Data protection declaration

I. Who is the data controller and how can I reach the data protection officer

Hotset GmbH, Hueck­straße 16, 58511 Lü­den­scheid, info@hotset.com

You can reach our da­ta pro­tec­tion of­fi­cer, JURANDO GmbH (https://www.jurando.de/), Dr. Den­nis Wern­er, at datenschutz@hotset.com or by mail at our ad­dress with the ad­di­tion “da­ta pro­tec­tion officer”.

II. What rights do you have?

You have the fol­low­ing rights with re­gard to your per­son­al data:

• Right of ac­cess (Art. 15 GDPR),
• Right to rec­ti­fi­ca­tion (Art. 16 GDPR),
• Right to era­sure (Art. 17 GDPR),
• Right to re­stric­tion of pro­cess­ing (Art. 18 GDPR),
• Right to da­ta porta­bil­i­ty (Art. 20 GDPR),
• Right to ob­ject to pro­cess­ing (Art. 21 GDPR).

You can al­so lodge a com­plaint con­cern­ing us with a da­ta pro­tec­tion su­per­vi­so­ry au­thor­i­ty pur­suant to Art. 77 GDPR.

If you have giv­en us con­sent, you can re­voke it at any time with­out af­fect­ing the le­gal­i­ty of the pro-cess­ing that took place un­til the revocation.

III. For what purposes and on what legal basis do we process personal data?

Visiting our website

When you vis­it our web­site for pure­ly in­for­ma­tion­al pur­pos­es, i.e. if you do not trans­mit in­for­ma­tion to us in any oth­er way, we on­ly col­lect the per­son­al da­ta that your brows­er trans­mits to us. This in­for­ma­tion includes:

• IP ad­dress of your system
• Date and time (in­cl. time zone) of your request
• Type, con­tent and pro­to­col ver­sion of your re­quest (spe­cif­ic page request)
• Ac­cess sta­tus (HTTP sta­tus code) of our server
• Size of our serv­er re­sponse in bytes
• Web­site from which the re­quest came (so-called “re­fer­rer”)
• Your user agent (type, ver­sion, op­er­at­ing sys­tem used)
• The do­main you accessed

We al­so store this da­ta in log files.

The afore­men­tioned da­ta is nec­es­sary for us tech­ni­cal­ly to dis­play our web­site, to en­sure sta­bil­i­ty and se­cu­ri­ty and to op­ti­mize our offer.

The le­gal ba­sis is Art. 6 (1) lit. f GDPR, where­by our le­git­i­mate in­ter­est is de­rived from the above-men­tioned purposes.

We delete this da­ta af­ter sev­en days at the lat­est. Stor­age be­yond this pe­ri­od on­ly takes place if the per­son­al da­ta has been delet­ed ac­cord­ing­ly or anonymized; in the case of IP ad­dress­es, for ex­am­ple, this is done by short­en­ing them in ac­cor­dance with da­ta pro­tec­tion regulations.

Cookies

We make use of the fol­low­ing cook­ies on our website:

• Bor­labs-cook­ie
  Pur­pose: Stores the pref­er­ences of vis­i­tors who have been se­lect­ed in the Bor­labs cook­ie box.
  Tech­ni­cal­ly nec­es­sary? Yes
  Stor­age pe­ri­od: 1 year
• _ga;_gat;_gid
  Pur­pose: Cook­ie from Google for web­site an­a­lyt­ics. This cook­ie gen­er­ates sta­tis­ti­cal da­ta about how the vis­i­tor us­es the website.
  Tech­ni­cal­ly nec­es­sary? No
  Stor­age pe­ri­od: 2 years
• _fbp,act,c_user,datr,fr,m_pixel_ration,pl,presence,sb,spin,wd,xs
  Pur­pose: Cook­ie from Face­book used for web­site an­a­lyt-ics, ad tar­get­ing and ad measurement.
  Tech­ni­cal­ly nec­es­sary? No
  Stor­age pe­ri­od: Session/1 year
• Face­book
  Pur­pose: Is used to un­lock Face­book content.
  Tech­ni­cal­ly nec­es­sary? No
  Stor­age pe­ri­od: Session
• pigeon_state
  Pur­pose: Is used to un­lock In­sta­gram content.
  Tech­ni­cal­ly nec­es­sary? No
  Stor­age pe­ri­od: Session
• NID
  Pur­pose: Is used to un­lock YouTube content.
  Tech­ni­cal­ly nec­es­sary? No
  Stor­age pe­ri­od: 6 months

Cook­ies are small text files that are stored on your sys­tem and through which we re­ceive cer­tain in­for­ma­tion. When you ac­cess our web­site, we in­form you about the use of cook­ies by means of a cook­ie no­tice that refers to this pri­va­cy pol­i­cy. There you can al­so con­sent to the use of cookies.

The le­gal ba­sis for the use of tech­ni­cal­ly nec­es­sary cook­ies is Art. 6 (1) lit. f GDPR. Our le­git­i­mate in­ter­est in the use of tech­ni­cal­ly nec­es­sary cook­ies is to be able to of­fer you a func­tion­al and user-friend­ly website.

The le­gal ba­sis for the tech­ni­cal­ly un­nec­es­sary cook­ies is your con­sent in ac­cor­dance with Art. 6 (1) lit. a GDPR.

Contact form

If you use our con­tact form, we use the da­ta you pro­vide to an­swer your in­quiry. Your in­for­ma­tion may be stored in a cus­tomer re­la­tion­ship man­age­ment sys­tem (“CRM sys­tem”) or sim­i­lar software.

Da­ta pro­cess­ing for the pur­pose of con­tact­ing us is car­ried out on the ba­sis of Art. 6 (1) lit. b GDPR, in­so­far as your in­quiry con­cerns the ful­fill­ment of con­trac­tu­al oblig­a­tions or the ini­ti­a­tion of a con­tract. In oth­er cas­es, the le­gal ba­sis is found in Art. 6 para. 1 lit. f GDPR, where­by our le­git­i­mate in­ter­est aris­es from the above-men­tioned purposes.

The per­son­al da­ta col­lect­ed by us for the use of the con­tact form will be au­to­mat­i­cal­ly delet­ed af­ter com­ple­tion of your re­quest, un­less we are re­quired by law to re­tain the da­ta or we need the da­ta for the per­for­mance of the con­tract. In ad­di­tion, you can ob­ject to the pro­cess­ing at any time if the pro-cess­ing is based on a le­git­i­mate interest.

E‑mail contact

If you con­tact us by the e‑mail ad­dress­es we pro­vide, we store the per­son­al da­ta you pro­vide in or­der to re­spond to your in­quiries. Your in­for­ma­tion may be stored in a cus­tomer re­la­tion­ship man-age­ment sys­tem (“CRM sys­tem”) or sim­i­lar software.

In the course of the trans­port or de­liv­ery of your e‑mail, log da­ta is al­so reg­u­lar­ly gen­er­at­ed, which al­so con­tains, for ex­am­ple, the IP ad­dress of the e‑mail serv­er you are us­ing. This log da­ta is nec-es­sary to en­sure the prop­er op­er­a­tion of our e‑mail serv­er and al­so serves as ev­i­dence in the event of serv­er prob­lems or se­cu­ri­ty incidents.

The le­gal ba­sis is Art. 6 (1) lit. f GDPR, where­by our le­git­i­mate in­ter­est is de­rived from the above-men­tioned pur­pos­es. If the con­tact is aimed at con­clud­ing a con­tract or if the con­tact is made with­in the frame­work of an ex­ist­ing con­trac­tu­al re­la­tion­ship, the le­gal ba­sis is Art. 6 (1) lit. b GDPR.

The da­ta will be delet­ed when the in­quiry has been con­clu­sive­ly processed, when we are not legal­ly ob­lig­at­ed to store the da­ta, or when we need the da­ta to ful­fill the con­tract. In ad­di­tion, you can ob­ject to the pro­cess­ing at any time if the pro­cess­ing is based on a le­git­i­mate in­ter­est. The log da­ta on our e‑mail serv­er is delet­ed af­ter sev­en days at the latest.

Chat

You can use our chat func­tion to con­tact us and ask us ques­tions. We process the da­ta you pro-vide to us in the process in or­der to an­swer your in­quiry. We al­so process the fol­low­ing da­ta: Date and time of the call, brows­er type/ ‑ver­sion, IP address,
op­er­at­ing sys­tem used, URL of the pre­vi­ous­ly vis­it­ed web­site, amount of da­ta sent.

The le­gal ba­sis is Art. 6 (1) lit. f GDPR, where­by our le­git­i­mate in­ter­est is de­rived from the above-men­tioned pur­pos­es. If the con­tact is aimed at con­clud­ing a con­tract or if the con­tact is made with­in the frame­work of an ex­ist­ing con­trac­tu­al re­la­tion­ship, the le­gal ba­sis is Art. 6 (1) lit. b GDPR.

The da­ta will be delet­ed when the in­quiry has been con­clu­sive­ly processed, when we are not legal­ly ob­lig­at­ed to store the da­ta, or when we need the da­ta to ful­fill the con­tract. In ad­di­tion, you can ob­ject to the pro­cess­ing at any time if the pro­cess­ing is based on a le­git­i­mate interest.

Applicant data

If you send us your ap­pli­ca­tion, we will process the da­ta you pro­vide to us in or­der to car­ry out the se­lec­tion process as part of the ap­pli­ca­tion procedure.

The le­gal ba­sis for this is Art. 6 ( 1 ) lit. b GDPR and § 26 BDSG (Ger­man Fed­er­al Da­ta Pro­tec­tion Act). If you vol­un­tar­i­ly pro­vide us with spe­cial cat­e­gories of per­son­al da­ta, such as health da­ta or re­li­gious af­fil­i­a­tion, the le­gal ba­sis is ad­di­tion­al­ly Art. 9 (2) lit. b or f GDPR.

If your ap­pli­ca­tion is suc­cess­ful, we will fur­ther process the da­ta for the pur­pose of im­ple­ment­ing the em­ploy­ment re­la­tion­ship. You will then re­ceive fur­ther da­ta pro­tec­tion in­for­ma­tion for employ-ees.

If your ap­pli­ca­tion is not suc­cess­ful, we will delete your da­ta af­ter six months at the lat­est. Stor­age un­til then is for the de­fense of le­gal claims un­der the AGG (Sec­tion 15 (4) AGG (“Gen­er­al Equal Treat­ment Act”) and Sec­tion 61b (1) Ar­bGG (“La­bor Court Act”)). The let­ter of ap­pli­ca­tion and the re­jec­tion let­ter are sub­ject to the re­ten­tion pe­ri­od of six years un­der com­mer­cial law and are there-fore stored by us for this length of time (Sec­tion 257 (1) Nos. 2 and 3 HGB (Ger­man Com­mer­cial Code)).

Facebook pixel

On our site we use the so-called Face­book pix­el. The le­gal ba­sis for the use of this is your con­sent pur­suant to Art. 6 para. 1 lit. a GDPR.

Your da­ta will be trans­mit­ted to Face­book Inc. (https://www.facebook.com). We have con­clud­ed a joint re­spon­si­bil­i­ty agree­ment with Face­book and agreed to the EU stan­dard con­trac­tu­al clauses.

Google services

This web­site us­es the Google ser­vices de­scribed in more de­tail be­low, which are pro­vid­ed by Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ireland.

Google’s pri­va­cy pol­i­cy, terms of use and in­for­ma­tion on the tech­nolo­gies used by Google can be found here: https://policies.google.com/privacy?hl=de.

The in­for­ma­tion gen­er­at­ed in the course of us­ing the ser­vices may be trans­ferred to a Google serv-er in the USA and stored there.

We have agreed the EU stan­dard con­trac­tu­al claus­es with Google for the ex­cep­tion­al cas­es in which per­son­al da­ta is trans­ferred to the USA.

Google Analytics

This web­site us­es Google An­a­lyt­ics, a web an­a­lyt­ics ser­vice that us­es cook­ies (text files that are stored on your com­put­er) to help an­a­lyze how users use the web­site and to con­tin­u­al­ly im­prove our of­fer­ings and make them more interesting.

If IP anonymiza­tion is ac­ti­vat­ed on this web­site, your IP ad­dress will be trun­cat­ed by Google with­in mem­ber states of the Eu­ro­pean Union or in oth­er states par­ty to the Agree­ment on the Eu­ro­pean Eco­nom­ic Area be­fore be­ing trans­mit­ted to a third coun­try. This web­site us­es Google An­a­lyt­ics with the ex­ten­sion “_anonymizeIp()”. As a re­sult, IP ad­dress­es are fur­ther processed in ab­bre­vi­at­ed form, so that a per­son­al re­la­tion­ship can be ruled out. As far as the da­ta col­lect­ed about you is per-son­al, it will be ex­clud­ed im­me­di­ate­ly and the per­son­al da­ta will be delet­ed im­me­di­ate­ly. On­ly in ex­cep­tion­al cas­es will the full IP ad­dress be trans­ferred to a Google serv­er in the USA and trun­cat-ed there. On be­half of the op­er­a­tor of this web­site, Google will use this in­for­ma­tion to eval­u­ate your use of the web­site, to com­pile re­ports on web­site ac­tiv­i­ty and to pro­vide the web­site op­er­a­tor with fur­ther ser­vices as­so­ci­at­ed with web­site and In­ter­net use.

The IP ad­dress trans­ferred with­in the frame­work of Google An­a­lyt­ics will not be com­bined with oth-er da­ta of Google.

You may dis­able the use of cook­ies by se­lect­ing the ap­pro­pri­ate set­tings on your brows­er, how­ev­er please note that if you do this you may not be able to use the full func­tion­al­i­ty of this web­site. You can al­so pre­vent Google from col­lect­ing the da­ta gen­er­at­ed by the cook­ie and re­lat­ing to your use of the web­site (in­clud­ing your IP ad­dress) and from pro­cess­ing this da­ta by Google by down­load­ing and in­stalling the brows­er plug-in avail­able un­der the fol­low­ing link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can al­so set a so-called An­a­lyt­ics opt-out cook­ie by click­ing on [Link: javas-cript:gaoop_analytics_optout();], which pre­vents Google An­a­lyt­ics from col­lect­ing da­ta when you use this web­site in the future.

The le­gal ba­sis for the use of Google An­a­lyt­ics is your con­sent ac­cord­ing to Art. 6 (1) lit. a GDPR.

YouTube videos

We have em­bed­ded YouTube videos in our on­line of­fer, which are stored on http://www.youtube.com and can be played di­rect­ly from our web­site. The provider of this ser­vice is Google.

The videos are all em­bed­ded in “ex­tend­ed da­ta pro­tec­tion mode”, which means that no da­ta about you as a user is trans­mit­ted to YouTube if you do not play the videos. The da­ta men­tioned in the fol­low­ing para­graph will on­ly be trans­ferred when you play the videos. We have no in­flu­ence on this da­ta transmission.

By vis­it­ing the web­site, YouTube re­ceives the in­for­ma­tion that you have ac­cessed the cor­re­spond-ing sub-page of our web­site. The da­ta col­lect­ed dur­ing the vis­it to our web­site is al­so trans­mit­ted. This takes place re­gard­less of whether YouTube pro­vides a user ac­count through which you are logged in or whether there is no user ac­count. If you are logged in to YouTube, your da­ta will be di­rect­ly as­signed to your ac­count. If you wish not to have your pro­file at­trib­uted to YouTube, you must log out be­fore ac­ti­vat­ing the but­ton. YouTube stores your da­ta as us­age pro­files and us­es them for pur­pos­es of ad­ver­tis­ing, mar­ket re­search and/or de­mand-ori­ent­ed de­sign of its web­site. Such an eval­u­a­tion is car­ried out in par­tic­u­lar (even for users who are not logged in) to pro­vide needs-based ad­ver­tis­ing and to in­form oth­er users of the so­cial net­work about your ac­tiv­i­ties on our web­site. You have the right to ob­ject to the cre­ation of these user pro­files, where­by you must con-tact YouTube to ex­er­cise this right.

In­so­far as you con­sent by click­ing on the video or with­in our cook­ie no­tice, the le­gal ba­sis is Art. 6 (1) lit. a GDPR.

Facebook

We op­er­ate a Face­book page to draw at­ten­tion to our prod­ucts and ser­vices and to en­ter in­to con-tact with you. We are joint­ly re­spon­si­ble for its op­er­a­tion with Face­book Ire­land Ltd, 4 Grand Canal Square Grand Canal, Har­bour, Dublin 2, Ireland.

We would like to point out that when you vis­it our Face­book page, Face­book col­lects, among oth­er things, your IP ad­dress and oth­er in­for­ma­tion about your us­age be­hav­ior. This in­for­ma­tion is used to pro­vide us, as the op­er­at­ing com­pa­ny of the Face­book pages, with sta­tis­ti­cal in­for­ma­tion about the use of the Face­book page. The da­ta col­lect­ed in this con­text is processed by Face­book Ltd. and may be trans­ferred to coun­tries out­side the Eu­ro­pean Union, in par­tic­u­lar to the USA. Trans-mis­sion and fur­ther pro­cess­ing in these coun­tries may be as­so­ci­at­ed with risks that we, as the op-er­at­ing com­pa­ny of the site, can­not as­sess or ex­clude. Face­book on­ly de­scribes in gen­er­al terms ex­act­ly what in­for­ma­tion it re­ceives and how it is used, and we are not ful­ly aware of this. In what way Face­book us­es the da­ta for its own pur­pos­es, to what ex­tent ac­tiv­i­ties on the Face­book page are as­signed to in­di­vid­ual users, how long Face­book stores this da­ta and whether da­ta from a vis­it to the Face­book page is passed on to third par­ties, is not con­clu­sive­ly and clear­ly stat­ed by Face-book and is not known to us. How­ev­er, it can be as­sumed that Face­book us­es this da­ta in its own in­ter­est for the pur­pos­es of ad­ver­tis­ing, cre­at­ing user pro­files and mar­ket research.

If you are logged in­to Face­book when you vis­it our Face­book page, Face­book can as­so­ciate your ac­tiv­i­ties – pos­si­bly across web­sites – with your ac­count. Con­tent or ad­ver­tis­ing can be tai­lored to you on the ba­sis of this da­ta. If you wish to avoid this, you should log out of Face­book or de­ac­ti­vate the “stay logged in” func­tion, delete the cook­ies present on your de­vice and ex­it and restart your brows­er. This will delete Face­book in­for­ma­tion through which you can be di­rect­ly iden­ti­fied. This will al­low you to use our Face­book page with­out re­veal­ing your Face­book iden­ti­fi­er. When you ac­cess in­ter­ac­tive fea­tures of the page (like, com­ment, share, mes­sage, etc.), a Face­book lo­gin screen will ap­pear. Af­ter any lo­gin, you will again be rec­og­niz­able to Face­book as a spe­cif­ic user.

We our­selves do not col­lect and process any da­ta from your use of our Face­book page.

The le­gal ba­sis is our le­git­i­mate in­ter­est in a con­tem­po­rary pre­sen­ta­tion of our prod­ucts and ser-vices as well as the pro­vi­sion of in­ter­ac­tion and con­tact pos­si­bil­i­ties ac­cord­ing to Art. 6 para. 1 lit. f GDPR. If you con­tact us for the pur­pose of ini­ti­at­ing or con­clud­ing a con­tract, the le­gal ba­sis is Art. 6 para. 1 lit. b GDPR.