Privacy statement

Note: The data protection notices for applicants can be found separately at www.hupfer.com/datenschutz-bewerber

Information on the collection of personal data and contact details of the controller

We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

The use of our website is generally possible without the provision of personal data.

Insofar as personal data is collected when visiting our websites, we process them exclusively in accordance with the General Data Protection Regulation (VO (EU) 2016/679; GDPR) and the Federal Data Protection Act of 30 July 2017 (BDSG-neu), as well as the Digital Services Act (DDG). The processing of personal data takes place exclusively in accordance with this data protection declaration.

This Privacy Statement applies to the use of the website at https://www.hupfer.com. The data protection declaration on the linked website is decisive for the linked contents of other providers.

We would like to point out that security vulnerabilities may occur in the context of data transmission via the Internet, which cannot be prevented by the technical design of this website. A complete protection of personal data is not possible when using the Internet.

Data controller

On this website within the meaning of the General Data Protection Regulation (GDPR):

Hupfer Metallwerke GmbH & Co. KG, Dieselstr. 20, 48653 Coesfeld, Germany, tel.: +49 2541 805-0, fax: +49 2541 805-111, e-mail: info@hupfer.com

The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

Data Protection Officer

The person responsible has appointed a data protection officer for this website, who can be reached as follows:

Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstraße 45, 58095 Hagen (NRW)
Telephone: +49 (0)2331/356832-0
E-mail: datenschutz@gdi-mbh.eu
Internet: Www.gdi-mbH.eu

Data collection when visiting our website

Hosting

Our website is operated on servers of PX-PRO Hosting GmbH, Stephanienstraße Erkrather Straße 310, 40231 Düsseldorf.

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect such data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

· Our visited website

· Date and time at the time of access

· Amount of data sent in bytes

· Source/reference from which you came to the page

· Browser used

· Operating system used

· Used IP address in anonymised form

Data stored by the hoster is automatically deleted after 7 days.

The processing is carried out in accordance with Art. 6 para. 1 lit. F GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively, should concrete indications point to illegal use.

Cookies

In addition to the aforementioned data, cookies will be used on your computer when you use and visit our website.

When you first visit our website, you will be asked if you agree to the use of cookies and, if so, which categories you agree to.

Cookies are small text files that are stored by your browser on your device to store certain information. Furthermore, these cookies are used to make the use of our offer more pleasant and comfortable for you or for analytical purposes.

Most of the cookies we use are so-called "session cookies". They are used to make the services of our website technically available to you. After your visit, these cookies will be automatically deleted from your browser.

Other cookies remain on your computer and cause us to recognize your device on your next visit (so-called persistent or permanent cookies).

When you next visit our website using the same device, the information stored in cookies is read out either by our website ("First Party Cookie") or by another website to which the cookie belongs ("Third Party Cookie").

These cookies are automatically deleted from your system after a preset time period, which varies depending on the cookie.

The stored and returned information tells the respective website that you have already accessed and visited it with the browser of your end device.

We use this information in order to be able to optimally design and display the website according to your preferences. Only the cookie itself is identified on your end device.

Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.

This website uses the following types of cookies, the scope and functioning of which are explained below:

- Essential cookies: Necessary cookies guarantee functions without which you cannot use our websites as intended. These cookies are used exclusively by us and are used, for example, to ensure that you, as a registered user, remain logged in at all times when accessing various subpages of our website and thus do not have to re-enter your login data every time a new page is called up. The legal basis for the use is our legitimate interest in the sense of Art. 6 (1) (f) GDPR.

- Functional cookies: Enable our website to store previously made information and to offer you improved functions based on it. The legal basis for the use of these cookies is your consent pursuant to Art. 6 para. 1 lit. A) GDPR.

- Marketing or tracking cookies: These cookies are used to collect information about the websites visited by the user, to create target group-oriented and more effective advertising for the user and to enable the interests of the website visitors to be identified, in order to make our website even more interesting in the future.

Marketing and/or tracking cookies will only be set after your active consent.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. A GDPR.

- LocalStorage cookies

In addition, we also use so-called LocalStorage and Session Storage technology (also called "Local Data" and "Local Storage" and "Session Storage"), which means we use the storage capacity of your browser.

With LocalStorage, data is stored locally in your browser's cache, which still exists after closing the browser window or exiting the program and can be read out if you do not actively delete the cache.

Local Storage allows your preferences to be stored on your computer and used by you when using our websites.

The function of Session Storage corresponds to the contents of the LocalStorage described, except that the corresponding data is automatically removed from the cache of your browser immediately after closing the browser ("Session").

The data stored in LocalStorage and Session Storage cannot be accessed by third parties. They will not be passed on to third parties and will not be used for advertising purposes. In particular, this technology is used to present our content to you in an appealing graphical representation (e.g. pop-ups windows etc.) as well as to personalize our offer and the navigation on our pages for you.

The data is not merged with other data (e.g. information from tracking tools, which are also stored separately in LocalStorage).

LocalStorage also stores certain information and inputs to the tracking tools for transmission and evaluation. This data is only used to analyze and evaluate the surfing behavior of visitors. The data stored in LocalStorage will not be used for advertising purposes.

Insofar as the use of this technology is necessary for the operation of the website, the processing takes place on the basis of our legitimate interest in order to be able to make an attractive fully functional offer to them, on the basis of Article 6 (1) sentence 1 lit. F GDPR, otherwise on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. A GDPR.

Opt-out for marketing cookies

You can also manage cookies used for online advertising through the tools developed in many countries through self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.

You can revoke this consent to the cookies at any time with effect for the future here.

You can set your browser in such a way that you are informed about the setting of cookies and allow cookies only in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual Internet presence on which you are currently located), Exclude the acceptance of cookies for certain cases or generally, as well as activate the automatic deletion of cookies when closing the browser. You can delete stored cookies at any time using your web browser.

You can deactivate cookies in your browser at any time.

However, if cookies are disabled, the functionality of this website may be restricted.

Deleting cookies

Cookies are stored on your device until you delete these cookies, which is possible at any time. In addition, expired cookies will be automatically deleted from your browser if you have set up your browser accordingly. Expired cookies are no longer sent by your browser to our servers and can therefore no longer be used by us.

Here you will find related information The most common browser Information on how you can delete cookies in your browser and manage cookie settings:

Desktop PC / Laptop

Mobile devices

- Google Chrome (Android)

- Google Chrome (iOS)

- Apple Safari (iOS)

- Samsung Internet (Android)

- Mozilla Firefox (Android)

If you have not made or make any other settings, cookies that enable or are intended to ensure the necessary technical functions remain on your device until the browser is closed; other cookies may remain on your device for a longer period of time (a maximum of 6 months).

To ensure your privacy, you should regularly check the cookies on your respective device and your browser history and delete them automatically.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses an SSL or TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from “http://” to “https://” and by the lock icon in your browser line.

If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transported data.

Contact options

On our website you can contact us by e-mail. In this context, personal data will be stored and processed by you for the purpose of communication. The data collected for this purpose (name, address, e-mail address) will not be passed on to third parties.

The data will not be merged with other data collected on this website.

The data may be stored as part of Customer Relations Management (CRM), if you are already a customer of our company.

The processing of this data is carried out on the basis of Art. 6 para. 1 lit. B GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR).

The data you provide will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage lapses (e.g. after completion of your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

Registration of a customer account

On our website you can register for your order processes and create a personal customer account.

Registration is done via a double opt-in procedure.

You will receive an e-mail to the address you provided, where you can confirm the registration via a link contained in it.

If the confirmation does not take place within 24 hours, the registration will be automatically deleted from our database.

We process the data of our customers in the context of the order processes in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery, respectively Execution.

We only collect personal data that you provide to us as part of an order or your other voluntary information on the order masks of our website. This includes, in particular, your voluntary information in the event of inquiries as well as all data required to process and execute your order.

The following data are collected (some voluntary data):

· Salutation

· First name

· Last name

· E-mail address

· Customer number

· Company name

· Street

· City

· Postal code

· Country

· Telephone

· Fax

The processed data also includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners.

Mandatory information required for the processing of contracts is marked separately.

We use session cookies for the storage of the shopping cart content and permanent cookies for the storage of the login status.

The provision of your personal data is necessary for the conclusion of a contract. You are not obliged to provide the personal data. If your data is not provided, the order/order cannot be carried out.

We disclose the data to third parties only in the context of delivery, payment or within the scope of legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the customer's request on delivery or payment).

When opening the customer account, we store your data until you cancel their access, subject to their retention is for commercial or tax reasons in accordance with Art. 6 para. 1 lit. C GDPR necessary. It is the responsibility of the users to back up their data upon termination.

The closure of your online account is possible at any time by sending a short message to us by e-mail info@hupfer.com or post.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. B GDPR.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

We are obliged to store your address, payment and order data (as well as data provided for the manufacture of individual products) for a period of up to ten years due to commercial and tax law requirements. The obligations arise, among other things, from the German Commercial Code (HGB) and the Fiscal Code (AO).

Order processing

The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services within the scope of the operation of an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

The personal data collected by us for the processing of your order will be stored until the expiry of the statutory retention obligation and then deleted, unless: that we are obliged to store for a longer period of time pursuant to Article 6 (1) sentence 1 lit. c GDPR due to retention and documentation obligations under tax and commercial law (from HGB, StGB or AO) or that you have consented to further storage pursuant to Article 6 (1) sentence 1 lit. a GDPR.

We process your payment information for the purpose of payment processing, e.g. when you purchase or use a product and/or service via our services. Depending on the payment method used, we will forward your payment information to third parties (e.g., in the case of credit card payments to your credit card provider).

The processing is carried out on the basis of Art. 6 para. 1 lit. B (execution of order processes) and c (legally required archiving) GDPR. The information marked as necessary is required for the purpose of establishing and fulfilling the contract. We disclose the data to third parties only in the context of delivery, payment or within the scope of legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the customer's request on delivery or payment).

Your personal data may be passed on to the following categories of recipients as part of order processing:

- Freight forwarders, direct suppliers

- Payment service provider

- If necessary Debt collection service providers

Insofar as it is necessary under data protection law, we have order processing contracts with the respective service providers in accordance with Art. 28 GDPR.

Newsletter

On our website you have the possibility to subscribe to a newsletter, which will be sent by e-mail. The dispatch to your e-mail address takes place on the basis of your personal registration with subsequent confirmation (double opt-in), with which you consent to the newsletter being sent.

The legal basis for this arises from Art. 6 para. 1 sentence 1 lit. A GDPR.

To send the newsletter, we store your e-mail address [and your first and last name, if you have voluntarily provided it to us] [and the lists you have subscribed to]. [The data will not be passed on to third parties. / The data will be passed on to our service provider [NAME] for the purpose of sending the newsletter].

Our newsletter system has a function with which we can track which recipients have opened the newsletter at which time. This data is stored and used to evaluate the reach of individual campaigns.

Withdrawal of consent: You can object to the use of your data at any time with effect for the future. You will find a way to unsubscribe from the newsletter at the end of each newsletter e-mail.

Note on data transfer to the USA:

On our website we include tools from companies based in the USA, among other things. If these tools are activated, your personal data may be shared with the US servers of the respective companies.

We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. U.S. companies are required to provide personal information at the request of U.S. authorities without you, as the data subject, being able to take legal action against this.

It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Web analytics services

Using Google Analytics 4

This website uses the web analytics service Google Analytics 4, operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses so-called "Cookies" are small text files that are stored on your computer and allow an analysis of your use of the website if you have agreed to the use of cookies for marketing purposes.

The information generated by the cookie about your use of this website will be transmitted to Google servers and further processed there. It is also possible to transmit data to Google LLC based in the USA.

According to Google, all data from end devices in the EU are stored and processed on servers within the EU.

No accurate location data is provided. Instead, the following metadata is derived from IP addresses: "City" (and the city's derived latitude and longitude), "Continent", "Country", "Region", "Subcontinent" (and the ID-based equivalents).

In the case of access from the EU, IP address data is shortened by the last digits directly after transmission on the EU server and thus pseudonymised in order to exclude direct personal reference. Only then will the data be forwarded to the Analytics server for processing.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with other services related to website and internet use.

The IP address transmitted and shortened by your browser will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to the full.

In addition, you can collect the data generated by the cookie and related to your use of the website (incl. Your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Demographic characteristics

Google Analytics 4 uses the special demographic feature. Google Analytics 4 can use this feature to generate statistics that make statements about the language, interests, location, age and gender of users of the website in order to identify target groups for marketing activities. This is done by analyzing third-party advertising and information. The collected data cannot be assigned to any specific person and will be deleted for a period of two months after storage.

Google Signals

As an extension to Google Analytics 4, we use Google Signals on our website to create cross-device reports. If you have activated personalized ads and your devices are linked to your Google account, Google will, subject to your consent to the use of Google Analytics, analyze your usage behavior across devices and create database models, including for cross-device conversions.

We do not receive any personal data from Google, only statistics. If you want to prevent cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings.

You will find information on this page: https://support.google.com/ads/answer/2662922?hl=de

For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

The Terms of Use and Privacy Notice can be found at http://www.google.com/analytics/terms/de.html , https://policies.google.com/privacy?hl=de&gl=de and https://www.google.de/intl/de/policies/.

Google processes your personal data on our behalf. We have therefore, in accordance with Art. 28 Para. 3 GDPR concluded an order processing agreement with Google in which Google undertakes to protect your personal data and not to pass it on to third parties for purposes other than those mentioned above.

The legal basis for the use of Google Analytics is your consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. A GDPR, insofar as you give us your consent to this when you first call up the site.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

You can revoke your consent to data processing and transmission at any time without giving reasons by deleting cookies in your browser or by clicking on the following link:

[Insert link: Revocation from Consent Management Tool]

The legality of data processing that has already taken place is not affected by the withdrawal of consent.

Google DoubleClick

Our website uses the Google service Google DoubleClick (hereinafter referred to as "DoubleClick"). This service uses cookies to display ads relevant to users, improve campaign performance reports, or to prevent a user from being played ads more than once.

In order to be able to display interest-oriented advertising to users, DoubleClick must recognize the respective viewer and be able to assign his/her visited websites, clicks and other information on user behavior. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting).

DoubleClick uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to create so-called Capture conversions, i.e. whether a user sees an ad and later visits the advertiser's website and purchases something there.

The collected information is combined into a pseudonymous user profile in order to display interest-oriented advertising to the relevant user.

Your browser automatically establishes a direct connection to Google's server. We have no influence on the extent and further use of the data collected by Google through the use of this service. According to Google, by integrating these services, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us.

If you are registered with a Google service, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

The legal basis for the use of Google DoubleClick is your consent pursuant to Art. 6 para. 1 sentence 1 lit. A GDPR.

You can prevent the tracking process by setting your browser software accordingly (e.g., disabling third-party cookies), disabling cookies for conversion tracking by blocking cookies from the domain www.googleadservices.com in your browser settings, with regard to interest-related ads from providers that are part of the self-regulatory campaign "About Ads", Via the link http://www.aboutads.info/choices or under the link http://www.google.com/settings/ads/.

Please note that in this case you may not be able to fully utilize all the features of this offer.

For more information on the Google Marketing Platform, visit https://marketingplatform.google.com/. You can also find more information on the Network Advertising Initiative (NAI) at http://www.networkadvertising.org/.

For more information on ways to object to the ads displayed by Google, see the following links:

https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

For more information on Google DoubleClick, visit https://www.google.de/doubleclick and for more information on privacy at Google in general: https://www.google.de/intl/de/policies/privacy.

Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Google Tag Manager

We use "Google Tag Manager" on our websites. The service is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The Google Tag Manager provides a functionality that allows us to integrate other services on our website easily, efficiently and dynamically. Code snippets can be more easily implemented in websites or apps. This allows us to configure and adapt services integrated via Google Tag Manager, so-called Tags, perform quickly without having to make technical changes to our website.

The functions of the tags are often used, for example, to analyze the online behavior of the users (generally or on the site), to optimize marketing campaigns or to display suitable advertising. Services that you have already objected to using will not be delivered to your browser by Google Tag Manager.

The Google Tag Manager does not collect any personal data and does not set cookies itself. However, it can transfer cookies because the tags used can set cookies. When calling up the Google Tag Manager, however, the IP address and browser fingerprint (also called device fingerprinting or online fingerprinting) will be transferred to Google. This constitutes data processing within the meaning of Art. 4 No. 2 GDPR.

The legal basis for the use of "Google Tag Manager" is your consent in accordance with Art. 6 para. 1 sentence 1 lit. A GDPR, insofar as you gave us this when you first called up the website.

Google processes your data, including in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Furthermore, Google uses so-called standard contractual clauses in accordance with Art. 46. Sections 2 and 3 GDPR. Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if they are transferred to and stored in third countries (such as the USA).

By entering into these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the United States. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here:

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

Addition to data processing

We have concluded the Google Ads Data Processing Terms with Google. These correspond to the standard contractual clauses and also apply to the Google Tag Manager.

The Google Ads Data Processing Terms can be found at https://business.safety.google/adsprocessorterms/

For the Google Privacy Statement, please see the following link: https://policies.google.com/privacy?hl=de.

The Google Tag Manager Terms of Use can be found at the following link: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Google Ads

We use the "Google Ads" service to place ads on the Google advertising network (e.g. in search results, in videos, on websites, etc.). The service is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

It selects and displays real-time ads based on perceived interests of users. This allows us to display ads for and within our online offer more specifically, in order to present users only ads that potentially correspond to their interests. The following data is processed:

Browser information
Cookie ID
Date and time of the visit
Location information
IP address
Usage data

The basis of the data processing is then your consent in accordance with Art. 6 para. 1 sentence 1 lit. A GDPR, which you may have given us when you first visit our website. You can revoke your consent at any time free of charge with effect for the future. To do this, you can use the button in the lower left corner to call up a tool in which you can manage your consent or contact our data protection officer. For more information, see the "Cookies" section of this Privacy Statement.

Information on the use of data by Google, on setting and objection options as well as on data protection can be found in the Google data protection declaration under this link. You can make settings for the display of advertisements by Google under this link. To do this, you must be logged in with your Google account.

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

Addition to data processing

We have concluded the Google Ads Data Processing Terms with Google. These correspond to the standard contractual clauses and also apply to the Google Tag Manager.

The Google Ads Data Processing Terms can be found at https://business.safety.google/adsprocessorterms/

Google Dynamic Remarketing

We use “Google Dynamic Remarketing” on our website. This is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”).

Google Dynamic Remarketing enables us to show you our ads after visiting our website when you continue to use the Internet. This is done by means of cookies stored in your browser, through which your usage behavior is recorded and evaluated by Google when visiting various websites. In this way, Google can determine your previous visit to our website. According to Google, the data collected in the context of remarketing will not be merged with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

We use Google Dynamic Remarketing for marketing and optimization purposes, in particular to serve ads that are relevant and interesting to you and to improve campaign performance reports.

The legal basis for the use of Google Dynamic Remarketing is your consent pursuant to Art. 6 para. 1. Sentence 1 lit. A GDPR, insofar as you give us your consent to this when you first call up the site.

You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your web browser settings. We would like to point out that in this case you may not be able to use all the features of our website in full.

The prevention of the storage of cookies is also possible by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted when you delete your cookies.

In addition, you can disable interest-related ads via the https://optout.aboutads.info/?c=2&lang=EN link. We would like to point out that this setting will also be deleted if you delete your cookies.

Further information on Google's use of data, setting and objection options and data protection can be found on the following Google websites:

Privacy Statement: https://policies.google.com/privacy?hl=de&gl=de

Google website statistics: https://services.google.com/sitestats/de.html

Use of YouTube components

We use on our website videos from the video portal "YouTube" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

The YouTube videos are retrieved by clicking on them separately. This means that only the data required to display the videos - i.e. the information which of our pages you visit - will be transmitted to the service provider. If you are logged in to YouTube during your visit to our website, the transferred information will be assigned to your member account on YouTube. You can prevent this by unsubscribing from your member account before visiting our website.

By calling up a page with a video embedded by YouTube, a connection is established to the YouTube servers in order to display the content (i.e. the video) on our page by sending a message to your browser.

The legal basis for the use of YouTube is your consent in accordance with Art. 6 para. 1. Sentence 1 lit. A GDPR, insofar as you have given us your consent to this when you first call up the site.

For the transfer of personal data, we have a contract processing agreement with Google with EU standard data protection clauses in accordance with Art. 46 GDPR. Google has committed itself to comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).

Furthermore, the provider for data transfers to the USA has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

More information on YouTube's privacy is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/

We use on our website videos from the video portal "YouTube" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

The legal basis for the use of YouTube is your consent in accordance with Art. 6 para. 1. Sentence 1 lit. A GDPR, insofar as you have given us your consent to this when you first call up the site.

More information on YouTube's privacy is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/

Profiles on social networks

Our presence on social networks and video platforms, which we will call below, serves to actively communicate with our customers and prospects in a timely manner. We provide information about our services, products and interesting special offers around our company and our services. Further information about us as a provider of the social media channel can be found in our <link to 'imprint'>.

In the following, we give you the data protection information in accordance with Art. 13 General Data Protection Regulation (GDPR) on the social media sites operated by us:

https://www.facebook.com/HupferMetallwerke

https://www.instagram.com/hupfer_we_make_work_flow/

https://www.youtube.com/channel/UCmxjL2Edr0M8mrpkbmUQzJw

https://www.linkedin.com/company/537583

https://www.xing.com/pages/hupfermetallwerkegmbh-co-kg

Fanpage on Facebook / Facebook presence

The social network Facebook is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States, or if you have your registered office or residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

When you visit our online social media sites, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called Usage profiles created. These can be used, for example, to run ads inside and outside the platforms that are believed to suit your interests. For this purpose, cookies are usually used on your end device.

The function of cookies is explained in the context of our data protection policy, cf. Therefore, please provide the appropriate information there. These cookies store the visitor behavior and the interests of the users. This serves to safeguard our legitimate interests in an optimized presentation of our services and offers as well as effective communication with customers and interested parties, which are predominant in the context of a balancing of interests. The legal basis for the processing is therefore Art. 6 para. 1 sentence 1 lit. F GDPR.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. A GDPR, which you may have submitted to Facebook or give when calling up the website there. You can revoke your consent to data processing at any time with effect for the future; please contact Facebook directly for this purpose. The revocation of consent does not affect the legality of the data processing carried out up to the revocation.

The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your rights and settings in this regard for the protection of your privacy, in particular the possibility of objection (so-called Opt-out), please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

You can find the option of opting out as follows: https://www.facebook.com/settings?tab=ads

Data processing is carried out on the basis of an agreement between jointly responsible persons in accordance with Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum

Instagram account

The social network Instagram is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States, or if you have your registered office or residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

For this purpose, cookies are usually used on your end device. The function of cookies is explained in the context of our data protection policy, cf. Therefore, please provide the appropriate information there. These cookies store the visitor behavior and the interests of the users.

This serves to safeguard our legitimate interests in an optimized presentation of our services and offers as well as effective communication with customers and interested parties, which are predominant in the context of a balancing of interests. The legal basis for the processing is therefore Art. 6 para. 1 sentence 1 lit. F GDPR.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 sentence 1 lit.a) GDPR, which you may have submitted to Facebook when calling up the website there or give.

You can revoke your consent to data processing at any time with effect for the future; please contact Facebook directly for this purpose. The revocation of consent does not affect the legality of the data processing carried out up to the revocation.

The detailed information on the processing and use of the data by the provider on their pages as well as a contact option and your rights and settings in this regard for the protection of your privacy, in particular the possibility of objection (so-called Opt-out), please see the data protection information of the service Instagram: https://help.instagram.com/519522125107875.

The opt-out option can be found in the privacy settings of your Instagram account at: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.

YouTube

The video platform YouTube is operated by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, or if you have your registered office or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

The following information does not apply to any direct integration of YouTube videos on our website.

When you visit our channel on YouTube, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called Usage profiles created. These can be used, for example, to place ads inside and outside the video platform that are believed to be in your interest. For this purpose, cookies are usually used on your end device. The function of cookies is explained in the context of the data protection policy there, cf. Therefore, please provide the appropriate information there. These cookies store the visitor behavior and the interests of the users.

Furthermore, we receive a statistical analysis of the collected data, which groups of people are interested in our individual videos posted on YouTube. In particular, we are provided with the number of views and playing times of videos in this context. In this case, the data is provided for statistical analysis in such an anonymized form that it is not possible to draw conclusions about individual persons. The information contained includes, for example, the approximate geographical location, the age group and other summary characteristics.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 p.1 lit. A GDPR, which you may have given to Google when calling up the website(s) there or give. You can revoke your consent to data processing at any time with effect for the future; please contact Google directly for this purpose. The revocation of consent does not affect the legality of the data processing carried out up to the revocation.

For detailed information on the processing and use of the data by Google on the YouTube website, as well as a contact option and your rights and settings in this regard for the protection of your privacy, please refer to the Google Privacy Notice, which you can find at the following link: https://policies.google.com/privacy?hl=de&gl=de

LinkedIn (Company Profile)

For the purposes of recruiting, we set the professional or Career network "LinkedIn" and maintain a company profile there. LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085 USA, or, if you have your registered office or residence in the EU, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn").

There is an agreement between us and LinkedIn on order processing, which is available here: https://de.linkedin.com/legal/l/dpa?

When you visit our company profile on LinkedIn, your data may be automatically collected and stored by LinkedIn for market research and advertising purposes as well as for the placement of job offers that are suspected to be of interest to you (so-called Page Insights). This data is used to create so-called Usage and interest profiles. For this purpose, cookies are usually used on your end device.

You will be informed about the function of cookies within the framework of the data protection policy and the cookie policy of LinkedIn, cf. Therefore, please provide the appropriate information there. These cookies store the visitor behavior and the interests of the users.

Furthermore, we receive a statistical analysis of which groups of people are interested in our company side. In this case, the data is processed in such an anonymized form that it is not possible to draw conclusions about individual persons for statistical evaluations, which may include information on the approximate geographical location or age group and other summary characteristics.

The processing of personal data with Page Insights on LinkedIn is based on an agreement between jointly responsible persons pursuant to Art. 26 GDPR, which you can view here: https://legal.linkedin.com/pages-joint-controller-addendum

Regardless of the internal responsibilities agreed between us and LinkedIn, you can contact us or our data protection officer as well as LinkedIn with all data protection inquiries.

If you are asked by LinkedIn for consent (consent) to the data processing, e.g. by means of a checkbox, the legal basis of the data processing is Art. 6 para. 1 sentence 1 lit. A GDPR.

You can revoke your consent at any time with effect for the future, whereby you must contact LinkedIn to do so. Data processing carried out up to the time of revocation shall remain lawful.

If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For detailed information on the processing and use of the data by LinkedIn, as well as a contact option and your rights and settings in this regard for the protection of your privacy, please refer to LinkedIn's data protection notice, which you can find at the following link: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=de.linkedin.com%7Cli-other

LinkedIn's cookie policy can be found at the following link: https://www.linkedin.com/legal/cookie-policy

Because LinkedIn does not subscribe to the EU-U.S. Data Privacy Framework, we have used LinkedIn's standard privacy clauses in the sense of Art. 46 (2) (c) GDPR.

Xing / Kununu - Profile

We operate websites at XING and Kununu to represent our company. The provider of XING and Kununu is New Work SE, Dammtorstraße 30, 20354 Hamburg.

Our XING profile is designed to actively and timely address potential employees in a professional environment. On this page, we also share information about our company and present ourselves to the outside world in this way. We provide information about our services, products, interesting promotions and opportunities for employment in our company.

If you are asked by Xing for consent (consent) to the data processing, e.g. by means of a checkbox, the legal basis of the data processing is Art. 6 para. 1 sentence 1 lit. A GDPR.

For detailed information on the processing and use of the data by the providers on their pages, as well as a contact option and your rights and settings in this regard for the protection of your privacy, please refer to the data protection notice of Xing: https://privacy.xing.com/de/datenschutzerklaerung

Kununu primarily offers users the opportunity to make and view evaluations of employers. At the same time, we use the online presence at kununu to provide information about our company, career opportunities, our products and services.

When visiting our site at kununu and during other interactions with our site at kununu, kununu collects personal data of users about the use of cookies, for example. Such data collection by kununu can also take place with users who are not logged in or registered with kununu. Information about the collection of data and further processing by kununu can be found in the Kununu Privacy Policy at https://privacy.xing.com/de/datenschutzerklaerung/druckversion.

Data processing takes place as a joint processing operation. For content that they make available directly on the platform, i.e. comments, private messages or similar, New Work SE and we are jointly responsible in accordance with Art. 26 GDPR.

The legal basis for the processing of the data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. A General Data Protection Regulation (GDPR), insofar as you have granted it, as well as the safeguarding of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. F GDPR. If you contact us, the legal basis may also be Art. 6 para. 1 sentence 1 lit. B GDPR (necessity for carrying out pre-contractual measures).

The above-mentioned legitimate interest is that we would like to communicate with you via our kununu page and to inform you about our company, career opportunities and jobs, our products and services.

You can find out how XING and Kununu process your data in the XING Privacy Statement, which applies to all New Work SE services: https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.

Since only New Work SE has information about the data actually collected and their use on the respective platforms, requests for information and the assertion of further data subjects' rights should be made directly there. Of course, you can also send us inquiries in this regard, we will forward them to the operator for further processing.

We only process the data that you provide to us directly via the XING and Kununu platforms. This includes comments, requests, your user profile, ratings, and similar information. These remain for the duration of the appearance.

The processing of the data used by us takes place only in the territory of the EU or the EEA. We do not transfer data to third countries.

Rights of the person concerned

You have the rights listed below. You can claim this against us.

To assert your claim, please use the above-mentioned data or contact us by e-mail to: info@hupfer.com

Information:

You have, in accordance with Art. 15 GDPR The right to request information about your personal data processed by us. In particular, you may obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, unless collected from us, as well as the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details;

Correction:

You have, in accordance with Art. 16 GDPR the right to request the correction of incorrect or complete personal data stored by us without delay;

Deletion:

You have, in accordance with Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Restriction of processing:

You have, in accordance with Art. 18 GDPR the right to request the restriction of the processing of your personal data, Insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the establishment, exercise or defense of legal claims, or you are required to do so in accordance with Art. 21 GDPR have filed an objection to the processing;

Data portability:

You have, in accordance with Art. 20 GDPR the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;

Withdrawal of your consent:

You have, in accordance with Art. 7 Para. 3 GDPR the right to revoke your consent to us at any time. As a result, we will no longer be allowed to continue the data processing based on this consent for the future.

Please direct your revocation to the above data or by e-mail to: info@hupfer.com

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6 (1) (1) (e) or (f) GDPR is to file an objection; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you, unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object by automated means using technical specifications.

Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, under the legislation of the Union or of the Member States to which the controller is subject; and these laws contain reasonable measures to safeguard your rights and freedoms and legitimate interests, or with your express consent.

However, these decisions may not apply to specific categories of personal data under Art. 9 Para. 1 GDPR are based, unless Art. 9 para. 2 lit. A) or g) GDPR and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

Complaint to a supervisory authority:

You have, in accordance with Art. 77 GDPR The right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our company headquarters.

Status of the data protection declaration

The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make appropriate changes at any time.

As of Dec. 2023