This website is provided by Hydro Building System Germany GmbH. Hydro Building Systems Germany GmbH is one of five business operations of the company Hydro (referred to as 'Hydro' in accordance with these provisions).
Hydro is the supervisory authority for processing the personal data collected on this website. Hydro respects your privacy and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other relevant laws. The website is managed by Episerver DXC, on behalf of Hydro.
This Privacy Notice is designed to help you understand what personal data we collect about you, why we collect it, what we use it for and what rights you have when it comes to using, accessing and correcting your personal data.
1 Data controller
The data controller, in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR), is Hydro Building Systems Germany GmbH, Einsteinstraße 61, 89077 Ulm, Germany.
firstname.lastname@example.org (see our legal notices).
2 Contact details for the data protection officer
If you have any questions relating to data privacy, please contact our data protection officer:
intersoft consulting services AG
Beim Strohhause 17
3 Collecting and processing personal data
If you only access our website to gain information, i.e. if you don’t register on the website or provide us with your information in any other way, we’ll only collect the personal data that your browser transmits to our server. If you wish to view our website, we’ll collect the following information about you which is technically necessary to enable us to correctly display our website, and to ensure its stability and security. The legal basis for this is Article 6 (1)(f) of the GDPR.
–IP address, date and time of request, time difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred, website making the request, browser, operating system and its interface, language and version of the browser software.
4 Contact by e-mail
When you contact us by email or by using our contact form, the data you provide (your email address, your name and telephone number) will be stored by us so that we can answer your questions.
The establishment of contact with you and the associated transmission of personal data is performed expressly on a voluntary basis and with your consent in accordance with Article 6 (1)(a) of the GDPR. As this information relates to communication channels (for example, email address and telephone number), you also provide your consent for us to contact you using these communication channels when needed, to respond to your request. You can withdraw this consent at any time, with future effect.
We’ll delete your personal data in this context once it’s no longer necessary for this to be stored, or we’ll restrict the processing of this data if it’s subject to statutory retention requirements.
5 Creating a user account (registration)
To make full use of all functions on our website, you can create your own user account. As part of the registration process for this, we collect and store certain personal data that you provide on the registration form. This includes your title, name, company, address, e-mail address and telephone number.
After you have successfully registered, you’ll have access to our WIC product range through www.wictip.com, download documentation and technical data sheets, as well as our various tool functions. You can also use the same user account information to access another website provided by us: www.wictip.com.
Processing of data is performed based on your voluntarily granted consent in accordance with Art. 6 (1)(a) of the GDPR. You can revoke your consent at any time and thereby delete your user account. We’ll delete all stored personal data, as there are no statutory retention periods that apply for certain data you provided.
When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard drive assigned to the browser you are using, and which provide certain information to the location setting the cookie. Cookies cannot run programs, access your files or transmit viruses to your computer. They serve to make your experience of using the internet more user-friendly and effective.
The legal basis for the processing of personal data using cookies being technically necessary for the use of our website is provided for by Art. 6 (1)(f) of the GDPR. The legitimate interest of the data controller is to facilitate the user-friendly and effective design of their website.
This website uses the following types of cookies, the scope and function of which are explained below:
6.1 Transient cookies
These cookies are deleted automatically when you close your web browser. These include session cookies. Session cookies save a session ID, which can be used to assign different requests from your browser to a common session. These cookies allow us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.
6.2 Persistent cookies
These cookies are automatically deleted after a specified period, which may differ depending on the type of cookie. You can delete these cookies at any time by going to the security settings in your web browser.
6.3 Prevention of cookies
You can configure your browser settings according to your own wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that if you do so you may not be able to use all the functions of this website.
7 Third party content
7.1 Google Webfonts
This website makes use of Google Webfonts. Google Webfonts are provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. To load the displayed fonts and effects, your browser connects directly to Google's servers in the United States. Google collects personal information. This information includes your IP address, as well as other device data, information about your browser as well as the operating system you are using. This is essential to use the plug-in correctly.
7.2 Google Maps
The Google Maps service is used on our website. Google Maps are provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. This always assumes that Google receives the IP addresses of the users. This is because without this IP address they would not be able to send the content to the browser of the respective user. Your IP address is required for this content to be presented to you. We endeavour only to use content; whose respective providers use your IP address only to deliver the content to you. However, we don’t have any influence over whether Google stores your IP address, for example, for statistical purposes. If we become aware of this, we’ll inform our users.
8 Website analysis
We use various services for the purposes of analysing and optimising our website and these are detailed below. Using these services, we’re able to analyse how many users visit our site, what information is viewed the most, and how users find this information. We collect data about which website was used to access our website (referrer), which sub-pages of our website were viewed and how often and for how long these sub-pages are viewed. This helps us to design and improve our website and content to be more user-friendly. The data collected isn’t intended to personally identify individual users. Anonymous or pseudonymous, data is collected. The legal basis for this is Article 6 (1)(f) of the GDPR.
The legitimate interest of the data controller is to optimise their website by means of website analysis programs.
8.1 Google Analytics
This website uses Google Analytics, a web-analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This includes the use of the Universal Analytics operating mode. Using Google Analytics means we can assign data, sessions and interactions across multiple devices to a single pseudonymous user ID analyse the activities of a user across different devices.
8.2 GA Audience
This website makes use of GA Audience, an analysis software by Google Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. GA Audience is used to advertise content to our target audiences based on data collected by Google Analytics. GA Audience gains access to the cookies set by Google Analytics to statistically analyse this data in accordance with various criteria such as age, nationality, language, gender, device and browser information, as well as miscellaneous criteria pertaining to user behaviour. This enables us to operate a marketing campaign that’s based on the interests of our users and to always show content that interests you.
If you wish to prevent the processing of your data by GA Audience, please use the option to deactivate tracking by Google Analytics as specified in Section 8.1.
This website uses Hotjar, an analysis software provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar enables us to measure and evaluate usage behaviour on our website. The information generated about your visit, by means of the tracking code and cookie are transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following information based on your device:
The following information may be recorded by your device and your browser:
- the IP address of your device (collected and stored in an anonymous format)
- your personal information including email address and full name, if you’ve registered for a user account and are logged in.
- screen size of your device
- device type and browser information
- geographical location (country only)
- your preferred language for viewing our website
- log data
The following data is automatically collected by our servers when Hotjar is used:
- referring domain
- pages visited
- geographical location (country only)
- your preferred language for viewing our website
- date and time the website was accessed
Hotjar use this information to evaluate your use of our website, generate reports about this usage and to provide other services relating to website usage and online evaluation of the website.
To provide its services, Hotjar also uses third-party services, such as Google Analytics and Optimizely. These third parties may store information sent by your browser during your visit, for example, cookies or IP requests. For specific information on how Google Analytics and Optimizely store and use your data, please refer to their privacy policies. You can prevent Hotjar from collecting your data by using this link.
The legal basis for using Google Analytics is Article 15 (3) of the German Telemedia Act [TMG] and Article 6 (1)(f) of the GDPR. Our legitimate interest is justified by the user-oriented presentation and evaluation of our content, as well as the improvement of our services.
If you don’t wish to receive user-based advertisements, you can disable these by using Google's Ad Preferences.
10 Your rights
You have the following rights regarding your personal data:
10.1 General rights
You have the right to be informed about your personal data, the right to correction and erasure of that data, the right to restrict and object to processing, and the right to data portability. As processing is based on your consent, you have the right to withdraw that consent with future effect.
10.2 Rights when data is processed for legitimate interests
In accordance with Article 21 (1) of the GDPR, you have the right, at any time and for your own personal reasons, to raise an objection against the processing of your personal data. This is carried out on the basis of Article 6 (1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1)(f) of the GDPR (data processing to safeguard a legitimate interest). This also applies to profiling based on this regulation. If you make an objection, we’ll no longer process your personal data unless we can demonstrate compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms, or in the case that the data processing serves the establishment, exercise or defence of legal claims.
10.3 Rights regarding direct advertising
As we process your personal data to pursue direct advertising, you have the right, at any time and in accordance with Article 21 (2) of the GDPR, to raise an objection to the processing of your personal data for the purpose of this means of advertising. This also applies to profiling, as this relates to direct advertising.
If you object to your data being processed for direct advertising, we’ll no longer process your data for this purpose.
10.4 Right of appeal to a supervisory authority
You also have the right to appeal to a supervisory authority regarding the processing of your personal data carried out by us.
11 Data transfer
Your personal data will not be transferred to third parties unless we are legally obliged to do this. the disclosure of data is required for executing the contractual relationship, or you have previously consented to your data being disclosed.
External service providers and partner companies such as server hosts, or providers of analysis tools will only receive your data if this is necessary to fulfil the respective purpose. In these cases, the data transfer is limited to the minimum required. As our service providers encounter your personal data, within the context of order processing in accordance with Article 28 of the GDPR, we’ll ensure that they comply with the provisions of the data privacy laws in the same way. For more information on how they do this, refer to the privacy policies of those providers. Each service provider is responsible for the content of third-party services; we therefore check the services for compliance with legal requirements, to the extent which can be reasonably expected of us.
We attach great importance to processing your data within the EU/EEA. However, it may be the case that we use service providers who process data outside of the EU/EEA. In these cases, we’ll ensure that the recipient provides a suitable level of data protection before your personal data is transferred to them. This means that an EU Standard Contract or other adequate provision, such as the EU Privacy Shield, is in place which achieves a level of data protection that is comparable to the standards within the EU.
12 Data privacy
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in keeping with technological progress.