This website is provided by Hydro Building System Germany GmbH. Hydro Building Systems Germany GmbH is one of five business operations of the company Hydro (referred to as 'Hydro' in accordance with these provisions).
Hydro is the supervisory authority for processing the personal data collected on this website. Hydro respects the privacy of its users and processes all personal data in accordance with the EU General Data Protection Regulation (GDPR) and other relevant laws. The website is managed by Episerver DXC, on behalf of Hydro.
This Privacy Notice is designed to help you understand what personal data we collect about you, why we collect it, what purposes we use it for and what rights you have when it comes to using, accessing and correcting this data.
1 Data controller
The data controller, in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR), is Hydro Building System Germany GmbH.
email@example.com (see our legal notices).
2 Contact details for the data protection officer
If you have any questions relating to data privacy, please contact our data protection officer:
intersoft consulting services AG
Beim Strohhause 17
3 Collecting and processing personal data
If you only access our website to gain information, i.e. if you do not register on the website or provide us with information in any other way, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following information about you which is technically necessary to enable us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6 (1)(f) of the GDPR.
–IP address, date and time of request, time difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred, website making the request, browser, operating system and its interface, language and version of the browser software.
4 Contact by e-mail
When you contact us by email or using our contact form, the data you provide (your email address and possibly also your name and telephone number) will be stored by us for us to be able to answer your questions.
The establishment of contact with you and the associated transmission of personal data is performed expressly on a voluntary basis and with your consent in accordance with Article 6 (1)(a) of the GDPR. As this information relates to communication channels (for example, email address, telephone number), you also provide your consent for us to contact you, if necessary, via these communication channels, to respond to your request. You can withdraw this consent at any time, with future effect.
We will delete all data arising in this context once it is no longer necessary for this to be stored, or we will restrict the processing of this data if it is subject to statutory retention requirements.
5 Creating a user account (registration)
To make full use of all functions on our website, you can create your own user account. As part of the registration process for this, we collect and store certain personal data provided by the registration form, including your: title, name, company, address, e-mail address and telephone number.
After you have successfully registered, you will have access to our WIC product range, download documentation and technical data sheets as well as make use of our various tool functions. You can also use the same user account to access another website provided by us: www.wiconafinder.com
Processing of data is performed based on your voluntarily granted consent in accordance with Art. 6 (1)(a) of the GDPR. You can revoke your consent at any time and thereby delete your user account. We will then delete all stored data, as there are no statutory retention periods that apply for certain data you provided.
When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard drive assigned to the browser you are using, and which provide certain information to the location setting the cookie. Cookies cannot run programs, access your files or transmit viruses to your computer. They serve to make your experience of using the internet more user-friendly and effective.
The legal basis for the processing of personal data using cookies being technically necessary for the use of our website is provided for by Art. 6 (1)(f) of the GDPR. The legitimate interest of the data controller is to facilitate the user-friendly and effective design of their website.
This website uses the following types of cookies, the scope and function of which are explained below:
6.1 Transient cookies
These cookies are deleted automatically when you close your web browser. These include session cookies. These save a session ID, which can be used to assign different requests from your browser to a common session. These cookies allow us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.
6.2 Persistent cookies
These cookies are automatically deleted after a specified period, which may differ depending on the type of cookie. You can delete these cookies at any time by going to the security settings in your web browser.
6.3 Prevention of cookies
You can configure your browser settings according to your own wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that if you do so you may not be able to use all the functions of this website.
7 Third party content
7.1 Google Webfonts
This website makes use of Google Webfonts. Google Webfonts are provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. To load the displayed fonts and effects, your browser connects directly to Google's servers in the United States. Google collects personal information. This information includes at least your IP address, as well as other device data, information about the browser as well as the operating system you are using. This is essential in order to use the plug-in.
7.2 Google Tag Manager
For reasons of transparency, we hereby draw attention to the fact that we make use of Google Tag Manager. Google Tag Manager does not collect personal information itself. Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are short lines of code that are used, among other things, to measure traffic and visitor behaviour on websites, track the impact of online advertising and social media channels, set up remarketing and align advertising contents with targeting audiences and to test and optimize websites. We use Google Tag Manager in conjunction with other Google services deployed by us. If you have opted out of these, Google Tag Manager will take this into consideration. Further information is provided in the following Use Policy.
8 Website analysis
We make use of various services for the purposes of analysing and optimising our website, and these are presented below. In this way, we are able, to analyse how many users visit our site, what information is most sought-after and how users find this information. Among other things, we collect data regarding which website was used to access our website (referrer), which sub-pages of our website were accessed and how often and for what duration a sub-page was viewed. This helps us to design and improve our website and content to be more user-friendly. The data collected is not intended to personally identify individual users. Anonymous, or at most pseudonymous, data are collected. The legal basis for this is Article 6 (1)(f) of the GDPR.
The legitimate interest of the data controller is to optimise their website by means of website analysis programs.
8.1 Google Analytics
This website uses Google Analytics, a web-analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This includes the use of the Universal Analytics operating mode. In this way, we can assign data, sessions and interactions across multiple devices to a single pseudonymous user ID and therefore to analyse the activities of a user across different devices.
8.2 GA Audience
This website makes use of GA Audience, an analysis software by Google Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. GA Audience is used to serve advertising content to our target audiences based on data collected by Google Analytics. In doing so, GA Audience gains access to the cookies set by Google Analytics to statistically analyse this data in accordance with various criteria (age, nationality, language, gender, device and browser information as well as miscellaneous criteria pertaining to user behaviour). This enables us to operate a marketing campaign that is based on the interests of our users and to always present offers that interest you.
If you wish to prevent the processing of your data by GA Audience, please use the option to deactivate tracking by Google Analytics as specified in Section 8.1.
This website uses Hotjar, an analysis software provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar enables us to measure and evaluate usage behaviour on our website. The information generated about your visit to our website by means of the tracking code and cookie are transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following information: device-dependant data.
The following information may be recorded by your device and your browser:
- the IP address of your device (collected and stored in an anonymous format)
- your email address, including your first name and family name, if you have made these available to us on our website
- screen size of your device
- device type and browser information
- geographical location (country only)
- your preferred language for viewing our website
- log data
The following data are automatically collected by our servers when Hotjar is used:
- referring domain
- pages visited
- geographical location (country only)
- your preferred language for viewing our website
- date and time the website was accessed
Hotjar use this information to evaluate your use of our website, generate reports about this usage and to provide other services relating to website usage and online evaluation of the website.
To provide its services, Hotjar also uses third-party services, such as Google Analytics and Optimizely. These third parties may store information sent by your browser during your visit, for example, cookies or IP requests. For specific information on how Google Analytics and Optimizely store and use your data, please refer to their privacy policies. You can prevent Hotjar from collecting data using this link.
The legal basis for using Google Analytics is Article 15 (3) of the German Telemedia Act [TMG] and Article 6 (1)(f) of the GDPR. Our legitimate interest is justified by the user-oriented presentation and evaluation of our content, as well as the improvement of our services.
If you do not wish to receive user-based advertisements, you can disable these by using Google's Ad Preferences.
10 Your rights
You have the following rights regarding personal data directly relating to you:
10.1 General rights
You have the right to be informed about your personal data, the right to correction and erasure of that data, the right to restrict and object to processing, and the right to data portability. As processing is based on your consent, you have the right to withdraw that consent with future effect.
10.2 Rights when data is processed for legitimate interests
In accordance with Article 21 (1) of the GDPR, you have the right, at any time and for your own personal reasons, to raise an objection against the processing of your personal data, which is carried out on the basis of Article 6 (1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1)(f) of the GDPR (data processing to safeguard a legitimate interest). This also applies to profiling based on this regulation. If you make an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms, or in the case that the data processing serves the establishment, exercise or defence of legal claims.
10.3 Rights regarding direct advertising
As we process your personal data in order to pursue direct advertising, you have the right, at any time and in accordance with Article 21 (2) of the GDPR, to raise an objection to the processing of your personal data for the purpose of this means of advertising; this also applies to profiling, as this relates to direct advertising.
If you object to your data being processed for direct advertising, we will no longer process your data for this purpose.
10.4 Right of appeal to a supervisory authority
You also have the right to appeal to a supervisory authority regarding the processing of your personal data carried out by us.
11 Data transfer
Your personal data will not be transferred to third parties unless we are legally obliged to do this, the disclosure of data is required for executing the contractual relationship, or you have previously expressly consented to your data being disclosed.
External service providers and partner companies such as server hosts, or providers of analysis tools will only receive your data if this is necessary to fulfil the respective purpose. In these cases, however, the data transfer is limited to the minimum required. As our service providers encounter your personal data, within the context of order processing in accordance with Article 28 of the GDPR, we will ensure that they comply with the provisions of the data privacy laws in the same way. For more information on how they do this, refer to the privacy policies of those providers. Each service provider is responsible for the content of third-party services; we therefore check the services for compliance with legal requirements, to the extent which can be reasonably expected of us.
We attach great importance to processing your data within the EU/EEA. However, it may be the case that we use service providers who process data outside of the EU/EEA. In these cases, we will ensure that the recipient provides a suitable level of data protection before your personal data is transferred to them. This means that an EU Standard Contract or other adequate provision, such as the EU Privacy Shield, is in place which achieves a level of data protection that is comparable to the standards within the EU.
12 Data privacy
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in keeping with technological progress.