(1) You have the following rights towards us regarding your personal data:

• Right to information
• Right to correction or deletion
• Right to limitation of processing
• Right of opposition to the processing
• Right to data transferabilitncy

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data. The responsible supervisory authority can be found in the following list:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

We record and store telemetry data of our machines for:

• Service purposes
• Development purposes
• Data analytics and provision of services
• Marketing purposes
• Statistics
• Distribution purposes

Support of standard business processes at HOLMER Data management and processing is carried out by our business partner BOSCH (order data management). 

No personal data will be recorded and stored by our machines.

(1) The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating this online service.

(2) Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service pursuant to Art. 6(1) lit. f EU-GDPR in connection with Art. 28 EU-GDPR (conclusion of an order processing contract).

(1) When using the website for information purposes only, i.e., if you do not register or provide us with information in any other way, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• The amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

We collect and store this data for a limited time on the basis of our legitimate interest in order to induce derivation of personal data in the event of unauthorised access or attempted access to local servers (Art. 6 (1) lit. f EU-GDPR).

(1) We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. [These are all integrated in the "advanced privacy mode", which means that no data about you as a user will be transferred to YouTube if you do not watch the videos. Only when you start playing the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.]

(2) By visiting the website, YouTube is informed that you have visited the corresponding subpage of our website. In addition, the data mentioned in point IV of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data collected by us will be directly assigned to your existing account. If you do not wish to assign to your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them, if necessary, for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right you must contact YouTube directly. The legal basis for the processing of personal data described here is Art. 6(1) lit. a EU-GDPR.

(3) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

(4) You may also change the use of cookies by making the appropriate settings in your browser software or in your cookie settings.

(5) Further information on the purpose and scope of data collection and processing by the provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

(1) On this website we use the services of Google Maps. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently. These are integrated in the "extended data protection mode", i.e. no data about you as a user is transferred to Google if you do not call up the maps. Only when you give your consent and retrieve the maps will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified under point IV of this declaration will be transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and / or demand-oriented design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. The legal basis for the processing of personaldata described here is Art. 6(1) lit. a EU-GDPR

(3) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

For further information on the purpose and scope of data collection and processing by the provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

We maintain online presences within social networks in order to inform active users about our services and, if interested, to communicate directly via the platforms. We are currently represented in the following networks:

Xing:  https://www.xing.com/companies/holmermaschinenbaugmbh
Facebook: https://www.facebook.com/HolmerMaschinenbau
Instagram: https://www.instagram.com/holmer_maschinenbau_gmbh/
LinkedIn: https://www.linkedin.com/company/holmer-maschinenbau-gmbh
 

All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website which the respective networks offer for embedding the offers on websites.

We have no influence on the data collection and its further use by the social networks. For example, we do not know to what extent, where or for how long the data will be stored, to what extent the networks will comply with existing deletion obligations, which evaluations and links will be made with the data and to whom the data will be passed on. We therefore expressly draw your attention to the fact that user data (e.g. personal information, IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.

We process the users' data in the social media presences insofar as they contact and communicate with us via, for example, comments or direct messages.

The legal basis for the processing of the user's data is Art. 6(1) lit. b and f EU-GDPR.

a) Xing

Within our online offer no functions and contents of the service Xing, offered by the New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated. The Xing channels can only be reached via an external link.

If the visitors to our website are members of the Xing platform, Xing can assign the call of the social media channel to the user's profile there if the user visits the Xing profile in the logged in state.

We would like to point out that we have no influence on the content or extent of use of the data collected by Xing. For further information, please refer to Xing's privacy policy: https://www.xing.com/app/share?op=data_protection

b)  Facebook/ Instagram

You can access the social media network Facebook via external links on our website. All functions in the social media network are offered by Facebook, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook channels can only be accessed via an external link.

If you are logged in to Facebook with your own profile and access our social media channel, Facebook can assign your visit to your logged in profile. If you do not wish your account to be associated with your IP address, please log out of your Facebook account prior to using our website.

For further information on the processing of your data, we refer you to the Facebook privacy policy: https://facebook.com/privacy/explanation and to our following data policy "Facebook Fanpage" 

c) LinkedIn
Innerhalb unseres Onlineangebotes werden keine Funktionen und Inhalte des Dienstes LinkedIn, eingebunden. Die LinkedIn-Kanäle sind nur über einen externen Link erreichbar. Sofern die Besucherinnen und Besucher unserer Webseite Mitglieder der Plattform LinkedIn sind, kann LinkedIn den Aufruf des Social-Media-Kanals dem dortigen Profil des Nutzers zuordnen, falls dieser das LinkedIn Profil im eingeloggten Zustand besucht. Wir weisen darauf hin, dass wir keinen Einfluss auf den Inhalt, Umfang der Nutzung der von LinkedIn erhobenen Daten haben. Für weiterführende Informationen diesbezüglich verweisen wir auf die Datenschutzerklärung von LinkedIn: https://de.linkedin.com/legal/privacy-policy

This information is relevant for whistleblowers who have not opted for anonymous reporting and for those persons concerned who are named in the report.

a. Type and purpose of processing
Some personal data may be collected as part of the whistleblower report and the case login. If the whistleblower has not opted for an anonymous report, their personal data will be used to process the case. The personal data of a person concerned who is included in the whistleblower report may also be processed and used to clarify and process the facts of the case. If the whistleblower has submitted a report, they can log in via the case login with a case number and password.

b. Legal basis
The provision of the portal and the processing of the case is based on a legal obligation (Art. 6 para. 1 lit. c GDPR).

c. Data categories
Whistleblower: {Data categories of whistleblower}
Persons concerned: The information may vary depending on the whistleblower report. Usually at least information on the name.

d. Source of the data
Whistleblower

e. Recipient
The recipient of the data is the whistleblower ombudsman {external/internal} and BKP Compliant GmbH as the processor.

f. Storage periods
Data will only be processed in this context for as long as the relevant purpose exists. It will be deleted after this time, provided that there are no statutory retention obligations to the contrary.

g. Legal / contractual requirement
The whistleblower provides personal data on a voluntary basis.

h. Transfer to third countries
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.

(1) In principle, you have the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect towards you or significantly affects you in a similar manner. In particular, these decisions may not normally be based on special categories of personal data pursuant to Art. 9(1) EU-GDPR. We do not use any corresponding decision-making processes within the framework of our website and the associated data processing.