H2APEX Privacy Policy Our privacy policy

Purposes and legal bases of data processing

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with. The legal basis for data processing arises in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent also constitutes a data protection authorization provision. We will inform you about the purposes of data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent, Art. 88 para. 1 EU GDPR.

Processing of special categories of personal data within the meaning of Art. 9 (1) EU GDPR only takes place if this is required by law and there is no reason to assume that you have an overriding legitimate interest in the exclusion of processing, Art. 88 (1) EU GDPR. 1 EU GDPR.

Disclosure to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, your data will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of the data / categories of recipients

Within our company and the H2APEX Group, we ensure that only those persons receive your data who need it to fulfill their contractual and legal obligations.

In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts were concluded with all service providers.

Third country transfer / intention to transfer to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so.

We transfer your personal data to a service provider or to group companies within the European Economic Area.

Compliance with the level of data protection is ensured by:

• Conclusion of data protection contracts.

Storage duration of the data

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods mean that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. DBG). If there are no further retention obligations, the data will be routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods, the regular limitation period is 10 years.

Secure transfer of your data

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The exchange of data to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the latest encryption protocols. We also offer our users content encryption for contact forms and applications. Only we are able to decrypt this data. It is also possible to use alternative communication channels (e.g. by post).

Obligation to provide the data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or execute the underlying contractual relationship without providing this data.

Categories, sources and origin of the data

Which data we process is determined by the respective context: this depends on whether, for example, you place an order online or enter an inquiry in our contact form, whether you send us an application or submit a complaint.

Please note that we may also provide information for special processing situations separately in a suitable place, e.g. when uploading application documents or in the event of a contact request.

We collect and process the following data when you visit our website:

• Name of the Internet service provider
• Information about the website from which you are visiting us
• Web browser and operating system used
• The IP address assigned by your Internet service provider (anonymized)
• Requested files, transferred data volume, downloads/file export
• Information about the websites you visit on our site, including Date and time

For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is processed in accordance with Art. 6 (1) lit. F EU-DS-GVO stored. After 7 days at the latest, anonymization takes place by shortening the IP address so that no reference to the user is established.

We collect and process the following data as part of a contact request:

• Surname, first name
• Contact details (telephone number, e-mail address)
• Salutation
• Subject and message

We collect and process the following data for newsletters:

• Surname, first name
• E-mail address
• Salutation
• Analysis data from newsletter evaluation

Contact form / contact by e-mail (Art. 6 para. 1 lit. a, b EU-GDPR)

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests.

The principle of data minimization and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you. These are your e-mail address and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be entered optionally (e.g. for a more personalized response to your questions).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request.

Newsletter (Art. 6 para. 1 lit. a EU-GDPR)

You can subscribe to a free newsletter on our website. The e-mail address and your name provided when registering for the newsletter will be used to send you the personalized newsletter.

The principle of data minimization and data avoidance is observed here, as only the e-mail address (or name in the case of personalized newsletters) is marked as a mandatory field. For technical reasons and for legal protection, your IP address is also processed when you subscribe to the newsletter

You can of course unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent. It is also possible to unsubscribe from the newsletter at any time directly via our website.

This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that can be used to organize and analyse the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. e-mail address), it will be stored on MailChimp’s servers in the USA.

MailChimp is certified in accordance with the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA that is intended to ensure compliance with European data protection standards in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not wish to be analyzed by MailChimp, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

For more information, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.

Advertising purposes for existing customers (Art. 6 para. 1 lit. f EU GDPR)

The H2APEX Group SCA is interested in maintaining the customer relationship with you and sending you information and offers about our products/services, invitations to events and trade fairs. We therefore process your data in order to send you relevant information and offers by e-mail.