Privacy

The controller within the meaning of the EU General Data Protection Regulation (hereinafter referred to as the "GDPR") and of other national data protection laws of the Member States as well as of other data protection regulations is:

Hosokawa Alpine Aktiengesellschaft
Peter-Doerfler-Strasse 13-25
86199 Augsburg
Germany

Telephone number: +49 821 5906 0
Email: marketing@alpine.hosokawa.com

Mr Oliver Kunert
Sunny System GmbH
Blumenweg 1
82229 Seefeld
Germany
datenschutz@alpine.hosokawa.com

3.1 Scope of the processing of personal data

We process personal data insofar as this is necessary in order to, among other things, provide a service, draw up quotes, carry out jobs, process orders, or undertake projects. Such processing of personal data takes place either on the basis of an explicit consent or on the basis of legal regulations.

Personal data relating to customers and suppliers is generally processed within Europe. Customer and supplier data as well as inquiries that are processed by us from third countries outside the scope of the GDPR are also transmitted for further processing to associated companies and sales agents in those third countries or to the regional sales agents which are responsible for the third country concerned.

Furthermore, we generally only process personal data relating to the users of our website insofar as this is necessary in order to provide a functional website as well as our content and services. The processing of our users' personal data takes place either with their consent or on the basis of legal regulations.
 

3.2 Purpose and legal basis for the processing of personal data

Insofar as we obtain the data subject's consent to processing transactions with respect to personal data, GDPR Art. 6 (1) sent. 1 (a) provides the legal basis for undertaking such processing.

When processing personal data in order to fulfil a contract, to carry out pre-contractual measures, or to initiate a contract, GDPR Art. 6 (1) sent. 1 (b) provides the legal basis for undertaking such processing. 

Insofar as the processing of personal data is required in order to fulfil a legal obligation to which our company is subject, GDPR Art. 6 (1) sent. 1 (c) provides the legal basis for undertaking such processing.

If vital interests of the data subject or of another natural person necessitate the processing of personal data, GDPR Art. 6 (1) sent. 1 (d) provides the legal basis for undertaking such processing.

If processing is necessary in order to safeguard a legitimate interest of our company or of a third party, and if the interests or fundamental rights and freedoms of the data subject do not outweigh the aforementioned interest, GDPR Art. 6 (1) sent. 1 (f) provides the legal basis for undertaking such processing.

3.3 Erasure of data and storage duration

The personal data of the data subject will be erased or blocked once the purpose of storage no longer applies or the data subject objects to the further processing of the data concerned.

For general categories of data we have set the following deadlines for the erasure of personal data or its anonymisation:

Employee and staff data will be erased no later than 10 years after the person concerned leaves the company, provided that there are no legal obligations which prevent erasure.

Personal customer data will be erased or anonymised no later than 5 years after the last contact, provided that there are no legal obligations which prevent erasure.

Prospective customer data and customer contact persons are erased or anonymised at the latest 5 years after the last contact, provided that there are no legal obligations which prevent erasure.

Details of the handling of special data (e.g. applicant data, newsletter subscribers, etc.) can be found in the other points of our Privacy policy.

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

4.1 Right of access

You can ask the controller to confirm whether personal data relating to you are being processed by it.

If such processing is taking place, you can request the following information from the data controller:

1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
4. the planned period for which your personal data will be stored, or, if it is not possible to provide specific information regarding this, the criteria used for determining the storage period;
5. the existence of a right to the rectification or erasure of your personal data, a right to restrict processing by the data controller, or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. any available information regarding the source of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making including profiling as referred to in GDPR Art. 22 (1) and (4), and – at least in these cases –meaningful information about the logic system that is used and about the scope of such processing and the intended effects of it in relation to the data subject.

 
You have the right to demand information about whether your personal data is being transferred to a third country or to an international organisation. In this context, you can demand to be informed about the appropriate guarantees according to GDPR Art. 46 in connection with the transfer.

This right to information can be restricted insofar as it is likely to render impossible or seriously impair the achievement of the research or statistical objectives, and if the restriction is necessary for the achievement of the research or statistical objectives.
 

4.2 Right to rectification

You have a right to obtain from the controller the rectification and/or completion of data, provided that the processed personal data concerning you is incorrect or incomplete. The controller must carry out the rectification promptly.

Your right to rectification can be restricted insofar as it is likely to render impossible or seriously impair the achievement of the research or statistical objectives, and if the restriction is necessary for the achievement of the research or statistical objectives.
 

4.3 Right to restriction of processing

You have the right to obtain from the controller the restriction of the processing of your personal data where one of the following applies:

• if you contest the accuracy of the personal data concerning you for a period of time that enables the data controller to verify the accuracy of the personal data;
• the processing is unlawful and you refuse the erasure of the personal data and instead demand that the use of the personal data be restricted;
• the data controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
• if you have objected to the processing in accordance with GDPR Art. 21 (1) and it has not yet been determined whether the legitimate grounds of the controller override your reasons.

If the processing of your personal data has been restricted, such data shall, with the exception of its storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, or for protecting the rights of another natural person or legal entity, or for reasons of an important public interest of the Union or of a Member State.

If processing has been restricted as set out above, you will be informed by the controller before the restriction of processing is lifted.

Your right to the restriction of processing can be restricted insofar as it is likely to render impossible or seriously impair the achievement of the research or statistical objectives, and if the restriction is necessary for the achievement of the research or statistical objectives.

4.4 Right to erasure

a) Obligation to erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase such personal data without undue delay where one of the following grounds applies:

1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to GDPR Art. 6 (1) sent. 1 (a) or Art. 9 (2) (a), and there is no other legal ground for the processing.
3. You object to the processing pursuant to GDPR Art. 21 (1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to GDPR Art. 21 (2).
4. Your personal data have been unlawfully processed.
5. Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
6. Your personal data have been collected in relation to the offer of information society services referred to in GDPR Art. 8 (1).

 
b) Information to third parties

Where the controller has made your personal data public and is obliged pursuant to GDPR Art. 17 (1). to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does apply not to the extent that processing is necessary

1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with GDPR Art. 9 (2) (h) and (i) as well as GDPR Art. 9 (3);
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with GDPR Art. 89 (1) insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
5. for the establishment, exercise or defence of legal claims.

 
4.5 Right to inform

If you have asserted the right to rectification, erasure or the restriction of processing against the data controller, the latter is obliged to inform each recipient to whom the personal data concerning you have been disclosed of such rectification, erasure or restriction of processing, unless this proves to be impossible or would involve a disproportionate effort.

You have the right to be informed by the data controller of the identity of the recipients concerned.

4.6 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

1. the processing is based on a consent pursuant to GDPR Art. 6 (1) sent. 1 (a) or GDPR Art. 9 (2) (a), or on a contract pursuant to. GDPR Art. 6 (1) sent. 1 (b) and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transmitted directly from one data controller to another, where this is technically feasible. This must not adversely affect the rights and freedoms of other persons.

The right to data portability shall not apply to processing which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

4.7 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on GDPR Art. 6 (1) sent. 1 (e) or (f), including profiling based on those provisions.

The controller shall no longer process your personal data unless he demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to GDPR Art. 89 (1) you shall have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

This right to object can be restricted insofar as it is likely to render impossible or seriously impair the achievement of the research or statistical objectives, and if the restriction is necessary for the achievement of the research or statistical objectives.

4.8 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation.

4.9 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for entering into, or the performance of, a contract between you and the data controller;
2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data as referred to in GDPR Art. 9 (1), unless GDPR Art. 9 (2) (a) or (b) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In the cases referred to in 1. and 3. above, the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, and to express his or her point of view and to contest the decision.

4.10 Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to GDPR Art. 78.

5.1 Description and scope of data processing

The website or parts of it is/are hosted on servers of service providers which are commissioned by us.

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is accordingly collected:

• IP address (unshortened)
• Timestamp (date and time)
• Websites that are accessed by the user's system via our website
• Websites from which the user's system accesses our website
• Information about the browser type and the version used
• The (user's) operating system

These data are stored in the web host's system. These data are not stored together with other personal data of the user.

5.2 Purpose and legal basis of data processing

The temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to the user's computer. 

Storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems.

These purposes also constitute our legitimate interest in data processing according to GDPR Art. 6 (1) sent. 1 (f).

Our provider also uses the log files for emergencies in order to be able to detect and block malware and bots. Therefore, among other things, the IP addresses which access specific content many times are recorded. If such an IP address causes an overload (high load) and we consider the IP address to be dangerous, we will block it. These purposes also constitute our legitimate interest in data processing according to GDPR Art. 6 (1) (f).

5.3 Duration of storage

The data will be erased as soon as they are no longer required in order to achieve the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

If the data are stored in log files for the security of the information technology systems, this is the case after seven days at the latest. The provider does not create any backups of the log files.

 
5.4 Right of objection and right to erasure

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. The user consequently has no possibility of raising an objection.

7.1 Scope of the processing of personal data

We use the software solutions from the following service providers to send our newsletter: CleverReach (CleverReach GmbH & Co. KG, Mühlenstraße 43, 26180 Rastede, Germany) and Salesforce Account Engagement (Salesforce.com, Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America).

If you register for the newsletter, the data that you enter when registering for the newsletter will be transferred to the service providers CleverReach and Salesforce, and stored there. This may enable further personal data to be stored and evaluated, especially the user's activities (in particular which pages have been visited, whether the newsletter will be opened, and which elements have been clicked on) as well as device and browser information (in particular the IP address and the operating system). Your data will also be stored by CleverReach and Saleforce for this purpose. Your data provided for the purpose of receiving the newsletter will not be passed on to third parties, and CleverReach or Saleforce do not acquire any rights to pass on your data.

You can revoke your consent for having the newsletter sent to you and for the performance measurement at any time with future effect. You can exercise your right to revoke your consent by clicking on the unsubscribe link provided in each newsletter email or by sending a message to the contact details provided in this privacy policy. Unfortunately, it is not possible to revoke consent only to the performance measurement.

Further information regarding the processing of data by CleverReach is available here:

https://www.cleverreach.com/en/privacy-policy/

Further information regarding the processing of data by Saleforce is available here:

https://www.salesforce.com/company/privacy/

7.2 Purpose and legal basis for data processing

The collection of the data is used for delivering the newsletter.

The legal basis for processing the data once the user has registered for the newsletter is GDPR Art. 6 (1) sent. 1 (a) if the user's consent has been provided.

7.3 Duration of storage, and possibility of objection and erasure

The data is stored and analysed for each individual newsletter ordered until there is an objection to the processing of the data.

If you do not confirm your registration within 7 days (opt-in), your data will also be deleted. After cancelling your registration or objecting to the use of your data, your data will be deleted within a maximum of 30 days but will be immediately blocked from receiving any more of the newsletters concerned. Backups will be deleted after 62 days.

You may at any time revoke your consent to the storage of the data by CleverReach and Saleforce as well as these service providers' use of it for sending out the newsletter. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the time of revocation. You may exercise your right of revocation at any time by sending an email to the contact listed below or by clicking on the link which is provided in each newsletter.

You can find further information about the objection and erasure/deletion options which you have in relation to CleverReach at:

Revoking via email: info@cleverreach.com

www.cleverreach.com/en/privacy-policy/

You can find further information about the objection and erasure/deletion options which you have in relation to Saleforce at:

Revoking via email: privacy(at)salesforce.com

www.salesforce.com/company/privacy/

9.1 Description and scope of data processing

Contact forms are available on our website which can be used as an electronic means of getting in touch with us. If a user makes use of this option, the data entered on the input screen will be transmitted to us and stored by us.

9.2 Purpose and legal basis of data processing

The processing of the personal data from the input screen is carried out by us only in order to process the contact details. 
The legal basis for processing the data if the user's consent has been provided is GDPR Art. 6 (1) sent. 1 (a).

9.3 Duration of storage

The personal data that is collected during the sending process will be erased after transmission to the company and will not be stored by the website.

9.4 Right of objection and right to erasure

The user has the option at any time to revoke his/her consent to the processing of the personal data.
In this case, all the personal data that has been stored in connection with contacting us will be erased.

10.1 Scope of the processing of personal data

There is a job application form on our website that can be used for electronic applications, as well as a newsletter (“Job Alarm / Job Alert”) for notifying job offers. To provide the application form and the email notification service we use the recruiting page of the rexx systems personnel and applicant management software that is provided by rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg, Germany. If an applicant makes use of this option, the data that is entered on the input screen will be transmitted to rexx systems and stored by it.

Further information can be found in the Privacy policy of rexx systems:
https://www.rexx-systems.com/data-protection.php

If a user makes use of this option, the data that is entered on the input screen will be transmitted to us and then stored. 
During the sending process your consent is obtained for the processing of your data, and reference is made to this Privacy policy.
Your data will not be passed on to third parties. The data will only be used to process your application.

10.2 Purpose and legal basis of data processing

We only process the personal data from the application form in order to process your application. 
The legal basis for the processing of your data is the consent which is given at the request of the data subject, GDPR Art. 6 (1) sent. 1 (a) alt. 1 and BDSG (German Federal Data Protection Act) § 26 (1) sent. 1.

10.4 Duration of storage

Once the application process has been completed, the data will be stored for up to six months. Your data will be erased at the end of the six month period at the latest.
The Job Alert will be sent to you until you cancel the service.
 

10.5 Right of objection and right to erasure

The applicant has the option to object to the processing of the personal data at any time.
In this case, all the personal data that has been stored in connection with the electronic application process will be erased.

11.1 YouTube

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

We provide information on our company website and offer communication services to YouTube users. If you carry out an action on our YouTube company profile (e.g. comments, posts, likes, etc.), this may involve you in making personal data public (e.g. your real name or your user profile photo). However, since we generally, or to a large extent, have no influence on the processing of your personal data by the YouTube company, which is jointly responsible for the Hosokawa Alpine Aktiengesellschaft company profile, we cannot provide any binding information regarding the purpose and scope of the processing of your data.

Our company profile in social networks is used for communicating with and exchanging information with (potential) customers.

Every user is free to publish personal data by undertaking activities via our company profile.
The legal basis for data processing vis-à-vis YouTube is GDPR Art. 6 (1) sent. 1 (f).

We may undertake further processing of data from our company profile in our systems. 
You may object to this processing at any time.

YouTube has undertaken to comply with the standards and regulations of European data protection law. You can find more detailed information via the following linked entry: www.privacyshield.gov/participant;

You can find more information about the processing of your personal data by YouTube and the corresponding options for objection in accordance with GDPR Art. 13 here:
YouTube: https://policies.google.com/privacy?gl=EN&hl=en

11.2 Facebook

Information about data processing via our Facebook online presence:
https://www.hosokawa-alpine.de/rechtliches/datenschutz-facebook

We use the option of company profiles on professional networks.

Our company profile is used for information and communication purposes. Every user is free to publish personal data by undertaking activities via our company profile.

The legal basis for processing your data in connection with the use of our company profile is GDPR Art. 6 (1) sent. 1 (f).

We may undertake further processing of data from our company profile in our systems. 
You may object to this processing at any time.

Comprehensive information on the processing of your personal data according to GDPR Art. 13 by the companies which are jointly responsible for the company profile can be found in the Privacy policy of the networks concerned.

If you carry out an action on our company profile (e.g. comments, posts, likes, etc.), this may involve you in making personal data public (e.g. your real name or your user profile photo).
We maintain a company profile on the following professional networks:

12.1 LinkedIn

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy:
https://www.linkedin.com/legal/privacy-policy

LinkedIn has undertaken to comply with the standards and regulations of European data protection law. You can find more detailed information via the following linked entry:
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
 

12.2 XING services

New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany

Privacy policy:
https://privacy.xing.com/en/privacy-policy