We are pleased that you are interested in our website. Protecting your privacy is very important to us. For Hoffmann, guarding the information and data entrusted to us is part of our corporate responsibility. To make sure that you feel safe when visiting our web pages, we adhere strictly to the statutory provisions when processing your personal data. Below we will provide you with detailed information about how we handle your data.
1. Who is responsible for processing my data?
1.1. When visiting this website
The responsible party (controller) when processing your data during your visit to this website is Hoffmann SE, Haberlandstr. 55, 81241 Munich.
You can contact the Data Protection Officer at Hoffmann SE by post at the address stated above, attn.: Data Protection Officer, or by email to: firstname.lastname@example.org.
1.2. For contractual performance and services
Some of the services presented to you on this website are not provided by Hoffmann SE itself, rather by the Hoffmann Group company responsible for the particular services and offerings at local level. The competent Hoffmann group company will be responsible for processing your personal data when you commission the services or offerings of a local Hoffmann Group company via this website (e.g. placing an order, services, customer support).
Hoffmann SE is always responsible for orders and service requests from consumers.
In most cases the Hoffmann Group company responsible at the place of delivery will be responsible for orders and service requests from corporate customers. The details provided in the order and contractual documents are authoritative for orders. In most cases the Hoffmann Group company responsible for the specific location will be responsible for services and enquiries with reference to a particular location.
Where necessary, Hoffmann SE will transfer the data collected from you to the Hoffmann Group company responsible for you if you order performances and services from Hoffmann Group companies via this website.
2. When does Hoffmann collect data about you?
2.1. When accessing our website
We collect data to a limited extent in order to accept and process your orders and to send you offers that reflect your needs. You can visit our web pages without providing personal details. We save technical access data in server log files, e.g. the name of the requested file, the data and time of access, the data volume transferred and the Internet service provider. This data is used exclusively to ensure smooth operation of the website and to improve our offering.
We collect personal information in particular
• when placing an order via the webshop
• when registering for and logging into a personal customer account
• when creating and managing employee accounts
• when subscribing to our newsletter
• via the contact and service request form
• when contacting us by email.
The individual input forms state which information is collected. We use the data you provide for contractual performance, to provide the services and to process your enquiries.
2.2. Newsletter subscription
You have the option to subscribe to our newsletter, which is sent on a regular basis and contains information on special offers. For the newsletter subscription, we use a double opt-in process, which means that we will only send you the newsletter via email once you have confirmed your subscription by clicking on the link contained in the email sent to verify that you are the owner of the email address provided. When you confirm your email address, we store your email address, the time that the subscription was confirmed and the IP address of the device used to confirm the subscription until the time that you unsubscribe from the newsletter. This information is stored solely for the purposes of distributing the newsletter and providing evidence of your consent to receive the newsletter. You can unsubscribe from the newsletter at any time. A link to unsubscribe is included in every newsletter. To unsubscribe, it is sufficient to send a message to the contact address stated in the newsletter (e.g. by email). The legal basis for processing your information in this way is the consent you provided in line with Art. 6, para. 1 a) GDPR.
2.3. Initiating contact
There are various options for contacting us. These include the contact form and contacting us by email. In this context, we process your data solely for the purpose of communicating with you. The legal basis for this is Art. 6 para 1 b) GDPR. The data we collect when you use the contact form is automatically deleted once your query has been fully processed, unless we require this information for the fulfilment of contractual or legal obligations.
3. How does Hoffmann use the data?
3.1. For the performance of contractual obligations (Art. 6 Paragraph 1 Point b GDPR)
Hoffmann uses your data for the purpose of offering you the best possible shopping and service experience. In doing so we treat your data responsibly. In particular, Hoffmann GmbH Qualitätswerkzeuge and the Hoffmann Group companies use your data to
• fulfil your order
• process your service enquiry
• circulate our email newsletter when ordered by you
Where a Hoffmann Group company is responsible for your order or service enquiry, we will pass on our data to the Hoffmann Group responsible for you.
3.2. Through balancing of legitimate interests (Art. 6 Paragraph 1 Point f GDPR)
We are also entitled to use your data where it is necessary for the purposes of our legitimate, usually commercial, interests or the legitimate interests of third parties, whereby we will process the data in a pseudonymised or anonymised form where possible. This takes place for the following purposes:
• to monitor and improve the efficiency and legal compliance of business processes
• to check creditworthiness
• to monitor, optimise and enhance services and products
• to conduct advertising (e.g. postal advertising, re-targeting), as well as for market and opinion research
• to exercise legal claims and for defence in legal disputes
• to detect, prevent and clarify criminal acts
• to guarantee the security and operability of our IT systems
3.3. Based on your consent (Art. 6 Paragraph 1 Point a GDPR)
Where you have given consent to the processing of your data, processing shall be lawful on the basis of consent in each case. This applies in particular to any consent you provide to contact for advertising purposes by telephone or email.
You are entitled to revoke your consent at any time, effective for the future. You may unsubscribe from our newsletter at any time, either by sending a message to the contact address above or by clicking on the unsubscribe link in the email.
3.4. For the fulfilment of legal obligations (Art. 6 Paragraph 1 Point c GDPR)
We are required to comply with a number of legal obligations, e.g. statutory retention periods for business records and provisions under export law.
4. Transfer of your data
Where it is necessary to commission the services of external providers (hosting providers, etc.) for the operation of this website or for performances by the Hoffmann Group companies, or where a different Hoffmann Group company is responsible for processing, the respective enterprise will only receive your data in the scope that is necessary for the fulfilment of their task and function.
Where this service provider and the Hoffmann Group company process your data outside of the European Union, your data may be transferred to a country that does not uphold the same data protection standards as the European Union. We ensure in these cases that the recipient of your
data is required by contract or by other means to adhere to a data protection standard equivalent to that of the European Union.
5. How does Hoffmann use your data for postal advertising?
Insofar as it is permitted by law, Hoffmann SE, i.e. the Hoffmann Group company responsible for you, reserves the right to process your data for the purpose of direct postal advertising, even without your consent. This includes the analysis of your data (e.g. master data, order data, access data) to identify your potential interest in our products and services. Analysis is conducted using statistical methods based on current customer data and generally available insight into our customers. The results are used to contact you in a targeted manner to reflect your needs and to send you relevant offerings.
You are entitled to object to the processing of your data for this form of advertising at any time. This applies also to profiling insofar as it is associated with this form of direct advertising. You may send your objection to the contact details above, i.e. to the Hoffmann Group company responsible in your case.
6. When does Hoffmann conduct creditworthiness and score checks?
Where Hoffmann SE, i.e. the Hoffmann Group company responsible for you, incurs costs in advance, e.g. in the case of ordering on account, the respective company reserves the right, for the protection of its legitimate interests, to obtain an identity and creditworthiness check from a specialised services company (credit agencies), i.e. to predicate the agreement to certain terms of payment on the completion of a creditworthiness check. The creditworthiness information may contain probability values (score values) that are calculated according to scientifically substantiated, mathematical and statistical methods and whose calculation may involve the inclusion of other address data. We use the information we receive on the statistical probability of payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship. Your legitimate interests are considered in accordance with the statutory provisions.
For an overview of the credit agencies commissioned by Hoffmann SE, i.e. the Hoffmann Group companies respectively, and for any additional, specific information on data processing by the respective Group company, click here.
Most browsers (refer to the Help tab in the browser taskbar) can be adjusted to block new cookies, to send you an alert when a new cookie is placed or to disable all cookies you have received. Refer
to the operating instructions of your smartphone, tablet and other mobile or stationary devices to learn more about adjusting your settings.
8. Which web analysis services does Hoffmann use, and why?
8.1. Web analysis service by Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (www.google.de). Google (Universal) Analytics uses “cookies”, which are text files placed on your computer, and other methods to help the website analyse how you use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. In case IP anonymisation is activated on this website, your IP address will be truncated by Google within the area of Member States of the European Union or in other countries which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and truncated there. The IP address transferred by your browser during the use of Google Analytics will not be associated with any other data held by Google.
You can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
In addition to the browser plug-in, you can also opt out from being tracked by Google Analytics on this website in future by clicking on this link. By doing so, an opt-out cookie will be placed on your device. You must click on the link again to delete your cookies.
Google Analytics cookies are placed on your device on the basis of Art. 6 Paragraph 1 Point f GDPR. Hoffmann has a legitimate interest in the analysis of user habits in order to optimise our web services and our advertising content.
8.2. Web analysis service by econda
This website uses technologies by econda GmbH (www.econda.de) to collect and save data that can be used to produce pseudonymised usage profiles. These profiles are used to analyse user habits and to improve the needs-based design of our services. Cookies may be used in this regard. Cookies are small text files that are placed on the device of the visitor to our website and that allow their recognition during the next visit to our website. The pseudonymised usage profiles are not associated with personal data about the bearer of the pseudonym without explicit consent, which must be provided separately. You can object to the collection and storage of data at any time, effective for the future, by clicking on the following link http://www.econda.de/econda/unternehmen/datenschutz/widerspruchscookie.
After your objection, an opt-out cookie will be placed on your device. You must click on the link again to delete your cookies. Econda cookies are placed on your device on the basis of Art. 6 Paragraph 1 Point f GDPR. Hoffmann has a legitimate interest in the analysis of user habits in order to ensure needs-based design of our services.
9. When is your data erased?
10. Which data protection rights do you have?
In your dealings with Hoffmann SE and Hoffmann Group companies, you have a right, provided the legal requirements are satisfied in each case, to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority responsible for data protection (Art. 77 GDPR).
Where you have grated consent to Hoffmann SE or a Hoffmann Group company, you may revoke this consent at any time, effective for the future, by email, fax or letter. For the contact details of the Hoffmann Group company responsible for you, click here.
Where Hoffmann SE and the Hoffmann Group company process your data based on the balancing of legitimate interests, you are entitled to object to the processing. Once you have raised your objection, your data will no longer be processed, unless the responsible company can prove that processing is based on compelling legitimate reasons that override your interests, rights or freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.