Privacy policy
With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter "data").
1. responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
Helrom GmbH
Westhafenplatz 1
60327 Frankfurt am Main
E-mail: office@helrom.com
2. contact details of our data protection officer
E-mail: office@helrom.com
3. general information on data processing
In the course of our business and website operations, we process data.
This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.
4. data processing
The individual data concerned, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:
a) Log file when visiting the website
We log your website visit. In doing so, we process:
Name(s) of our accessed website(s),
Date and time of retrieval,
the amount of data transferred,
the browser type and version,
the operating system you are using,
the referrer URL (the previously visited website),
Your IP address,
the requesting provider.
The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website pursuant to Art. 6 (1) f) DSGVO.
The log file is deleted after seven days, unless it is needed to prove or clarify specific legal violations that have become known within the retention period.
b) Hosting via Squarespace
To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website pursuant to Art. 6 (1) f) DSGVO.
For our hosting, we use the services of Squarespace Inc, 225 Varick St, New York, NY 10014, USA. It is possible that this may also result in data transfers in the USA.
There is no adequacy decision of the EU Commission for data transfers to the USA. Squarespace ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses upon request. Please contact office@helrom.com for this purpose.
c) Contacting
If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para . 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.
d) Contact for applications
If you contact us to send us your application as an employee:in, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired location, etc.), your message and the application documents submitted will be processed solely for the purpose of processing and handling your application request.
The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR , namely to assert and/or defend against claims.
e) Applicant pool
If you give us your consent to retain your application documents after the application process has been completed, we will store them in our applicant pool for the purpose of contacting you for future vacancies that match your profile. The legal basis for processing as part of our applicant pool is your prior consent pursuant to Art. 6 (1) a) GDPR.
f) Contract execution
Within the scope of your commissioning by us and for the initiation and implementation of the existing contractual relationship between you and us, we process various data.
If you have commissioned us to provide a service, we process your data (if specified: name, contact details, address) and all information that is necessary in the context of fulfilling the order exclusively for the purpose of processing and handling the contractual relationship. This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfillment of our accounting and tax obligations.
If we have commissioned you with the provision of a service, we will process your data (if specified: name, contact details, address, personal qualifications) and all information required in the course of fulfilling the order exclusively for the purpose of processing and handling the contractual relationship.
The processing of the data takes place accordingly on the basis of Art. 6 para. 1 b) DSGVO.
In addition, we process your personal data in the event that we are subject to a legal obligation. This may result from commercial, tax, money laundering, financial or criminal law.
In this context, the processing of the data takes place accordingly on the basis of the fulfillment of our legal obligations pursuant to Art. 6 para. 1 c) DSGVO.
Should the data be necessary for our own legal prosecution or defense, data processing may be carried out to safeguard our legitimate interests pursuant to Art. 6 (1) f) DSGVO, namely to assert and/or defend claims. Recipient data
External service providers used by us, e.g. in the areas of technical infrastructure and maintenance.
Public bodies: Tax authorities, supervisory authorities, courts to which we transfer personal data to fulfill our legal obligations or to protect legitimate interests.
g) Use of functional cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
We only use technically necessary session cookies on our website.
h) External content
We use dynamic content ("Content") from third parties to optimize the presentation and the offer of our website. When visiting the website, a request is automatically made to the server of the respective content provider by means of an interface, during which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Integration of Vimeo videos
We have integrated videos from the Vimeo portal of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA on our website. When playing the videos, log data is transferred to the Vimeo servers in the USA. This processing is based on our overriding legitimate interest in optimal marketing of our offer according to Art. 6 para. 1 f) DSGVO.
Further information can be found at: https://vimeo.com/privacy
bb) Translation of the website
To translate our website into other languages, we use the service Weglot of the company Weglot SAS, rue Pierre Joigneaux in BOIS-COLOMBES (92270). When you visit the website, Weglot is loaded so that you can change the current language to a language other than German via the language setting. When you visit the website, a direct connection may be established between your browser and Weglot’s server. In doing so, your IP address is transmitted and Weglot can track that a user with this IP address has visited our website.
The legal basis for data processing is our overriding legitimate interest in the optimal presentation of our online offer in accordance with Art. 6 para. 1 f) GDPR.
cc) Adobe Fonts
To make visiting our website attractive, we use external fonts from Adobe Fonts. These are loaded from servers of Adobe Systems Inc., San Jose, California, USA ("Adobe") when you visit the site. Adobe does not store cookies in your browser. However, according to our information, the IP address of the user’s terminal device is transmitted to Adobe and stored.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offering pursuant to Art. 6 (1) f) DSGVO .
There is no EU Commission adequacy decision for data transfers to the US. Adobe ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clause will be provided upon request. To obtain one, please contact office@helrom.com.
5. duration of data storage
We store personal data only as long as it is necessary for the purposes for which it is processed or if you have revoked your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
6. your data subject rights
a) Information
Upon request, you will receive information about all personal data that we have stored about you at any time and free of charge.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if this data has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law) in response to a corresponding instruction. The same applies if we are only to process data in a restrictive manner in the future. You have a right of objection in particular in cases where your data is required due to the performance of a task that is in the public interest or the data processing is based on our legitimate interest, as well as profiling based on this. You also have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right of revocation for consents with effect for the future
You can revoke consents granted at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or with the help of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another responsible party upon request.
e) Restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
f) Exercise of your data subject rights and right of appeal
If you have any questions regarding the processing of your personal data, if you wish to obtain information, correct, block, object to or delete data, or if you wish to have your data transferred to another company, please contact office@helrom.com.
You also have the possibility to complain to a supervisory authority about your data protection rights.