Privacy

These online services (online shop, newsletter) are operated by Haberkorn GmbH, 6961 Wolfurt, Hohe Brücke. This privacy policy describes how we, as the controller under data protection law, process your personal data in connection with the online services.

1. Which data we process about you

When you visit our website and use an online service, the following information is collected:

the date and time you access a page of the online service used, your IP address, the name and version of your web browser, the website (URL) you visited before accessing this website, certain cookies (see point 2) and the information that you provide yourself by filling out various enquiry or request forms, registering for our newsletter, filling out the application form, filling out a participation form for competitions or registering in our online offers.

You are not obliged to actually provide the data that we request in our online offers. However, if you do not provide this data, you will not be able to use all the functions of the online offers.

2. Cookies

This website uses cookies. A cookie is a small file that can be stored on your computer when you visit a website. Cookies are generally used to provide users with additional functions on a website. For example, they can be used to make it easier for you to navigate a website, to enable you to continue using a website where you left it and/or to store your preferences and settings when you return to the website. Cookies cannot access, read or modify any other data on your computer.

When you visit our website, the ‘Cookie Settings’ info banner appears, notifying you of the use of cookies on our website as described in this data protection declaration and enabling you to consent to the use of certain cookies. By giving your consent, you agree to the use of the cookies concerned and the associated processing of data. You can revoke this consent at any time by either changing the cookie settings on our website or your browser settings. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by the revocation.

In the following sections, we describe the types of cookies we use and the data processed by these cookies: ‘Technically required cookies’, ‘Cookies for analysing surfing behaviour’ and ‘Cookies for advertising purposes’.

If no specific deletion periods are mentioned in the following sections on cookies, the following generally applies with regard to the storage period: You can control whether and which cookies are set by adjusting your browser settings. Most browsers are set by default to allow cookies to be set without restriction. You can change and restrict this and block cookies from being set. And you can delete cookies that have been set in your browser at any time; with the appropriate browser setting, the deletion can also be carried out automatically. If you would like to know more about how to set these steps, please use the ‘Help’ function in your browser.

2.1 Technically necessary cookies
Some of the functions of our online offers require cookies. These cookies are technically necessary for these functions. These include country settings, login, product selection, shopping cart, ordering process, and remembering search terms on our website. The purpose of the cookies is to offer and execute these functions.

The legal basis for setting technically necessary cookies and the associated processing is our legitimate interest in achieving these purposes.

2.2 Cookies for analysing browsing behaviour
We use cookies on our website that enable us to analyse your browsing and usage behaviour on our website, in particular cookies from Google Analytics (for more information, see point 8) and Hotjar (for more information, see point 12). 

We use these cookies to analyse which search terms you enter on our site, which functions you use how often and for how long, and which sub-pages of our website you visit how often and for how long. The data collected in this way is pseudonymised by technical precautions. The data can therefore no longer be assigned to you. The data will also not be stored together with your other data. 

The data collected enables us to continuously optimise our website and its functions and to adapt it to your needs. The legal basis for the use of cookies for this purpose and the associated processing is your consent, which can be withdrawn at any time.

2.3 Cookies for advertising purposes
Our website uses Google Remarketing technology, a service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, and the meta pixel of Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and for the European Union of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). 

For more information, see sections 9 and 11 of this privacy policy. The legal basis for the setting of the cookies/pixels used for this purpose and the associated processing is your consent, which can be revoked at any time.

Please note that blocking or deleting cookies may affect your online experience and prevent you from using this website to its full extent.

3. purposes of data processing

We will process your personal data for the following purposes:
a. to provide you with this website and to further improve and develop this website;
b. to be able to create usage statistics;
c. to detect, prevent and investigate attacks on our website;
d. to respond to your inquiries;
e. to process your participation in competitions;
f. to process your job applications;
g. to process your orders in the online shop and handle payments (via the payment service provider Novalnet AG);
h. to send you our newsletter;
i. to check your credit rating if necessary;
j. to communicate with you about orders, products, services and offers;
k. to permanently improve your shopping experience, to personalise it and to recommend products, offers or services that may be of interest to you;
l. to provide you with our occupational safety and tube network and to process your contributions;
m. to be able to process registrations for training courses and seminars.

We only check your credit rating if you register with our online shop. We then have a legitimate interest in learning more about your credit rating before concluding a contract and also during an ongoing contractual relationship. For this purpose, we pass on the following data, which you provided when registering with the online shop, to a credit reference agency as a processor so that they can provide us with information about your credit rating: name, address, date of birth. The processing carried out by the credit reference agency is profiling. If your credit rating is too low, we can refuse to conclude the contract or demand security or advance payment. The decisions as to whether your credit rating is too low and whether we refrain from concluding the contract and/or demand security and/or advance payment are always made by a human being. You have the right to object to the profiling or to comment on the result of the profiling (and to provide further information).

We use the payment service provider Novalnet AG in D-85774 Unterföhring to process payments in the online store. For this purpose, the payment service provider receives the order data (customer number, name, address, email address) and the IP address.

In addition, the customer provides the credit card details (provider, cardholder, card number, expiry date, CVC code) used for payment directly to the payment service provider.

4. legal bases of the processing

The legal basis for the processing of your personal data

• in accordance with the above under points 3a-e, i, j and l is our overriding legitimate interest, which consists in achieving the purposes mentioned above under points 3a-e, i and l;
• according to points 3f and 3g above, the necessity for the fulfilment of the contract concluded with you in the online shop or the necessity for the implementation of pre-contractual measures at your request (application);
• according to points 3 h, k and m above, your respective consent. You can revoke these consents independently of each other at any time, without affecting the legality of the processing carried out up to the point of revocation.

5. transmission of your personal data

We will transfer your personal data to the following recipients for the above-mentioned purposes:

• IT service providers we use, e.g. MailChimp, a newsletter distribution platform of Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, for the newsletter;
• Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA in accordance with point 8
• Meta Platforms Inc. (Facebook), 1601 S. California Ave, Palo Alto, CA 94304, USA
• advertising service providers used by us;
• shipping companies/carriers applied by us receive the delivery address and, if applicable, your mobile phone number for the delivery of the goods you have ordered;
• If a data transfer to third parties is associated with the network, this would be stated here.
• payment and credit rating service providers employed by us, namely Novalnet AG in D-85774 Unterföhring.

Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries that the EU Commission has decided have an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection. To do this, we conclude standard contractual clauses, for example. These are available on request from webmaster@haberkorn.com.

The Rocket Science Group (MailChimp), Google Inc., Microsoft Corporation and Meta Platforms Inc. (Facebook) are certified under the US-EU Data Privacy Framework and thus fall under the relevant adequacy decision of the European Commission. These companies are obliged to comply with the requirements of European data protection law. 

We use MailChimp to send our newsletter. MailChimp stores the newsletter data on its servers in the United States. This data includes not only the email address, but also the usage and clicking behaviour of the subscribers. It stores who opens our newsletters and how often, and which content they click on. We use this data to constantly improve our newsletter. The processing of the data for the purpose of sending our newsletter and analysing usage and click behaviour is based on your consent. You can also revoke this consent at any time with effect for the future, for example by using the ‘unsubscribe’ link in the newsletter. The legality of the data processing that has already taken place on the basis of the consent until the revocation remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the login area) remains unaffected.

6. duration of storage

We will store the data processed for points 3a-d and k for a period of six months. It will only be stored for a longer period if this is necessary to investigate identified attacks on our website.

If you enter a competition via our website, we will store your data for the duration of the competition and thereafter for as long as required by legal obligations or for as long as claims can be asserted from the competition.

If you sign up for our newsletter, we will store your data until we receive your cancellation and beyond that for as long as required by legal obligations.

If you register in our online shop or otherwise on our website, we will store your data in any case for as long as your account exists and thereafter for as long as required by legal obligations.

7. Your rights regarding personal data

In accordance with the applicable data protection law, you have the right to information, correction, deletion, restriction of processing, objection and transferability of the data.

You have the right to complain to a supervisory authority in the EU or to the Austrian data protection authority in Vienna if you believe that there has been a violation of European or Austrian data protection law.

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. 

Google Analytics 4 uses cookies, scripts and pixels that enable an analysis of your use of the website. The data collected includes, for example, the length of time spent on the website, language and location, the browser used to access the site, the operating system and screen size, but also events such as clicks, scrolls, downloads and page views.

Using identifiers (user ID, Google ID, device ID), which Google stores in your end device using cookies, Google Analytics 4 is able, based on algorithms and machine learning, to recognise usage behaviour across devices from the data and events recorded and to summarise the sessions in this way automatically into a uniform cross-device user experience.

According to Google, the information generated by the cookie about your use of this website is transmitted to and stored by Google on servers in Ireland. We do not store any of your data that is collected in connection with Google Analytics 4.
IP anonymisation is preset in Google Analytics 4.

We use the ‘Google Signals’ extension in Google Analytics, which enables cross-device tracking. This allows Google to recognise users who are logged in with their Google account and have activated personalised advertising there. This enables Google to assign a user's website visits with different end devices to that user. This data is anonymised and is not available to us in detail (no personal data, no user profiles). Rather, Google provides a report that anonymously tracks returning users across multiple devices and channels and shows patterns in user behaviour. This helps us to understand the user journey across different devices and to adapt our advertising strategy based on this.

Cross-device tracking via Google Signals requires that the user is logged into a Google service while visiting our website and has also activated the ‘personalised advertising’ option in their Google account. Therefore, please deactivate the ‘personalised advertising’ option in your Google account if you do not want ‘Google Signals’ to be used.

On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to us relating to website activity and internet usage. 

The tracking technologies described above are used on the basis of your consent given in the cookie settings, which you can revoke there at any time with effect for the future by deactivating tracking.
You can generally prevent cookies from being stored by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also generally prevent Google from collecting your data in connection with Google Analytics by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

You can find more information about Google's terms of service and privacy policy at https://marketingplatform.google.com/about/analytics/terms/en/ and https://policies.google.com/?hl=en

9. Google remarketing

This website uses Google Remarketing technology, a service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA. Google Inc. is certified under the EU-US-Data-Privacy-Framework and thus falls under the relevant adequacy decision of the European Commission.

This technology allows us to target you with advertising when you visit our website by displaying personalised, interest-based ads when you visit other websites on the Google or DoubleClick Display Network.

The analysis of your website usage is a prerequisite for the use of interest-based advertising. Google uses cookies stored on your computer to carry out this analysis and to evaluate your demographic characteristics and interests. The information generated in this way is transferred to a Google server and stored there. We may evaluate this information as part of statistics and use it to create interest-based advertisements. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

With the Google Ads extension ‘Enhanced Conversions’, we can track purchases made through our ads even better. The buyer's personal data, namely their email address, is hashed and thus pseudonymised before being transferred to Google. According to its own information, Google uses the SHA 256 hash algorithm for this purpose. The hash value allows Google to find out whether the buyer was logged in with a Google account during the purchase and thus assign the purchase to a Google account even if ad cookies have been deleted or blocked.

The legal basis for this data processing is your consent. You can revoke this consent at any time with effect for the future without affecting the legality of the processing carried out on the basis of the consent up to the revocation. To do this, disable the use of cookies by Google by visiting policies.google.com/technologies/ads to disable Google advertising. Alternatively, you can disable the use of cookies by third parties by visiting the opt-out page of the Network Advertising Initiative at www.networkadvertising.org/managing/opt_out.asp. For more information about Google's privacy policy, please visit https://policies.google.com/privacy?hl=en

10. social media channels

Our website contains links to our online presences on social networks. The links are labelled with the generally recognised icons of these networks. If you click on these icons, the link associated with the respective icon will take you to our online presence.

If you click on such a link and log in to your user account with the relevant social media service, that service can assign your visit to our website to your user account there. The purpose and scope of the data collection and the further processing and use of the data by the social media service are beyond our knowledge.

11. Meta-pixel (remarketing)

Our online offers use the visitor action pixel or meta pixel of Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and for the European Union of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’).

The visitor action pixel can be used to track the behaviour of site visitors after they have been redirected to the provider's website by clicking on a Facebook ad, and to display the provider's ads to site visitors who log in to Facebook. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The use of the visitor action pixel and the associated tracking is based on your consent. You can revoke this consent at any time as described in point 2 or by deactivating it in your Facebook account. The legality of the processing carried out on the basis of your consent until the revocation remains unaffected by the revocation.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. This enables Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. We, as the site operator, have no influence over how the data is used. You can find more information about protecting your privacy in Facebook's data policy:  https://www.facebook.com/about/privacy/
You can disable the ‘Custom Audiences’ remarketing feature in the ‘Settings’ section for advertisements at https://accountscenter.facebook.com/ad_preferences/ad_settings/audience_based_advertising To do this, you must be logged into Facebook. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/
You can also prevent Facebook remarketing by clicking on the link below.

12. Hotjar

We use Hotjar, a service provided by Hotjar Limited (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St. Julian's STJ 1000, Malta), to better understand the needs of our website visitors and to optimise the services offered on this website. Hotjar technology gives us a better understanding of our visitors' experiences on and with our website (e.g. how much time visitors spend on which pages, which links they click on, what they like and dislike, etc.). This helps us to tailor our offering to the behaviour and/or feedback of our visitors. The legal basis for data processing is your consent. You can revoke this consent at any time with effect for the future as described in point 2.

Hotjar uses the cookies listed below to collect information about our visitors' behaviour and their devices.
_hjClosedSurveyInvites: stores as soon as a visitor interacts with a survey pop-up so that a visitor is not shown the same survey more than once (duration: 365 days)
_hjDonePolls: stores as soon as a visitor completes a survey in the survey widget; same reason and duration as for hjClosedSurveyInvites
_hjMinimizedPolls: sets cookie as soon as a visitor minimises the Hotjar widget so that it remains minimised (duration 365 days)
_hjDoneTestersWidgets: sets a cookie as soon as the visitor enters their information in the Recruit User Testers Widget and sends it (duration 365 days)
_hjIncludedInSample: sets a session cookie to inform Hotjar whether a user is in the sample area in order to create a funnel (duration 365 days)
_hjShownFeedbackMessage: when a visitor minimises the feedback widget so that it remains as a minimised version when they change pages (duration 365 days)
_hjid: This cookie is set when the visitor first lands on a page with the Hotjar script so that the Hotjar user ID is retained and the behavioural data can be assigned to the same user. (Duration 365 days)
_hjRecordingLastActivity: is updated as soon as a screen recording starts for the user. Duration: session
_hjTLDTest: is set to find out the generic cookie path, then immediately removed
_hjUserAttributesHash: User attributes are sent through the Hotjar Identify API and cached for the duration of the session
_hjCachedUserAttributes: stores the user attributes that were cached in the previous cookie

Hotjar uses these cookies to collect the following information:

• Visitor device data, namely IP address (only collected and stored in anonymised form), screen resolution and device type (unique device identifiers),
• operating system and browser used,
• device location (country only),
• Language preferred by the visitor for displaying our website,
• Mouse behaviour (movements, positions, clicks),
• Key presses
• Website (URL referrer) visited before accessing our website
• Online shop registration status

Hotjar stores this information in a pseudonymised user profile. The information is not used by Hotjar or us to identify individual visitors, nor is it merged with other data about individual visitors. For more information, please see Hotjar's privacy policy.

You can object to the storage of a user profile and of information about your visit to our website by Hotjar and to the setting of Hotjar tracking cookies on other websites by clicking on this opt-out link.

You can also prevent the setting of Hotjar cookies by clicking on the link below.

13. SearchHub (CXP Commerce Experts GmbH)

With the help of SearchHub, we automatically optimise the search terms entered by our users in the background so that our search function can deliver the most relevant products. This enables us to find what we are looking for even with typos or different spellings. We also distinguish between automated queries (bots) and real users.

To achieve the best possible results, we collect the following data:

• Randomly generated ID without personal reference
• Search term
• Address of the page on which the search query was entered
• Search function suggestions selected by the user
• Search result filters used by the user
• Clicks on a product and adding to the shopping cart
• Ordered products

For this purpose, we set a session cookie that is deleted after leaving the page or at the latest when closing the browser. The data is transmitted via https. The user's IP address is also transmitted, but is neither stored nor evaluated.

14. MS Teams video conferencing

For video conferences, we use MS Teams, a service of the Microsoft Corporation based in Redmond, USA. 

During a video conference via MS Teams, in addition to the IP address and the content of the conversation, the data that you enter or upload yourself is transmitted to Microsoft. If you activate the camera, your image data will be transmitted to Microsoft.

It is up to you whether you activate the camera, show your workplace (you can prevent this by adjusting the videoconferencing settings) or write chat messages. By doing so, you consent to the corresponding processing of your data and the transmission to Microsoft in the USA.
Video and audio are not recorded in videoconferences.

14. MS Teams video conferencing

For video conferences, we use MS Teams, a service of the Microsoft Corporation based in Redmond, USA. 

During a video conference via MS Teams, in addition to the IP address and the content of the conversation, the data that you enter or upload yourself is transmitted to Microsoft. If you activate the camera, your image data will be transmitted to Microsoft.

It is up to you whether you activate the camera, show your workplace (you can prevent this by adjusting the videoconferencing settings) or write chat messages. By doing so, you consent to the corresponding processing of your data and the transmission to Microsoft in the USA.
Video and audio are not recorded in videoconferences.

Our contact details

If you have any questions or concerns regarding the processing of your personal data, please contact us:

Haberkorn GmbH, 6961 Wolfurt, Hohe Brücke, Austria, T +43 5574 695-0; F +43 5574 695-0; E webmaster@haberkorn.com

Data protection in the application process

1. Controller

Haberkorn GmbH is the controller responsible for data processing.

2. Data processing

We process the data that you enter in the application form and provide to us in your CV and other documents. The data marked as mandatory in the application form is required in order to process your application.

3. Purpose of processing and legal basis for data processing
The purpose of the processing is to process your application. The lawfulness of the data processing arises from the necessity for the implementation of pre-contractual measures in response to your application.

4. Your rights as a data subject

See point 7 above.

5. Storage of data (storage period)
If your application is rejected, the data will be stored for a further 7 months from the date of the letter of rejection in order to be able to answer any questions in connection with your application and its rejection.
After that, your data will be deleted except for your name (including any title), your date of birth, the position for which you applied, the application date and type (e.g. online application) and the language of the application (= reduced data) will be deleted, unless further storage is necessary to defend against asserted claims or you consent to longer storage for a period of two years from the date of the letter of rejection. We may then contact you during this period regarding positions with us. You may revoke this consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. After (i) the two-year period has expired or (ii) within 14 calendar days of receipt of your revocation, depending on which is earlier, the data will be deleted.
We keep the reduced data for two years from the date of the letter of refusal in order to be able to recognise multiple applicants. The legal basis for this processing is our legitimate interest in achieving this purpose. It is possible to object to this.

The competition is organised by Haberkorn GmbH, 6961 Wolfurt, Hohe Brücke (hereinafter ‘Haberkorn’).
Haberkorn customers and their employees (participants) are entitled to participate. Only fully completed entry forms will be included in the draw. Haberkorn is entitled to exclude participants from the competition if they provide incorrect data when registering for the competition. Haberkorn reserves the right to cancel or end the competition at any time without prior notice and without stating reasons.
Participation in the competition is free of charge. Participation is only permitted on the basis of these conditions. By participating in the competition, the participant accepts their validity.
In addition to these conditions of participation, the above data protection provisions apply.
The winners will be determined by lot from among the participants who answer the competition questions correctly and will be notified in writing by email or post. The prizes are non-transferable. Haberkorn excludes liability for claims in connection with the draw and the processing of the prizes to the participants and the winners. No correspondence will be entered into regarding the competition other than to notify the winners. It is not possible to exchange the prizes for cash or for any other prize.
Haberkorn does not accept any liability for technical difficulties that may affect the outcome of the competition or participation in the competition. There is no right of appeal.
The winner bears all operating, ancillary and consequential costs associated with the prize. Any gift tax to be paid shall be borne by the winner.
Haberkorn does not accept any liability for defects in the prize.
Participation is only permitted in one's own name. Participation of third parties, e.g. of lottery agencies, is excluded and will be disregarded when determining the winners.
Employees of Haberkorn and their relatives are excluded from participating in the competition.
Austrian substantive law shall apply. However, mandatory consumer protection provisions of the country in which the participant, as a consumer, has his or her habitual residence shall remain applicable irrespective of the choice of law.