Privacy Policy

1. Controller 

As the operator of this website (https://www.hoftexgroup.com), Hoftex Group AG, Fabrikzeile 21, 95028 Hof, is the controller in the sense of the EU General Data Protection Regulation (GDPR) who individually or jointly makes decisions on the purposes and means of the processing of personal data, hereafter referred to as “data.” 

2. Processing of Personal Data

According to the General Data Protection Regulation, personal data is any information concerning an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person).

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Use of our website does not require you to provide data. However, in certain cases, we will need your name, address and additional information to perform your requested services.

The same applies to, e.g., the sending of information material and ordered goods and to responses to individual inquiries. We will notify you when required. Furthermore, we only process data you provide to us voluntarily and data that is collected automatically when our website is visited (e.g., your IP address and the names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files).

If you request our services, usually only the data required for us to perform the service will be collected. Any additional data we may request may be provided voluntarily.

Data will only be processed to perform requested services and to safeguard our legitimate business interests. 

3. Protection of Your Personal Data 

Thank you for your interest in our company and our products and services. We want you to feel safe about your data when visiting our website. We take the protection of your data very seriously and strictly adhere to the General Data Protection Regulation and the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] in its respectively valid form.

We implemented technical and organizational measures to ensure compliance with data protection regulations by both us and our commissioned external service providers. We require our employees and commissioned service providers to maintain confidentiality and adhere to the General Data Protection Regulation and the German Federal Data Protection Act in its respectively valid form.

As part of our obligation to provide information, we want this Privacy Policy to be as transparent as possible and will explain the purposes for processing your data and use of tracking/analysis tools, cookies and social media plugins hereafter.

4. Purposes for Processing Personal Data 

We will process the data you provide in accordance with the principles of data economy and purpose limitation. The principle of purpose limitation states that data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is not considered to be incompatible with the initial purposes. We only process your data to answer inquiries, handle your orders and provide access to certain information or offers to you. Maintaining customer relationships may also require us or a commissioned service provider to use this data to inform you about product offers or to conduct online surveys to fulfill the tasks and requirements set by our customers.

We will only process the data you provide online for the stated purposes. Your data will not be transferred to third parties without your express consent.

Data will only be collected or transmitted to authorized state institutions and officials in accordance with applicable laws or if we are required to do so due to a court order.

We respect that you may not wish to provide your data to support our customer relationship (especially not for direct marketing or market research purposes). We will not sell your data to third parties or otherwise market your data without your consent. 

5. Data Collected Automatically When Visiting Our Website 

When using our website, the following data may be processed for technical and organizational reasons: The names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files and your IP address. 

6. Cookies 

Only technically necessary cookies are used on our websites.

7. Use of Google Analytics

Google Analytics is not used on our websites.

8. Facebook Button

On our websites we have buttons of the social network Facebook, which is run by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304. The Facebook Button is identified by a white letter “f” on a blue logo.

Our website's users are informed that our website features buttons for Facebook. If you activate the stated button, the plugin will establish a direct connection to Facebook. The contents of the plugins you use are transmitted by Facebook directly to your browser. We have no influence on the contents of the transmitted data. Nonetheless, we want to inform you about which data is transmitted to Facebook to the best of our knowledge.

If you click on the button, information that you opened a certain page of our Internet offer will be transmitted to the servers of Facebook. For users logged in to Facebook this means that usage data will be assigned to their personal accounts and stored. If you activate the button this information will be transmitted directly by your browser to Facebook where it will be saved. Even if you do not have an account on Facebook, it may possibly nonetheless obtain and save your IP address.

For the purpose and scope of data collection, further processing and use of this data and your according rights and privacy settings options, please see the following privacy policies of the social network provider: Facebook: https://facebook.com/policy.php 

If you do not want Facebook to assign the data collected through our website please log out of your Facebook  account before visiting our website. You may also block plugins of Facebook through browser add-ons.

9. Use of Google Maps

Google Maps is not used on our website.

10. Children and Young People

Our website is aimed exclusively at potential applicants/customers, business partners and media representatives.

Persons under 16 years of age should not transmit data to us without the permission of a parent or guardian. We do not request data from children or youths who have not yet completed their sixteenth year of life. We do not collect such data or provide such data to third parties.

11. Security 

We implemented technical and operational protective measures in accordance with the applicable legal regulations to protect your data from, loss, destruction, manipulation and unauthorized access. Our security measures are reviewed regularly and adjusted to technological advances. All our employees and all persons participating in data processing are required to adhere to the General Data Protection Regulation, the German Federal Data Processing Act in its respectively valid form and other laws relevant for data protection and must treat data confidentially.

Furthermore, we conclude according agreements with any external service providers we commission.

Our security measures are regularly reviewed and adjusted in accordance with technological advances.

12. Changes to Our Privacy Policy 

We reserve the right to make changes to our security and data protection measures if required due to technical developments. In such cases, we will also adjust our Privacy Policy. Therefore, please note the respectively current version of our Privacy Policy.

13. Consent 

Should the processing of your data require your consent, we will obtain it from you and use your data for the stated purposes for which we requested your consent. Your consent will be documented digitally. You may revoke your consent at any time with future effect. To do so, please write us an email
datenschutzbeauftragter@hoftexgroup.com.

14. Contact Form

If you contact us through our contact form, we will request personal information. A valid email address is required to respond to your inquiry. Additional personal information may be provided voluntarily.

Your information will be processed further by email.  Information submitted through the contact form is not transmitted through end-to-end encryption.

Your data will be saved on secure servers in Germany under adherence to data protection regulations.

Data for contacting us is processed on the basis of your voluntary consent. By activating the "Send" button, you agree to our processing of your contact information for the above-stated purposes. If you do not agree, you must abort this process. No information will then be transmitted through our contact form and no data will be processed.

You may revoke your consent at any time with future effect.

We only use your data to the extent required for handling your inquiry and for further correspondence with you. We save data collected through your use of our contact form to process your inquiry and for subsequent questions and will delete your data in accordance with data protection regulations after completing your request, unless other legal storage obligations apply.

15. Application Process 

By transmitting your applicant data, you consent to the processing of your data for the respective application process. You may revoke your consent at any time with future effect. 

16. Data Subject Rights

If we process your data, you are entitled the following extensive rights as a data subject:

a)    Right to Information Under Art. 15 of the General Data Protection Regulation, you have the right to information about the data processed by us. You may especially obtain information about the purposes of the processing, the categories of personal data concerned, the categories of possible recipients and the envisaged period for which the personal data will be stored. Please submit information requests to  datenschutzbeauftragter@hoftexgroup.com

b)    Right to Rectification Under Art. 16 of the General Data Protection Regulation, you have the right to obtain rectification or completion of your data from us.

You may exercise this right by contacting the above-stated addresses.

c)    Right to Erasure Under Art. 17 of the General Data Protection Regulation, you have the right to obtain erasure of personal data concerning you if storage of the data is no longer required and if there is no other legal ground for its processing. You may also obtain erasure if you object to the processing and there are no overriding legitimate grounds for the processing and if your data was processed unlawfully or if the personal data must be erased for compliance with a legal obligation under EU or national law.

You may exercise this right by contacting the above-stated addresses.

d)    Right to Restriction of Processing Under Art. 18 of the General Data Protection Regulation, you have the right to obtain the restriction of processing if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of your personal data; if the processing is unlawful, but you oppose the erasure of your personal data; the purposes for the processing cease to apply, but the data is required for the establishment, exercise or defense of legal claims or if you objected in accordance with Art. 21 of the General Data Protection Regulation and if whether the legitimate grounds of the controller outweigh your interests has not yet been determined.

You may exercise this right by contacting the above-stated addresses.

e)    Right to Data Portability Under Art. 20 of the General Data Protection Regulation, you have the right receive your personal data in a structured, commonly used and machine-readable format (data portability). In addition, under certain circumstances, you may also receive your data directly from a controller if technically possible.

You may exercise this right by contacting the above-stated addresses. 

17. Right to Object 

You have the right to object to use of your data for the above-stated purposes at any time (Art. 21 of the General Data Protection Regulation). This is possible for objections to direct marketing or on grounds relating to your particular personal situation.

If you object to direct marketing, we will implement your general objection right without information about your particular personal situation. To exercise your right to object, please write us an email at datenschutzbeauftragter@hoftexgroup.com. 

18. Questions, Suggestions, Complaints to the Internal / External Data Protection Officer 

Should you have any questions about our Privacy Policy, data protection or the processing of your personal data, please contact our data protection officer directly:

Hoftex Group AG
Group data protection officer
Fabrikzeile 21,
95028 Hof 09281 / 49-0
datenschutzbeauftragter@hoftexgroup.com  

Information requests, suggestions and complaints may also be submitted to the data protection officer.

19. Right to Submit a Complaint to a Supervisory Authority 

Please also note that, irrespective of other administrative or legal remedies, you have the right to submit complaints to supervisory authorities, especially in the Member state of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes on the General Data Protection Regulation.

A list of (non-public sector) supervisory authorities and their addresses is provided (in German) at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .  

20. Neutex application

In the following we would like to inform you about the processing of your personal data in connection with the use of our information app "Neutex-App" from our subsidiary, Neutex Home Deco GmbH. If you are interested in our articles, you have the option of using the Neutex app for IOS and Android devices. When opening the app, consent to the collection of your data is obtained. The legal basis for the processing of your data is therefore the consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. If you use the app, it enables you to look through our product catalog.

Our sales department also uses the application to present our new collection to you digitally and to process your data in order to be able to send you samples. If you are interested in this, your data will be saved and (if you are a new customer) transferred to our ERP system. If you want to place an order, the samples you want will be recorded and added to your order. In this case, the processing of your data is necessary to fulfill the contract or to carry out pre-contractual measures (Art. 6 Paragraph 1 Clause 1 lit. b GDPR). In other cases, your data will only be processed if you have given your consent (Art. 6 Para. 1 S. 1 lit. a GDPR). If you have given your consent, you can revoke your consent at any time with effect for the future. Your personal data will be deleted when they are no longer required for the stated purposes, unless this is contrary to statutory retention requirements.

Dear clients, business partners and prospective clients,

As the controller, we hereby inform you as a client, business partner or prospective client that we, the

Hoftex Group AG
Fabrikzeile 21
95028 Hof   

and our subsidiaries will process your personal data (hereafter referred to as "data") in accordance with the EU General Data Protection Regulation (GDPR) and the new version of the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG n. F.]. You or your employees are data subjects in the sense of Art. 4 Number 1 of the General Data Protection Regulation.

A distinction must be made between Art. 13 of the General Data Protection Regulation (data collected from the data subject) and Art. 14 of the General Data Protection Regulation (data not obtained from the data subject):

·          Data collected from the data subject (Art. 13 of the General Data Protection Regulation) means data collected with the knowledge or participation of the data subject.  

·          Data not obtained from the data subject (Art. 14 of the General Data Protection Regulation) means data collected without the knowledge or participation of the data subject.

The controller is subject to the following obligations to provide information to clients, business partners or prospective clients:

1.   At the time of the data collection, under Art. 13(1) and Art. 14(1) of the General Data Protection Regulation, the controller must inform the data subject about the following if the data subject does not already possess this information:

a)  Name and contact details of the controller and, if applicable, of his deputy 

Responsible for adherence to data protection regulations is the controller and, therefore, the management. At our firm, these are:  

authorized representative: Ms. Manuela Spörl and Mr. Daniel Köster

b)  Contact details of the group data protection officer 

Our group data protection officeris:

Hoftex Group AG
Group data protection officeris
Fabrikzeile 2
95028 Hof
Phone: 09281 49 0

E-Mail: datenschutzbeauftragter@hoftexgroup.com

c)   Data processing purpose and legal basis  

Data processing (especially the collection, use, storage or transmission) is performed for the purpose of contract fulfillment (contract performance, payment, client and invoice management, reporting), for the purpose of the implementation of precontractual measures (especially those made on request by a data subject, i.e., offers), for the purpose of the fulfillment of legal obligations or to safeguard legitimate interests (acquisition). 

The legal basis for the processing of the client, business partner or prospective client data is especially Art. 6(1) Letter b of the General Data Protection Regulation (data processing for the performance of a contract), Art. 6(1) Letter f of the General Data Protection Regulation (data processing for the purposes of legitimate interests), Art. 6(1) Letter c of the General Data Protection Regulation (compliance with a legal obligation). Another legal basis may be the consent of the client, business partner or of the prospective client in the sense of Art. 6(1) Letter a of the General Data Protection Regulation.

d)   Legitimate interests of the controller or of a third party 

If processing is performed on the basis of Art. 6(1) Letter f of the General Data Protection Regulation for the purposes of the legitimate interests pursued by the controller or by a third party, the client, business partner or prospective client must be informed about this. Legitimate interests may include legal, economic or intellectual interests whose legitimation must be determined by a weighing of the employee's interests in each case.

In this case, processing may also be performed on the basis of economic interests that consist of establishing or maintaining a business relationship.

e)   Recipients or categories of recipients   Under Art. 4 Number 9 of the General Data Protection Regulation, recipients of your data may include natural or legal persons, public officials or institutions.

Your data may be transferred to our competent internal offices.

In addition, your data may be transferred to external services providers (e.g., data destruction or accounting service providers). The service providers commissioned by us (commissioned processors) were carefully selected and reviewed by us. In addition, we conclude processing agreements with every commissioned processor in accordance with Art. 28 of the General Data Protection Regulation.

f)   Data transmissions to third countries or international organizations

Your data will be processed exclusively within the EU and saved on secured servers in Germany under adherence to the General Data Protection Regulation. Data is not currently transmitted to third countries or international organizations.

If, during processing, your data is transmitted to countries outside of the EU or the EEA or to service providers in countries outside of the EU or the EEA (so-called third countries), we will check whether an adequacy decision by the European Commission is present or will conclude according data protection agreements, especially on commissioned processing and EU standards.

g)  Categories of personal data 

For the cooperation, we will process the following data concerning you: ·         Identification data (name, first name, gender);

·         Contact data (e.g., address, telephone numbers and email address)
·         Other data disclosed voluntarily

2.      Furthermore, at the time of data collection, the controller must inform the data subject about the following under Art. 13(2) and Art. 14(2) of the General Data Protection Regulation unless the data subject already possess this information:

a)   Sources of personal data  

Usually, your data will have been provided to us by you voluntarily. In such cases, it is important for this data to be accurate and for you to assist us in keeping this data up to date. Other sources include:
·         You contacting us
·         Business partners/suppliers
·         Certain publicly accessible information from public sources (including from the Internet)

b)    Storage duration  

We will only save your data until the pre-contractual or contractual purpose is fulfilled and no other legal storage obligations apply (e.g., commercial law or tax law storage requirements).

If you granted your consent, we will save your data until you withdraw your consent if there is no other legal basis for the processing of your data. You granted your consent to us by contacting us.

c)  Your data subject rights 

Under Art. 15 of the General Data Protection Regulation, you may obtain information about the data we process concerning you at any time. You may especially obtain information about the purposes of the processing, the categories of processed data, the categories of possible recipients and the scheduled storage duration.

In addition, under Art. 16 of the General Data Protection Regulation, you may obtain rectification of any inaccurate data.

Additionally, under Art. 17 of the General Data Protection Regulation, you may obtain the erasure of data concerning you if its storage is no longer required, you withdraw your consent to the data processing and if there is no other legal basis for the processing, you object to the processing and there are no overriding reasons for further processing your data, your data is processed unlawfully or in case of a legal erasure obligation under EU or national law.

Furthermore, under Art. 18 of the General Data Protection Regulation, you have a right to restricted processing if you contest the accuracy of the data concerning you for a duration that allows the controller to review the accuracy, if the processing is unlawful, but you reject the erasure of the data, the purpose for the processing no longer applies, but the data is still needed for the exercise of legal claims or if you object in accordance with Art. 21 of the General Data Protection Regulation and whether the legitimate reasons of the controller override your interests has not yet been determined.

Furthermore, under Art. 20 of the General Data Protection Regulation, you have the right to receive the data concerning you in a commonly-used, structured and machine-readable format (data portability). In addition, under certain conditions, you may have your data transmitted directly by a controller if technically feasible.

You have the right to object to the use of your data for the above-stated purposes at any time (Art. 21 of the General Data Protection Regulation).

If you consent to our processing of your data, you may withdraw this consent at any time for the future.

If you would like to withdraw your consent or exercise the above-stated data subject rights, please write us at Hoftex Group AG, Fabrikzeile 21, D-95028 Hof, or send us an email at info@hoftexgroup.com.

d)   Right to lodge a complaint to a supervisory authority You may lodge a complaint to a data protection supervisory authority at any time (Art. 77 of the General Data Protection Regulation). A list of supervisory authorities in Germany (for the non-public sector) and their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html (in German)

e) Providing data

If the providing of data is legally or contractually required or necessary for contract conclusion, the client, business partner or prospective client must be informed about this

Data (e.g., one's name, address or email address) is especially required for the establishment of contractual relationships. Invoicing and payment processing require additional data (e.g., the invoice recipient, account data and invoice address). 

If you do not provide your data to us, we will be unable to establish or maintain a business relationship with you and cannot ensure the orderly fulfillment of contractual or legal obligations.

f)  Automated decision-making, including profiling 

No automated decision-making, including profiling, is performed (Art. 22 of the General Data Protection Regulation).   

3. Information concerning intended changes to data processing purposes  

We will only process your data for the above-stated purposes. 

Should the purposes for data processing change, we will inform you about the new purpose in time before any further processing.    

Sincerely,  

Hoftex Group AG