We would like to inform you below about the processing of personal data in the context of the use of our Internet pages and the functions associated with them, as well as other online offerings such as social media sites.
Responsible body (“data controller”) for this website is
Hammerwerk Fridingen GmbH
DE-78567 Fridingen, Germany
Further information about the company and the authorized representatives can be found in our legal notice.
Which data is processed?
Legal basis for data processing
In order to be able to offer you our website and the services associated with it, we process personal data in accordance with the following legal bases:
- consent (section 6 subsection 1 item a) General Data Protection Regulation (GDPR)
- fulfillment of contracts (section 6 subsection 1 item b) GDPR)
- fulfillment of legal obligations (section 6, subsection 1 item c) GDPR)
- weighing of interests (section 6 subsection 1 item f) GDPR)
We will refer to the corresponding terms in connection with the respective processing, to allow you to judge for yourself on which basis we process personal data.
In the event that personal data is processed on the basis of your consent, you have the right at any time to revoke your consent vis-a-vis us with future effect.
If and when we process data based on a weighing of interests, you have the right to object to the processing of personal data subject to the provisions of section 21 GDPR.
When you visit our website, personal data is processed in order to be able to display the contents of the website on your terminal device.
In order for the pages to be displayed in your browser, the IP address of the terminal device you are using must be processed, along with additional information about the browser of your terminal device.
We are obliged under data protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems.
To this purpose and due to this interest, the following data are recorded on the basis of a weighing of interests:
- IP address of the calling computer (for a maximum of 7 days)
- the operating system of the calling computer
- browser type and version of the calling computer
- name of the retrieved destination address (URL) and file
- date and time of access
- amount of data transmitted
- referring URL (referrer)
The IP address will be deleted or made anonymous from all systems used in connection with the operation of this website after 7 days at the latest. We will then no longer be able to establish a personal reference from the remaining data.
The data is also used to detect and correct errors on the website. If necessary, further information comparable with the above data may be collected for the purpose of defending against attacks on our IT systems within the framework of safeguarding our legitimate interests.
We offer a contact form on our website where you can request information about our products or contact us in general. You can also contact us by email. We have marked the data as mandatory fields that are absolutely necessary to answer an inquiry. Information on other data fields is voluntary.
We need this information to process your inquiry, to address you correctly and to send you a reply. The data processing takes place upon concrete inquiries for the fulfillment of a contract and/or contract negotiations. In the event of general requests, the processing is carried out on the basis of a weighing of interests.
Inquiries received via the contact form on our website or by email are electronically processed by us in order to respond to your inquiry. In this context, other persons or departments and possibly third parties may also become aware of the form content that you have sent.
The transmission of form data via the Internet is implemented by means of encrypted connections.
You can also subscribe to an email newsletter on our website. In addition to the voluntary information in the respective form, we only process your email address. However, this is also absolutely necessary in order to be able to send you the newsletter.
Unless the contents have already been specifically described in individual cases (e.g. within the scope of registration), the contents of the newsletter include general information about our company, our products, services and other information relating to our company.
You can unsubscribe at any time. Alternatively, you will find a link to unsubscribe in each newsletter email.
Your consent is required for sending our newsletter. We obtain your consent regularly via what is known as the double opt-in procedure, which initially involves a confirmation email. You must confirm this email actively to declare your consent to receive the newsletter. This is guaranteed by a technical solution. It is only then that you will be added to the shipment pool. In order to comply with the legal requirements for the confirmation of registration, we store both login and logoff time, as well as the IP address employed in an abbreviated form. This storage is based on our legitimate interests in the defense of claims, as well as proof of the legal conformity of the newsletter dispatch.
Under the strict conditions of section 6 subsection 1 item 1 f) in conjunction with section 7 subsection 3 of the German Unfair Competition Act (UWG) the newsletter dispatch can also be effected on the basis of a legitimate interest in the sense of direct marketing. In this case, you can object to the further receipt of the newsletter at any time, which is pointed out here again.
In order to be able to analyze the popularity of our newsletter releases and to optimize them, we record whenever emails are opened and links are clicked. This usage analysis is based on a weighing of interests. You can object to this processing by unsubscribing from the newsletter.
These files cannot be used to run programs or viruses on your computer and take up only marginal storage space. As a rule, cookies have a unique character string that is commonly known as the cookie ID. With this identification, the web page or server can uniquely identify your Internet browser and distinguish it from other computers.
We use session cookies that are automatically deleted from your browser immediately after your visit to our website has ended.
In the area of web analysis, however, we also use so-called persistent cookies, which are not automatically deleted after the end of your visit to our website.
You may prevent the setting of cookies by changing the appropriate settings in your browser. To this purpose, please use the manual or the help function of your Internet browser. Please note, however, that the use of our Internet pages may be limited in this case.
Notes on the integration of third-party sources
We use contents from so-called third-party sources on our Internet offers. In doing so, we integrate contents or services of third parties in our offers so as to provide additional functions or to optimize presentation processes.
If and when external services and sources are integrated, the successful connection establishment presupposes that the IP address of the user is known to the third party as part of the connection process. In the following points we will discuss further measures and processing that may be carried out by these suppliers. If necessary, these third parties can use measures for user tracking and marketing analysis via cookies or invisible image files. In principle, we endeavor to integrate only those service providers who value the privacy of our visitors and therefore, if possible, only use the IP address for delivery.
Data processing is carried out on the basis of a weighing of interests where we are interested in an attractive design and presentation of our Internet offers, their effective and economical operation and further optimization and improvement.
Google Web fonts
We use what is commonly known as Google web fonts on our website. This means that fonts from Google's servers are loaded to enhance the design of the Internet page. Data processing is performed based on a weighing of interests, and our interest lies in an attractive design of the Internet page.
In the process, the fonts in question are loaded from Google's servers, which are usually located in the United States. The adequate level of data protection is guaranteed by Google as part of the "Privacy Shield” (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).
The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St., Dublin, D04 E5W5, Irland
In addition, we rely on the mapping service "Maps" by Google on our website.
The data processing is also based on a weighing of interests. Our interest is in this connection in an attractive and functional representation of maps and navigation on our website.
In the process, the maps in question are loaded from Google's servers, which are usually located in the United States. On this occasion, Google can process IP addresses and possibly location data as the case may be. The latter will only be collected by Google, on condition that the user has given his consent by means of corresponding settings on the terminal device.
The adequate level of data protection is guaranteed by Google as part of the "Privacy Shield” (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).
Furthermore, we integrate videos on our website using Google's “YouTube” service.
The data processing is also based on a weighing of interests. Our interest is here in an attractive and functional version of our website and the display of such videos on our online offerings.
In the process, the video material in question is loaded from Google's servers, which are usually located in the United States. On this occasion, Google can collect IP addresses as the case may be. When integrating relevant videos, we use the option called “Enhanced Privacy Mode” provided by Google whenever possible. In this case, Google does not set a cookie.
The adequate level of data protection is guaranteed by Google as part of the "Privacy Shield”. (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI)
Online profiles on platforms and social networks
We maintain profile and information offerings with platform operators and social networks. We inform active users and interested parties about our services and use the offer to communicate with the users of the respective offer.
Purposes of processing personal data
We process the aforementioned data to ensure the operation of our website, to fulfill contractual obligations vis-a-vis our customers, or to protect our legitimate interests.
In case of inquiries from you outside of an active customer relationship, we process the data for sales and advertising purposes. You can object to the use of your personal data for advertising purposes at any time.
If and when you voluntarily provide us with data for instance within forms and these are not required for the fulfillment of our contractual obligations, we will process these data based on the reasonable assumption that the processing and use of these data is in your interest.
Recipient / Data transfer
Data that you provide to us will not be transferred to third parties. In particular, your data will not be transferred to third parties for their advertising purposes.
However, we may use service providers to operate this website or to offer other products or services in our name. In this context, service providers may gain access to personal data. We select our service providers carefully - especially with regard to data protection and data security - and take all measures required under data protection law for permissible data processing.
We have implemented technical and organizational measures in accordance with section 32 GDPR to ensure the security of personal data processed by us.
To ensure the security of your data during the transfer process when you visit our website, we also use state-of-the-art SSL/TLS encryption methods.
However, security gaps in data transmission over the Internet cannot be completely excluded. For this reason, please consider the possibility of transmitting personal data using alternative communication channels (for example telephone or letter post).
Data processing outside the European Union:
If and when personal data is processed outside the European Union or the European Economic Area, this will be indicated in the remarks above.
In these cases, processing shall take place under the special conditions set out in section 44 cont. GDPR. Separate guarantees will ensure that the processing complies with a level of protection in line with EU rules.
As far as processing in the USA is concerned, this is routinely effected through the recognized "Privacy Shield" program, in other cases predominantly through the use of recognized contractual obligations, i.e. the so-called standard contractual clauses.
Data privacy officer
We have appointed a data privacy officer. You can contact the data privacy officer as follows:
Hammerwerk Fridingen GmbH
- Stefan Grünebaum / Data Privacy Officer -
D-78567 Fridingen, Germany
Your rights as a data subject
Pursuant to section 15 GDPR, you have the right of access to personal data relating to you. You can contact us at any time for further information as well as to obtain a copy of the data.
In the case of a request for information not made in writing, please understand that we may have to ask you to furnish ID proof that clearly identifies you as the person you claim to be.
Pursuant to section 16 GDPR, you also have the right to demand the correction, or pursuant to section 17 GDPR the deletion, or pursuant to section 18 GDPR the restriction of the processing as far as permissible under the law.
Furthermore, according to section 20 GDPR you are entitled to data transferability, i.e. to receive the data provided to us and to request its transmission to another data controller.
Finally, you have the right to object against the processing of data in accordance with statutory regulations, in particular section 21 GDPR.
Deletion of Data
In principle, we delete personal data if further storage is no longer required. A need for further storage may exist in particular if the data is still required to fulfill contractual services, as well as to check and grant, or defend, warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion is only possible after expiry of the respective retention obligation.
We regularly check and enforce the need of data deletion as part of an appropriate process.
Right of appeal with a supervisory authority
You have the right to file a complaint against our processing of personal data with a data privacy supervisory authority.
Changes to these data privacy notices
We will revise these data privacy notices if changes are made to this website or if circumstances arise that make changes necessary. You can always find the current version on this website.
Status date: 23rd May 2018