We only process personal data (hereinafter referred to as “Data”) of users to the extent necessary for the provision of a functional and user-friendly website, as well as our content and services.

‘Processing’ refers to the collection, use, disclosure and/or storage. According to the EU General Data Protection Regulation (hereinafter referred to as “GDPR”), “personal data” generally refers to all data with which a natural person can be identified. The exact definitions of the terms are set out in Art. 4 GDPR.

The following explanations provide you with information, in particular, on the nature, scope, purpose, duration, and legal basis for the processing of personal data, regarding the purposes and means of processing which we determine alone or jointly with others, as well as on third-party components that we may use to optimise and improve usability, and which process data under their own responsibility.

Status: 10/2020

1) Information on the Controller

The Controller (hereinafter referred to as “Provider”) within the meaning of the GDPR and other national data protection laws of the member states, as well as other data protection provisions, is:

Harrandt Automation GmbH
Robert-Bosch-Straße 25
71397 Leutenbach-Nellmersbach

Telephone +49 (0)7195 906 800
Fax: +49 (0)7195 906 802 99
E-Mail: info@harrandt.com

The external Data Protection Officer of the Controller
Francesco Amendola
Hopp + Flaig PartG mbB
Consulting Engineers
Neue Weinsteige 69/71
70180 Stuttgart

can be reached as follows:
Harrandt Automation GmbH
– Data Protection Officer –
Robert-Bosch-Straße 25
71397 Leutenbach-Nellmersbach

E-Mail: amendola@hopp-flaig.de

2) User Rights

With regard to the processing of their personal data as set out below by the Provider, the user has the right to:

    1. request confirmation as to whether data concerning them is being processed and to obtain precise information about this data, as well as further information and copies of the data in accordance with Art. 15 GDPR;
    2. demand the immediate rectification of inaccurate data concerning them or the completion of this data in accordance with Art. 16 GDPR;
    3. demand that data concerning them be erased without undue delay in accordance with Art. 17 GDPR, or alternatively, if, for example, further processing is necessary in accordance with Art. 17 (3) GDPR, to demand a restriction of the processing of data in accordance with Art. 18 GDPR;
    4. receive the data concerning them, which they have provided, in accordance with Art. 20 GDPR and to demand its transmission to other controllers;
    5. lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR if the user believes that the processing of their data by the Provider infringes the GDPR.
    6. The user can, in principle, object at any time to the future processing of data concerning them, which is carried out by a Controller on the basis of Art. 6 (1) (f) GDPR, in accordance with Art. 21 GDPR. The objection can be made in particular against processing for direct marketing purposes.
    7. The Provider is also obliged to communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16 GDPR, Article 17 (1) GDPR and Article 18 GDPR to all recipients to whom the data has been disclosed by them. This obligation does not apply if such communication proves impossible or involves disproportionate effort. The user has the right to be informed about these recipients.

3) Information on Data Processing

Unless detailed information is provided below for individual data processing operations, the user’s data processed by the Provider will be erased or blocked as soon as the purpose of storage ceases to apply and no statutory retention obligations prevent erasure.

Server Data

For communication and security reasons, the following data, among others, which the user’s internet browser transmits to the Provider or to its webspace provider, are collected during the visit to the website (so-called server log files):

  • Browser type and version;
  • Directory protection user;
  • Operating system used;
  • Website from which the user switched to the Provider’s website (referrer URL);
  • Website visited by the user;
  • Date and time of access;
  • User’s Internet Protocol (IP) address.

The data is also stored for a maximum of one day and then anonymised. Data whose further retention is necessary for evidentiary purposes are excluded from anonymisation until the final clarification of the respective incident.

The legal basis for temporary storage is Art. 6 (1) (f) GDPR, based on the legitimate interest in improving the stability, functionality, and security of the website.

Cookies

  1. a) Cookie Declaration
Error: The domain HARRANDT.COM is not authorized to show the cookie declaration for domain group ID f4687cf4-9901-4a80-a6bb-c63201329902. Please add it to the domain group in the Cookiebot Manager to authorize the domain.
  1. b) Removal Option

The user can prevent or restrict the installation of cookies by adjusting their browser settings accordingly. Cookies already stored can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented via browser settings, but by adjusting the Flash Player settings. If the user prevents or restricts the installation of cookies, this may result in not all functions of the website being fully usable.

Contact Enquiries

In the event of a user contacting the Provider, the personal data entered on this occasion will be used to process the enquiry.

If the contact enquiry serves to fulfil a contract or to carry out pre-contractual measures, the legal basis is Art. 6 (1) (b) GDPR.

The user’s data will be deleted as soon as the user’s enquiry has been conclusively answered and no statutory retention obligations, such as those arising from subsequent contract processing, prevent deletion.

The legal basis may also be the user’s consent in accordance with Art. 6 (1) (a) GDPR.

The user can revoke any given consent for the contact enquiry at any time by notifying the Provider in accordance with Art. 7 (3) GDPR. The data processed in connection with this will be deleted as soon as its processing is no longer required.

Job Applications

For job applications, application data is collected and processed electronically by the Provider for the purpose of handling the application process.

The legal basis for processing is Section 26 (1) Sentence 1 BDSG in conjunction with Art. 88 (1) GDPR.

If your application leads to the conclusion of an employment contract, the transmitted data may be stored in the personnel file for the purpose of the usual organisational and administrative process, in compliance with the relevant legal provisions.

The legal basis for processing is Section 26 (1) Sentence 1 BDSG in conjunction with Art. 88 (1) GDPR.

The transmitted data will be automatically deleted two months after notification of rejection if the job application is unsuccessful. This does not apply if longer storage of up to four months or the conclusion of legal proceedings is required due to legal requirements (burden of proof under the General Equal Treatment Act, AGG).

The legal basis here is Art. 6 (1) (f) GDPR or Section 24 (1) No. 2 BDSG.

The Provider’s legitimate interest lies in legal defence.

If explicit consent has been given for longer storage of data in a database of interested parties, the data will continue to be processed based on this consent and deleted after 12 months at the latest.

The legal basis is Art. 6 (1) (a) GDPR. Consent for this can be revoked at any time for the future by notifying the Provider in accordance with Art. 7 (3) GDPR.