We take the protection and security of your personal data entrusted to us seriously. It is our claim that you feel as well informed and safe as possible when visiting our internet pages and using our offers with regard to data protection.

Find out below what personal data is collected when you use our offers and services and how we use it.

Data processing on this website

Information on data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) [DSGVO] when collecting personal data from the data subject.

Data protection information (Version: GDPR [DSGVO] 2.0 from 26.10.2020)

Data protection

Hohenstein Laboratories GmbH & Co. KG, on behalf of the Secretariat of the International Association of Applied UV Protection, are responsible for this website within the meaning of Art. 26 GDPR.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the currently applicable European and national laws. With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:

Hohenstein Laboratories GmbH & Co. KG
Register court AG Stuttgart HRA 724658
Personally liable partner:
Hohenstein Verwaltungs GmbH (Register Court AG Stuttgart HRB 752904)
Authorized to represent:
Prof. Dr. Stefan Mecheels, Dr. Stefan Droste, Dr. Timo Hammer

Address and contact:
Schlosssteige 1
74357 Bönnigheim
GERMANY
Phone: +49 7143 271-0
Fax: +49 7143 271-51

E-mail:   

Our data protection officer:
Sven Lenz – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50
87435 Kempten
GERMANY

If you have any questions about data protection or other data protection-related concerns, please feel free to send an e-mail to the following e-mail address:

A. General notes

For better comprehensibility, we refrain from differentiating between the genders. In the interest of equal treatment, the corresponding terms apply to all genders. The meaning of the terms used, such as "personal data" or "processing", can be found in Article 4 of the GDPR.

Personal data processed within the framework of this website include the following:

  • Inventory data (e.g. name and addresses of customers)
  • Contract data (e.g. services used, payment information)
  • Usage data (e.g. pages visited on our website) and
  • Content data (e.g. entries in our contact forms, application forms or registration for our newsletter)

B. Specific notes

Privacy policy

We ensure that we process your data only in connection with the processing of your inquiries and for internal purposes as well as to provide services requested by you or to make content available. 

Basics of data processing

We process your personal data only in compliance with the relevant data protection regulations. Legal bases are:

  • Provision of our contractual services
  • Processing is a legal requirement
  • Existence of your electronic consent (e.g. registration for the newsletter)
  • Enforcement of our legitimate interests

We are happy to show you where the above legal bases are regulated:

  • Processing for the fulfillment of our services and implementation of contractual measures:
    Art. 6 para. 1 lit. b) GDPR
  • Processing for the fulfillment of our legal obligations:
    Art. 6 para. 1 lit. c) GDPR
  • Consent:
    Art. 6 para. 1 lit. a) and Art. 7 GDPR
  • Processing for the protection of our legitimate interests:
    Art. 6 para. 1 lit. f) GDPR

Data transfer to third parties

We would like to point out that a data transfer may take place when using our website.

Data transfer to a third country or an international organization

Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.

In certain cases, we also transfer data to third countries or to international organizations. If a third country transfer takes place, we ensure that appropriate safeguards are in place so that you can enforce your rights and remedies even then.

Storage period of your personal data

We adhere to the principles of data economy and data minimization. This means that we store your data only as long as necessary to fulfill the aforementioned purposes or as specified by the various storage periods provided by law. If the respective purpose ceases to apply, or after expiry of the corresponding periods, your data will be routinely blocked or deleted in accordance with the statutory provisions.

Contact us

If you contact us via the website, you agree to electronic communication. Personal data is processed when you contact us electronically. The information you provide will be stored exclusively for the purpose of processing the request and for possible follow-up questions.

We would like to give you the legal basis for this:

  • Processing for the fulfillment of our services and implementation of contractual measures:
    Art. 6 para. 1 lit. b) GDPR

We would like to point out that e-mails can be read or changed on the transmission path without authorization or being noticed. Furthermore, we draw your attention to the fact that we use software to filter unwanted e-mails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam by certain characteristics.

What rights do you have?

a) Right to information

You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

b) Right to rectification

You have the right to have your data stored by us corrected if it is incorrect. In doing so, you can demand a restriction of processing, e.g. if you dispute the accuracy of your personal data.

c) Right to block

Furthermore, you can have your data blocked. To ensure that a blocking of your data can be taken into account at any time, this data must be kept in a blocking file for control purposes.

d) Right to deletion

You may request the deletion of your personal data, unless there is a legal obligation to retain it. If such an obligation exists, we will block your data upon request. If the relevant legal requirements exist, we will also delete your personal data without your request.

e) Right to data portability

You are entitled to request that we provide the personal data transmitted to us in a format that allows it to be transferred to another entity.

f) Right to complain to a supervisory authority

You have the option of submitting a complaint to one of the data protection supervisory authorities.

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Postal address: Postfach 10 29 32, 70025 Stuttgart, GERMANY
Home address: Lautenschlagerstraße 20, 70173 Stuttgart, GERMANY

Phone: +49 711 615541-0
Fax: +49 711 615541-15
E-mail:
Web: https://www.baden-wuerttemberg.datenschutz.de

Note: A complaint can also be made to any data protection supervisory authority within the EU.

g) Right of objection

You have the possibility at any time, for reasons arising from your particular situation, to object to the processing of your data pursuant to Art. 6 (1) (e) and (f); this also applies to profiling based on these provisions.

Hohenstein will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertising. For this purpose, it is sufficient to send us an appropriate e-mail.

h) Right of revocation

You have the possibility at any time to revoke your consent to the processing of your data with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the revocation. For this purpose, it is sufficient to send us an appropriate e-mail.

However, such a revocation does not affect the lawfulness of the processing carried out up to the time of the revocation on the legal basis of Art. 6 (1) a) GDPR.

To exercise your data subject rights, send us an email to the following address: .

Protection of your personal data

We take contractual, technical and organizational security measures in accordance with the state of the art to ensure compliance with data protection laws and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, a 256-bit SSL (AES 256) encryption technology is used.

In doing so, your personal data will be protected within the scope of the following points (excerpt):

a) Maintaining the confidentiality of your personal data.

In order to maintain the confidentiality of your data stored with us, we have taken various measures to control access, entry and access control.

b) Safeguarding the integrity of your personal data

In order to maintain the integrity of your data stored with us, we have taken various measures to control disclosure and input.

c) Maintaining the availability of your personal data

In order to maintain the availability of your data stored with us, we have taken various measures for order and availability control.

The security measures in place are continuously improved in line with technological developments. Despite these precautions, due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our website. Due to this, any data transmission by you is at your own risk.

Protection of minors

Personal information may only be provided to us by persons who have not yet reached the age of 16 with the express consent of their legal guardians. This data will be processed in accordance with this data protection notice.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files (access or error logs), which your browser automatically transmits to us. These are:

  • IP address
  • Timestamp
  • URL
  • Status code
  • File size
  • Referrer URL
  • Browser type and version

The data is automatically deleted after 4 weeks. This data is not merged with other data sources.

The basis for the data processing is our legitimate interest according to Art. 6 para. 1 lit. f) GDPR.

Cookies

Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies allow, for example, the recognition of the Internet browser. The files are used to help the browser navigate through the website and to make full use of all functions.

We use a cookie consent tool that sets technically necessary cookies to store your cookie preferences. This data processing is carried out in accordance with Art. 6 (1) f) GDPR on the basis of our legitimate interest in providing the management of your cookie consents.

Manage your cookie settings

Newsletter via our service provider Inxmail

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. Personal data will be collected for this purpose. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. This data will be used by us for our own advertising purposes in the form of the e-mail newsletter, provided that you have expressly consented to this.

We use a double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you consent to the sending of the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on the corresponding link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a) GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date.

In addition, we are obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store the IP address and the time of subscription and unsubscription.
You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to us, e-mail: . After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list and included in a blocking file to ensure revocation.

Categories of affected persons:

Newsletter subscribers

Data categories:

Master data (e.g. name, address), contact data (e.g. email address, phone number), meta and communication data (e.g. device information, IP address).

Purposes of processing:

Marketing, customer retention and new customer acquisition, analysis and evaluation of the success of campaigns.

Legal basis:

Consent (Art. 6 para. 1 lit. a) GDPR)

Use of Google Analytics

Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the function 'anonymizeIP' (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your visit to the website, the following data is collected, among other things:

  • The pages you visit, your "click path"
  • Achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)
  • Your user behavior (for example, clicks, dwell time, bounce rates)
  • Your approximate location (region)
  • Your IP address (in shortened form)
  • Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)
  • Your Internet service provider
  • The referrer URL (i.e. via which website / via which advertising medium you came to this website)

Processing purposes

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your (pseudonymous) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Data recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as an order processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.

Transfer to third countries

A transfer of data to the USA cannot be ruled out.

Duration of storage

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by:

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites.

Legal basis and revocation option

The legal basis for this data processing is your consent, Art. 6 para. 1 p. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.

For more information on Google Analytics terms of use and data protection at Google, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos of the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If playback of embedded YouTube videos is started, the provider YouTube uses cookies to collect information about user behavior.

According to information from YouTube, these are used, among other things, to collect video statistics, improve the user experience and prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of Google's legitimate interests in the insertion of personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Regardless of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence. Further information on data protection at YouTube can be found in the provider's privacy policy at: https://policies.google.com/privacy?hl=en.

Insofar as legally required, we have obtained your consent pursuant to Art. 6 (1) a) GDPR for the processing of your data as outlined above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on our website.

Use of Vimeo videos

Plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo.

The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as pressing the play button of a video), this information is also transmitted directly to a Vimeo server and stored there. The described data processing operations are carried out in accordance with Art. 6 (1) f) GDPR on the basis of Vimeo's legitimate interest in market research and the needs-based design of the Vimeo service. If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

For the purpose and scope of the data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of Vimeo: https://vimeo.com/privacy

For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking, to which we have no access and which cannot be influenced by our site. Google Analytics uses so-called "cookies" for tracking, which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

This processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of Vimeo's legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. To the extent legally required, we have obtained your consent pursuant to Art. 6 (1) a) GDPR for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

Change to our privacy policy

We reserve the right to adapt our data protection information at short notice so that it always complies with the current legal requirements or in order to implement changes to our services. This may, for example, concern the introduction of new services. The new data protection information will then apply to your next visit.

Data processing within the scope of our video surveillance

Scope and purpose of data processing

The company premises in Bönnigheim is monitored around the clock with video cameras. The resulting recordings may be considered personal data.

The video surveillance of the company premises is used for safeguarding domiciliary rights and to secure the property of the company and employees.

Legal basis for data processing

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests are the preservation of the house right and the protection of our property.

Duration of storage

The recordings are stored for 10 days. Longer storage only takes place in individual cases if the data is required to preserve evidence due to a specific incident.

Your rights

In accordance with the provisions of Art. 15 - 22 GDPR, you have the right to information, rectification, erasure of your personal data, as well as the right to data portability and the restriction of processing. In the cases of Art. 6 para. 1 lit. e) and f) GDPR you have the right to object. This also applies to automated individual decision-making, including profiling. If you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future. If you think that the processing of your personal data by Hohenstein is not lawful, you can complain to any data protection supervisory authority.

If you feel that Hohenstein has processed your personal data in an unlawful manner, you can contact any data protection supervisory authority with your complaints.

Data processing for events

Scope and purpose of data processing

We collect and use your information (for example, the name, address, telephone number, e-mail address and payment information) within the framework of the respective contract purpose, specifically for the processing of your registration and for the execution of seminars, webinars, workshops, (virtual) press conferences and other events.

If we receive your e-mail address in connection with your (fee-based) participation in an event, we will also use this for the promotion of our own, similar events by e-mail, provided that you have not objected to its use.

We also use your information for customer analyses and written advertising by post, also on behalf of partner companies from the textile industry. If you register for our online information service & newsletter, we also use your e-mail address for sending the newsletter.

Your consent is obtained for the processing of the data during the dispatch process and this data protection declaration is referenced.

Legal basis for data processing

Provided there is the consent of the user, the legal basis for the processing of data after registration for seminars, webinars, events and press conferences is Art. 6 para. 1 lit. a) GDPR. For processing your data in order to fulfil our services and execute contractual measures, legal basis Art. 6 para. 1 lit. b) GDPR is valid, otherwise, for the processing of your data to protect our legitimate interests Art. 6 para. 1 lit. f) GDPR.

Duration of storage

The data is deleted as soon as it is no longer required for achieving the purpose of its collection.

Recipients of data

Partner companies from the textile industry, if applicable.

Your rights

In accordance with the provisions of Art. 15 - 22 GDPR, you have the right to information, rectification, erasure of your personal data, as well as the right to data portability and the restriction of processing. In the cases of Art. 6 para. 1 lit. e) and f) GDPR you have the right to object. This also applies to automated individual decision-making, including profiling. If you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future. If you think that the processing of your personal data by Hohenstein is not lawful, you can complain to any data protection supervisory authority.

If you want us to stop processing and using your personal data for advertising purposes or would like to withdraw any consent that you have granted at any time, simply send a brief message by e-mail to or by letter to Hohenstein, Abt. Datenschutz, Schlosssteige 1, 74357 Bönnigheim, Germany.

You can also exercise your right of objection to the newsletter distribution, for example, by using the Unsubscribe function on our website. You can find a link to this function in the footer of each newsletter. When unsubscribing, your data is deleted immediately and you will no longer receive a newsletter from us.

If you feel that Hohenstein has processed your personal data in an unlawful manner, you can contact any data protection supervisory authority with your complaints.

Data processing in the context of our advertising measures

Scope and purpose of data processing

If we receive your e-mail address in connection with your (fee-based) participation in a seminar, webinar, event or virtual press conference, we will also use this for the promotion of our own, similar events by e-mail, provided that you have not objected to its use.

We also use your information for customer analyses and written advertising by post, also on behalf of partner companies from the textile industry.

Legal basis for data processing

Provided there is the consent of the user, the legal basis for the processing of data is Art. 6, (1), lit. a) GDPR. For processing your data for the protection of our legitimate interests, the legal basis is Art. 6 para. 1 lit. f) GDPR.

Duration of storage

The data is deleted as soon as it is no longer required for achieving the purpose of its collection.

Your rights

In accordance with the provisions of Art. 15 - 22 GDPR, you have the right to information, rectification, erasure of your personal data, as well as the right to data portability and the restriction of processing. In the cases of Art. 6 para. 1 lit. e) and f) GDPR you have the right to object. This also applies to automated individual decision-making, including profiling. If you have given your consent to the processing of your personal data, you can withdraw this consent at any time with effect for the future. If you think that the processing of your personal data by Hohenstein is not lawful, you can complain to any data protection supervisory authority.

You can submit an objection to the processing of your personal data at any time; this also includes your e-mail address (Art. 6 para. 1, Art. 21 para. 1, 4 GDPR).

If you want us to stop processing and using your personal data for advertising purposes or would like to withdraw any consent that you have granted at any time, simply send a brief message by e-mail to or by letter to Hohenstein, Abt. Datenschutz, Schlosssteige 1, 74357 Bönnigheim, Germany.

Once you have done so, your data will no longer be used for advertising purposes. This will not affect the legality of any use of your data up until the time at which you withdraw your consent or request that your data is not used for advertising purposes.

You can also exercise your right of objection for example, by using the Unsubscribe function on our website. You can find a link to this function in the footer of each newsletter.

Data processing in relation to our press distribution list

Scope and purpose of data processing

If you explicitly request it, you can receive press releases from Hohenstein Institutes about research and development activities, testing, certifications and events in the textile industry, their international sites, the textile certifications of the OEKO-TEX® Association and other news from the textile industry by email. You can select the areas which are of particular interest to you when registering for the press distribution list. We will use the data which you provide while registering to determine whether you are entitled to receive press releases and to address you personally. Which data is collected via the contact form is apparent from the respective contact form. Your data is transmitted securely (SSL encryption).

The information you provide is only used for the purposes of sending the press release and for possible follow-up questions.

Your consent is obtained for the processing of the data during the dispatch process and this data protection declaration is referenced.

Legal basis for data processing

Provided there is the consent of the user, the legal basis for the processing of data after subscribing to receive press releases is Art. 6 para. 1 lit. a) GDPR.

Duration of storage

The data is deleted as soon as it is no longer required for achieving the purpose of its collection. It is stored for as long as the subscription to press releases is active.

Your rights

You have the right to information about your personal data processed by us. If your information request is not in writing, please understand that we will then require evidence from you to prove that you are really the person you claim to be.

Moreover, you have the right to correction or deletion or to restrict the processing, if this is due in law. In addition, you have a right to object to the processing within the framework of statutory regulations. The same applies to a right to data transferability.

If you do not wish to receive any more press releases, it is sufficient to send a short message to the Hohenstein Institute (e-mail: ).

If you feel that Hohenstein has processed your personal data in an unlawful manner, you can contact any data protection supervisory authority with your complaints.

Data processing in the context of the tools we use for video conferencing

Privacy notices for online meetings, telephone conferences and webinars via "Microsoft Teams"

Purpose of data processing
 

We use the tool "Microsoft Teams" to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "Online Meetings"). "Microsoft Teams" is a service of Microsoft Corporation.
 

Responsible person
 

The responsible party for data processing directly related to the conduct of "online meetings" is the respective Hohenstein company (see 1. above) that conducts the Teams meeting with you.

Note: If you access the "Microsoft Teams" website, the provider of "Microsoft Teams" is responsible for data processing. However, accessing the website is only necessary to download the software for the use of "Microsoft Teams".

If you do not want to or cannot use the "Microsoft Teams" app, you can also use "Microsoft Teams" via your browser. The service will then also be provided via the "Microsoft Teams" website.
 

What data are processed?
 

When using "Microsoft Teams", various types of data are processed. The scope of the data also depends on the data you provide before or during participation in an "online meeting".

The following personal data are subject to processing:

  • User details:
    e.g. display name, e-mail address (if applicable), profile picture (optional), preferred language.
  • Meeting metadata:
    e.g. date, time, meeting ID, phone numbers, location
  • Text, audio and video data:
    You may have the opportunity to use the chat function in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting". In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device are processed accordingly during the meeting. You can switch off or mute the camera or microphone yourself at any time via the "Microsoft Teams" applications.
     

Scope of data processing
 

We use "Microsoft Teams" to conduct "online meetings". If we want to record "online meetings", we will transparently communicate this to you in advance and - where necessary - ask for consent.

Chat content will be logged when using Microsoft Teams. If it is necessary for the purpose of recording the results of an online meeting, we will record the chat content. However, this will not normally be the case.

Automated decision-making within the meaning of Article 22 of the GDPR is not used.
 

Legal basis for data processing
 

The legal basis for data processing when conducting "online meetings" is Art. 6 para. 1 lit. b) DSGVO, insofar as the meetings are conducted within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f) DSGVO. In this case, we are interested in the effective implementation of "online meetings".
 

Recipients / passing on of data
 

Personal data processed in connection with participation in "online meetings" will not be passed on to third parties as a matter of principle, unless they are specifically intended to be passed on. Please note that the contents of "online meetings", as well as personal meetings, are often used to communicate information with customers, interested parties or third parties and are therefore intended to be passed on.

Other recipients: The provider of "Microsoft Teams" necessarily receives knowledge of the above-mentioned data, insofar as this is provided for within the framework of our order processing contract with "Microsoft Teams".
 

Data processing outside the European Union
 

Data processing outside the European Union (EU) does not take place as a matter of principle, as we have restricted our storage location to data centres in the European Union. However, we cannot rule out the possibility that data may be routed via internet servers located outside the EU. This can be the case in particular if participants in "Online Meeting" are in a third country.

However, the data is encrypted during transport over the Internet and thus protected against unauthorised access by third parties.
 

Data Protection Officer:

Our data protection officer
Sven Lenz - Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstrasse 50
87435 Kempten
GERMANY
datenschutz@hohenstein.de
 

Your rights as an affected person
 

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time. 

In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be. 

Furthermore, you have the right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.
Finally, you have the right to object to processing within the scope of the law.

You also have the right to data portability within the framework of data protection law.

You also have the right to complain about the processing of personal data by us to a supervisory authority for data protection.
 

Deletion of data
 

We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed in order to fulfil contractual services, to be able to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion is only considered after the expiry of the respective retention obligation.