Data protection regulation

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

HSB Normalien GmbH

Industriestraße 4

74193 Schwaigern

Germany

Telephone: +49 (0) 7138 812749-0

E-Mail: info (at) hsb-normalien.de

Website: www.hsb -normalien.de

II. Name and address of the data protection officer

The data protection officer of the person responsible is:

Corinna Kiefer

KIEFER Werkzeugbau GmbH

Steinhäldenstraße 11

74193 Schwaigern

Germany

Tel .: +49 (0) 7138 9732-47

E-Mail: corinna.kiefer@kiefer-mold.de

III. General information about data processing

1.Scope of processing of personal data

In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal dates our users are regularly only after the user's consent. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data.

In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. GDPR as legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.

3. Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. Storage may also take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a conclusion of contract or a fulfillment of the contract.

IV. Provision of the website and creation of logfiles

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:

(1) The IP address of the user

(2) Date and time of server request

(3) Websites from which the system of the user comes to our website

(4) Web sites accessed by the user's system through our website

(5) HTTP protocol

(6) HTTP status code

(7) User Agent

Hypertext Transfer Protocol (HTTP) is a protocol for transmitting data over a computer network. It is mainly used to load web pages (hypertext documents) from the World Wide Web (WWW) into a web browser. However, it is not limited thereto and is also widely used as a general file transfer protocol.

An HTTP status code is provided by each server as a response to each HTTP request. On the requesting side is a client such as a web browser. The server uses the HTTP status code to tell the client if the request has been successfully processed. In the event of an error, the status code provides information about where (for example, via a redirection) or how (e.g. with authentication) he can obtain the desired information.

A user agent (English user: user, agent English: agent, deputy, agent) is a client program, with which a network service can be used. The user agent is the interface to the user, which represents the contents of the service and receives commands from the user. Examples of user agents include web browsers, e-mail programs, newsreaders, and IRC clients.

The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to create a Delivery of the website to the computer of the user to enable. To do this, the user's IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in logfiles this is after seven days at the latest Case. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling clients is no longer possible.

5. Opposition and removal possibility

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user's computer system. When a user visits a website, cookies can be stored on the user's operating system. These cookies each contain a characteristic string that allows the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.

The following data is stored and transmitted in the cookies: Whether the notice on the use of cookies was confirmed with a click on the button "Understood".

The data of the users collected in this way are anonymised by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

In addition, we use cookies from the third party Youtube on our website, which allow an analysis of the surfing behavior of the users.

In this way, the following data can be transmitted: Settings from Youtube.

In this way, the following data may be transmitted: User ID to obtain statistics of the videos of YouTube that the user has seen; User bandwidth on pages with built-in YouTube videos; Information about the usage behavior.

When you visit our website, users are informed by an information banner about the use of cookies for analysis

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user Art. 6 para. 1 lit. a GDPR.

3. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications: Cookie Consent (Cookie message when you first visit the website).

The user data collected by technically necessary cookies will not be used to create user profiles.

The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how the website is used and so we can constantly optimize our offer.

We use cookies to identify the user for follow-up visits if he has an account on our website.

Otherwise, the user would have to log in again for each visit.

For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

4. Duration of storage, objection and disposal options

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

VI. Using website analysis services: Google Analytics

1.Description and scope of data processing

Our website uses the website analytics service Google Analytics of Google Inc. ("Google"). Google Analytics is a web analytics service. Web analysis is the collection, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addendum, the IP address of the user's Internet connection will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

Google Analytics sets a cookie on the user's information technology system. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. By each call one of

Individual pages of this website, which is operated by us and on which a Google Analytics component has been integrated, the Internet browser on the user's information technology system is automatically caused by the respective Google Analytics component to transmit data for the purpose of online analysis to Google. As part of this technical process, Google will be aware of personally identifiable information, such as the user's IP address, which, among other things, helps Google understand the origin of visitors and clicks, and subsequently enable commission billing.

The cookie uses personal information, such as the

Access time, the location from which access was made, and the frequency of site visits by the user. Each time you visit our website, your personal information, including the user's IP address, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer this personal data collected through the technical process to third parties.

2. Legal basis for data processing

The legal basis for the processing of personal data using Google Analytics is Art. 6 (1) lit. f GDPR.

3. Purpose of the data processing

The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our website, and to provide other services related to the use of our website.

For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

4. Duration of storage, objection and disposal options

The user can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for the user to object to the collection of data generated by Google Analytics and to the processing of this data by Google and to prevent such data related to the use of this website. To do this, the user must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout

This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the user's information technology system is deleted, formatted or reinstalled at a later date, the user must reinstall the browser add-on in order to disable Google Analytics.

If the browser add-on is uninstalled or deactivated by the user or any other person within their sphere of influence, it is possible to reinstall or reactivate the browser add-on. Further information and Google's applicable privacy policy can be found at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/en.html.

VII.

Marketing in cooperation with Visable GmbH

HSB Normalien GmbH uses products and services for analysis and marketing purposes, which are provided by Visable GmbH (www.visable.com) in cooperation with them. To that end, pixel tracking technology is used to collect, process, and store data to create at least pseudonymised, and where possible and appropriate, fully anonymised user profiles. The collected data, which may initially include personal data, is transmitted to Visable or collected directly by Visable and used to create the aforementioned user profiles. Visitors to this website are not personally identified, and no other personal data is merged with the user profiles. If IP addresses are identified as personal data, they are immediately deleted. You can object to the processing operations described above at any time with effect for the future: Exclude visitor recording (Note: Link sets a 1st-party cookie for an opt-out)

VIII. Use of YouTube components

1.Description and scope of data processing

We have incorporated YouTube components on our website. YouTube is an Internet video portal that allows video publishers to freely watch video clips and other users for free viewing, rating and commenting. YouTube allows the publication of all types of videos, so that both complete film and television broadcasts, but also music videos, trailers or usermade videos via the Internet portal are available.

YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Each time you visit any of the pages on our website that incorporate a YouTube component (YouTube video), the Internet browser on the user's information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/en/.

As part of this technical process, YouTube and Google are aware of which specific bottom of our site the user visits.

If the user is logged in to YouTube at the same time, YouTube recognizes by visiting a sub-page containing a YouTube video, which visits the specific bottom of our website users. This information is collected by YouTube and Google and associated with the user's YouTube account.

YouTube and Google will always receive information through the YouTube component that the user has visited our website if the user is simultaneously logged in to YouTube at the time of access to our website; this happens regardless of whether the user clicks on a YouTube video or not. If such transmission of this information to YouTube and Google is not wanted by the user, the latter can prevent the transmission by logging out of his YouTube account before.

The privacy policy posted by YouTube, available at https://www.google.com/intl/en/policies/privacy/

provide information about the collection, processing and use of personal data by YouTube and Google.

2. Legal basis for data processing

The legal basis for the processing of personal data when using and using YouTube components is Article 6 (1) lit. f GDPR.

3. Purpose of the data processing

The purpose of using and using YouTube components is to link to our image movie that can be viewed on YouTube.

For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

IX. Newsletter

X. Newsletter

1. Description and scope of data processing

If you purchase goods or services on our website and yours

E-mail address, this can subsequently be used by us for sending a newsletter. In such a case, the newsletter will only send direct mail for your own similar goods or services.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG.

3. Purpose of the data processing

The collection of the user's e-mail address serves to deliver the newsletter.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user's e-mail address will be saved as long as the subscription to the newsletter is active.

5. Possibility of opposition and removal

Subscription to the newsletter may be terminated at any time by the user concerned.

For this purpose, there is a corresponding link in each newsletter.

XI. Contact form and e-mail contact

1. Description and scope of data processing

On our website is a contact form available, which can be used for electronic contact. If a user realizes this possibility, the data entered in the input mask is transmitted to us and stored.

These data are:

(1) Mandatory fields: last name, e-mail address, message.

(2) Optional: first name, company, address, telephone

For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

There is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the necessary legitimate interest in the processing of the data.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.

5. Opposition and removal possibility

The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

For the revocation of the consent and the objection of the storage is sufficient to send an e-mail with the appropriate request to the following e-mail address: info (at) hsbnormalien.de.

All personal data stored in the course of contacting will be deleted in this case.

XII. Conclusion

1. Description and scope of data processing

When concluding a contract through our website, the processing of the personal data of the data subject as a contracting party within the framework of legal or contractual provisions for the provision of personal data is required.

The obligation to provide personal information is sometimes required by law (such as tax regulations) or it may result from contractual arrangements (such as details of the contractor).

When concluding a contract via our website, the following data is collected:

(1) Company name

(2) Surname and first name of the customer

(3) billing and delivery address

(4) telephone number and e-mail address

(5) Payment Information

2. Legal basis for data processing

If the processing of personal data is required to fulfill a contract of which the data subject is a party, the processing is based on Art. 6 I lit. b DS-GMO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO.

3. Purpose of the data processing

The processing of the personal data serves us only to fulfill our legal or contractual obligations in the context of the conclusion of the contract or the initiation of a contractual relationship.

4. Duration of storage

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be deleted, if they are no longer required to fulfill the contract or to initiate a contract.

5. Opposition and removal possibility

In such a case, the contract with the person concerned can not be fulfilled, or not even closed.

XIII. Rights of the data subject

If personal data is processed by you, you are refer. GDPR and you have the following rights to the responsible person:

1.Right to information

You may ask the person in charge to confirm if personal data concerning you is processed by us.

If such processing is available, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

5) the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the source of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

2. Right to rectification

You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The person in charge must make the correction without delay.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

(1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;

(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or

(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the limitation of the processing according to the o.g. Conditions are restricted, you will be informed by the person responsible before the restriction is lifted.

4. Right to cancellation

a) deletion of duty

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

(1) The personal data concerning you are for the purposes for which they are collected or otherwise processed, no longer necessary.

(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other alternative legal basis for processing.

(3) According to. Art. 21 (1) GDPR Opposition to the processing of and there are no legitimate reasons for the processing, or you put acc. Art. 21 para. 2 DSGVO objection to processing.

(4) Your personal data have been processed unlawfully.

(5) The deletion of the personal data concerning you is to fulfill a legal obligation under Union or national law required by the person responsible.

(6) The personal data concerning you were offered in relation to information society services pursuant to Art. 8 (1) GDPR.

b) Information to third parties

Has the person responsible made the personal data concerning you public?

and does he ref. Art. 17 para. 1 DSGVO require them to be deleted consideration of available technology and implementation costs appropriate measures, including technical ones, for data processing.

Responsible persons who process the personal data, inform them, that you as affected person of them deleting all links to these personal data or of copies or replications of this personal information have requested data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) to fulfill a legal obligation, the processing according to the law the Union or the Member States to which the person responsible is subject, or to perform a task that is in the public interest or in exercise of official authority, delegated to the controller;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 (3) GDPR;

(4) for archival public interest, scientific or scientific purposes historical research purposes or for statistical purposes acc. Art. 89 para. 1 DSGVO, insofar as the law referred to in section a) is likely to be the realizing the goals of this processing makes impossible or serious impaired, or

(5) to assert, exercise or defend legal claims.

5. Right to information

Do you have the right to rectification, deletion or restriction of processing to the person responsible, the latter is obliged to inform all recipients, which the personal data relating to you have been disclosed correcting or deleting the data or restricting processing to notify it unless this proves impossible or is at a disproportionate expense connected.

You have the right to the person responsible over these recipients to be taught.

6. Right to Data Portability

You have the right to personal data concerning you those responsible have provided, in a structured, common and machine-readable format. Besides, you have the right one of these data other responsible persons without hindrance by the person responsible, whom the personal data provided, provided that

(1) the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based

and

(2) the processing is done by automated means.

In exercising this right, you also have the right to obtain that personal data directly from one person in charge to another responsible, as far as technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data, data that is required for the performance of a task that is in the public interest or in the exercise of public authority, which is delegated to the controller.

7. Right to object

You have the right, at any time, for reasons that arise from your particular situation against the processing of personal data relating to you, which is the result of Art. 6 para. 1 lit. e or f DSGVO takes an objection; This also applies to one these provisions based profiling.

The person responsible no longer processes the personal data concerning you, unless it can demonstrate compelling legitimate grounds for processing, which their interests, rights and freedoms prevail, or the processing serves the assertion, exercise or defense of legal aims. Are your personal data processed to direct mail operate, you have the right to object at any time to the processing of you

Are your personal data processed to direct mail you have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, you will personal data is no longer processed for these purposes.

You have the opportunity in connection with the use of services of Information Society - notwithstanding Directive 2002/58 / EC – yours to exercise the right of appeal by means of automated procedures in which technical specifications are used.

8. Right to revoke the data protection consent declaration

You have the right to your data protection consent at any time withdraw. By revoking the consent, the legality of the due consent until the revocation has not been processed.

9. Automated decision on a case-by-case basis, including profiling

You have the right, not one solely on an automated processing -including profiling - based decision to be submitted to you have a legal effect or similarly affect you in a similar way.

This does not apply if the decision

(1) for the conclusion or performance of a contract between you and the responsible person is required

(2) on the basis of Union or Member State legislation to which the responsible is subject to, permissible and this legislation is appropriate measures to safeguard your rights and freedoms as well as your entitled ones interests included or

(3) with your express consent.

However, these choices may not apply to specific categories personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g applies and appropriate measures to protect the rights and freedoms as well

With regard to the cases mentioned in (1) and (3), the person responsible shall act appropriately measures to protect the rights and freedoms and your legitimate interests, at least the right to obtain the intervention of a person on the part of the responsible, on the statement of their own point of view and on challenge of the decision is heard.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy you have the right to complain to a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the suspected infringement, too, if you believe that the processing concerns your personal data violates the or GDPR. The supervisory authority to which the complaint has been submitted shall inform the complainant on the status and results of the complaint, including the possibility of a judicial remedy.