Privacy Policy

Introduction and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we process your personal data when you use our website. Personal data includes all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Norbert Reska
Passauer Str. 100
94060 Pocking
Germany
Phone: +49 160 97533794
E-Mail: info@herneu.com

The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When you use our website for informational purposes only meaning you do not register or otherwise transmit information to us we only collect the data that your browser transmits to our server (so-called “server log files”).

When you access our website, we collect the following technically necessary data in order to display the website to you:

Visited website
Time of access (date and exact time)
Amount of data transmitted in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable, in anonymized form)

The processing is carried out on the basis of Art. 6(1)(f) GDPR, which is based on our legitimate interest, namely to improve the stability and functionality of our website.

The data will not be transferred or otherwise used. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller).

You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar and the lock symbol.

3) Cookies

In order to make the visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device.

Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow website settings to be saved (so-called “persistent cookies”).

In this case, you can view the storage duration in the overview of your browser’s cookie settings.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR on the basis of your consent, or in accordance with Art. 6(1)(f) GDPR for the purpose of safeguarding our legitimate interests, namely ensuring the best possible functionality of our website and a user-friendly and effective design of the website usage.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies in certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contacting us

If you contact us (for example via a contact form or by email), personal data will be collected.

Which data is collected when using the contact form can be seen in the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the related technical administration.

The legal basis for the processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR, which lies in responding to your inquiry.

If your inquiry is aimed at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.

Your data will be deleted after the final processing of your request. This is the case if it can be determined from the circumstances that the matter concerned has been conclusively resolved, provided that no statutory retention obligations exist.

5) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; “Google”), which enables the analysis of the use of our website.

By default, Google Analytics 4 places cookies when the website is visited. These are stored as small text files on your device and collect certain information. This information also includes your IP address; however, Google shortens it by removing the last digits in order to exclude direct personal identification.

The information is transmitted to Google’s servers and further processed there. In this context, data may also be transferred to Google LLC, which is based in the United States.

Google will use the collected information on our behalf to evaluate your use of the website, compile reports for us on website activity, and provide other services related to website and internet usage.

The shortened IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data held by Google.

The data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All of the processing described above in particular the placement of cookies on your device only takes place if you have given your explicit consent in accordance with Art. 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate the service using the “cookie consent tool” available on the website.

We have concluded a data processing agreement (DPA) with Google, which ensures the protection of the data of our website visitors and prohibits the unauthorized transfer of data to third parties.

Further legal information about Google Analytics 4 can be found on the following pages:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses a special feature called “demographic characteristics” that makes it possible to create statistics about the age, gender, and interests of a website’s visitors.

This is done by analyzing advertisements and third-party information. With the help of this data, target groups for marketing activities can be identified.

However, the collected data cannot be assigned to a specific person and are deleted after a storage period of two months.

Google Signals

In addition to Google Analytics 4, Google Signals can also be used on this website, which makes it possible to create cross-device reports.

If you have activated personalized advertising and linked your devices to your Google account, Google may based on your consent in accordance with Art. 6(1)(a) GDPR analyze your user behavior across devices and create data models, including those related to cross-device conversions.

We do not receive any personal data from Google, only statistical analyses.

If you wish to stop cross-device analysis, you can deactivate the “Personalized advertising” feature in your Google account settings. To do this, follow the instructions on the following page:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

More information about Google Signals:
https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

In addition to Google Analytics 4, the “UserIDs” feature can also be used on this website.

If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, created a user account on this website, and log in with this account on different devices, your activities including conversions can be analyzed across devices.

Collection of user-provided data

To improve analysis results, we use the “Collection of user-provided data” feature for users whose contact details we have obtained in the context of business or business-related relationships.

Based on your explicit consent in accordance with Art. 6(1)(a) GDPR, within the scope of this feature we electronically transmit one or more files containing aggregated customer data relating to you (in particular email address and phone number) to Google.

Google does not gain access to the raw (unencrypted) data; instead, the information is automatically encrypted during transmission using a special algorithm.

The encrypted information may only be used by Google to assign it to existing Google accounts created by the respective users.

The purpose of data processing is to refine measurement data, improve cross-device user tracking, and integrate analysis results into Google Ads’ ad personalization and conversion tracking functions.

You can revoke your consent at any time with effect for the future.

További információ a Google adatvédelmi intézkedéseiről az ügyféladatok továbbításával kapcsolatban:
https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182

With regard to the transfer of data to the United States, the provider has joined the EU–US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

6) Page functionalities

6.1 Google Maps

This website uses the online map service Google Maps (API) provided by the following provider: Google Maps (API), provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps that enables the visual presentation of geographical information. By using this service, our location is displayed and possible route planning is facilitated.

When accessing the subpages into which the Google Maps map is embedded, information about your use of the website (for example your IP address) is transmitted to Google’s servers and stored there. In this process, data may also be transferred to servers of Google LLC in the United States.

This applies regardless of whether Google provides a user account that you are logged into or whether such an account exists at all. If you are logged into your Google account, your data will be directly assigned to your account. If you do not want the data to be associated with your Google profile, you must log out of your Google account before activating the button. Google stores and evaluates the data (even for users who are not logged in) as user profiles.

The collection, storage, and evaluation of data are carried out on the basis of Art. 6(1)(f) GDPR, based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites according to user needs.

You have the right to object to the creation of user profiles. To exercise this right, you must contact Google.

If you do not agree with the future transmission of your data to Google when using Google Maps, you have the option to completely deactivate the Google Maps web service by disabling the JavaScript function in your browser. In this case, Google Maps and the map display on this website will not be usable.

If required by law, we have obtained your consent for the data processing described above in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future. To exercise the revocation, please follow the objection option described above.

Further data protection information:
https://business.safety.google/intl/de/privacy/

6.2 Google Web Fonts

This website uses the Web Fonts service of the following provider to ensure uniform font display.
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

When accessing a page, your browser loads the required Web Fonts into the browser cache in order to correctly display texts and fonts, and establishes a direct connection to the provider’s servers. In this process, certain browser information including your IP address is transmitted to the provider.

Data may also be transferred to Google LLC in the USA.

The processing of personal data in connection with contacting the font provider only takes place if you have given your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future using the “Cookie Consent Tool” available on the website.

If your browser does not support the use of Web Fonts, the default font of your computer will be used.

With regard to the transfer of data to the United States, the provider has joined the EU–US Data Privacy Framework.

Further data protection information:
https://business.safety.google/intl/de/privacy/

6.3 Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

Data may also be transferred to Google LLC in the USA.

For the visual display of the CAPTCHA window, the provider uses “Google Fonts,” which are loaded from the internet. Apart from this, no further data processing takes place beyond the information that the reCAPTCHA function already transmits to Google.

The service checks whether the input is made by a natural person or abusively through machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access.

To ensure that the action is carried out by a human, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for evaluation. Cookies may also be used in this process.

Insofar as the data processing described above is based on the use of cookies, these are set exclusively on the basis of your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time using the “Cookie Consent Tool” available on the website.

If the data processing takes place without the use of cookies, the legal basis is our legitimate interest in accordance with Art. 6(1)(f) GDPR, which aims to establish individual responsibility on the internet and to prevent misuse and spam.

We have concluded a data processing agreement with the provider that ensures the protection of the website visitors’ data and prohibits the unauthorized transfer of data to third parties.

With regard to the transfer of data to the United States, the provider has joined the EU–US Data Privacy Framework.

Further data protection information:
https://business.safety.google/intl/de/privacy/

7) Tools and Miscellaneous

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for the use of cookies and cookie-based applications that require consent.

The “Cookie Consent Tool” appears when accessing the website in the form of an interactive user interface, through which consent to the use of certain cookies and/or cookie-based applications can be given by ticking checkboxes.

By using this tool, all cookies/services that require consent are only loaded if the respective user has given consent by ticking the appropriate checkbox. This ensures that such cookies are only set on the user’s device if consent has been granted.

The tool uses technically necessary cookies to store your cookie settings. As a rule, no personal user data is processed.

If, in individual cases, personal data (such as the IP address) must nevertheless be processed for the purpose of storing, assigning, or logging cookie settings, this is done on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring lawful, user-specific, and user-friendly consent management for cookies as well as the lawful design of our online presence.

Another legal basis for the data processing is Art. 6(1)(c) GDPR. As the data controller, we are legally obliged to make the use of technically non-essential cookies dependent on the user’s appropriate consent.

If necessary, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits the unauthorized transfer of data to third parties.

Further information about the operator of the Cookie Consent Tool and the available settings can be found directly on the corresponding user interface on our website.

8) Rights of the data subject

8.1

The applicable data protection regulations grant you the following rights as a data subject (information and intervention rights) with regard to the processing of your personal data by the controller. The stated legal basis is decisive for the conditions under which each right can be exercised.

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

8.2 Right to object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS AND IN CONSIDERATION OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH PURPOSES. THE OBJECTION MAY BE EXERCISED AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of the processing, and – where relevant – the applicable statutory retention periods (for example, commercial and tax law retention obligations).

If the processing of personal data is based on explicit consent in accordance with Art. 6(1)(a) GDPR, the relevant data will be stored until you withdraw your consent.

If data processed on the basis of Art. 6(1)(b) GDPR within the framework of a contractual or quasi-contractual relationship are subject to statutory retention obligations, such data will be routinely deleted after the retention period has expired, provided that they are no longer required for the fulfillment or initiation of the contract and there is no legitimate interest on our part in further storage.

If the processing of personal data is based on Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If personal data are processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in other parts of this declaration for specific processing situations, stored personal data will be deleted once they are no longer necessary for the purpose for which they were collected or otherwise processed.