Home Privacy notice

Privacy Notice

Privacy Notice

Welcome to Schäfer Pumpen & Hydraulik GmbH! We are pleased that you are visiting our websites and thank you for your interest in our company, our products and our websites. The protection of your privacy when using our websites is important to us. Therefore, please take note of the following information:

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

Schäfer Pumpen & Hydraulik GmbH
Henrichs-Allee 8
45527 Hattingen
Germany
Phone: +49 (0) 2324/ 43974-0
Fax: +49 (0) 2324/ 43974-45
VAT ID No.: DE 815642641
E-mail: infoschaefer-phde
Internet: www.schaefer-ph.com

The data protection officer of the controller is:

Gilbert Staffler
EHS Datentechnik
Uhlendahlweg 24
45279 Essen
Germany
E-mail: datenschutzschaefer-phcom
Internet: www.ehs-datentechnik.de

II. General information about data processing

1. Scope of processing of personal data
Basically, we process the personal data of our users only to the extent necessary for providing a functional website as well as our contents and services. Consistently, personal data of our users are only processed after they have given their consent. An exception are such cases in which prior consent cannot be obtained for factual reasons and processing is permitted by statutory provisions.

2. Legal basis for the processing of personal data
To the extent we obtain the consent of the data subject for processing operations regarding personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1) lit. b of the GDPR serves as the legal basis. This also applies to processing operations necessary for taking steps prior to entering into a contract.
To the extent processing of personal data is necessary for compliance with a legal obligation to which the controller is subject, Art. 6 (1) lit. c of the GDPR serves as the legal basis.
If vital interests of the data subject or any other natural person make it necessary to process personal data, Art. 6 (1) lit. d of the GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject which require protection of personal data, Art. 6 (1) lit. f of the GDPR serves as the legal basis for processing.

3. Erasure of data and storage duration
The personal data of the data subject is erased or blocked as soon as the purpose of storage ceases to exist. Moreover, it may be stored if provided for by the European or national legislator in Union law regulations, laws or other provisions to which the controller is subject. Data is also blocked or erased if the period of storage as provided for by one of the mentioned rules expires, unless continuation of storage is necessary for the conclusion or performance of a contract.

III. Provision of the website and creation of log files

1. Description and scope of data processing
Whenever our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

  1. Information about the browser type and the version used
  2. The operating system of the user
  3. The Internet service provider of the user
  4. The IP address of the user
  5. Date and time of access
  6. Websites from which the system of the user accesses our website
  7. Websites accessed by the system of the user through our website

The data is also stored in the log files of our system. This does not apply to the IP addresses of the user or other data facilitating the assignment of the data to a user. This data is not stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 (1) lit. f of the GDPR.

3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to facilitate the delivery of the website to the computer of the user. To this end, the IP address of the user must remain stored for the duration of the session.
These purposes are also our legitimate interest in data processing according to Art. 6 (1) lit. f of the GDPR.

4. Duration of storage
The data is erased as soon as it is no longer required for attaining the purpose of its collection, however not later than after 60 days. Error logs recording erroneous page impressions are deleted after seven days

5. Possibility of objection and removal
Collection of data for providing the website and storage of the date in log files is indispensable for the operation of the website. Therefore, the user has no option to object.

IV. Use of cookies

a) Description and scope of data processing
Our website uses cookies. Cookies are text files, which are stored in the Internet browser or by the Internet browser on the computer system of the user. When a user visits a website, a cookie may be stored on the operating system of the user. We use cookies to ensure the safe operation of our website (technically necessary cookies) and make it more user-friendly.
We use cookies to ensure the safe operation of our website (technically necessary cookies) and make it more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

  1. Login information We additionally use cookies on our website, which enable us to analyse the surfing behaviour of the users.In this respect, the following data can be transmitted:
  2. Entered search terms
  3. Frequency of page impressions
  4. Use of website functions

The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
When our website is visited, the users are informed by an information banner about the use of cookies for analysis purposes with reference to this privacy statement. In this connection, users are also informed about how to prevent cookies from being stored in their browser settings.

b) Legal basis for data processing
The legal basis for processing personal data using cookies for analysis purposes, provided that the user has given his/her consent to this end, is Art. 6 (1) lit. a of the GDPR.

c) Purpose of data processing
The purpose of the use of technically necessary cookies is to make the use of websites easier for the user. Several functions of our website cannot be offered without the use of cookies. For them, it is necessary that the browser can be identified also after a page change. We need cookies for the following applications:

  1. Remembering search terms

The analysis cookies are used for the purpose of improving the quality of our website and its contents. With the help of analysis cookies we know how the website is used and are thus able to constantly optimise our offers. The aim is to enable users to find the information or offer they are looking for more quickly and with fewer clicks. These purposes are also our legitimate interest in data processing according to Art. 6 (1) lit. f of the GDPR.

d) Duration of storage, possibility of objection and removal
Cookies are stored on the computer of the user and transmitted by it to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies having been stored already can be deleted at any time. This may be also done automatically. If cookies are deactivated for our website, you may no longer be able to make full use of all functions of the website.

V. Contact form and e-mail contact

1. Description and scope of data processing
Our website contains a contact form, which can be used for contacting us electronically. If a user makes use of this opportunity, the data entered in the input mask is transmitted to us and stored. At the time when the message is sent, the following additional data is stored:
1. Date and time of registration

Your consent is obtained for processing the data as part of the sending process and reference is made to this privacy statement.
Alternatively, we can be contacted via the e-mail address, which has been made available. In this case, personal data of the user transmitted with the e-mail is stored.
Data is not passed on to third parties in this connection. The data is exclusively used for processing the conversation.

2. Legal basis for data processing
The legal basis for processing the data, provided that the user has given his/her consent, is Art. 6 (1) lit. a of the GDPR.
The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 (1) lit. a of the GDPR. If the e-mail contact is aimed at concluding a contract, Art. 6 (1) lit. b of the GDPR is the additional legal basis for processing.

3. Purpose of data processing
We only process the personal data from the input mask with the aim of establishing contact. Other personal data processed during the sending process serves to prevent misuse of the contact form and ensure the security of our information technology systems.
Other personal data processed during the sending process serves to prevent misuse of the contact form and ensure the security of our information technology systems.

4. Duration of storage
The data is erased as soon as it is no longer required for attaining the purpose of its collection. Regarding personal data from the input mask of the contact form and personal data sent by e-mail, this applies when the conversation with the user has ended. The conversation is not deemed ended until after it can be inferred from the circumstances that the fact in question has been finally clarified.
Additional personal data collected during the sending process is erased after a period of seven days at the latest.
Mail logs for sending e-mails via our mail servers are deleted after four weeks. The extended retention time is necessary to ensure the functionality of the mail services and to combat spams.

5. Possibility of objection and removal

The user may withdraw his/her consent to the processing of personal data at any time. If the user contacts us by e-mail at datenschutzschaefer-phcom, he/she can object to the storage of his/her personal data at any time. In such case, conversation cannot be continued.

All personal data having been stored in the course of establishing the contact is erased then.

VI. Plugins
To make our web pages as comfortable as possible for you, services of external providers are integrated. They include

VII. Applications by e-mail

1. Description and scope of data processing
You have the option to send us your application by e-mail. During this transmission process by e-mail, our servers log the following data:

  • Sender’s address
  • Date and time
  • Recipient's address
  • IP address and, if appropriate, their routes
  • Subject
  • Content of message
  • Attachments, if any


In connection with your application, your data is not passed on to third parties. The data is exclusively used for processing as part of the application process.

2. Legal basis for data processing
The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 (1) lit. a of the GDPR. In addition, the legal basis for sending an e-mail for the purpose of concluding an employment or training contract is Art. 6 (1) lit. b of the GDPR.

3. Purpose of data processing
We only process personal data from your application documents and your e-mail for processing your application as part of the application process and for contacting you. In case of an employment and contact by e-mail, this is also the necessary legitimate interest in processing the data.

4. Duration of storage
The application data, including attachments, is stored for up to six months upon completion of the application procedure. In case of an employment, this data is stored within the framework of the contractual relationship with you. If you have given us your consent, your data can be included in a pool of applicants. Here, the maximum storage duration is one year.

5. Possibility of objection and removal
The user may withdraw his/her consent to the processing of personal data at any time. If the user contacts us by e-mail, he/she can object to the storage of his/her personal data at any time. In such case, the application procedure cannot be continued.
An objection can be made by e-mail or by post. The necessary contact details are available in the legal notice. All personal data having been stored in the course of establishing the contact is erased then.

VIII. Rights of the data subject
The following list comprises all rights of the data subjects according to the GDPR. Rights of no relevance to the own website do not have to be mentioned. To this extent, the list can be shortened.
If you process personal data, you are a data subject within the meaning of the GDPR and have the following rights towards the controller:

1. Right of access
You can request a confirmation from the controller as to whether or not personal data concerning you are processed by us. If such data is processed, you can request the following information from the controller:

  1. The purposes for which personal data is processed;
  2. The categories of personal data processed;
  3. The recipients or categories of recipients to whom personal data concerning you have been or will be disclosed;
  4. The envisaged period for which personal data concerning you will be stored, or, if specific information in this respect is not possible, criteria for the determination of the duration of storage;
  5. The existence of a right to request rectification or erasure of personal data concerning you, a right to request restriction of processing by the controller or a right to object to such processing;
  6. The existence of a right to lodge a complaint with a supervisory authority;
  7. any available information as to the source of the data if personal data are not collected from the data subject;
  8. The existence of automated decision-making, including profiling, according to Art. 22 (1) and (4) of the GDPR and – at least in those cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you are transmitted to a third country or to an international organisation. In this connection, you may demand to be informed about appropriate safeguards according to Art. 46 of the GDPR in connection with such transfer.

2. Right to rectification
You have a right to rectification and/or completion towards the controller to the extent the processed personal data concerning you is incorrect or incomplete. The controller is required to rectify it without undue delay.

3. Right to restriction of processing
Under the following conditions, you may request the restriction of processing personal data concerning you:

  1. You contest the accuracy of personal data concerning you for a period of time enabling the controller to verify the accuracy of personal data;
  2. Processing is unlawful and you oppose the erasure of personal data and request the restriction of the use of personal data instead;
  3. The controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims, or
  4. You have objected to processing according to Art. 21 (1) of the GDPR pending the verification whether the legitimate grounds of the controller override yours.

Where the processing of personal data concerning you has been restricted, such data may only be processed – except for storage – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If processing has been restricted under the above conditions, you are informed by the controller before such restriction is lifted.

4. Right to erasure

a) Duty to erase
You may request from the controller the immediate erasure of personal data concerning you, and the controller is obliged to erase such data without undue delay if one of the following grounds applies:

  1. Personal data concerning you is no longer necessary in relation to the purposes for which it was collected or processed otherwise.
  2. You withdraw consent on which processing according to Art. 6 (1) lit. a or Art. 9 (2) lit. a of the GDPR was based and where there is no other legal ground for the processing.
  3. You object to the processing according to Art. 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21 (2) of the GDPR.
  4. Personal data concerning you has been unlawfully processed.
  5. The erasure of personal data concerning you is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  6. Personal data concerning you has been collected in relation to the offer of information society services according to Art. 8 (1) of the GDPR.

b) Information to third parties
If the controller has made personal data concerning you public and is obliged to erase personal data according to Art. 17 (1) of the GDPR, the controller, taking account of available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions
The right to erasure does not exist to the extent processing is necessary

  1. For exercising the right of freedom of expression and information;
  2. For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. For reasons of the public interest in the field of public health according to Art. 9 (2) lit. h and i as well as Art. 9 (3) of the GDPR;
  4. For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes according to Art. 89 (1) of the GDPR, to the extent the law referred to under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. For the establishment, exercise and defence of legal claims.

5. Right to notification
If you have exercised your right to rectification, erasure or restriction of processing of your personal data towards the controller, the latter is obliged to notify each recipient to which personal data concerning you has been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about these recipients.

6. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit this data to another controller without hindrance from the controller to which personal data has been provided, where

  1. Processing is based on consent according to Art. 6 (1) lit. a of the GDPR or Art. 9 (2) lit. a of the GDPR or on a contract according to Art. 6 (1) lit. b of the GDPR, and
  2. The processing is carried out by automated means.

In exercising this right, you also have the right to have personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect any freedom and right of other persons.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data on the basis of Art. 6 (1) lit. e or f of the GDPR; this also applies to profiling based on those provisions.
The controller does no longer process personal data concerning you, unless the controller demonstrates compelling legitimate grounds for the processing overriding any of interest, right and freedom of yours or serving to establish, exercise or defend legal claims.
If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent relating to such direct marketing.
If you object to processing for direct marketing purposes, personal data concerning you are no longer processed for such purposes.
In connection with the use of information society services - notwithstanding Directive 2002/58/EC - you may exercise your right of objection by means of automated processing using technical specifications.

8. Right to revoke privacy law declarations of consent
You have the right to revoke your privacy law declaration of consent at any time. The revocation of the consent does not affect the lawfulness of processing performed on the basis of the consent until its revocation.

9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  1. Is necessary for entering into, or performance of, a contract between you and the controller,
  2. Is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  3. Is based on your explicit consent.

However, these decisions must not be based on special categories of personal data according to Art. 9 (1) of the GDPR, unless Art. 9 (2) lit. a or g of the GDPR applies and suitable measures to safeguard any right and freedom and your legitimate interests are in place.
Regarding the cases referred to under (1) and (3), the controller implements suitable measures to safeguard any right and freedom and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express the own point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy according to Article 78 of the GDP.

IX. Modification and up-to-dateness of the privacy statement
This privacy statement is currently valid and dated November 2019. Due to further developments of our website and offers provided on it or due to changed statutory or official requirements, it may become necessary to modify this privacy statement. You may access and print out the current privacy statement on the website at www.schaefer-ph.com/datenschutz at any time.