Privacy Notice

 

 

  1. General information

    This privacy policy is intended to give you an overview of how we process your personal data when you use our website www.150yearserhard.de and of your data protection rights. It is generally possible to use our website without entering personal data. However, if you wish to make use of special services or other ways of interacting with us, it may be necessary to process personal data.
     
  2. Processor (Responsible person)

    ERHARD GmbH & Co KG
    Meeboldstraße 22
    89522 Heidenheim
    E-mail: info@talis-group.com

    Further information can be found in our imprint.
     
  3. Data Protection Officer

    If you have any questions about data processing or data protection at ERHARD GmbH & Co KG, you can contact our data protection officer at any time.

    You can contact them by post at the above address (please note 'For the attention of the data protection officer' on the envelope), by e-mail at DPO(at)talis-group.com for our group of companies, datenschutz@erhard.de, datenschutz(at)talis-group.com or confidentially via our data protection portal.
     
  4. Lawfulness of processing

    Article 6 (1)(a) GDPR (in conjunction with Section 25 (1) TTDSG) serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfilment or for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 para. 1 lit. b) GDPR. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of enquiries about our products or services.

    The processing is based on Art. 6 para. 1 lit. c) GDPR, if the processing is necessary for compliance with a legal obligation to which our organization (the controller) is subject, such as for the fulfilment of tax obligations.

    Furthermore, processing operations may be based on Art. 6 para. 1 lit. f) GDPR. Processing operations are based on this legal basis if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if you are a customer of our company (recital 47 sentence 2 GDPR).
     
  5. Technology
     
    1. SSL/TLS encryption

      This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognize an encrypted connection by the "https://" instead of "http://" in the address line of the browser and by the lock symbol in your browser line. We use this technology to protect your transmitted data.
       
    2. Data collection when visiting the website

      If you only use our website for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (in so-called "server log files"). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server log files. The following can be recorded

      When using this general data and information, we do not draw any conclusions about your person. Rather, this information is required in order to

      This collected data and information is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The data of the server log files are stored separately from all personal data provided by a data subject and deleted after 10 days.

      The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

      • browser types and versions used,
      • the operating system used by the accessing system,
      • the website from which an accessing system reaches our website (so-called referrer),
      • the sub-websites which are accessed via an accessing system on our website,
      • the date and time of access to the website,
      • an Internet Protocol address (IP address) and,
      • the Internet service provider of the accessing system.
         
      • to deliver the content of our website correctly,
      • to optimize the content of our website and the advertising for it,
      • to ensure the long-term functionality of our IT systems and the technology of our website, and
      • to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

  6. Hosting by Hetzner

    Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as Hetzner). When you visit our website, your personal data (e.g. IP addresses in log files) are processed on Hetzner's servers.

    The use of Hetzner is based on Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in the most reliable presentation, provision and security of our website. We have concluded an order processing contract (AVV) with Hetzner in accordance with Art. 28 GDPR. This is a contract prescribed by data protection law, which ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Data protection information from Hetzner: https://www.hetzner.com/de/rechtliches/datenschutz.

  7. Contents and contact options

    With this special page for our 150th anniversary, we would like to take you on a journey through our rich history and bring it to life for you, but also take you into the here and now and inspire you with the company ERHARD, its employees and values.  Throughout the year, we will keep you up to date on the various activities in our anniversary year. We also offer you various ways of contacting us via this page, for example through our newsletter. Much more information is available on our general company pages, in particular at www.erhard.de.
     
    1. contact form

      For questions of any kind, we offer you the opportunity to contact us using the form provided. Personal data is collected when you contact us. Which data is collected when using a contact form can be seen from the contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f) GDPR.

      If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and the deletion does not conflict with any statutory retention obligations. Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. Alternatively, you can also contact us directly informally and ask us to delete your data.
       
    2. Contact via e-mail

      If you contact us via one of the e-mail addresses provided by us, the personal data you provide will be processed exclusively for the purpose of processing your respective request, for correspondence with you, as well as for any initiation and justification of a contract, for inquiries for products and complaints etc. with you in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. The personal data collected will be automatically deleted after your inquiry has been dealt with; this is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
       
  8. Newsletter mailing
     
    1. Sending newsletters to existing customers

      If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services to those already purchased from our range by e-mail. In accordance with Section 7 (3) UWG, we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur transmission costs for this in accordance with the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately.
       
    2. Advertising newsletter

      We offer you the opportunity to subscribe to our company's newsletter. Which personal data is transmitted to us when you subscribe to the newsletter can be seen from the input mask used for this purpose. We inform our customers and business partners about our offers at regular intervals by means of a newsletter. You can only receive our company's newsletter if you have a valid e-mail address and have registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address you entered for the first time for the newsletter mailing using the double opt-in procedure. This confirmation e-mail is used to check whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter.

      When you register for the newsletter, we also store the IP address assigned by your Internet service provider (ISP) of the IT system you are using at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.

      The personal data collected when registering for the newsletter will be used exclusively to send our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of personal data that you have given us for the newsletter dispatch can be revoked at any time. There is a corresponding link in every newsletter for the purpose of revoking consent. It is also possible to unsubscribe from the newsletter at any time directly on our website or to inform us of this in another way.

      The legal basis for data processing for the purpose of sending the newsletter is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
       
    3. Rapidmail

      For the purpose of analysis, the emails sent with Rapidmail, a service of rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany, contain a so-called "tracking pixel", which connects to the Rapidmail servers when the email is opened. In this way, it can be determined whether a newsletter message has been opened.

      We can also use Rapidmail to determine whether and, if so, which links in the newsletter message have been clicked on. All links in the email are so-called tracking links that can be used to count your clicks.

      For more information on the analysis functions of Rapidmail, please see the following link: de.rapidmail.wiki/kategorien/statistiken/. Data processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

      You can also prevent processing at any time by unsubscribing from the newsletter. You can also prevent the storage of cookies by selecting the appropriate settings in your web browser. You can also prevent the storage and transmission of personal data by deactivating Java Script in your web browser or installing a Java Script blocker (e.g. noscript.net or www.ghostery.com). We would like to point out that these measures may mean that not all functions of our website are available.

      The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the Rapidmail servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. You can find Rapidmail's privacy policy here: www.rapidmail.de/datensicherheit.
       
  9. Our activities in social networks

    So that we can also communicate with you on social networks and inform you about our services, we have our own pages there. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered by this, within the meaning of Art. 26 GDPR.

    We are not the original provider of these pages, but only use them within the scope of the possibilities offered to us by the respective providers.

    As a precaution, we would therefore like to point out that your data may also be processed outside the European Union or the European Economic Area, in particular in the USA. Use may therefore be associated with data protection risks for you, as it may be more difficult to safeguard your rights, e.g. to information, deletion, objection, etc., and processing in social networks is often carried out directly for advertising purposes or for the analysis of user behavior by the providers without us being able to influence this. If user profiles are created by the provider, cookies are often used or the user behavior is assigned to your own social network member profile.

    The described processing operations of personal data are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to communicate with you in a timely manner or to inform you about our services. If you have to give your consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

    As we do not have access to the providers' databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in the social networks is provided below by the respective social network provider we use:
    1. Facebook

      (Joint) controller for data processing in Europe:
      Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
      Privacy policy (data policy): https://www.facebook.com/about/privacy
       
    2. Instagram

      (Joint) controller for data processing in Germany:
      Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
      Privacy policy (data policy): https://instagram.com/legal/privacy/
       
    3. LinkedIn

      (Joint) controller for data processing in Europe:
      LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
      Privacy policy: https://www.linkedin.com/legal/privacy-policy
       
    4. YouTube

      (Joint) controller for data processing in Europe:
      Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
      Privacy policy: https://policies.google.com/privacy
       
    5.  XING (New Work SE)

      (Joint) controller for data processing in Germany:
      New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
      Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
      Information requests for XING members: https://www.xing.com/settings/privacy/data/disclosure
       
  10. Web analysis with Matomo

    We have integrated the Matomo component of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, for web analysis on this website.

    Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data on which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

     The software is operated on our server and the log files, which are sensitive under data protection law, are stored exclusively on this server. The purpose of the Matomo component is to analyze the flow of visitors to our website. We use the information to understand the behavior on our site, to evaluate the use of our subpages and to make possible improvements. As we do not sell any products via the site or engage in direct marketing, we are not interested in the identities of our visitors or other data. We have therefore configured Matomo so that it does not use cookies. We also do not use so-called "device fingerprinting".

    Each time you access one of the individual pages of this website, your internet browser on your device is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. Your browser transmits personal information such as the access time, the location from which the access was made, including the IP address of the Internet access you are using, to our server. This personal data is stored by us in anonymized form. We do not pass this personal data on to third parties. No data is transferred to third countries.

    Matomo processes the following data:

    You have the option to object to the collection of data relating to the use of this website and created by Matomo, as well as to the processing of this data by Matomo and to exclude this. To do this, you must set the "Do not track" option in your browser. We have set up Matomo so that this setting is taken into account. If you do not want this for any reason, please deactivate the following checkbox.

    You have the option of preventing the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

    [ x ] Your visit to this website is currently being recorded by Matomo web analytics. Uncheck this box to opt-out. This will set a Matomo cookie that remembers your setting.

    Further information and the applicable data protection provisions of Matomo may be retrieved under https://matomo.org/privacy-policy.

    • Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
    • Pseudo-anonymized location (based on the anonymized IP address)
    • Date and time
    • Title of the page accessed
    • URL of the requested page
    • URL of the previous page (if this is permitted)
    • Screen resolution
    • Local time
    • Files that have been clicked and downloaded
    • External links
    • Duration of the page layout
    • Country, region, city (with low accuracy due to IP address)
    • Main language of the browser
    • User agent of the browser
  11. Plugins and other services
     
    1. YouTube (Videos)

       We have integrated YouTube components on this website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

      YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal. Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website you are visiting.

      If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting when you access a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

      YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged in to YouTube at the same time as accessing our website; this occurs regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent it from being transmitted by logging out of your YouTube account before accessing our website. These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.  For this purpose, we have integrated YouTube with a so-called two-click solution, which only transmits data to Google after you have expressly activated the video function by clicking and loading the corresponding video.

      YouTube's privacy policy: https://www.google.de/intl/de/policies/privacy/. You can manage your data protection settings for Google's services yourself at https://policies.google.com/privacy#infochoices.
       
  12. Cookies
     
    1. General information about cookies

      Cookies are data records as information that your browser automatically creates and that are stored on your IT system or end device (laptop, tablet, smartphone, etc.) when you visit websites. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that identities are directly obtained. The use of cookies is intended to make the use of websites more pleasant. Session cookies are used to recognize whether individual pages have already been visited.

      Temporary cookies, which are stored on end devices for a specified period of time, are used to optimize user-friendliness. If you visit these pages again to make use of services, it is automatically recognized that you have already been there and which entries and settings you have made so that you do not have to enter them again. They are also used to statistically record the use of the pages and evaluate them for the purpose of optimization. These cookies are automatically deleted after a defined period of time.
       
    2. Notes on avoiding cookies in common browsers

      You can delete cookies, allow only selected cookies or deactivate cookies completely at any time via the settings of the browser you are using. Further information can be found on the support pages of the respective providers:

      Chrome: https://support.google.com/chrome/answer/95647?tid=311178978 .
      Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac?tid=311178978.
      Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?tid=311178978.
      Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09.
       
    3. No cookies are used

      We do not use technically necessary or other forms of cookies on this website. You will therefore not see any cookie notice / consent management and no consent to the use of cookies will be obtained. In the case of corresponding consents, e.g. for newsletter registration or YouTube use, you will be asked directly whether this is desired. Your consent will be documented in this case.
       
  13. Your rights as a data subject

    Right to confirmation - You have the right to request confirmation from us as to whether personal data concerning you is being processed.

    Right to information Art. 15 GDPR - You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.

    Right to rectification Art. 16 GDPR - You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

    Erasure Art. 17 GDPR - You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds provided for by law applies and insofar as the processing or storage is not necessary.

    Restriction of processing Art. 18 GDPR - You have the right to demand that we restrict processing if one of the legal requirements is met.

    Data portability Art. 20 GDPR - You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

    Furthermore, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

    Objection Art. 21 GDPR - You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing on the basis of a balancing of interests) GDPR. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims.

    In individual cases, we process personal data for the purpose of direct advertising. You can object to the processing of your personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process the personal data for these purposes.

    In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

    You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

    Withdrawal of consent under data protection law - You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

    Complaint to a supervisory authority - You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data. A list of the contact details of the data protection officers in the federal states and the supervisory authorities for the non-public sector and in other countries can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information, BfDI under Addresses and links.

    Automated decision-making including profiling - We do not use profiling within the meaning of Art. 22 GDPR when using our websites.
     
  14. Storage, deletion and blocking

    We process and store your personal data only for the period of time required to achieve the purpose of storage or if this is provided for by the legal regulations to which our company is subject.

    If the storage purpose no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
     
  15. Storage duration

    The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.
     
  16. Further data protection issues

    If you have any further questions, comments or other requests regarding your personal data that are not answered here, please contact us via one of the methods listed above.

Copyright 2024
Impressum • Datenschutz