Hotset GmbH
Data protection declaration
I. Who is the data controller and how can I reach the data protection officer
Hotset GmbH, Hueckstraße 16, 58511 Lüdenscheid, info@hotset.com
You can reach our data protection officer, JURANDO GmbH (https://www.jurando.de/), Dr. Dennis Werner, at datenschutz@hotset.com or by mail at our address with the addition “data protection officer”.
II. What rights do you have?
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to processing (Art. 21 GDPR).
You can also lodge a complaint concerning us with a data protection supervisory authority pursuant to Art. 77 GDPR.
If you have given us consent, you can revoke it at any time without affecting the legality of the pro-cessing that took place until the revocation.
III. For what purposes and on what legal basis do we process personal data?
Visiting our website
When you visit our website for purely informational purposes, i.e. if you do not transmit information to us in any other way, we only collect the personal data that your browser transmits to us. This information includes:
- IP address of your system
- Date and time (incl. time zone) of your request
- Type, content and protocol version of your request (specific page request)
- Access status (HTTP status code) of our server
- Size of our server response in bytes
- Website from which the request came (so-called “referrer”)
- Your user agent (type, version, operating system used)
- The domain you accessed
We also store this data in log files.
The aforementioned data is necessary for us technically to display our website, to ensure stability and security and to optimize our offer.
The legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest is derived from the above-mentioned purposes.
We delete this data after seven days at the latest. Storage beyond this period only takes place if the personal data has been deleted accordingly or anonymized; in the case of IP addresses, for example, this is done by shortening them in accordance with data protection regulations.
Cookies
We make use of the following cookies on our website:
- Borlabs-cookie
Purpose: Stores the preferences of visitors who have been selected in the Borlabs cookie box.
Technically necessary? Yes
Storage period: 1 year - _ga;_gat;_gid
Purpose: Cookie from Google for website analytics. This cookie generates statistical data about how the visitor uses the website.
Technically necessary? No
Storage period: 2 years - _fbp,act,c_user,datr,fr,m_pixel_ration,pl,presence,sb,spin,wd,xs
Purpose: Cookie from Facebook used for website analyt-ics, ad targeting and ad measurement.
Technically necessary? No
Storage period: Session/1 year - Facebook
Purpose: Is used to unlock Facebook content.
Technically necessary? No
Storage period: Session - pigeon_state
Purpose: Is used to unlock Instagram content.
Technically necessary? No
Storage period: Session - NID
Purpose: Is used to unlock YouTube content.
Technically necessary? No
Storage period: 6 months
Cookies are small text files that are stored on your system and through which we receive certain information. When you access our website, we inform you about the use of cookies by means of a cookie notice that refers to this privacy policy. There you can also consent to the use of cookies.
The legal basis for the use of technically necessary cookies is Art. 6 (1) lit. f GDPR. Our legitimate interest in the use of technically necessary cookies is to be able to offer you a functional and user-friendly website.
The legal basis for the technically unnecessary cookies is your consent in accordance with Art. 6 (1) lit. a GDPR.
Contact form
If you use our contact form, we use the data you provide to answer your inquiry. Your information may be stored in a customer relationship management system (“CRM system”) or similar software.
Data processing for the purpose of contacting us is carried out on the basis of Art. 6 (1) lit. b GDPR, insofar as your inquiry concerns the fulfillment of contractual obligations or the initiation of a contract. In other cases, the legal basis is found in Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest arises from the above-mentioned purposes.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request, unless we are required by law to retain the data or we need the data for the performance of the contract. In addition, you can object to the processing at any time if the pro-cessing is based on a legitimate interest.
E‑mail contact
If you contact us by the e‑mail addresses we provide, we store the personal data you provide in order to respond to your inquiries. Your information may be stored in a customer relationship man-agement system (“CRM system”) or similar software.
In the course of the transport or delivery of your e‑mail, log data is also regularly generated, which also contains, for example, the IP address of the e‑mail server you are using. This log data is nec-essary to ensure the proper operation of our e‑mail server and also serves as evidence in the event of server problems or security incidents.
The legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest is derived from the above-mentioned purposes. If the contact is aimed at concluding a contract or if the contact is made within the framework of an existing contractual relationship, the legal basis is Art. 6 (1) lit. b GDPR.
The data will be deleted when the inquiry has been conclusively processed, when we are not legally obligated to store the data, or when we need the data to fulfill the contract. In addition, you can object to the processing at any time if the processing is based on a legitimate interest. The log data on our e‑mail server is deleted after seven days at the latest.
Chat
You can use our chat function to contact us and ask us questions. We process the data you pro-vide to us in the process in order to answer your inquiry. We also process the following data: Date and time of the call, browser type/ ‑version, IP address,
operating system used, URL of the previously visited website, amount of data sent.
The legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest is derived from the above-mentioned purposes. If the contact is aimed at concluding a contract or if the contact is made within the framework of an existing contractual relationship, the legal basis is Art. 6 (1) lit. b GDPR.
The data will be deleted when the inquiry has been conclusively processed, when we are not legally obligated to store the data, or when we need the data to fulfill the contract. In addition, you can object to the processing at any time if the processing is based on a legitimate interest.
Applicant data
If you send us your application, we will process the data you provide to us in order to carry out the selection process as part of the application procedure.
The legal basis for this is Art. 6 ( 1 ) lit. b GDPR and § 26 BDSG (German Federal Data Protection Act). If you voluntarily provide us with special categories of personal data, such as health data or religious affiliation, the legal basis is additionally Art. 9 (2) lit. b or f GDPR.
If your application is successful, we will further process the data for the purpose of implementing the employment relationship. You will then receive further data protection information for employ-ees.
If your application is not successful, we will delete your data after six months at the latest. Storage until then is for the defense of legal claims under the AGG (Section 15 (4) AGG (“General Equal Treatment Act”) and Section 61b (1) ArbGG (“Labor Court Act”)). The letter of application and the rejection letter are subject to the retention period of six years under commercial law and are there-fore stored by us for this length of time (Section 257 (1) Nos. 2 and 3 HGB (German Commercial Code)).
Facebook pixel
On our site we use the so-called Facebook pixel. The legal basis for the use of this is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
Your data will be transmitted to Facebook Inc. (https://www.facebook.com). We have concluded a joint responsibility agreement with Facebook and agreed to the EU standard contractual clauses.
Google services
This website uses the Google services described in more detail below, which are provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google’s privacy policy, terms of use and information on the technologies used by Google can be found here: https://policies.google.com/privacy?hl=de.
The information generated in the course of using the services may be transferred to a Google serv-er in the USA and stored there.
We have agreed the EU standard contractual clauses with Google for the exceptional cases in which personal data is transferred to the USA.
Google Analytics
This website uses Google Analytics, a web analytics service that uses cookies (text files that are stored on your computer) to help analyze how users use the website and to continually improve our offerings and make them more interesting.
If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to a third country. This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is per-sonal, it will be excluded immediately and the personal data will be deleted immediately. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncat-ed there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use.
The IP address transferred within the framework of Google Analytics will not be combined with oth-er data of Google.
You may disable the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also set a so-called Analytics opt-out cookie by clicking on [Link: javas-cript:gaoop_analytics_optout();], which prevents Google Analytics from collecting data when you use this website in the future.
The legal basis for the use of Google Analytics is your consent according to Art. 6 (1) lit. a GDPR.
YouTube videos
We have embedded YouTube videos in our online offer, which are stored on http://www.youtube.com and can be played directly from our website. The provider of this service is Google.
The videos are all embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. The data mentioned in the following paragraph will only be transferred when you play the videos. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the correspond-ing sub-page of our website. The data collected during the visit to our website is also transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to YouTube, your data will be directly assigned to your account. If you wish not to have your profile attributed to YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must con-tact YouTube to exercise this right.
Insofar as you consent by clicking on the video or within our cookie notice, the legal basis is Art. 6 (1) lit. a GDPR.
We operate a Facebook page to draw attention to our products and services and to enter into con-tact with you. We are jointly responsible for its operation with Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal, Harbour, Dublin 2, Ireland.
We would like to point out that when you visit our Facebook page, Facebook collects, among other things, your IP address and other information about your usage behavior. This information is used to provide us, as the operating company of the Facebook pages, with statistical information about the use of the Facebook page. The data collected in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union, in particular to the USA. Trans-mission and further processing in these countries may be associated with risks that we, as the op-erating company of the site, cannot assess or exclude. Facebook only describes in general terms exactly what information it receives and how it is used, and we are not fully aware of this. In what way Facebook uses the data for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Face-book and is not known to us. However, it can be assumed that Facebook uses this data in its own interest for the purposes of advertising, creating user profiles and market research.
If you are logged into Facebook when you visit our Facebook page, Facebook can associate your activities – possibly across websites – with your account. Content or advertising can be tailored to you on the basis of this data. If you wish to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies present on your device and exit and restart your browser. This will delete Facebook information through which you can be directly identified. This will allow you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (like, comment, share, message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.
We ourselves do not collect and process any data from your use of our Facebook page.
The legal basis is our legitimate interest in a contemporary presentation of our products and ser-vices as well as the provision of interaction and contact possibilities according to Art. 6 para. 1 lit. f GDPR. If you contact us for the purpose of initiating or concluding a contract, the legal basis is Art. 6 para. 1 lit. b GDPR.