRM System”) or similar request organization

Collection of access data and log files

Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO Data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider ,

Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of seven days and then deleted. Data whose further retention is required for evidential purposes are excluded from the erasure until the final clarification of the incident.

Cookies & reach measurement

Cookies are information transmitted by our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Cookies can be small files or other forms of information storage.

We use “session cookies” which are only stored for the duration of the current visit to our online presence (for example, to enable the use of our online offer at all). In a session cookie a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies can not save other data. Session cookies will be deleted when you have finished using our online offer and you are e.g. log out or close the browser.

The use of cookies in the context of pseudonymous range measurement informs users in the context of this privacy policy.

If users do not want cookies stored on their machine, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

You may opt for the use of cookies for distance measurement and promotional purposes through the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and in addition to the US website (http://www.aboutads.info/choices ) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

Google Analytics and other web analytics tools

On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) Google Analytics and Google Search Console, web analytics services of the Google LLC (“Google” ) on. Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the processed data can be created.

We use Google Analytics to display the advertisements displayed within Google and its affiliate advertising services, only those users who have shown an interest in our online offering or who have certain characteristics (eg, interest in specific topics or products that they use) Web pages) that we submit to Google (so-called “remarketing” or “Google Analytics audiences”). With Remarketing Audiences, we also want to make sure that our ads are in line with the potential interest of users and are not annoying.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http: // tools .google.com / dlpage / gaoptout? hl = en.

For more information about Google’s data usage, hiring and opt-out options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“Google’s use of your data when you use websites or apps our partners “), http://www.google.com/policies/technologies/ads (” Use of data for promotional purposes “), http://www.google.com/settings/ads (” Managing information that Google uses, to show you advertising “).

Facebook marketing services

Within our online offer is due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes, the so-called “Facebook pixel” of the social network Facebook, by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 , USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland operated (“Facebook”).

Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

The Facebook pixel is integrated when calling our website directly through Facebook and can on your device a so-called cookie, i. save a small file. If you subsequently log in to Facebook or visit Facebook in the logged-in state, the visit to our online offer will be noted in your profile. The data collected about you are anonymous to us, so do not give us any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we should send data to Facebook for comparison purposes, they will be encrypted locally in the browser and then sent to Facebook via a secure https connection. This is done solely with the purpose of establishing a comparison with the equally encrypted by Facebook data.

The processing of the data by Facebook is part of Facebook’s data usage policy. Accordingly, general notes on how to display Facebook Ads, in Facebook’s Data Usage Policy: https://www.facebook.com/policy.php. For specific information and details about the Facebook Pixel and how it works, visit the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions for the usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.

In order to prevent the collection of your data by means of the Facebook pixel on our website, please click the following link: Facebook opt-out (if the pop-up does not appear after clicking on the link, the Facebook Custom Audience is not currently active )

Note: Clicking the link will save an opt-out cookie on your device. If you delete the cookies in this browser, then you have to click the link again. Furthermore, the opt-out only applies within the browser you use and only within our web domain on which the link was clicked.

You can also use the Cookies for distance measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and in addition the US website (http://www.aboutads.info/ choices) or the European website (http://www.youronlinechoices.com/uk/your-ad- choices).

Newsletter

With the following information, we will inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to the receipt and the procedures described.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or a legal permission. Insofar as the content of a newsletter is concretely described in the context of an application for the newsletter, it is decisive for the consent of the user. Incidentally, our newsletters contain information about our products, offers, promotions and our company.

The newsletters are distributed using MailChimp, a mailing service platform owned by Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. The privacy policy of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is based on our legitimate interests gem. Art. 6 para. 1 lit. f DSGVO and a contract processing agreement acc. Art. 28 (3) sentence 1 DSGVO. The shipping service provider may retrieve the data of the recipients in pseudonymous form, i. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of shipping and the presentation of newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.

Double opt-in and logging: Registration for our newsletter is done in a so-called double opt-in procedure. That After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registration for the newsletter will be logged in order to prove the registration process according to the legal requirements. This includes the storage of the logon and the confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider will be logged.

Credentials: To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to give a name in the newsletter for personal address.

Statistical Survey and Analysis – The newsletters contain a so-called “web-beacon”, i. a pixel-sized file, which is retrieved from the server of the shipping service provider when the newsletter is opened. As part of this call, technical information, such as information about the browser and your system, as well as your IP address and time of the call are collected. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavor nor that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The carrying out of the statistical surveys and analyzes as well as logging of the registration procedure are carried out on the basis of our legitimate interests acc. Art. 6 para. 1 lit. f DSGVO. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of our users.

Termination / Withdrawal – You can terminate the receipt of our newsletter at any time, ie. Revoke your consent. At the same time, your consent for shipping [by the shipping service provider] and the statistical analyzes expire. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to cancel the newsletter can be found at the end of each newsletter. If the users have only subscribed to the newsletter and terminated this registration, their personal data will be deleted.

Integration of services and contents of third parties

Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we make use of content or services offered by third-party providers in order to provide their content and services Services, such as Include videos or fonts (collectively referred to as “content”). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address only for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information, such as visitor traffic, on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.

The following presentation provides an overview of third-party providers as well as their contents, as well as links to their data protection statements, which further notes on the processing of data and, for already mentioned here, contradictory possibilities (so-called opt-out) contain:

    External fonts from Google LLC, https://www.google.com/fonts (“Google Fonts”). The integration of Google fonts is done by a server call on Google (usually in the US). Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
    External CDN from Google LLC, e.g. Jquery. The integration of Google CDN is done by a server call on Google (usually in the US). Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
    Maps provided by the third-party Google Maps service, Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
    Third-party platform “YouTube” videos Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
    Our online offer includes features of the Google+ service. These features are provided by third party Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you’re logged in to your Google+ account, you can link the contents of our pages to your Google+ profile by clicking the Google+ button. This allows Google to associate your visit to our pages with your user account. We point out that we as the provider of the pages do not receive knowledge of the content of the transmitted data and their use by Google+. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

Rights of users

Users have the right, upon request, to obtain information free of charge about the personal data that we have stored about them.

In addition, users have the right to correct inaccurate data, restrict the processing and deletion of their personal data, if applicable, to assert their rights to data portability and, in the event of unlawful processing, to file a complaint with the appropriate regulatory authority.

Likewise, users can revoke consent, generally with implications for the future.

Deletion of data

The data stored with us are deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with any statutory storage requirements. Unless the users’ data are deleted because they are required for other and legally permitted purposes, their processing will be restricted. That the data is blocked and not processed for other purposes. This applies, for example for data of the users, which must be kept for commercial or tax reasons.

According to legal requirements the storage takes place for 6 years according to § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) as well as for 10 years according to § 147 Abs. 1 AO (books, records, management reports, Accounting documents, commercial and business letters, documents relevant for taxation, etc.).

right to

Users may object to the processing of their personal data in accordance with legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

For all questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and revocation of granted consent, please contact the e-mail address provided.