Privacy policy
As of November 2022
- Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
hpw Metallwerk GmbH
Auwiesenstraße 2,.4030 Linz, Austria
+43 (0)732 30 72 70
info@hpwires.com
- General information on data processing
- Scope of processing of personal data
In principle, we only process the personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is required by statutory provisions.
- Legal basis for processing personal data
Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 (1) sentence 1 lit. a GDPR serves as the legal basis.
Article 6 (1) sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 Sentence 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 Sentence 1 lit. f GDPR serves as the legal basis for the processing.
- Data Erasure and Storage Duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
- rights of the data subject
If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:
- Right to information (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to erasure ("right to be forgotten") (Art. 17 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to certain data processing (Article 21 GDPR)
- Right to lodge a complaint with a supervisory authority
You have the right to complain to a data protection supervisory authority about the processing of your personal data. Austrian Data Protection Authority Barichgasse 40-42 1030 Vienna Telephone: +43 1 52 152-0 Email: dsb@dsb.gv.at
- Provision of the website and creation of the log files
- Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected here:
- o Information about the browser type and version used
- o The operating system of the user
- o Referrer URL
- o Host name of the accessing computer
- o Date and time of access
This data is stored in the log files of our system. This data is not stored together with other personal data of the user.
- purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing in accordance with Article 6 (1) sentence 1 lit. f GDPR also lies in these purposes.
- Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Article 6 Paragraph 1 Sentence 1 lit. f GDPR.
- Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.
- possibility of objection
The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined within the framework of a weighing of interests.
- Use of cookies
- Description and scope of data processing
Cookies are set when you visit our website. Cookies are files that are stored in the internet browser or by the internet browser on the user's computer system. This storage of information on the user's end device can take place using unique identifiers (UID), which enables us to identify or assign it to a natural person.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
- purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles.
- Legal basis for data processing
If cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for storing and accessing information is Section 25 (1) TTDSG in conjunction with Article 6 (1) (a), Article 7 GDPR. You can revoke your consent at any time with effect for the future or give it back later by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed subsequent to the storage of and access to the information on your terminal equipment, the provisions of the GDPR apply. Information on this can be found in the following sections of this data protection declaration.
- possibility of revocation
The user has the option to revoke his consent to the processing of personal data at any time.
- E-mail contact
- Description and scope of data processing
It is possible to contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.
The data will only be used to process the conversation.
- purpose of data processing
If contact is made by email, this is also the necessary legitimate interest in the processing of the data.
- Legal basis for data processing
The legal basis for the processing of the data that is transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. Our legitimate interest is to optimally answer your inquiry that you send by e-mail.
If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
- Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
- possibility of objection
If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
By email to dp@hpwires.com
All personal data that was saved in the course of making contact will be deleted in this case.
- Use of company appearances in social networks
Instagram:
Instagram, Part of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland
On our company page we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the companies responsible for the hpw Metallwerk GmbH company Instagram, we cannot provide any binding information on the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and the exchange of information with (potential) customers. In particular, we use the corporate identity for:
Products
The publications about the company’s appearance can contain the following content:
- information about products
- customer contact
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Article 6 Paragraph 1 Clause 1 Letter a, Article 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
The data generated by the company's appearance is not stored in our own systems.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Article 46 (2) (c) GDPR. We have concluded these standard data protection clauses with the above-mentioned social network providers. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data that we collect as part of your use of our Instagram corporate presence at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to dp@hpwires.com. \n You can find more information about the processing of your personal data by Instagram and the corresponding objection options here:
Instagram: https://help.instagram.com/519522125107875
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
We provide information on our company website and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the companies responsible for the hpw Metallwerk GmbH corporate website YouTube, we cannot provide any binding information on the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and the exchange of information with (potential) customers. In particular, we use the corporate identity for:
Products
The publications about the company’s appearance can contain the following content:
- information about products
- customer contact
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Article 6 Paragraph 1 Clause 1 Letter a, Article 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
The data generated by the company's appearance is not stored in our own systems.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Article 46 (2) (c) GDPR. We have concluded these standard data protection clauses with the above-mentioned social network providers. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data that we collect as part of your use of our YouTube corporate presence at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to dp@hpwires.com. \n You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de
- Use of company appearances in job-oriented networks
- Scope of data processing
We use the possibility of company appearances on job-oriented networks. We maintain a corporate presence on the following professional networks:
LinkedIn:
LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
Xing:
XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany
On our site we provide information and offer users the opportunity to communicate.
The company website is used for applications, information/PR and active sourcing.
We have no information on the processing of your personal data by the companies jointly responsible for the company's appearance. Further information can be found in the data protection declaration of:
LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING: https://privacy.xing.com/de/datenschutzerklaerung
If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.
- Legal basis for data processing
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Article 6 Paragraph 1 Clause 1 Letter f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
- purpose of data processing
Our corporate identity serves to inform users about our services. Every user is free to publish personal data through activities.
- Duration of storage
We store your activities and personal data published on our company website until you revoke your consent. In addition, we comply with the statutory retention periods.
- possibility of objection
You can object to the processing of your personal data that we collect as part of your use of our company website at any time and assert your data subject rights mentioned under IV. of this data protection declaration. To do this, send us an informal email to the email address given in this data protection declaration.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Article 46 (2) (c) GDPR. We have concluded these standard data protection clauses with the above-mentioned social network providers. A copy of the standard data protection clauses can be requested from us.
Further information on objection and removal options can be found here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Xing:
https://privacy.xing.com/de/datenschutzerklaerung
- Google Maps (Google Ireland Limited)
This site uses the Google Maps map service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
You can find more information on handling user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/ .
Personal Data collected: Cookies and Usage Data.
Place of processing: Ireland – Privacy Policy
- hosting
The website is hosted on servers by a service provider commissioned by us.
Our service provider is:
Squarespace
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
- o Browser type and browser version
- o Operating system used
- o Referrer URL
- o Host name of the accessing computer
- o Date and time of the server request
- o IP address
This data is not merged with other data sources. This data is collected on the basis of Article 6 (1) (f) GDPR. Our legitimate interest in processing this data is to display our website correctly and to optimize its functions.
The website server is geographically located in the United States of America. – Squarespace Privacy Policy
This privacy statement was created with the support of DataGuard .