Privacy Policy

1. General

1.1 What is personal data
Personal data is information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. Therefore, as far as possible, we refrain from collecting personal data.

1.2 Handling of personal data
Personal data is used exclusively to establish the contract, define its content, and implement or process the contractual relationship (Art. 6 (1 b) GDPR).

Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f) GDRP).

We may use order processors to process your personal data but will not pass on the personal data to third parties beyond this as a matter of principle.

Only for the fulfillment of the contract, the data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary to deliver ordered goods. For the processing of payments, the payment data required for this will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

The processing of your personal data takes place exclusively within the EU unless otherwise stated below.

1.3 Usage data
When visiting the website, general technical information is collected. This is the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. A linkage of these usage data with your further personal data does not take place.

1.4 Duration of storage
We store your personal data after the termination of the purpose for which the data was collected only as long as this is required by law (especially tax law).

2. Your rights

2.1 Information
You can request information from us as to whether we are processing personal data about you. If so, you have a right to information about this personal data and the further information specified in Article 15 of the GDPR.

2.2 Right to rectification
You have the right to have incorrect personal data concerning you corrected and, in accordance with Art. 16 GDPR, you may request the completion of incomplete personal data.

2.3 Right to erasure
You have the right to demand that we delete the personal data concerning you without undue delay. We are obliged to delete them without delay, in particular, if one of the following reasons applies:

• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

• You revoke your consent on which the processing of your data was based, and there is no other legal basis for the processing.

• Your data has been processed unlawfully.

The right to erasure does not exist insofar as your personal data is required for the assertion, exercise or defense of our legal claims.

2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if

• You dispute the accuracy of the data, and we, therefore, verify the accuracy,

• the processing is unlawful, and you refuse the deletion and demand the restriction of use instead,

• we no longer need the data, but you need it to assert, exercise or defend legal claims,

• you have objected to the processing of your data, and it has not yet been determined whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.

2.6 Right of withdrawal
Insofar as the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the State Data Protection Officer, directly.

3. Data security

3.1 Data security
Technical and organizational measures protect all data on our website against loss, destruction, access, modification and distribution.

3.2 Sessions and cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is taken from sessions or through cookies without your express consent, and cookies are only used if this is technically necessary for the website (e.g., spam protection for contact form, shopping cart function) and thus the weighing shows that there are no overriding interests on your part (Art. 6 (1 f) GDPR) or there is express consent on your part.
We use cookies after your explicit consent to personalize content and ads, offer social media features, and analyze our website’s accessibility. We may share information about your use of our website with our social media, advertising and analytics partners with your consent. Our partners may merge this information with other data that the partners already have about you.
Below you will find the domain, name and duration of cookies used only based on your consent:

Site cookies
_gid .herberholz.com Wed, 18 Aug 2021 12:34:04 GMT
_ga .herberholz.com Thu, 17 Aug 2023 12:34:04 GMT

4. Newsletter

If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent according to Art. 6 (1 a) GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options provided in the legal notice or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

5. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference to the privacy statements and opt-out options linked below).

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland).
Privacy policy https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Privacy Policy: http://www.youtube.com/t/privacy/.

These social media platforms may process personal data outside the EU; we refer in this respect to the above privacy statements of the social media platforms.

The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 (1 a) GDPR).

6. Third-party services

6.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and collects and stores data via this web analytics service, from which user profiles are created using pseudonyms. The usage profiles created in this way are used to evaluate visitor behavior in order to design and improve the offer presented on this website in line with requirements. Google Analytics uses “cookies”, which are small text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The usage profiles kept under a pseudonym will also not be merged with personal data about the user without the user’s express and separately declared consent. The use of cookies and data transmission to Google is only based on your consent (Art. 6 (1 a) GDPR). You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
In addition, you can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent collecting your data during future visits to this website: Google Analytics deactivate.
You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/.
For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.
We want to point out that on this website, Google Analytics has been extended by the code “anonymizeIp” to ensure an anonymized collection of IP addresses (so-called IP masking).

6.2 Social media links and social sharing
We have our own social media pages with third-party providers that can be reached via links from this website. By using the links, you can access the respective websites of the third-party providers (e.g., Facebook, Twitter, Instagram) and share our content. Here, no data transfer takes place by calling up our website. To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.

6.3 Use of Google Maps
This website uses Google Maps, a mapping service provided by Google and operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When using Google Maps, data on the use of the Maps functions by visitors to the websites is also collected, processed and used. Here, no interests of the users are affected which outweigh this technical necessity of the integration of the interactive map material (Art. 6 (1 f) GDPR). You can view Google’s data protection notice at http://www.google.de/intl/de/policies/privacy/. You can view the additional usage information for Google Maps at http://www.google.com/intl/de_de/help/terms_maps.html.

6.4 Google Web Fonts
We use so-called web fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), in order to be able to display a uniform font on our website. These are automatically stored in your browser cache when you call up one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a standard font of your computer may be used. Here, no interests of the users are affected which outweigh this technical necessity (Art. 6 (1 f) GDPR. You can view Google’s privacy policy here: https://www.google.com/policies/privacy/ Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq.

6.5 Use of YouTube
This website and the integrated offers contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is an offer of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The integration of the videos only takes place if you have consented to this (Art. 6 (1 a) GDPR). For the purpose and scope of data collection and use by Google, as well as your rights and settings options for protection as a customer of YouTube, please refer to the privacy policy of YouTube. These can be found at: http://www.youtube.com/t/privacy/.

6.6 Use of Sendinblue

Our e-mail communication is handled using “Sendinblue”, a platform of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin in Germany. Here, your e-mail address and your other data described in the context of these notes are stored on the servers of Sendinblue in France, Belgium and Ireland. Sendinblue uses this information to send and evaluate the e-mails on our behalf.  Sendinblue does not use the data of our mail recipients to write to them itself or to pass them on to third parties. The use only takes place with your express consent (Art. 6 (1 a) GDPR). You can view the privacy policy of Sendinblue at https://www.sendinblue.com/legal/privacypolicy/.

7. Contacting us

To contact us regarding data protection, you are welcome to use the following contact options. The person responsible in the sense of the GDPR:

Herberholz GmbH
Pregelstraße 6
58256 Ennepetal
E-Mail: info@herberholz.com
Phone: +49 2333 98 98-0
Fax: +49 2333 98 98 48

Our data protection officer will also be happy to assist you: Jörg Beiner, datenschutz@herberholz.com