Data Protection
Responsible for data processing on these websites:
HM Trading Global GmbH (in the following „we“)
Represented by:
Jose Maria Magrina Vadillo, Managing Director
Giorgi Verulava, Managing Director
Maurizio Mansi Montenegro, Managing Director
Berliner Straße 6
69120 Heidelberg
Germany
Phone: +49 6221-481-33001
Fax: +49 6221-481-13217
E-Mail: info@hmt-global.com
Data Protection Officer:
Berliner Straße 6
69120 Heidelberg
Germany
E-mail: info.dataprotection@hmt-global.com
Phone: +49 6221-481-41110
1. Collection and processing of data
We collect and process personal data if you provide it to us by filling an entry form on our website or by other means, e.g. by e-mail. In addition, we collect and process data arising from your use of our website. Our data will be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG). Personal data is all information relating to an identified or identifiable natural person. In the following we explain in detail how we collect which data on which legal basis. In addition, we will explain to you what rights you have and how long your data will be stored.
2. Processing of Data via Cookies and Logfiles
Information on the use of cookies on our website can be found in our cookie policy.
In accordance with Art. 6 para. 1 sent. 1 f) GDPR, our website also uses so-called log files, in which access data are stored each time a page is accessed. The data record saved contains the following details:
- Your IP address, the date, the time, to which the file was accessed, the status, the request made by your browser to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
- The product and version information of the browser used, your operating system and your country of origin.
The log data are routinely deleted after 14 days. In other words, all data contained therein is irretrievably deleted. This temporary storage is only used to protect our websites against attacks and misuse. This is also our legitimate interest for the storage. We do not use the log data for any other purposes.
3. External links
Our website contains links to external websites. Social plugins such as the Facebook "Like" button are not used. The website protects your privacy by not directly integrating the external content into the website in these cases, but only by linking. Data can only be transmitted to the operator of the respective website when the link is activated. We are not responsible for the websites of other operators. In these cases, the data protection regulations of the other operator apply.
4. Third party providers
4.1 Cookie consent management
Our Website uses the cookie consent technology of the provider 2b Advice GmbH, Joseph-Schumpeter-Allee 25, 53227 Bonn, to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations or to manage your cookie settings.
When you use our website, no connection is made to the provider's servers, as the system is hosted by us. We use the technology to obtain your consent and other declarations on the use of cookies. We then save a cookie in your browser in order to be able to assign you the consent given or the revocation thereof. The data collected in this way will be stored until you change your settings, remove the cookie or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.
We use the technology to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 para. 1 sent. 1 c) GDPR.
4.2. Google Analytics
This website uses the service Google Analytics of the third-party provider Google Ireland Limited a company organized and existing under Irish law (register number: 368047) having its seat at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
You can increase the protection of your privacy if you log out of any existing user accounts of the Google Group while you are using our website. This prevents your surfing behavior on our website from being directly assigned to your personal profile. If you use our website while logged in, Google will assign your user behavior to your profile.
Google Analytics is a service that enables us to analyze user behavior on our website. Google Analytics uses cookies for this.
If you have agreed to the setting of cookies, the information generated by these cookies about the use of this website (type and version of the browser you are using, which operating system you are using, the URL of the requested page, the date and time of your page view, the screen resolution that you use, as well as your IP address), to the best of our knowledge, are also transmitted to and stored by Google on servers in the United States.
We would like to point out that we have added the code “anonymizeIp” to Google Analytics on this website. By using the code extension “anonymizeIp”, the last 8 bits of the IP addresses are deleted and thus anonymized (so-called IP masking). At our request, Google only records your IP address in abbreviated form, which ensures anonymization and does not allow any conclusions to be drawn about your identity. However, due to the activation of the IP anonymization, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. According to information from Google, only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us as the website operator with other services related to website activity and internet usage, e.g. support us with the uniform and appealing presentation of our online-support offers.
Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
The processing of your personal data (IP address, cookies, device IDs) as described above and including any possible transfer of your personal data to the United States takes place on the basis of your consent (Art. 6 para. 1 sent. 1 a) GDPR), provided that you have given this via our cookie banner. You can revoke this consent at any time (with future effect and without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation) by calling up our cookie banner again and changing your settings for the cookies under the "Settings" button. You can also assert the rights listed in section 10 of this data protection declaration.
In addition you can prevent the storage of cookies by setting your browser software accordingly or you can prevent the collection and transfer of data generated through cookies in the course of the usage of our website (inclusive your IP address) to Google and the processing of such data by Google, by downloading and installing the browser plugin available under the following Link http://tools.google.com/dlpage/gaoptout?hl=de (external link to Google).
You can find more general information on data protection at Google at
https://www.google.de/intl/de/policies/ (external link to Google) and
https://www.google.com/policies/privacy (external link to Google).
5. Processing of usage data by integration of fonts
To display texts and fonts on our websites we use font.com from Monotype Imaging Holdings Inc. based in the USA (hereinafter: Monotype). This service is subject to a fee and is paid according to page views by users. For this purpose, a so-called Javascript is active on our websites, which enables Monotype to count the page views of the users. In this context no personal data are processed. The IP-address, from which a page request takes place, is stored in anonymous form, i.e. the processing of your data is carried out only in anonymous form and therefore outside the scope of the GDPR (Recital 26 GDPR).
6. Processing of personal data by contacting us
If you provide us with personal data by contacting us, e.g. by email or by entering your data in one of our input forms, we process your data in accordance with Art. 6 para.1 sent. 1 b) GDPR for the for the purpose of fulfilling the contract or for the implementation of pre-contractual measures which take place on your request or in accordance with Art. 6 para. 1 sent. 1 f) GDPR on the basis of our legitimate interest in answering your request. We process your data only for the purpose of processing your specific request. This may also include forwarding to an affiliated company if this is necessary to respond to your request. We do not use your data beyond theses purposes.
After each filling out and submitting an input form available on our website - with the exception of forms from third-party providers - you will receive an email that gives you an overview of which data we are processing from you, i.e. the content of the respective form, any consent or other declarations of intent.
Please also note section 8 below.
You can also assert the rights listed in section 10 of this data protection declaration. Requests that we have answered or forwarded and for which there is no further legal basis for storage are automatically deleted from our systems after 2 (in words: two) months. Further information on the deletion of your data can also be found in section 11 of this data protection declaration.
7. Open Street Map
Our website includes maps from the OpenStreetMap Foundation, St. John's Innovation Center, Cowley Road, Cambridge, CB4 0WS, United Kingdom (OSMF for short). If you use our website, no connection is established to the servers of this provider, as the maps are only saved as a copy on a server of our processor Ueberbit GmbH, Rheinvorlandstraße 7, 68159 Mannheim, and a connection is only established to this server. On this occasion, your IP address will be transmitted to the processor.
The maps are displayed on the basis of Art. 6 para. 1 sent. 1 f) GDPR due to our legitimate interest in making it easier to find the locations indicated on the website and thus making our website more attractive for visitors.
8. Encryption
Data you insert on our website is transmitted using SSL encryption. We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
If you contact us by email, your data are not encrypted.
9. Categories of recipients of personal data; data transfer to a third country
Service providers and auxiliary agents used by us in connection with the website, e.g. host providers, agencies and IT service providers may have access to your personal data. If these service providers and auxiliary agents process data on our behalf, they only act in accordance with our instructions and are contractually bound by us accordingly. This also applies to service providers which have their legal seat in a third country (outside the EU or the EEA). In third countries, the same level of data protection may not be guaranteed as in the European Economic Area. If data is transferred to a third country, we ensure that this transfer only takes place in accordance with the statutory provisions (Chapter V GDPR). In this respect, we always orientate ourselves on the current case law and follow the applicable recommendations of authorities in order to be able to ensure that your data is protected at the same level as the GDPR.
10. Your rights
According to Art. 15 GDPR you have the right to receive information free of charge upon request about the personal data that has been stored about you. You also have the right to have incorrect data corrected and your personal data disabled and deleted in accordance with Art. 16, 17 and 18 GDPR.
Subject to conditions laid down in Art. 20 GDPR, you are also entitled to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without hindrance.
In addition, you are entitled pursuant to Art. 21 para. 1 GDPR to object to the processing of your personal data on the basis of Article 6 para. 1 sent. 1 (e) or (f) GDPR including profiling, from reasons arising from your particular situation. We will fulfill your aforementioned rights, as far as the legal requirements for the assertion of the rights are given. If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such advertising, including profiling, in so far as it is related to such direct marketing, pursuant to according to Art. 21 para. 2 GDPR.
Please direct any request regarding your personal data to our contact details mentioned at the beginning of this privacy policy or in the imprint of our website.
Every data subject has the right to lodge a complaint with a supervisory authority regarding the alleged infringement.
11. Duration of data storage and routine deletion
Unless explicitly stated above we process and store personal data only for the period, which is required to achieve the processing purpose or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing no longer applies or if the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.