As the operator of this website (https://www.hoftexgroup.com), Hoftex Group AG, Fabrikzeile 21, 95028 Hof, is the controller in the sense of the EU General Data Protection Regulation (GDPR) who individually or jointly makes decisions on the purposes and means of the processing of personal data, hereafter referred to as “data.”
2. Processing of Personal Data
According to the General Data Protection Regulation, personal data is any
information concerning an identified or identifiable natural person (data
subject). An identifiable natural person is one who can be identified, directly
or indirectly, in particular by reference to an identifier (such as a name, an
identification number, location data, an online identifier or to one or more
factors specific to the physical, physiological, genetic, mental, economic,
cultural or social identity of that natural person).
Processing means any operation or set of operations
which is performed on personal data or on sets of personal data, whether or not
by automated means, such as collection, recording, organization, structuring,
storage, adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making available, alignment or
combination, restriction, erasure or destruction.
Use of our website does not require you to provide
data. However, in certain cases, we will need your name, address and additional
information to perform your requested services.
The same applies to, e.g., the sending of information
material and ordered goods and to responses to individual inquiries. We will
notify you when required. Furthermore, we only process data you provide to us
voluntarily and data that is collected automatically when our website is
visited (e.g., your IP address and the names of the pages you opened, your
browser and operating system, time and date of access, search engines used or
names of downloaded files).
If you request our services, usually only the data
required for us to perform the service will be collected. Any additional data
we may request may be provided voluntarily.
Data will only be processed to perform requested services and to safeguard our legitimate business interests.
3. Protection of Your Personal Data
Thank you for your interest in our company and our products and services. We
want you to feel safe about your data when visiting our website. We take the
protection of your data very seriously and strictly adhere to the General Data
Protection Regulation and the German Federal Data Protection Act
[Bundesdatenschutzgesetz, BDSG] in its respectively valid form.
We implemented technical and organizational measures
to ensure compliance with data protection regulations by both us and our
commissioned external service providers. We require our employees and
commissioned service providers to maintain confidentiality and adhere to the
General Data Protection Regulation and the German Federal Data Protection Act
in its respectively valid form.
As part of our obligation to provide information, we want
purposes for processing your data and use of tracking/analysis tools, cookies
and social media plugins hereafter.
4. Purposes for Processing Personal Data
We will process the data you provide in accordance with the principles of data
economy and purpose limitation. The principle of purpose limitation states that
data shall be collected for specified, explicit and legitimate purposes and not
further processed in a manner that is incompatible with those purposes.
processing for archiving purposes in the public interest, scientific or
historical research purposes or statistical purposes is not considered to be
incompatible with the initial purposes.
We only process your data to answer inquiries, handle
your orders and provide access to certain information or offers to you.
Maintaining customer relationships may also require us or a commissioned
service provider to use this data to inform you about product offers or to
conduct online surveys to fulfill the tasks and requirements set by our
We will only process the data you provide online for
the stated purposes. Your data will not be transferred to third parties without
your express consent.
Data will only be collected or transmitted to
authorized state institutions and officials in accordance with applicable laws
or if we are required to do so due to a court order.
We respect that you may not wish to provide your data to support our customer relationship (especially not for direct marketing or market research purposes). We will not sell your data to third parties or otherwise market your data without your consent.
5. Data Collected Automatically When Visiting Our Website
When using our website, the following data may be processed for technical and organizational reasons: The names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files and your IP address.
When you visit our website, we may save information on your computer in form of
a (session) cookie. Cookies are small text files transmitted by a web server to
your browser and saved on your computer’s hard disk.
Except for your IP address, no personal user data will
be saved. This information allows you to be automatically recognized during
your next visit to our website and makes navigation easier. Cookies enable us
to, e.g., adjust our website to your interests and to save your password so
that you won’t have to re-enter it every time you visit our website.
You may also view our website without cookies. If you do not want us to recognize your computer, you may prevent cookies from being saved on your hard disk by setting your browser to “Disable cookies.” For detailed instructions, please see your browser’s help function. However, please note that disabling cookies may prevent you from fully using every function of our offers.
7. Use of Google
Our website uses Google Analytics, a web
analysis service of Google Inc. ("Google"), 1600 Amphitheatre
Parkway, Mountain View, CA 94043 USA. Google Analytics uses so-called cookies,
text files saved onto your computer that allow your use of the website to be
The information on your website use generated by the cookie is generally transmitted to a Google server in the USA where it is saved. If IP-anonymization is activated on our website, your IP address will be shortened by Google within a Member state of the European Union or in another state party to the European Economic Area Agreement (so-called IP masking).
Only in exceptions will your full IP address be
transferred to a Google server in the US and shortened there. On behalf of the
operators of this website, Google will use this information to assess your use
of this website, to compile reports about website activity and to perform
additional services related to use of the website and the Internet for the
The IP address transmitted by your browser through
Google Analytics will not be merged with other Google data. You can prevent
cookie storage through your browser settings at any time. However, please note
that you may not be able to use every function of this website. Furthermore,
you can prevent the collection of cookie-generated data (including your IP
address) on your use of the website and the processing of this data by Google
by downloading and installing the browser plug-in provided under the following
As an alternative to the browser plugin and on
browsers on mobile devices, you may also prevent data collection by Google
Analytics by activating the following link which will install an opt-out cookie
that will block any future collection of your data when visiting our website.
Please note that this link must be activated again if you delete your cookies.
8. Facebook Button
On our websites we have buttons of the social network
Facebook, which is run by the company Facebook Inc., 1601 S. California Avenue,
Palo Alto, CA 94304. The Facebook Button is identified by a white letter “f” on
a blue logo.
Our website's users are informed that our website
features buttons for Facebook. If you activate the stated button, the plugin
will establish a direct connection to Facebook. The contents of the plugins you
use are transmitted by Facebook directly to your browser. We have no influence
on the contents of the transmitted data. Nonetheless, we want to inform you
about which data is transmitted to Facebook to the best of our knowledge.
If you click on the button, information that you opened a certain page of our Internet offer will be transmitted to the servers of Facebook. For users logged in to Facebook this means that usage data will be assigned to their personal accounts and stored. If you activate the button this information will be transmitted directly by your browser to Facebook where it will be saved. Even if you do not have an account on Facebook, it may possibly nonetheless obtain and save your IP address.
For the purpose and scope of data collection, further processing and use of this data and your according rights and privacy settings options, please see the following privacy policies of the social network provider: Facebook: https://facebook.com/policy.php
If you do not want Facebook to assign the data
collected through our website please log out of your Facebook account
before visiting our website. You may also block plugins of Facebook through
9. Use of
This website uses Google Maps of Google Inc.,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps provides
information about locations that are of interest to you through search requests
and retrieved maps.
By using this website, you agree to the automated
processing of the data collected by Google Inc., its representatives and third
parties. We have no influence on Google's automated processing when you use
For more information, please see https://policies.google.com/privacy .
For Google Maps' Additional Terms of Service, please see: https://maps.google.com/help/terms_maps.html .
10. Children and Young People
Our website is aimed exclusively at potential applicants/customers, business
partners and media representatives.
Persons under 16 years of age should not transmit data
to us without the permission of a parent or guardian. We do not request data
from children or youths who have not yet completed their sixteenth year of
life. We do not collect such data or provide such data to third parties.
We implemented technical and operational protective measures in accordance with
the applicable legal regulations to protect your data from, loss, destruction,
manipulation and unauthorized access. Our security measures are reviewed
regularly and adjusted to technological advances. All our employees and all
persons participating in data processing are required to adhere to the General
Data Protection Regulation, the German Federal Data Processing Act in its
respectively valid form and other laws relevant for data protection and must
treat data confidentially.
Furthermore, we conclude according agreements with any
external service providers we commission.
Our security measures are regularly reviewed and
adjusted in accordance with technological advances.
We reserve the right to make changes to our security and data protection
measures if required due to technical developments. In such cases, we will also
Should the processing of your data require your consent, we will obtain it from
you and use your data for the stated purposes for which we requested your
consent. Your consent will be documented digitally.
You may revoke your consent at any time with future
effect. To do so, please write us at Marcus Schmierler or email us email@example.com.
If you contact
us through our contact form, we will request personal information. A valid
email address is required to respond to your inquiry. Additional personal
information may be provided voluntarily.
Your information will be processed further by
email. Information submitted through the contact form is not transmitted
through end-to-end encryption.
Your data will be saved on secure servers in Germany
under adherence to data protection regulations.
Data for contacting us is processed on the basis of
your voluntary consent. By activating the "Send" button, you agree to
our processing of your contact information for the above-stated purposes. If
you do not agree, you must abort this process. No information will then be
transmitted through our contact form and no data will be processed.
You may revoke your consent at any time with future
We only use your data to the extent required for
handling your inquiry and for further correspondence with you. We save data
collected through your use of our contact form to process your inquiry and for
subsequent questions and will delete your data in accordance with data
protection regulations after completing your request, unless other legal
storage obligations apply.
15. Application Process
By transmitting your applicant data, you consent to the processing of your data for the respective application process. You may revoke your consent at any time with future effect.
16. Data Subject Rights
If we process your data, you are entitled the following extensive rights as a
a) Right to Information
Under Art. 15 of the General Data Protection Regulation, you have the right to
information about the data processed by us.
You may especially obtain information about the
purposes of the processing, the categories of personal data concerned, the
categories of possible recipients and the envisaged period for which the
personal data will be stored.
Please submit information requests to Marcus
Schmierler or by email to firstname.lastname@example.org
b) Right to Rectification
Under Art. 16 of the General Data Protection Regulation, you have the right to
obtain rectification or completion of your data from us.
You may exercise this right by contacting the
c) Right to Erasure
Under Art. 17 of the General Data Protection Regulation, you have the right to
obtain erasure of personal data concerning you if storage of the data is no
longer required and if there is no other legal ground for its processing. You
may also obtain erasure if you object to the processing and there are no overriding
legitimate grounds for the processing and if your data was processed unlawfully
or if the personal data must be erased for compliance with a legal obligation
under EU or national law.
You may exercise this right by contacting the
d) Right to Restriction of
Under Art. 18 of the General Data Protection Regulation, you have the right to
obtain the restriction of processing if you contest the accuracy of your
personal data for a period enabling the controller to verify the accuracy of
your personal data; if the processing is unlawful, but you oppose the erasure
of your personal data; the purposes for the processing cease to apply, but the
data is required for the establishment, exercise or defense of legal claims or
if you objected in accordance with Art. 21 of the General Data Protection
Regulation and if whether the legitimate grounds of the controller outweigh
your interests has not yet been determined.
You may exercise this right by contacting the
e) Right to Data Portability
Under Art. 20 of the General Data Protection Regulation, you have the right
receive your personal data in a structured, commonly used and machine-readable
format (data portability). In addition, under certain circumstances, you may
also receive your data directly from a controller if technically possible.
You may exercise this right by contacting the above-stated addresses.
17. Right to Object
You have the right to object to use of your data for the above-stated purposes
at any time (Art. 21 of the General Data Protection Regulation). This is
possible for objections to direct marketing or on grounds relating to your
particular personal situation.
If you object to direct marketing, we will implement your general objection right without information about your particular personal situation. To exercise your right to object, please write us at Marcus Schmierler or email us at email@example.com.
18. Questions, Suggestions, Complaints to the Internal / External Data Protection Officer
processing of your personal data, please contact our data protection officer
95028 Hof 09281 / 49-0
Information requests, suggestions and complaints may also be submitted to the data protection officer.
19. Right to Submit a Complaint to a Supervisory Authority
Please also note that, irrespective of other administrative or legal remedies,
you have the right to submit complaints to supervisory authorities, especially
in the Member state of your habitual residence, place of work or place of the
alleged infringement if you believe that the processing of your personal data
infringes on the General Data Protection Regulation.
A list of (non-public sector) supervisory authorities and their addresses is provided (in German) at:
Dear clients, business partners
and prospective clients,
As the controller, we hereby
inform you as a client, business partner or prospective client that we, the
Hoftex Group AG
and our subsidiaries will
process your personal data (hereafter referred to as "data") in accordance
with the EU General Data Protection Regulation (GDPR) and the new version of
the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG n. F.]. You
or your employees are data subjects in the sense of Art. 4 Number 1 of the
General Data Protection Regulation.
A distinction must be made
between Art. 13 of the General Data
Protection Regulation (data collected from the data subject) and Art. 14 of the General Data Protection Regulation
(data not obtained from the data subject):
Data collected from the data subject (Art. 13 of the General Data
Protection Regulation) means data collected with the knowledge or participation
of the data subject.
Data not obtained from the data subject (Art. 14 of the General Data
Protection Regulation) means data collected without the knowledge or
participation of the data subject.
The controller is subject to the following obligations to provide
information to clients, business partners or prospective clients:
At the time of the data
collection, under Art. 13(1) and Art.
14(1) of the General Data Protection Regulation, the controller must inform
the data subject about the following if the data subject does not already
possess this information:
a) Name and contact details of the controller and, if applicable, of his deputy
Responsible for adherence to data protection regulations is the controller
and, therefore, the management. At our firm, these are:
authorized representative: Mr. Klaus Steger and Mr. Robert Seibold
b) Contact details of the group data protection officer
data protection officeris:
Herr Marcus Schmierler Controlling
Phone: 09281 49 236
c) Data processing purpose and legal basis
processing (especially the collection, use, storage or transmission) is
performed for the purpose of contract fulfillment (contract performance, payment,
client and invoice management, reporting), for the purpose of the
implementation of precontractual measures (especially those made on request by
a data subject, i.e., offers), for the purpose of the fulfillment of legal
obligations or to safeguard legitimate interests (acquisition).
basis for the processing of the client, business partner or prospective client
data is especially Art. 6(1) Letter b of the General Data Protection Regulation
(data processing for the performance of a contract), Art. 6(1) Letter f of the
General Data Protection Regulation (data processing for the purposes of
legitimate interests), Art. 6(1) Letter c of the General Data Protection
Regulation (compliance with a legal obligation).
legal basis may be the consent of the client, business partner or of the prospective
client in the sense of Art. 6(1) Letter a of the General Data Protection
d) Legitimate interests of the
controller or of a third party
If processing is performed on the basis of Art. 6(1) Letter f of the General Data Protection Regulation for the purposes of the legitimate interests pursued by the controller or by a third party, the client, business partner or prospective client must be informed about this. Legitimate interests may include legal, economic or intellectual interests whose legitimation must be determined by a weighing of the employee's interests in each case.
case, processing may also be performed on the basis of economic interests that
consist of establishing or maintaining a business relationship.
e) Recipients or categories of recipients
Under Art. 4
Number 9 of the General Data Protection Regulation, recipients of your data may
include natural or legal persons, public officials or institutions.
may be transferred to our competent internal offices.
your data may be transferred to external services providers (e.g., data destruction
or accounting service providers). The service providers commissioned by us (commissioned processors) were
carefully selected and reviewed by us. In addition, we conclude processing
agreements with every commissioned processor in accordance with Art. 28 of the
General Data Protection Regulation.
f) Data transmissions to third countries or international organizations
will be processed exclusively within the EU and saved on secured servers in Germany
under adherence to the General Data Protection Regulation. Data is not currently
transmitted to third countries or international organizations.
processing, your data is transmitted to countries outside of the EU or the EEA
or to service providers in countries outside of the EU or the EEA (so-called
third countries), we will check whether an adequacy decision by the European Commission
is present or will conclude according data protection agreements, especially on
commissioned processing and EU standards.
g) Categories of personal data
cooperation, we will process the following data concerning you:
Identification data (name, first name, gender);
Contact data (e.g., address, telephone numbers and email address)
· Other data disclosed voluntarily
2. Furthermore, at the time
of data collection, the controller must inform the data subject about the
following under Art. 13(2) and Art. 14(2)
of the General Data Protection Regulation unless the data subject already
possess this information:
a) Sources of personal data
your data will have been provided to us by you voluntarily. In such cases, it
is important for this data to be accurate and for you to assist us in keeping
this data up to date.
Other sources include:
· You contacting us
· Business partners/suppliers
· Certain publicly accessible information from public sources (including from the Internet)
b) Storage duration
We will only
save your data until the pre-contractual or contractual purpose is fulfilled and
no other legal storage obligations apply (e.g., commercial law or tax law
granted your consent, we will save your data until you withdraw your consent if
there is no other legal basis for the processing of your data. You granted your
consent to us by contacting us.
c) Your data subject rights
Art. 15 of the General Data Protection Regulation, you may obtain information
about the data we process concerning you at any time. You may especially obtain
information about the purposes of the processing, the categories of processed
data, the categories of possible recipients and the scheduled storage duration.
under Art. 16 of the General Data Protection Regulation, you may obtain rectification
of any inaccurate data.
under Art. 17 of the General Data Protection Regulation, you may obtain the
erasure of data concerning you if its storage is no longer required, you
withdraw your consent to the data processing and if there is no other legal
basis for the processing, you object to the processing and there are no
overriding reasons for further processing your data, your data is processed
unlawfully or in case of a legal erasure obligation under EU or national law.
under Art. 18 of the General Data Protection Regulation, you have a right to restricted
processing if you contest the accuracy of the data concerning you for a
duration that allows the controller to review the accuracy, if the processing
is unlawful, but you reject the erasure of the data, the purpose for the
processing no longer applies, but the data is still needed for the exercise of legal
claims or if you object in accordance with Art. 21 of the General Data
Protection Regulation and whether the legitimate reasons of the controller
override your interests has not yet been determined.
under Art. 20 of the General Data Protection Regulation, you have the right to
receive the data concerning you in a commonly-used, structured and machine-readable
format (data portability). In addition, under certain conditions, you may have
your data transmitted directly by a controller if technically feasible.
You have the
right to object to the use of your data for the above-stated purposes at any
time (Art. 21 of the General Data Protection Regulation).
If you consent to our processing of your data, you may withdraw this
consent at any time for the future.
If you would
like to withdraw your consent or exercise the above-stated data subject rights,
please write us at Hoftex Group AG, Fabrikzeile 21, D-95028 Hof, or
send us an email at firstname.lastname@example.org.
d) Right to
lodge a complaint to a supervisory authority
lodge a complaint to a data protection supervisory authority at any time (Art.
77 of the General Data Protection Regulation).
A list of
supervisory authorities in Germany (for the non-public sector) and their
addresses can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html (in German)
e) Providing data
If the providing of data
is legally or contractually required or necessary for contract conclusion, the
client, business partner or prospective client must be informed about this
one's name, address or email address) is especially required for the establishment
of contractual relationships. Invoicing and payment processing require
additional data (e.g., the invoice recipient, account data and invoice address).
If you do
not provide your data to us, we will be unable to establish or maintain a
business relationship with you and cannot ensure the orderly fulfillment of contractual or legal obligations.
f) Automated decision-making,
No automated decision-making, including profiling, is performed (Art. 22 of the General Data Protection Regulation).
concerning intended changes to data processing purposes
We will only
process your data for the above-stated purposes.
purposes for data processing change, we will inform you about the new purpose
in time before any further processing.
Hoftex Group AG