Data Protection Policy

The protection of your privacy is very important to us. We therefore proceed according to the statutory regulations of the European and German data protection legislation in all operations of data processing (e.g. collecting, processing and transmission).
The following privacy policy gives you an overview of which of your data is asked for on our websites, how this data is used and forwarded, in which way you can find out about the information given to us and which security measures we take to protect your data.

1. Who is your contact (controller) for your data protection concerns?

Controller as defined in the data protection regulations for all data processing procedures carried out via our websites is:

Hackel Design e. K.
97080 Würzburg Telefon +49 931 30 419 000
Fax +49 931 30 419 001

In line with the statutory stipulations we have appointed a data protection officer for our company because the legal requirements for the appointment are not fulfilled.

Questions regarding data protection and your rights as a data subject (see below) please address at the above stated address.

2. Which data do we need from you for the use of our websites? Which data is collected and stored during use?

Personal data is any information that refers to an identified or identifiable natural person (“data subject”), such as e.g. your name, your address, your phone number, your date of birth, your bank details and your IP address.

Basically, we only collect and use personal data of our users when this is necessary in order to provide a functioning website and our contents and services. The collection and use of personal data of our users is only carried out as a rule after obtaining the consent of the user. An exception applies in such cases, where obtaining prior consent is not possible for practical reasons and the processing of data is permitted by statutory regulations.

The following data is recorded during the use of our websites, whereby storage is exclusively for internal system-related and statistical purposes, so-called usage data:

  1. Information on the type of browser and the version used
  2. The operating system of the user
  3. The IP address of the user
  4. Date and time of access
  5. Websites, which are called by the system of the user via our website
  6. Websites, which the user visited on our homepage

The data are stored in logfiles of our system. A storage of these data together with other personal data of the user will not take place.

Legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR (General Data Protection Regulation). The storage in log files is carried out to ensure the functioning of the website. In addition, the data is used to optimise the website and ensure the security of our IT systems. An analysis of the data for marketing purposes does not take place in this connection. Our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR also lies in these purposes.

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of recording data to make the website available, this is the case when the respective session is terminated.

In the case of storage of the data in log files, this is the case after 16 weeks at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or modified so that it is no longer possible to allocate them to the accessing client. The recording of data to make the website available and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no contesting option.

The acquisition of data and the storage in log files is essential and mandatory for this website. Therefore, the user has no right to object.

Contact via e-mail

On our website it is possible to contact us via e-mail. In this case we store the personal data of the user transmitted via the e-mail. We only use your data to process your request and may contact you for this purpose using the contact details you provided. This data will not be used for advertising purposes or forwarded to third parties. The legal basis for processing data sent via email transfer is our legitimate interests. If the contact refers to the completion of a contract, additional legal basis for the processing is for the performance of the contract or taking requested pre-contractual steps. The processing of personal data only serves the purpose of processing the communication. This data is deleted as soon as it is no longer required to fulfil the purpose of its collection. This is the case for personal data from email communication once the conversation with the user is over. The conversation is over when the circumstances show that the relevant situation has been resolved.

Right to object:

You have the right to object to the processing of personal data concerning you on the basis of our legitimate interests on reasons arising from your specific situation at any time. For processing your rights, please use via the contact data stated above. If you contacted us via e-mail and you object the storage of your data, we cannot continue the conversation with you.

All personal data we collected while contacting you will be deleted in this case.

3. Rights as data subject

If personal data relating to you is processed, you are a data subject as defined in the GDPR and you are entitled to the following rights against the controller:

Information, rectification, restriction of processing and erasure

You have the right at any time to obtain information free of charge about any personal data we have stored about you, about the origin and recipient as well as the purpose of data processing via our websites. In addition, you have the right to rectification, erasure and restriction of the processing of your personal data, where the statutory provisions exist.

Right to data portability

You have the right to receive the personal data relating to you that you have made available to us as controller in a structured, commonly used and machine-readable format. We can meet this right by providing a csv-export of the customer data processed relating to you.

Right to information

If you have asserted your right to rectification, erasure or restriction of processing to the controller, this is obliged to inform all recipients, to whom the personal data relating to you was disclosed, about this rectification or erasure of the data or the restriction of processing, unless this proves to be impossible or involves an unreasonable expense or effort.
You have the right vis-à-vis the controller to be informed of these recipients.

Right to object

You have the right, for reasons that result from your particular situation, to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6 para. 1 lit. e or lit. f GDPR: this shall also apply to a profiling that is supported on these provisions.
The controller no longer processes the personal data relating to you, unless he can prove compelling legitimate grounds for the processing that override your interests, rights and liberties, or the processing serves the assertion, exercise or defence of legal claims.
If the personal data relating to you is processed in order to operate direct advertising, you have the right to object to the processing of the personal data relating to you for the purpose of such advertising at any time, this also includes profiling, where this is associated with such direct advertising.
If you object to the processing for direct advertising purposes, the personal data relating to you will no longer be processed for these purposes.
You have the possibility, in connection with the use of services of the information society – irrespective of the Directive 2002/58/EC – to exercise your right to object by means of automatic processes with which technical specifications are used

Revocability of data protection declarations of consent

In addition, you may revoke the consents that you have given us with effect to the future at any time at the contact details stated below.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular, in the member state of your place of residence, your place of work or the place of alleged infringement, if you consider that the processing of the personal data relating to you infringes the EU general data protection regulation.
The supervisory authority, with which the complaint has been lodged, informs the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

4. Amendments of this data protection policy

We reserve the right to change our Data Protection Policy as required without any prior notice. Please therefore regularly check this page for any changes.

  • Hackel Design e. K.
  • Alfred-Nobel-Straße 13
  • 97080 Würzburg
  • Germany
  • T +49 931 304190-00
  • F +49 931 304190-01