Data Protection

With the following information we desire to provide you with an overview concerning the processing of your personal data on our part and your rights arising from the data privacy laws. To a great extent the specific data that is processed and the manner in which the data is used are based on the services that have been agreed or requested. Therefore parts of this information may not apply to you.

The following always applies: We, Hackforth Holding GmbH & Co. KG, take the protection of your personal data very seriously. We expressly state that this website is directed exclusively to persons of legal age.

1. Who is responsible for the data processing, and who can I contact?

The responsible party is
Hackforth Holding GmbH & Co. KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com


VULKAN Kupplungs- und Getriebebau Bernhard Hackforth Gmbh & Co KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com


VULKAN Lokring Rohrverbindungen GmbH & Co. KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com

You can contact our operational data privacy officer at the address cited above.

2. What sources and data do we use?
We process personal data that we obtain as part of the use of our website by, among others, customers / job applicants, or also interested parties (hereinafter: you).

3. Why do we process your data (reason for the processing) and on what legal grounds do we process your data?
We process personal data in harmony with the provisions of the EU General Data Protection Regulation (GDPR) and the German Data Protection Act (Bundesdatenschutzgesetz (BDSG))

a) for fulfillment of contractual obligations (art. 6 para. 1 b of the GDPR)
The processing of data can occur as part of execution of contracts with you as our customer or for execution of pre-contractual measures.

b) as part of the balancing of interests (art. 6 para. 1 f of the GDPR)
If required we can process your data beyond the scope necessary for fulfillment of the contract, to safeguard the our legitimate interests or the legitimate interests of third parties. Examples:

  • Review and optimization of procedures for needs assessment for the purpose of direct customer contact,
  • advertising or market research and opinion polls, if you have not objected to the use of your data,
  • assertion of legal claims and defense in the event of legal disputes,
  • assurance of IT security and the IT operations of the enterprise,
  • Measures for business management and further development of products and services,

c) due to your consent (art. 6 para. 1 of the GDPR)
If you have granted to us a consent for the processing of personal data for specific purposes (e.g. for marketing purposes), the legality if this processing is present on the basis of your consent.

d) due to statutory regulations (art. 6 para. 1 c GDPR) or in the public interest (art. 6 par. 1 e GDPR)
Moreover we are subject to various statutory obligations, i.e. statutory regulations (e.g. tax laws). Among other things, for the purposes of the processing, the fulfillment of tax law monitoring and reporting obligations, and much more are also included.

e) as part of the substantiation of an employment relationship art. 88 of the DSGVO, in particular § 26 para. 1 of the Federal Data Protection ACT (Bundesdatenschutzgesetz (GDPR))
If you apply for employment with us, likewise a processing of your personal data is permitted to occur.

4. What does this mean, now based on the provision of this website with the services made available herein?

4.1 Provision of the website and creation of log files
Each time our website is called up our system automatically collects data and information from the computer system of the computer that calls up our website. The following data is collected in this regard:

  • Information concerning the browser type and version used
  • The operating system of the user
  • The user's Internet service provider
  • The user's IP address
  • Date and time of the access
  • Websites from which user's system gets to our website
  • Websites that are called up by the user's system via our website

The data is likewise stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
The legal basis for the temporary storage of the data under log files is art. 6 para. 1 lit f GDPR.
The temporary storage of the ID address through the system is necessary to enable a delivery of the website to the computer of the user. For this the IP address of the user must remain stored for duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes constitute our legitimate interests in the processing of the data in accordance with art. 6 para. 1 lit. f of the GDPR.
The data is deleted as soon as it is no longer required for purpose for which it is collected. In the case of collection of data for provision of the website, this is the case when the respective session is ended.
In the case of storage of the data in log files this is the case after seven days at the latest. Storage extending beyond the limits cited above is possible. In this case the IP addresses of the users are deleted or distorted, so that an allocation of the calling client is no longer possible.
Collection of the data for provision of the website and storage of the data for log files is strictly required for operation of the website. Consequently there is no possibility of objection on the part of the user.
 

4.2 Use of cookies

When visiting our website we occasionally use cookies. Among other reasons, we use them to make our offering user-friendly, effective, and secure.
In this regard, the following data is stored and transmitted:

  • Language settings

Associated with the use of technically necessary cookies, we process your personal data in accordance with art. 6 para. 1 lit. of the GDPR.
Use of technically necessary cookies occurs the purpose of making the use of our website easier for you. Some of the functions of our website cannot be offered without the use cookies. For these functions it is necessary for the browser to again be recognized after a change of websites. We require your cookies for the following applications:

  • To apply the language settings

The user data collected through technically necessary cookies is not used to create user profiles.
Cookies are stored on your computer, and transmitted by your computer to our website. Consequently, you as the user have complete control over the user of the cookies. By changing your Internet browser settings you can deactivate or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also occur in an automated process. If cookies are deactivated for our website, it may be the case that all functions of the website can no longer be used in full scope.
Moreover, on our website we also use cookies that enable an analysis of user behavior on our website. In this manner the following data can be transmitted:

  • Frequency and duration of page call-ups
  • Use of a website function

The data collected in this manner is pseudonymized through technical precautions. Therefore an allocation of the data to the calling-up user is no longer possible. The data is not stored together with other personal data of the users.
When calling up our website you will be informed of the use of cookies for analysis purposes via an info banner and referred to this privacy statement. In this context a notice also occurs that states how the storage of cookies can be suppressed in browser settings.
The legal basis for the processing of personal data through the use of cookies falls under art. 6 para. 1 lit. of the GDPR.
The use of analysis cookies occurs for the purpose of improving the quality of our website and its content. Through the use of analysis cookies we learn how the website is used and thus can continuously optimize our offering. Furthermore these purposes substantiate our legitimate interests in the processing of your personal data in accordance with art. 6 para. 1 lit. f of the GDPR.

Cookies are stored on your computer, and transmitted by your computer to our website. Consequently, you as the user have complete control over the user of the cookies. By changing your Internet browser settings you can deactivate or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also occur in an automated process. If cookies are deactivated for our website, it may be the case that all functions of the website can no longer be used in full scope.

When calling up our website you will be informed of the use cookies for analysis purposes and your consent to the processing of personal data used in this context will be obtained. In addition you are referred to this privacy statement.
The legal basis for the processing of personal data through the use of cookies for analysis purposes is provided through the presence of consent of the user issued in this regard – art. 6 para. 1 lit. a of the GDPR.
The use of analysis cookies occurs for the purpose of improving the quality of our website and its content. Through the use of analysis cookies we learn how the website is used and thus can continuously optimize our offering.
Cookies are stored on your computer, and transmitted by your computer to our website. Consequently, you as the user have complete control over the user of the cookies. By changing your Internet browser settings you can deactivate or restrict the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also occur in an automated process. If cookies are deactivated for our website, it may be the case that all functions of the website can no longer be used in full scope.

4.3 Contact form and email contact
There is a contact form on our website that can be used for making contact with us electronically. If you avail yourself of this possibility, then the data entered in the input screen will be transmitted to us and we will store it. This data is:

  • Company
  • First name
  • Last name
  • Address
  • Postcode
  • Country
  • Industry
  • Telephone no.
  • Fax no.
  • Email
  • Attachment
  • Message
  • Security query

In addition the following data will also be stored at the time of registration:

  • The IP address of the user
  • Date and time of the registration

For the processing of your data your consent will be obtained as part of the sender process and your will be referred to this data privacy statement.
Alternatively contact can be made via the provided email address. In this case the personal data transmitted with your email will be stored. There is no forwarding of your personal data to third parties in this context. The data will be used exclusively for the processing of the conversation.
The legal basis for the processing of your personal data is present with the existence of your consent art. 6 para. 1 lit a of the GDPR.
The legal basis for the processing of your personal data that is transmitted in the course of sending an email is art. 6 para. 1 lit. f of the GDPR. If the email contact is for the purpose of entering into a contract, then the additional legal basis for the processing is art. 6 para. 1 lit. b of the GDPR.
We use personal data on the input screen only for processing of the contacting. In the case of contacting via email, the required legitimate interest in the processing of the personal data also applies. The other personal data processed during the sending procedure is used to prevent misuse of the contact form and to assure the security of our IT systems.
The data is deleted when it is no longer required for achievement of the purpose for which it was collected. For the personal data from the input screen of the contact form and the data that has been sent via email, this is then the case, when the respective conversation with you is concluded. This is then the case, when it can be inferred from the circumstances that the subject matter in question has been definitively clarified. The personal data additionally collected during the send procedure will be deleted after a period of 7 days at the latest.
You have the possibility of revoking your consent to the processing of your personal data at any time. Contact us via email at any time to object to the storage of your personal data. In such a case the conversation cannot be continued.
(There follows a description of the manner in which revocation of the consent and objection to the storage is possible).
In this case, all personal data that has been stored in the course of contacting will be deleted.

4.4 Job applicant management   
Would you like to apply for a job with us? We would be pleased if you make your application available to us via email.

If you apply online via our career portal, your data will be stored and processed on the systems of our software partner d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany. A corresponding data processing agreement has been concluded with this partner in accordance with Art. 28 GDPR. Our software partner will only process your data in accordance with the legal requirements and only in accordance with instructions in the context of order fulfillment as a processor. It has also taken the necessary security, technical and organizational measures.

As part of job applicant management we process the personal data that you make available to us for initiation of an employment relationship based on art. 88 of the GDPR, in particular § 26 1 of the BDSG. Alternatively collective agreements (Group agreements, overall agreements and bargaining agreements, as well as provisions of collective agreements) in accordance with art. 88 of the GDPR, in particular § 26 para. 4 BDSG consents (e.g. for photographs) in accordance with art. 88 of the GDPR, in particular § 26 para. 2 of the BDSG are included.
In isolated cases we process your data in order to safeguard legitimate interests, e.g. Group-internal data exchange for administrative purposes (art. 6 para. 1 f of the GDPR, in particular recital 48).

If special categories of personal data (e.g. severe disability) are processed, this occurs based on art. 88 of the GDPR, in particular § 26 para. 3 of the BDSG. In addition the processing of health data can be required for the evaluation of your work ability in accordance with art. 9 para. 2 h) in particular § 22 para. 1 b) of the BDSG.
We process and store your personal data as long as required for the fulfillment data processing purposes or fulfillment of legal, contractual or statutory obligations. Thereafter the data will be deleted or its processing will be restricted. In the case that after conclusion of the application process an employment relationship does not come about, we will delete your data 6 months after conclusion of the application process at the latest. Should we wish to store your application in a so-called "applicant pool", we would ask for your consent.

Of course, in addition you are entitled to withdraw your application at any time. In this case your data would likewise be deleted, if it is no longer required for the purpose for which it was collected. Sending an email to us with the appropriate content is sufficient in this regard. Likewise revocation of any consents that have been issued is possible at any time.

4.5) Google Analytics

Type and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our website, subpages visited and the time spent by visitors.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognize users.
This information is used, among other things, to compile reports on website activity.

Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: policies.google.com/privacy.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:
Downloading and installing the Google Browser Plug-In

You can also prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website:
Deactivate Google Analytics
You can find more information on terms of use and data protection at www.google.de/analytics/terms/de.html
or at https://www.google.de/intl/de/policies/ .

4.6) YouTube

Type and scope of processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics.
YouTube Video enables us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behaviour, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.
When you access this content, you establish a connection to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis
The service is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

4.7) OpenStreetMap

Type and scope of processing
We use the OpenStreetMap map service to create directions. OpenStreetMap is an open source project of the OpenStreetMap Foundation, which displays a map on our website.
When you access this content, you establish a connection to the servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of OpenStreetMap.

Purpose and legal basis
The use of OpenStreetMap is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR, i.e. our interest in making it easier for you to find the locations mentioned on the website.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by the OpenStreetMap Foundation. Further information can be found in the privacy policy for OpenStreetMap: https://wiki.osmfoundation.org/wiki/Privacy_Policy .

4.8) Google Tag Manager

Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: 

4.9) Usercentrics

Type and scope of processing
We have integrated Usercentrics on our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which consent to the storage of cookies can be obtained and documented. Usercentrics uses cookies or other web technologies to recognize users and store the consent given or revoked.

Purpose and legal basis
The use of the service is based on obtaining the legally required consent to the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.

Storage duration
The specific storage period of the processed data cannot be influenced by us, but is determined by Usercentrics GmbH. Further information can be found in the privacy policy for Usercentrics: usercentrics.com/privacy-policy/.

4.10) Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you further ways to contact us and find out about our offers. In the following, we will inform you about which data we or the respective social network process from you in connection with the access and use of our fan pages/accounts.

Data that we process from you
If you wish to contact us via Messenger or via direct message via the respective social network, we generally process your user name, which you use to contact us, and may store other data provided by you if this is necessary to process/answer your request.
The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).

(Static) usage data that we receive from social networks
We receive automated statistics relating to our accounts via Insights functionalities. The statistics include the total number of page views, likes, information on page activities and post interactions, reach, video views/views and information on the proportion of men/women among our fans/followers.
The statistics only contain aggregated data that cannot be linked to individual persons. They are not identifiable to us.

What data the social networks process from you
In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and therefore no user account is required for the respective social network.
Please note, however, that the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies when the respective social network is accessed, over which we have no influence whatsoever. Details on this can be found in the privacy policy of the respective social network (see the corresponding links above)
If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts/contributions and/or wish to contact us via messenger functions, you must first register with the respective social network and provide personal data.
We have no influence on the data processing by the social networks when you use them. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies in the context of registration and use of social networks can be found in the data protection provisions/cookie guidelines of the social networks. There you will also find information on your rights and options to object.

LinkedIn page
LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles of natural persons and company profiles. Users can maintain their existing contacts and make new ones within the social network. Companies and other organizations can create profiles where photos and other company information can be uploaded to present themselves as employers and recruit employees. Other LinkedIn users have access to this information and can write their own articles and share this content with others. The focus of the network is on professional exchange on specialist topics with people who have the same professional interests.
When using or visiting the network, LinkedIn automatically collects data from users or visitors, such as user name, job title and IP address. This is done with the help of various tracking technologies. LinkedIn provides users with information, offers and recommendations based on the data collected in this way, among other things.

We only collect your data via our company profile in order to realize a possible provision for communication and interaction with us. This collection generally includes your name, message content, comment content and the profile information you provide "publicly".
The processing of your personal data for the above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 para. 1 f GDPR. If you as a user have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 para. 1 a, Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access options to your data are limited. Only the provider of the social network is authorized to have full access to your data. As a result, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert such rights is therefore to contact the respective provider directly.
We are jointly responsible with LinkedIn for the personal content of our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.
We do not make any decisions regarding the data collected on the LinkedIn site using tracking technologies.
You can find more information about LinkedIn at: https://about.linkedin.com .
Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.
Further information on storage duration/deletion and guidelines on the use of cookies and similar technologies in the context of registration and use at LinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.

4.11) VULKAN Engineering Portal  -  CADENAS
We offer our customers the possibility of downloading CAD drawings. To do this we use the technology of CADENAS Konstruktions-, Softwareentwicklungs- und Vertriebs GmbH. Since we forward to a platform made available by CADENAS, please refer to the CADENAS Privacy Policy for further information.
We can use the data made available at registration, as well as the product selection that occurs via the portal for statistical analyses. This we do in our own legitimate interest in accordance with (Article 6(1)(f) GDPR).

Input data:

  • Salutation
  • First name
  • Last name
  • Company
  • Country
  • Address
  • Postcode
  • City
  • State
  • Telephone number
  • Language
  • Time Zone

Data that we use for analysis:

  • Salutation
  • First name
  • Last name
  • Company
  • Country
  • Address
  • Postcode
  • City
  • State
  • Telephone number
  • Language
  • Time Zone
  • Downloads

4.12) "Leadinfo:
We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and improve the services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. If you opt out, your data will no longer be collected by Leadinfo."

4.13) Article 13 GDPR Information to be provided where personal data are collected from the data subject
1. Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:

  • the identity and the contact details of the controller and, where applicable, of the controller's representative;

  • the contact details of the data protection officer, where applicable;

  • the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;

  • where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;

  • the recipients or categories of recipients of the personal data, if any;where applicable, the fact that the controller intends to transfer personal data to a third country or international organization and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.

2. In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing:

  • the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;

  • the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;

  • where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

  • the right to lodge a complaint with a supervisory authority;

  • whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;

  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

  • Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.

  • Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.

5. What rights can you assert?
Each person affected person has the right to information in accordance with article 15 of the GDPR, the right to correction in accordance with article 16 of the GDPR, the right to deletion in accordance with 17 of the GDPR, the right to restriction of the processing in accordance with article 18, the right of objection arising from article 21 of the GDPR, as well as the right to data portability arising from article 20 of the GDPR. For the right to information and for the right of deletion the restrictions set out in §§ 34 of the 35 BDSG apply. Moreover a right of appeal to a responsible data privacy supervisory authority also exists (article 77 of the GDPR, in particular § 19 of the BDSG).
You can, at any time, revoke a consent to the processing of personal data that you have granted to us. This also applies for revocation of the declarations of consent that have been granted to us before the GDPR enters into force, i.e. prior to 25 May 2018. Please note that, the revocation only has effect for the future. Processing that occurs before the revocation is not affected.
Please contact our data privacy officer in this regard.

6. Do I have to make my personal data available?
Within the framework of our business relationship, you must provide that personal data that is required for the commencement and execution of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obligated to collect. As a rule, without this data we will be compelled to refuse to enter into a contract or to execute the order, or we will not be able to continue fulfilling an existing contract, and possibly we will have to terminate the contract.

7. Is there an automated decision-making process?
No. Currently to establish and execute the business relationships we do not use a fully-automated decision-making process in accordance with art. 22 of the GDPR. A "profiling" does not take place.

Right of objection in the specific case
You have the right, at any time, to object to the processing of your personal data, for reasons arising from your special situation, which occurs due to article 6 paragraph 1 lit. e of the GDPR (data processing in the public interest) and article 6 paragraph 1 lit f of the GDPR (data processing on the basis of balancing of interests; this also applies for a profiling based on this provision as stipulated in article 4 no. 4 of the GDPR.
If you lodge object, we will no longer process your personal data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing is used for the assertion, exercise or defense of legal claims.
A right of objection to a processing of data for purposes of direct advertising
In individual cases we process your personal data to carry out direct advertising. You have the right to object to the processing of your personal data for the purpose of this type of advertising; this also applies for profiling, to the extent that profiling is associated with direct advertising. If you object to the processing of your personal data for direct advertising purposes, then your personal data will no longer be processed for these purposes.
Recipient of the objection
The objection can occur informally with the subject "Objection" and specification of your name, your address, and your date of birth, and it should be directed to:

Hackforth Holding GmbH & Co. KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com

VULKAN Kupplungs- und Getriebebau Bernhard Hackforth Gmbh & Co KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com

VULKAN Lokring Rohrverbindungen GmbH & Co. KG
Heerstraße 66, 44653 Herne
datenschutz(at)vulkan.com