DATA PROTECTION

1. An overview of data protection

General

The information below provides a simple overview of what happens to your personal information whenever you visit this website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

Data collection on this website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. You can find the operator's contact details in the section entitled "Information on the data controller" in this privacy policy.

How do we collect your data?

Some data are collected when you provide it to us. This could be data you enter on a contact form, for example. Other data are collected by our IT systems, either automatically or with your consent, whenever you visit the website. These data are primarily technical data such as the browser and operating system you are using or the time at which you requested the page. These data are collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.

What rights do you have regarding your data?

You have the right, at any time, to request information free of charge about the origin, recipient and purpose of your personal data that have been stored. You also have the right to request that such data be corrected or deleted. If you have consented to your data being processed, you can revoke this consent at any time with effect for the future. You also have the right to request that the processing of your personal data be restricted under certain circumstances.

You may also, of course, file a complaint with the competent regulatory authorities.

You can contact us at any time if you have any further questions concerning privacy and data protection.

Analytics and third-party tools

When visiting this website, statistical analyses may be made of your surfing behaviour. This happens primarily using analysis programs. Detailed information on these analysis programmes can be found in the privacy policy below.

2. Hosting

We host the content of our website at the following providers:

All-Inkl

The provider is ALL-INKL.COM - Neue Medien Münnich, Proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf (referred to below as All-Inkl). For details, please refer to All-Inkl's privacy policy: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6 (1) (f) GDPR (General Data Protection Regulation). We have a legitimate interest in ensuring that our website is presented in the most reliable way possible. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG (Telemedia Data Protection Act,), insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Commissioned data processing

We have concluded a contract on commissioned data processing (AVV) for the use of the aforementioned service. This is a contract required by data protection law, which ensures that this service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Host Europe

The provider is Host Europe GmbH, Hansestraße 111, 51149, Cologne (referred to below as Host Europe) Whenever you visit our website, Host Europe collects various log files, including your IP addresses.

For details, please refer to Host Europe's privacy policy: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

The use of Host Europe is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring that our website is presented in the most reliable way possible. Provided that consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG (Telecommunications Telemedia Data Protection Act,), insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Commissioned data processing

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted via the internet (e.g. via email communication) may have security vulnerabilities. Complete protection of your data from third-party access is not possible.

Notice concerning the party responsible for this website

The data controller for processing data on this website is:

Heavydrive GmbH
Höslerstr. 9
D - 86660 Tapfheim

Phone: +49 9070 96 8 96 90-0
E-Mail: sales@heavydrive.com

The data controller is the natural person or legal entity who alone or jointly with others makes decisions on the purposes and means of processing personal data (names, email addresses, etc.).

Storage duration

Unless a more specific period of storage has been indicated in this privacy policy, your personal data will remain with us until such time as the purpose for processing the data no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally admissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds cease to apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we shall process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing shall also be carried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to access to information in your terminal device (e.g. via device fingerprinting), data processing will also carried out on the basis of Section 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we shall process your data on the basis of Art. 6 (1) (b) GDPR. We shall also process your data on the basis of Art. 6 (1) (c) GDPR if this is required to fulfil a legal obligation. Furthermore, data processing may be carried out on the basis of our legitimate interest according to Art. 6 (1) (f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Note on data transfer to the USA and other third countries

We use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action to prevent this. Therefore, the possibility of US authorities (e.g. intelligence services) processing, evaluating and permanently storing your data located on US servers for surveillance purposes cannot be ruled out. We have no influence over these processing activities.

Recipients of personal data

We cooperate with various external agencies during the course of our business activity. This may entail the transfer of personal data to these external agencies. We disclose personal data to external agencies only if this is required for contractual performance, if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1) (f) GDPR or if another legal basis permits the disclosure of data. When using processors, we disclose personal data of our customers only on the basis of a valid contract for commissioned processing. In case of joint processing, a joint processing contract shall be concluded.

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. The data processed before we receive your request may still be legally processed.

Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE FOR DOING SO COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR). IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION UNDER ART. 21 (2) GDPR).

Right to file complaints with regulatory authorities

In case of infringements against the GDPR, data subjects shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of their usual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right at any time to information free of charge about your stored personal data, their origin and recipients and the purpose of the data processing and, if applicable, a right to the correction or deletion of such data. You can contact us at any time if you have any further questions concerning your personal data.

Right to restrict processing

You also have the right to request that the processing of your personal data be restricted. You can contact us at any time in this respect. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data we have stored, we will usually need time to run a check. During this time, you have the right to request the restriction of the processing of your personal data.
If your personal data have been or are being processed unlawfully, you can request the restriction of data processing instead of deletion.
If we no longer require your personal data, but you yourself need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. Until such time as it has been determined whose interests prevail, you have the right to request a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of important public interest of the European Union or a member state.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising e-mails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

4. Data collection on this website

Cookies

Our web pages use cookies. Cookies are small data packets and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted once your session has ended. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are required for technical reasons, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies used to run the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless any another legal basis is specified. The website operator has a legitimate interest in the storage of cookies to ensure a technically impeccable and optimised provision of its services. Insofar as consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG); consent can be revoked at any time.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in this privacy policy.

Contact form

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

The processing of these data is based on Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; the consent can be revoked at any time.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. once we have finished processing your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data arising therefrom (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not share this information without your permission.

We will retain the data you send to us via contact requests until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. once we have finished processing your request). Any mandatory statutory provisions, especially those regarding statutory data retention periods, remain unaffected by this provision.

5. Newsletter

Newsletter data

If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.

The data you provide to us when registering for the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Data we have stored for other purposes remain unaffected.

Once you have unsubscribed from the newsletter distribution list, your email address will be stored by us or the newsletter service provider in a blacklist if necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and ours in complying with legal requirements when sending newsletters (legitimate interest as defined by Art. 6 (1) (f) GDPR). Data can be stored in the blacklist indefinitely. You can object to such storage if your interests outweigh our legitimate interest.

6. Plugins and tools

YouTube with enhanced data protection

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily ruled out by the extended data protection mode. Consequently, YouTube – irrespective of whether you watch a video or not – establishes a connection to the Google DoubleClick network.

A connection to YouTube's servers is established as soon as you start a YouTube video on this website. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, once a video has been started YouTube may store various cookies on your terminal device or use comparable recognition technologies (e.g. device fingerprinting). This is how YouTube is able to obtain information about visitors to this website. This information is used to collect video statistics, improve the user experience and prevent fraud attempts, as well as for other purposes.

Further data processing operations, over which we have no influence, may be triggered after the start of a YouTube video.

YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG (Telemedia Data Protection Act,), insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

Privacy policy for Google Rating (Elfsight)

Your personal data are processed whenever you submit reviews on our website. Categories of data processed: technical connection data of the server access (IP address, date, time, requested page, browser information), data for the creation of usage statistics, data about the approximate position of the device. Purpose of processing:Delivery and provision of the website. The legal basis for the processing:Your consent according to Art. 6 (1) (a) GDPR. Data are transferred to the independent data controller Elfsight, LLC, 0015, Yerevan, Paronyana str., 19/3, 201, Armenia (https://elfsight.com) and to the independent data controller Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, United States of America. The legal basis for the transfer of data to Elfsight, LLC is your consent pursuant to Art. 6 (1) (a) GDPR. This may also mean the transfer of personal data to a country outside the European Union. The transfer of data is based on your consent in accordance with Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) GDPR. You were informed before giving your consent that the US does not have a level of data protection equivalent to EU standards. In particular, US intelligence services can access your data without you being informed and without you being able to take legal action to prevent this. Contact details for the Data Protection Officer of Elfsight, LLC can be found at: https://elfsight.com/privacy-policy/. The duration of processing varies and ends when the purpose of processing ceases to apply.

We offer visitors to our website the option to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you contact us via WhatsApp concerning a specific process (a sent enquiry for example), we will store and use the mobile phone number you use on WhatsApp and – if provided – your first name and surname pursuant to Art. 6 (1) (b) GDPR to process and respond to your request. On the same legal basis, we may ask you to provide further data (customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use on WhatsApp and – if provided – your first name and surname pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data will be used solely to respond to your request via WhatsApp. It will not be disclosed to third parties.

Please note that WhatsApp obtains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.

For the purpose and extend of data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and configuration options for protecting your privacy, please refer to the data protection information of WhatsApp.