back to top
Language

Data protection

General information:

HAKOH GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website or contact us, various personal data is collected. This privacy policy explains what data we collect and how it is used. It also explains how and for what purpose this is done.
We would like to point out that data transfer on the internet (e.g. when sending e-mails) may contain safety gaps. Gap-free protection of data from unwanted third-party access is not possible.

1: Definitions

The data protection declaration of the HAKOH GmbH is based on the terms used by the European Directive and Ordinance when issuing the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the used terminology in advance.
We use the following terms, among others, in this data protection declaration:

1.1 Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered identifiable if they can identified, directly or indirectly, in particular by reference to an identifier such as a name, ID number, location data, online identifier or one or more special factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

1.2.    Data subject

A data subject is any identified or identifiable natural person whose personal data are processed by the controller.

1.3.    Processing

Processing means any operation or set of operations which is performed on personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.4.    Restriction of processing

Processing is restricted by marking stored personal data with the aim of limiting its future processing.

1.5.    Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or change of location.

1.6.    Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

1.7.    Processing or data controller

Controller or processing controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for his designation may be provided for under Union or Member State law.

1.8.    Processor

Processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

1.9.    Recipient

Recipient shall mean a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.

1.10.    Third Party

Third party means a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

1.11.    Consent

Consent is any expression of will given voluntarily by the data subject for the specific case in an informed manner and unambiguously in the form of a statement or other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data concerning him or her.

2.    Contact details of the data controller:

HAKOH GmbH
Willy-Brandt-Alle 31a
23554 Lübeck
Phone: +49 40 8221 257 10
Fax: +49 40 2000 64-264
E-mail: info@hakoh.com
Responsible for the content: HAKOH GmbH, represented by the managing directors Dipl.-Ing. Hans-Christoph Klaiber and Maximilian H. Karl

3.    Contact details of the data protection officer:

We have appointed a data protection officer for our company.
Asss Arbeitsschutzservice Struve e.K.
Sternstraße 68
20357 Hamburg
Phone: +49 40 8079 400  34 or -40
E-mail: datenschutz@asss.de

4.    Purpose of processing

If personal data is processed by us, this is always done for a specific purpose. This means that the collected data will only be used for the original purpose and thus will not be misused. This is necessary for the processing to meet the criteria of the GDPR. The specific purpose depends on the type of the respective service or employment relationship. Processing generally occurs to perform consulting services and support and implement purchasing or service processes.

The lawfulness results from an assignment to the following lawfulness facts according to Art. 6 (1) GDPR:

  • Giving of consent (Art. 6 para. 1 lit. a GDPR)
  • Fulfillment of a contract (or pre-contractual measures) (Art. 6 para. 1 lit. b GDPR)
  • Legal obligation (Art. 6 para. 1 lit. c GDPR)
  • Vital interest (Art. 6 para. 1 lit. d GDPR)
  • Public interest (Art. 6 para. 1 lit. e GDPR)
  • Legitimate interest of HAKOH GmbH (Art. 6 para. 1 lit. f GDPR)


4.1. Data collection on the website
4.1.1. Server log files


The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
IP address
This data is not merged with other data sources.
The basis for data processing is Art. 6 (1) lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

4.1.2. Cookies

Our internet site uses so-called cookies in several locations. Our cookies do not create damage on your computer and do not contain viruses. They serve to make our offer more user-friendly, more effective, and safer. Cookies are small text files that are stored on your computer and that are saved by your browser.
Most of the cookies we use are so-called session cookies. They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you erase them. These cookies make it possible for us to recognize your browser the next time you visit.

You can set your browser to inform you when cookies are installed and permit cookies only on a case by case basis, to block the acceptance of cookies in certain cases or in general, and to erase cookies automatically when the browser is closed. Deactivating cookies may limit the functionality of this website.
Cookies required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this data protection declaration.

4.1.3. Contact form

If you send questions to us via the contact form, we store your information from the query form including the contact data you have provided for the purpose of processing the query and in case of follow-up questions. This data is not disclosed without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). This does not affect mandatory legal provisions - in particular retention periods.

4.1.4. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". Cookies are text files that are stored on your computer and facilitate the analysis of website usage. All information created by the cookie concerning your use of this website is generally transmitted to a server of Google in the US and stored there.
The storage of Google Analytics cookies is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP Anonymization:

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptions is the full IP address transferred to a Google server in the US and then abbreviated there. At behest of the operator of this web site, Google uses this information in order to analyze your use of the web site, create reports about website activity, and in order to provide other services to the web site operator connected to website and internet use. The IP address transferred from your browser as part of Google Analytics is not joined with other data of Google.

Browser plugin:

You may prevent the storage of cookies by changing the respective settings in your browser; however please note that in this case you may not be able to use all functions of this website to the full extent. In addition, you may also prevent the collection of the data created by the cookie that refers to your use of the web site (incl. your IP address) to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link.
https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection:

You can prevent the collection of your data by Google Analytics by clicking on the following link. It activates an opt-out cookie which will prevent the collection of your data when visiting this website: Deactivate Google Analytics
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing:

We have concluded an order data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics on Google Analytics:

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

4.1.5. Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Within the framework of Google AdWords, we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
For more information on Google AdWords and Google conversion tracking, please see Google's privacy policy: https://www.google.de/policies/privacy/.
You can set your browser to inform you when cookies are installed and permit cookies only on a case by case basis, to block the acceptance of cookies in certain cases or in general, and to erase cookies automatically when the browser is closed. Deactivating cookies may limit the functionality of this website.

4.1.7. Plugins and Tools


Google Maps

This site uses the mapping service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest as defined in Art. 6 para. 1 lit. f GDPR.
More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Google reCaptcha

To protect against unauthorized requests (spam), the website and/or forms are protected by a Google reCaptcha. The reduction of unauthorized requests allows us to answer real requests in a timely manner. The basis for the integration thus represents our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Google reCaptcha uses an algorithm to decide whether the visitor is a real person or an unauthorized program. For this purpose, information on the IP address, information on the operating system, mouse movement, and keyboard strokes as well as the duration of the visit can be forwarded to Google. The operator of the service is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4. Ireland). Further information on data protection can be found at the following link: https://policies.google.com/privacy?hl=de.

4.2. Data collection from customers / interested parties

4.2.1. Customers


In the context of our provided services, we process personal data for the implementation of pre-contractual measures, contractual services, service and customer care. The legal basis for the processing is therefore Art. 6 para. 1 lit. b GDPR.

4.2.2. Applications

For the purpose of assessing applicants and preparing for interviews, we process applications sent to us. Reactive applications are only associated with the advertised position in each case due to purpose limitation. If you would like to take advantage of the opportunity to be considered for other job opportunities at HAKOH GmbH, you should note this in the cover letter. Alternatively, you may submit a speculative application, which will allow us to consider you for a variety of available positions. The data provided to us will only be made available to the HR department. The legal basis for the processing is Art. 6 para. 1 lit b GDPR.

4.2.3. Inquiries by telephone, e-mail

Analogous to 4.1.3, information or contact data from inquiries are stored by us for the purpose of processing them and in the event of follow-up questions. This data is not disclosed without your consent.
The processing of the transmitted data is thus based on contractual or pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
The data you provided will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). This does not affect mandatory legal provisions - in particular retention periods.

4.3. Data collection service providers / contractual partners

In the context of a contractual relationship, we process the respective data that is required for its implementation. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

5.    Recipients of personal data

The personal data are received only by those entities within HAKOH GmbH that need them to fulfill our contractual and legal obligations and to pursue legitimate interests. This also applies to processors we use, with whom we have concluded corresponding contracts (Art. 28 GDPR) in order to make the processing chain GDPR-compliant.

6.    Data transfer to third countries

If personal data is transferred to entities in third countries, this is only done on the instructions of HAKOH GmbH. For this purpose, HAKOH GmbH concludes appropriate contracts with the respective bodies within the framework of commissioned processing (Art. 28 GDPR) in order to ensure the security of the processing. When drawing up the contracts, the focus is, among other things, on checking any existing adequacy decision of the third country, the existence of suitable guarantees and / or exemptions.

7.    Storage period

After the purpose for storing the data has ceased to exist, the data is deleted if no legal retention periods exist.

8.    Right to information

It is possible at any time to obtain information about the respective personal data free of charge. We will provide this information within the statutory time limits (within one month). In the event of manifestly unfounded or excessive requests by an individual, we will charge an "appropriate fee" or not provide any information (pursuant to Article 12(5) of the GDPR).
Within the framework of the legally applicable provisions, you have the right to:

  • correction (for example, to complete),
  • deletion (e.g. if the purpose no longer applies),
  • restriction (e.g. if you doubt the accuracy of the data),
  • objection (to processing based on legitimate interest, such as sending direct advertising),
  • data portability (e.g. in case of a change of provider).
     

9.    Right of revocation

Consents (according to Art. 6 para. 1 lit. a GDPR / Art. 9 para. 2 lit. b GDPR) can be revoked at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

10.    Right of appeal

In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which the company has its registered office.
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th floor, 20459 Hamburg, Germany
mailbox@datenschutz.hamburg.de
Phone: +49 40 428 54-4040
Fax: +49 40 4279 11-811

11.    Provision of data


11.1. Provision of personal data

As a rule, it is possible to use the website without providing personal data. If personal data (e.g. name, address, or e-mail address) is collected on our pages, this is always done on a voluntary basis if possible. This data is not disclosed to third parties without your express permission.

11.2. Provision of data

Within the scope of our business relationship, you are only required to provide the data that is necessary to establish and implement this relationship or that we are legally obligated to collect. Without this (required) data, we are unfortunately regularly unable to conclude or implement a contract.

12.    Automated decision making

As a responsible company, we refrain from automated individual decisions, all evaluations thus take place by natural persons. There is also no automated creation of profiles (profiling).

13.    Security measures

The security measures of HAKOH GmbH are based on the technical and organizational measures mentioned in the GDPR in Art. 25 and 32. Thus, among other things, the state of the art is observed and the security of the data is ensured with various organizational measures to meet the requirements of the GDPR, to protect the data subjects. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the padlock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

14.    Objection to advertising e-mails

We hereby object to the use of contact data published within the framework of the imprint obligation to send advertising and information material that has not been expressly requested. The page operators expressly reserve the right to take legal action in case advertising material is sent unsolicited, for instance per spam.

15.    Change of the privacy policy

We reserve the right to change our privacy policy if necessary and to publish it at this place (www.hakoh.de/de/datenschutz). Please check this page regularly. The updated statement will become effective upon publication, subject to applicable law. In addition, if we have already collected information about you that is affected by the change and/or is subject to a legal duty to inform, we will inform you of any material changes to our privacy statement.
By using this website, you consent to the use of cookies for analytics, personalized content, and advertising. For more information about cookies, please see our Privacy Policy.