Privacy settings

Privacy and Cookies Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. This applies only insofar as no other indication is made in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.


Log data

You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web hoster / Alto by your Internet browser and stored in log data . This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in ensuring trouble-free operation of our website and to improve our offer.


Contact

Person responsible/ data protection officer

You are welcome to contact us as the person in charge if you wish.

Hahnemühle FineArt GmbH
Hahnestraße 5
D-37586 Dassel
ecommerce@hahnemuehle.com
+49 5561 791 235 

You can reach our data protection officer directly at: datenschutz@hahnemuehle.com

Hosting website

Our website is hosted by a company based in the EU with server locations within the EU/EEA. The company is contractually bound to comply with data protection requirements.

Contacting the customer by e-mail

If you initiate business contact with us by e-mail, we collect your personal data to the extent provided by you. The data processing is used to process and respond to your contact request. If the contact serves the implementation of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b DSGVO. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation. We will only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Contacting us by using the contact form

When using the contact form, we collect your personal data only to the extent provided by you. The data processing serves the purpose of contacting you. By sending your message, you consent to the processing of the transmitted data. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. We will only use your e-mail address to process your request. Your data will then be deleted unless you have consented to further processing and use.

 

Customer account and orders

User account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collecting, processing and forwarding of personal data for orders

When ordering, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. b DSGVO and is necessary for the performance of a contract with you. A transfer of your data takes place, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.  

Sending advertising

Use of the e-mail address for sending newsletters

We use your e-mail address independently of the contract processing exclusively for our own advertising purposes for newsletter dispatch, provided that you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. A transfer to third parties will not take place.

We use the so-called double opt-in procedure for newsletter registration. This system works in such a way that you first enter your surname and first name including a valid e-mail address when registering. You will then receive an e-mail from us with a confirmation link to the e-mail address you provided. Only after your confirmation your account will be activated.

Use of the e-mail address for the sending of direct advertising

We use your e-mail address, which we have received in the context of the sale of a good or service, for the electronic sending of advertising for our own goods or services that are similar to those that you have already purchased from us, unless you have objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in direct advertising and in accordance with the regulations under § 7 (3) UWG. You can object to this use of your e-mail address at any time by notifying us. The contact details for exercising the objection can be found in the imprint. You can also use the link provided for this purpose in the advertising e-mail.


Shipping service provider and merchandise management system      

Use of an external merchandise management system

We use an enterprise resource planning system for contract processing within the scope of order processing. For this purpose, your personal data collected as part of the order will be transmitted to our shipping service provider.


Credit check

Data collection and processing for credit assessment

If we make advance payments, e.g. in the case of payment by invoice or direct debit, we reserve the right, if necessary, to obtain credit information on the basis of mathematical-statistical procedures using Creditreform, Hellersbergstraße 11, 41460 Neuss. For this purpose, we transmit the personal data required for a credit check there and use the information received about the statistical probability of a payment default for a weighed decision on the establishment, implementation or termination of the contractual relationship. The creditworthiness information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and in the calculation of which, among other things, address data are included. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for a contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f DSGVO for our overriding legitimate interest in protecting against payment default when we make advance payments. You have the right to object at any time to this processing of personal data relating to you based on Art. 6 (1) (f) DSGVO for reasons arising from your particular situation by notifying us. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide it will result in the contract not being concluded with the payment method you have chosen. The information pursuant to Art. 14 of the EU General Data Protection Regulation on the data processing taking place at Creditreform Boniversum GmbH can be found here: www.boniversum.de/EU-DSGVO.


Cookies and Consent Manager 

Our Internet pages use so-called "cookies".

Cookies that are required to carry out the electronic communication process (necessary cookies) are used on the basis of our legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. A further basis for this is the legal basis according to § 25 TTDSG pursuant to Art. 6 para. 1 lit. c DSGVO for the verifiability of consents in the context of a consent management. If cookies are absolutely necessary to provide a service requested by you, we may also use them without your consent in accordance with § 25 TTDSG.

Cookies are stored on the user's computer and the information stored in them is transmitted from the user to our servers. You can make settings under the following Cookie-Settings.


You as a user have full control over the use of cookies. By changing the settings in the Internet browser you use, you can completely disable or restrict the transfer of cookies.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the framework of this data protection declaration and, if necessary, request your consent.

By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent. Under the following links you can find out how to manage (including deactivate) the cookies in the most important browsers: 

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.


Use of advertising tracking tools/other

Use of Google Analytics

With your consent, we use the Google Analytics web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Ireland Limited is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Accordingly, Google Ireland Limited is the company affiliated with Google that is responsible for processing your data and ensuring compliance with applicable data protection laws. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The use of cookies or similar technologies takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. For more information on terms of use and data protection, please visit
https://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/
https://policies.google.com/technologies/cookies?hl=de.

Use of Google Ads incl. conversion tracking

With your consent, we use the Google Ads offer from Google to draw attention to our attractive offers with the help of advertising media on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 6 0 days and are not intended to identify you. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of a Google Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Google Ads customer. We only receive statistical evaluations from Google to measure the success of our advertising media.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO (consent). The storage period at Google is a maximum of eighteen months . Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html .

Use of Google Remarketing

In addition to Ads with Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behavior when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be processed by Google. In particular, according to Google, pseudonymization is used in remarketing.
The legal basis for the processing is your consent - Art. 6 para. 1 lit. a DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

Use of Facebook Custom Audience

Furthermore, with your consent, we use the "Website Custom Audiences" function of Meta (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Meta"). Via so-called web beacons, such as the "Facebook pixel", statistical information about you is collected, which is processed by Facebook. This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use the procedure.
With the help of the "Facebook Pixel", your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the "Facebook Pixel", Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an ad from us. In doing so, Facebook receives the information that you have called up certain parts of our website. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to set a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.
The legal basis for the processing of your data is your consent Art. 6 para. 1 lit. a DSGVO . In this case, we do not store any personal data from you. We have no knowledge of the storage period at Meta and no possibility to influence it.
For more information about Meta's processing, please visit https://www.facebook.com/about/privacy.

Use of Facebook Analytics

With your consent, we also use the "Facebook Analytics" tool from Meta (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Meta"). For the use of Facebook Analytics, we use the so-called "Facebook Pixel" to measure the reach of our advertisements. For this purpose, Meta uses tracking technologies such as web beacons (tracking pixels) to set a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted.
The information obtained with the help of the "Facebook cookie" is used solely for statistical purposes, is transmitted to us anonymously by Meta and does not provide any information about the person of the user. It is processed by Meta in accordance with their privacy policy with your Facebook account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.
The processing of your data takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. In this case, we do not store any personal data from you. We have no knowledge of the storage period at Meta and no possibility to influence it.
For more information on Meta's privacy policy, please refer to the associated privacy policy at https://de-de.facebook.com/about/privacy/.

Use Captchas

We use a "Google reCAPTCHA" (hereinafter referred to as reCAPTCHA) in our webshop to verify data entry. The service is offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). With reCAPTCHA, we can check whether file entries (e.g. in contact forms) have been made by a human or by an automated program. The behavior of the website visitor is analyzed by the reCAPTCHA and starts when entering the webshop. Various information (e.g. IP address, time spent by the visitor in the webshop or mouse movements made by the user) are used as analysis features, which are evaluated by reCAPTCHA. The data collected in this process is forwarded to Google.
The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offerings from improper automated spying or improper use.
Further information on Google reCAPTCHA as well as Google's privacy policy can be found here: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html .

Use of web fonts

For the uniform presentation of our pages, we use web fonts that are hosted locally. No data is transferred to third parties.

Payment service provider

PayPal

On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").
If payment via PayPal is selected, the payment data entered by you will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b DSGVO (contract performance). If the data is not provided, it may be impossible to conclude or perform the contract. We have no knowledge of the storage period at PayPal and no possibility to influence this.

Payment via Stripe

The payment service provider Stripe (Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland) is still available as a payment method. Your data will be transmitted to Stripe, whereby Stripe may perform an identity and creditworthiness check based on the data you provide (name, address, account number, bank routing number, credit card number, if applicable, invoice amount, currency and transaction number). The details can be found in the information displayed in our booking process. The legal basis for processing for payment processing is Art. 6 para. 1 lit. b DSGVO. The data processing is necessary for the performance of the contract. If the data is not provided, it may be impossible to conclude or perform the contract.
In the context of an identity and credit check based on your data, Stripe and we have a legitimate interest in the transmission of the personal data of the user concerned. Stripe and we require this in order to obtain information from credit agencies for the purpose of identity and credit checks on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO). This may be the credit agencies mentioned at https://stripe.com/de/privacy.
We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are legal retention obligations.
Further information on the privacy policy of the Stripe service can be found at: www.stripe.com/de/privacy.

Payment method Invoice with Ratepay

For our customers in Germany we offer the payment method Rechnungskauf mit Ratepay. PayPal cooperates with the service provider Ratepay (Ratepay GmbH, Ritterstr. 12-14, 10969 Berlin). Our receivables against customers are taken over by PayPal and transferred to Ratepay. The purchase price is credited to our PayPal account by PayPal regardless of the customer's payment.
Before the selection of the payment method Rechnungskauf mit Ratepay is actively implemented, the customer agrees to the Ratepay payment conditions and the credit check conditions of Ratepay. The payment option cannot be used without consent.
Ratepay acts as an independently responsible party and carries out an identity and credit check according to its own standards following a payment request from the customer. If Ratepay determines that a customer is suitable for Rechnungskauf mit Ratepay, we will be notified. If no suitability can be determined, the customer will be notified immediately. A customer contract is not concluded and the customer is redirected back to the payment selection page.
Further information on the data protection principles of Ratepay and PayPal can be found here:
https://www.paypal.com/myaccount/privacy/privacyhub 
https://www.ratepay.com/datenschutz/

Social media presences

Use of our meta services

We are jointly responsible for the use of our Facebook and Instagram offers with Meta Platforms Ireland Limited - hereinafter referred to as Meta - , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, https://www.facebook.com/help/contact/540977946302970 , as joint controller pursuant to Art. 26 DSGVO and the Facebook Page Insights Supplement (https://www.facebook.com/legal/terms/page_controller_addendum ). Meta processes (personal) data when using Meta products - including when visiting our Facebook or Instagram page - even from persons who are not registered with any of the Meta services. Which (personal) data these are in detail, how, for which purposes and on which legal basis they are processed, is described by Meta in its data policy. (https://www.facebook.com/privacy/policy/?section_id=13-HowToContactMeta ) which applies to all Meta products. Information on how to contact Meta and on the settings options for advertisements, cookies, etc. can also be found there. The data may be transferred to countries outside the European Union. For more information about the cookies Meta uses when having a Facebook account, using Meta Products (including the Website and Apps), or visiting other websites and apps that use Meta Products (including the "Like" button or other Facebook technologies), Meta provides the Cookie Policy (https://www.facebook.com/policies/cookies/ ). Information on how to manage information available about you can also be found at this link: https://www.facebook.com/policies/cookies/ . When you visit our Facebook or Instagram page, Meta collects, among other things, your IP address. Together with other information that Meta receives through cookies, Meta provides us, as the operator of the Meta service, with statistical information about the use of the respective service (so-called page insights). These are aggregated data that show how users interact with the site. These Page Insights may be based on personal data collected by Meta in connection with a user's visit to or interaction with our respective Meta service and its content. Meta provides more information about this here: https://www.facebook.com/about/privacy . We can use Page Insights to anonymously evaluate reach, page views, time spent on video posts, actions (likes, comments, sharing of posts), and by age, gender, and location (as indicated by users in their respective Facebook (meta) profiles). In this context, settings can be made for the evaluation of the reach or corresponding filters can be set with regard to the selection of a time period, the consideration of a specific post as well as demographic groupings (e.g. female, 20-30 years old). This data is anonymized, aggregated and abstracted. These settings therefore do not allow us to draw conclusions about individuals. The evaluation serves to optimize the offer on our pages for the purpose of public relations. The legal basis for this data processing is Art. 6 para. 1 lit. a and f DSGVO. We, as the provider of the information service, do not collect or process any other data from the use of the pages. You have a right of appeal to the Irish Data Protection Commission (responsible for Meta Platforms Ireland Limited), (Art. 77 GDPR), irrespective of the rights against us. If you have specific questions about the protection of your data, please contact our Data Protection Officer or the Data Protection Officer of Meta Platforms Ireland Limited https://www.facebook.com/help/contact/540977946302970.

Use of our Twitter service

We use the technical platform and services of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. for the short message service offered here. The responsible party for the data processing of persons living outside the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating). Information about which data is processed by Twitter and for which purposes can be found in Twitter's privacy policy: https://twitter.com/de/privacy We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this respect. With the use of Twitter, your personal data will be processed by Twitter Inc. regardless of your residence in the United States, Ireland, and any other country in which Twitter Inc. conducts business. On the one hand, Twitter processes your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts of your address book when you upload or synchronize it. On the other hand, Twitter also evaluates the content you share to determine what topics you are interested in. Stores and processes confidential messages that you send directly to other users and can determine your location based on location data, wireless network information, or your IP address in order to send you advertising or other content. Twitter Inc. may use analysis tools such as Twitter Analytics or Google Analytics for evaluation purposes. We have no influence on the use of such tools by Twitter Inc. If tools of this type are used by Twitter Inc., we have neither commissioned this nor approved or supported this in any other way. Nor are the data obtained from this analysis made available to us. Only certain non-personal information about tweet activity, such as the number of profile or link clicks through a particular tweet, is viewable in our account. We have no way to prevent or disable the use of such tools on their Twitter account. Since Twitter Inc. is a non-European provider with a European branch only in Ireland, it is bound by European data protection regulations. This concerns, for example, your rights to information, blocking or deletion of data or the possibility to object to the use of usage data for advertising purposes. You have options for restricting the processing of your data in the general settings of your Twitter account and under the item "Privacy and security". In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used. More information on these items is available on the following Twitter support pages: - https://support.twitter.com/articles/105576# - https://help.twitter.com/de/search?q=datenschut z You can find out about the possibility of viewing your own data on Twitter here: https://support.twitter.com/articles/20172711# Information about the inferences Twitter makes about you can be found here: https://twitter.com/your_twitter_data Information on the available personalization and privacy setting options can be found here (with further references): - https://twitter.com/personalization Furthermore, you have the option to request information via the Twitter privacy form or the archive requests: - https://support.twitter.com/forms/privacy - https://support.twitter.com/articles/20170320# We do not collect any data ourselves via your Twitter account. However, the data you enter on Twitter, in particular your username and the content published under your account, will be processed by us insofar as we retweet or reply to your tweets, if applicable, or also compose tweets from us that refer to your account. The data you freely publish and distribute on Twitter is thus included by us in our offer and made available to our followers. You can also find more information about Twitter and other social networks and how to protect your data at www.youngdata.de. Twitter usage concept: Our public relations work also takes place on Twitter. With this usage concept, we assume responsibility as a non-public body for the use of social media. Please also refer to our privacy policy. Twitter (English for "twitter") is a social network for short messages, photos and videos. Registered users can publish short messages free of charge via this service. These tweets have a limited length and are usually visible to everyone. Users can "follow" other users so that they can read their messages in their own Twitter feed. The advantages of Twitter are its wide reach and - in contrast to some other social networks - its readability without the need for the user to register, as well as its usability without the use of a real name. You can find more information about Twitter here: https://about.twitter.com/de.html The Twitter channels are a useful addition to our existing communication channels, such as our website, press releases, print products and events. The Twitter channels primarily inform users about current news from our business operations. For some target groups, the "classic" instruments alone (print, website, mailing) were no longer sufficient. We found that Twitter allows us to reach a wide circle of interested parties much more directly, quickly and on a daily basis, especially since interested recipients can subscribe to corresponding tweets. The Twitter channel enables us to disseminate our messages far and wide, to network better with other institutions and information sources, and to respond immediately to what is happening at the time. Furthermore, direct dialog with readers allows us to gather opinions and receive feedback in order to optimize our business activities. With our Twitter account we inform users about news from our business operations. Responsibility for editorial support lies with our management and the associated communications and media team. We would like to point out to users that the Twitter channel is merely an additional option for contacting us or receiving information from us. Alternatively, the information offered via Twitter can also be accessed via the corresponding links on our website or on the other linked websites. In principle, you can contact us with all inquiries. Please use the information provided above. We evaluate this usage concept once a year with regard to whether and how it is used. This evaluation of the usage concept takes into account the usage figures and reach as well as the target group structure of the networks.

Use of our LinkedIn services

We manage our account according to the principles regulated below: We are jointly responsible with LinkedIn Ireland Unlimited Company,Wilton Place, Dublin 2, Ireland https://www.linkedin.com/help/linkedin/answer/1581/hilfe-erhalten-und-den-linkedin-kundenservice-kontaktieren?lang=de hereinafter referred to as the "Platform Operator". We process your personal data, such as your surname and first name, your e-mail address and IP address, etc., only if there is a legal basis for doing so. More detailed information about the processing by the platform operator can be found in the privacy policy of the platform operator. Therefore, data is only passed on to third parties if there is a legal basis for the processing. For example, we disclose personal data to persons or companies that act for us as processors pursuant to Art. 28 DSGVO. A processor is anyone who processes personal data on our behalf - i.e., in particular in a relationship of instruction and control with us In accordance with the requirements of the GDPR, we conclude a contract with each of our order processors to oblige them to comply with data protection regulations and thus provide your data with comprehensive protection. We would like to point out that your data may also be passed on to third parties by the platform operator. However, we have no influence on this. More detailed information about the processing by the platform operator can be found in the privacy policy of the platform operator. We store all personal data that you transmit to us only as long as they are needed to fulfill the purposes for which these data were transmitted or as long as this is required by law. Upon fulfillment of the purpose and/or expiration of the legal storage periods, the data will be deleted or blocked by us, provided that this is technically possible for us. Information on data storage by the platform operator can be found in its privacy policy, see above. This platform uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us or the platform operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. There is no separate indication within apps that SSL encryption is available. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. Collection and storage of personal data as well as their type and purpose of use When you access the website of the platform operator, information is automatically sent to the server of the platform operator by the browser used on your end device or by the app. This information is temporarily stored by the platform operator in a so-called log file. However, this data is only available to the platform operator. It is not possible for us to access this data. For further information, please refer to the platform operator's privacy policy, see above. We do not collect any personal data about you. However, it is possible to obtain pseudonymized data in the form of statistics about the users of our site over a certain period of time. The software for analyzing user statistics is usually provided by the platform operator itself, but in some cases it is also possible to integrate third-party software (e.g. Google Analytics). Here, data about the users of the site can be collected, such as age, gender, country of origin, browser used and interests. However, this data is always pseudonymized and it is not possible for us to make statements about individual users based on this data alone. We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. Furthermore, it is possible for you to interact with our account. You can do this, for example, by marking a post with "Like", sharing or commenting on it, or by writing to us directly. When you interact with us, there is usually inevitably some data processing by us, as this allows us to see your account and thus gives us access to personal data about you; for example, your username, your profile picture, or the date or time of the interaction. This data is used by us exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the above-mentioned reason of optimizing the content provided by us on our profile. Furthermore, the collected data is information that is only made available to us through an interaction by you with our profile. This establishes a relevant and appropriate relationship between you and our profile. If deletion is possible by us, personal data will be deleted by us after 28 days at the latest, unless there is a legal basis for further processing beyond this period. Further information on data processing by the platform operator can be found in its privacy policy, see above. This platform uses cookies. We have no influence on which cookies the platform operator uses. You can find more information in the privacy policy of the platform operator under the following link: https://www.linkedin.com/legal/privacy-policy?_l=de_DE In order to enforce your rights, you can contact the platform operator directly, provided that the processing is carried out by the platform operator. We have provided you with the contact details of the platform operator as the data controller at the beginning of this document. Of course, you can also contact us to enforce your rights. Regarding changes to the privacy policy by the platform operator, please refer to the platform operator's privacy policy, see above.

Youtube services

We also use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our online offers in some cases. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The function displays videos deposited with YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. The use of cookies or similar technologies takes place with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. For more information about the collection and use of data by YouTube and Google, about your rights in this respect and options for protecting your privacy, please refer to YouTube's privacy policy at https://www.youtube.com/t/privacy .

Data subject rights and storage period

Duration of storage

After complete processing of the contract, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 DSGVO: the right to information, to correction, to deletion, to restriction of processing, to data portability. In addition, you have the right to object to processing based on Art. 6 (1) f DSGVO and to processing for the purposes of direct marketing in accordance with Art. 21 (1) DSGVO.

Right of complaint to the supervisory authority

In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority if you believe that the processing of your personal data is not lawful. The supervisory authority of the Federal State of Lower Saxony is responsible for Hahnemühle.

Right of objection

If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f DSGVO, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation. After the objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims. If personal data processing is carried out for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct marketing.

Last update: 22.12.2022