Privacy Policy
We thank you for your interest in our website and our products. The protection of your privacy is hugely important to us at Hamberger Flooring GmbH & Co. KG.
Below, we set out in detail how we deal with your data.
1. Body responsible and contact details:
Hamberger Flooring GmbH & Co. KG is responsible for the processing of data. The data provided by the customer are processed in accordance with the provisions of the European General Data Protection Regulation (hereinafter referred to as the GDPR).
The contact details of the body responsible are as follows:
Hamberger Flooring GmbH & Co. KG
Rohrdorfer Str. 133
83071 Stephanskirchen
Germany
Hamberger Flooring GmbH & Co. KG is represented by the personally liable managing partner / general partner: Hamberger Flooring Geschäftsführungs GmbH, Rohrdorfer Strasse 133, 83071 Stephanskirchen, Germany. This in turn is represented by the managing directors: Dr. Peter M. Hamberger, Michael Paringer, Gerold Schmidt, Michael Huck.
Contact form
[email protected]
Hotline: +49 (0) 8031 – 700714
(Mon. – Thu. 8:30 – 12:00 | 13:00 – 16:00 and Fri. 8:30 – 12:00)
Fax: +49 (0) 8031 – 700199
2. Access data and hosting
You can visit our websites without providing details about yourself.
Each time that you access a website, the web server will automatically save a so-called server log file which documents this access and contains for example the name of the file requested, your IP address, the date and time of access, the quantity of data transferred and the provider making the request (access data).
These access data are used exclusively to ensure that the website operates smoothly and to improve our offering. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. In order to guarantee your right to data protection, all access data will be deleted at the latest seven days after your visit to the website ends.
Hosting services by a third-party provider
If data are processed on our behalf, a third-party provider will provide services for hosting and displaying the website. This enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. All data which are collected as described below when you use this website or the forms provided in the online shop will be processed on the third-party provider’s servers. Data shall be processed on other servers only to the extent described here.
This service provider shall be based within a country which is part of the European Union or the European Economic Area.
3. Data collection and use for the processing of contracts and when opening a customer account
We collect personal data if you provide them when placing an order, if you contact us (e.g. via the contact form or e-mail) or if you provide them voluntarily when opening a customer account. Mandatory fields are mandatory because we require the data for processing contracts, processing your query or for opening a customer account. Without these data, we will not be able to complete your order and/or open a customer account or respond when you contact us. The relevant entry forms indicate what data are collected. We use the data that you provide for processing contracts and your queries in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR. Once we have finished processing the contract or deleted your customer account, access to your data for further processing will be restricted and your data will be deleted as soon as the retention periods required under fiscal and commercial law expire, unless you have explicitly consented to further use of your data or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement. You can delete your customer account at any time, either by sending a message to the address below or using a function provided in your customer account.
4. Data transfer
In order to allow performance of a contract in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR, we shall transfer your data to the shipping company enlisted if this is necessary in order to deliver ordered goods. Depending on which payment provider you choose during the order process, we shall pass on the payment details collected for this purpose to the credit institute enlisted to handle payment and possibly to the payment service provider enlisted by us or to the selected payment service. The selected payment service providers may collect some of these data themselves if you set up an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection statement of the relevant payment service provider shall apply.
Personal data shall be transferred to this company only to the extent necessary to allow performance of the contract.
Data transfer to shipping service providers
If you give your explicit consent while placing or after you have placed an order, we shall pass on your e-mail address to the selected shipping service provider in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR in order to allow parcel tracking and to enable the shipping service provider to contact you prior to delivery in order to announce or coordinate the delivery.
You may revoke this consent at any time by sending a message to the contact address below or by contacting the shipping service provider directly at the contact address given below. If you revoke your consent, we shall delete the data that you provided for this purpose unless you have explicitly consented to further use of your data or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement.
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
https://www.ups.com/upsemail/input?loc=de_DE
5. E-mail newsletter and postal advertising
E-mail advertising with registration for the newsletter
If you register for our newsletter, we shall use the data needed for this or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent given in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR.
You can cancel your subscription to the newsletter at any time, either by sending a message to the address below or using a link provided in the newsletter. If you cancel your subscription, we shall delete your e-mail address unless you have explicitly agreed to your data being used for another purpose or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement.
E-mail advertising without registration for the newsletter and your right to object
If we receive your e-mail address in connection with the sale of goods or provision of a service and you do not object to us doing so, we reserve the right to send you via e-mail on a regular basis details of special offers which apply to similar products to the ones you previously purchased from our range on the basis of § 7 Para. 3 of the German Act Against Unfair Competition (UWG). This enables us to safeguard our justified interest in ensuring that we provide our customers with targeted advertising – an interest which prevails when the interests of all parties are taken into account.
You can object to this use of your e-mail address at any time by sending a message to the contact address below or via a link provided in the advertising e-mail with no additional costs other than the transmission costs charged at the basic rates.
As part of the processing procedure, the newsletter shall be sent on our behalf by a service provider to which we pass on your e-mail address.
This service provider shall be based within a country which is part of the European Union or the European Economic Area.
Postal advertising and your right to object
We also reserve the right to use your first name and surname as well as your postal address for our own advertising purposes, e.g. to send you details of interesting offers and information regarding our products via post. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that we provide our customers with targeted advertising – an interest which prevails when the interests of all parties are taken into account.
6. Use of data when processing payments, “Invoice”
If you select the “Invoice” payment method and grant us the necessary consent regarding data protection in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR, personal data (first name, surname, address, e-mail, telephone number, IP address, title) together with data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) shall be sent to our partner
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg for the purpose of processing this payment method as selected by you.
In order to check the identity and creditworthiness of the customer, our partner shall make queries and seek information from publicly accessible databases and credit agencies. For details of the provider from which information and possibly creditworthiness information is obtained on the basis of mathematical and statistical procedures as well as further details regarding the processing of your data after they are passed on to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A., please see our partner’s data protection statement which can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Our partner PayPal (Europe) S.à r.l. et Cie, S.C.A shall use the information obtained regarding the statistical probability of a payment default to make a balanced decision as to whether to establish, conduct or end a contractual relationship. You can put forward your views and challenge the decision by contacting our partner PayPal (Europe) S.à r.l. et Cie, S.C.A.
You can revoke your consent to the passing on of data during the ordering process for the future at any time, without giving reasons.
7. Cookies and web analysis
We use so-called cookies on various pages in order to make our website attractive, to allow the use of specific functions, to display suitable products or for market research purposes. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed in the optimum manner – an interest which prevails when the interests of all parties are taken into account. Cookies are small text files which are automatically stored on your end device. Some of the cookies that we use (so-called session cookies) are deleted at the end of the browser session, i.e. when you close your browser. Other cookies (persistent cookies) remain on your end device and allow us to recognise your browser again the next time that you visit. None of the cookies set by this website contain personal data. They are used solely to save your product selection in the shopping basket or to record your product preferences.
The cookie settings for your web browser indicate how long cookies will be kept. You can set your browser in such a way that it notifies you when cookies are to be set and allows you to decide whether to accept them in individual cases. Alternatively, you can block cookies in specific cases or block all cookies. Each browser differs in terms of the way in which cookie settings are managed. The help menu of every browser explains how to change your cookie settings. You can access these settings for a particular browser via the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html
If you do not accept cookies, the functionality of our website may be limited.
More information about the cookies can be found here: https://www.haro.com/de/cookies.php
Use of Google (Universal) Analytics for web analyse
If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR, this website will use Google (Universal) Analytics, a web analysis service provided by Google LLC (www.google.de), for website analysis purposes. Google (Universal) Analytics uses methods, e.g. cookies, which allow your use of the website to be analysed. The information regarding your use of this website which is collected automatically will generally be transferred to and stored by Google on a server in the USA. If IP anonymisation is enabled on this website, the IP address will be abbreviated within the member states of the European Union or in other European Economic Area member states before data are transferred. The full IP address is only transmitted to a Google server in the U.S. and abbreviated there in exceptional cases. The anonymised IP address provided by your browser for the purpose of Google Analytics shall not be linked to other data held by Google. If we stop using Google Analytics and there is no longer any reason to retain data, the data collected for this purpose shall be deleted.
Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. An up-to-date certificate can be found here. Because of this agreement between the USA and the European Commission, the latter has defined an appropriate data protection level for companies certified under the Privacy Shield.
You can revoke your consent for the future at any time by downloading and installing the browser plug-in which is available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de . Doing this will prevent the data generated by the cookie regarding your use of the website (including your IP address) being collected and processed by Google.
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics collecting data via this website in the future. An opt-out cookie will then be placed on your end device. If you delete your cookies, you will be asked to give your consent again.
9. Social Media PlugIns
Use of social plugins from Facebook, Instagram, Pinterest, LinkedIn and YouTube, using the "2-click solution"
So-called social plugins ("plugins") from social networks are used on our website. In order to increase the protection of your data when visiting our website, the plugins are integrated into the page using the so-called "2-click solution". This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of the respective social network. Only when you activate the plugins does your browser establish a direct connection to the servers of the respective social network.
The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed there to your contacts. This serves to protect our legitimate interests in the optimal marketing of our offer, which prevail in the context of a balancing of interests, in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO.
The purpose and scope of the data collection and the further processing and use of the data by the providers, as well as a contact option and your rights and setting options in this regard to protect your privacy, can be found in the data protection notices of the providers:
https://www.facebook.com/privacy/policy/
https://help.instagram.com/155833707900388
https://policy.pinterest.com/de/privacy-policy
https://www.linkedin.com/legal/privacy-policy
Youtube Video Plugins
Content from third party providers is integrated into this website. This content is provided by Google LLC ("provider").
Youtube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The extended data protection setting is activated for videos from Youtube that are embedded on our site. This means that no information from website visitors is collected and stored by Youtube unless they play the video. The integration of the videos serves to protect our legitimate interests in the optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.
For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of Google https://policies. google.com/privacy.
To prevent the setting of Google Analytics tracking cookies, you may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin, you can click this link to prevent the collection by Google Analytics on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again.
9. Google Fonts
In order to incorporate external fonts from Google Fonts, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is granted access to the customer’s personal data. This website uses Google Fonts in order to incorporate external fonts. Google makes available the fonts. If the customer accesses this website, the necessary fonts are loaded into the customer’s browser cache in order to display the texts and fonts on the page correctly.
For this purpose, the information typically collected when a website is accessed, in particular the IP address of the customer and the referrer URL, will be transferred to a Google Inc. server. Further information can be found at https://developers.google.com/fonts/faq and in the Google data protection statement https://policies.google.com/privacy?hl=de.
Personal data shall not be made accessible to other third parties without the customer’s consent unless this is necessary owing to legal requirements.
10. Retention period
Upon completion of the contract, including payment in full, any customer data which must be retained for legal reasons will be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
In the event that the customer uses the contact form, the personal data will be used for as long as the query is processed. Any data which must be retained for legal reasons will then be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
The body responsible is subject to various legal retention and documentation requirements, especially those set out in the German Fiscal Code (AO). The retention and documentation periods stipulated therein are anywhere between two and ten years. Retention periods are also governed by the legal limitation periods. These are generally three years, especially in accordance with the German Civil Code (BGB), but in certain cases can be up to thirty years.
11. Contact information and your rights
As the person concerned, you have the following rights:
- in accordance with Art. 15 of the GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- in accordance with Art. 16 of the GDPR, the right to request the immediate correction of incorrect personal data or the completion of incomplete personal data stored by us;
- in accordance with Art. 17 of the GDPR, the right to request the deletion of your personal data stored by us unless further processing is necessary
- to exercise your rights as regards freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of the public interest or
- to assert, exercise or defend legal claims;
- in accordance with Art. 18 of the GDPR, the right to restrict the processing of your personal data where
- you dispute the accuracy of the data;
- the processing is not lawful but you decline to have the data deleted;
- we no longer require the data but you require the data in order to assert, exercise or defend legal claims or
- you have objected to the processing of data in accordance with Art. 21 of the GDPR;
- in accordance with Art. 20 of the GDPR, the right to obtain your personal data which you provide in a structured, standard and machine-readable format or to request that the data be transferred to another body responsible;
- in accordance with Art. 77 of the GDPR, the right to complain to a supervisory authority. Generally speaking, you can contact the supervisory authority at your usual place of residence, your workplace or our company headquarters.
Contact persons for data protection
If you have any questions regarding the collection, processing or use of your personal data, if you require information about these data or wish to have them corrected, blocked or deleted or if you wish to revoke any consent given, please contact our Data Protection Officer:
Datenschutz Prinz GmbH
Dipl.-Inf.(FH) Tim Prinz
Südliche Ringstraße 26
91126 Schwabach
Tel.: 091 22/6937302
E-Mail: [email protected]
Right to object
If we process personal data as described above to safeguard our justified interest – an interest which prevails when the interests of all parties are taken into account, you can object to this processing for the future. If data are processed for direct marketing purposes, you can exercise this right as described above at any time. If data are processed for other purposes, you may object only if there are reasons for doing so resulting from your particular situation.
If you exercise your right to object, we shall no longer process your personal data for these purposes unless we can demonstrate compelling, legitimate grounds for such processing which outweigh your interests, rights and freedoms or if such processing is necessary to assert, exercise or defend legal claims.
This shall not apply if data are processed for direct marketing purposes. In this case, we shall not process your personal data further for this purpose.
Stephanskirchen, 24.05.2018
14. LinkedIn Insight Tag
This website uses the Insight tag from LinkedIn. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing by LinkedIn Insight tag
We use the LinkedIn Insight tag to obtain information about visitors to our website. Once a website visitor is registered with LinkedIn, we can analyze the key occupational data (e.g., career level, company size, country, location, industry, job title) of our website visitors to help us better target our site to the relevant audience. We can also use LinkedIn Insight tags to measure whether visitors to our websites make a purchase or perform other actions (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also features a retargeting function that allows us to display targeted advertising to visitors to our website outside of the website. According to LinkedIn, no identification of the advertising addressee takes place.
LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser characteristics and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data will then be deleted within 180 days.
The data collected by LinkedIn cannot be assigned by us as a website operator to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own promotional activities. For details, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
Legal basis
If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TDDDG. Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in effective advertising promotions that include the utilization of social media.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Objection to the use of LinkedIn Insight Tag
You can object to LinkedIn’s analysis of user behavior and targeted advertising at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control the use of their personal information for promotional purposes in the account settings. To prevent LinkedIn from linking information collected on our site to your LinkedIn account, you must log out of your LinkedIn account before you visit our site.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
15. Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo
16. Hotjar
This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com). Hotjar is a tool for analysing your user behaviour on this website. With Hotjar we can, among other things Record your mouse and scroll movements and clicks. Hotjar can also determine how long you remain with the mouse pointer in a certain place. Hotjar uses this information to create so-called heat maps, which can be used to determine which website areas are favoured by website visitors.
We can also determine how long you stayed on a page and when you left it. We can also determine at which point you cancelled your entries in a contact form (so-called conversion funnels). In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings. Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting).
If consent has been obtained, the aforementioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TDDDG. Consent can be revoked at any time. If no consent has been obtained, this service is used on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Deactivating Hotjar
If you wish to deactivate data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/policies/do-not-track/
Please note that Hotjar must be deactivated separately for each browser or end device. For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
