Skip to Content
+49 (0) 6171 91288 - 0 info@hovacal.de DE

Privacy policy

Privacy Policy

With the following information, we would like to provide you, as a “data subject,” with an overview of the processing of your personal data by us and of your rights under data protection law. Use of our website is generally possible without providing personal data. However, if you wish to use special services offered by our company via our website, processing of personal data may be required. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, such as your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to 189east GmbH. By means of this privacy policy, we would like to inform you about the scope and purpose of the personal data collected, used, and processed by us.

As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, for example by telephone or post.

This privacy policy applies to the online offering of IAS GmbH, which is accessible via the domain hovacal.de and the various subdomains (“our website”).

Who is responsible and how can I contact you?

Controller

Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

IAS GmbH
Tabaksmühlenweg 28
61440 Oberursel
Germany

Phone: +49 6171 91288-0
Fax: +49 6171 91288-288
Email: info@hovacal.de

What is this about?

This privacy policy fulfills the legal requirements for transparency regarding the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website.

Information that cannot be linked to your person (or only with disproportionate effort), for example through anonymization, is not considered personal data. The processing of personal data (e.g. collection, retrieval, use, storage, or disclosure) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no lawful reasons for further storage. We inform you about the specific retention periods or criteria for storage in the individual processing activities. Irrespective of this, we may store your personal data in individual cases for the assertion, exercise, or defense of legal claims and where statutory retention obligations exist.

Who receives my data?

We only pass on your personal data processed on our website to third parties if this is necessary to fulfill the purposes and is covered by the legal basis in each individual case (e.g. consent or legitimate interests). In addition, we may transfer personal data to third parties in individual cases if this serves the assertion, exercise, or defense of legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors, courts, etc.

If we use service providers for the operation of our website who process personal data on our behalf within the framework of order processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing activities.

Do you use cookies?

Cookies are small text files that are sent by us to your browser during your visit to our website and stored there. As an alternative to cookies, information can also be stored in your browser’s local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies).

Other cookies enable us to perform various analyses, for example to recognize the browser you use when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can make our website more user-friendly and effective, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings).

If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing activities. Detailed information about the cookies used can be found in the cookie settings or the consent manager of this website.

What rights do I have?

Under the conditions of the statutory provisions of the GDPR, you have the following rights as a data subject:

  • Right of access pursuant to Art. 15 GDPR to information about the personal data stored about you, including meaningful information about the details of the processing, as well as a copy of your data.
  • Right to rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us.
  • Right to erasure pursuant to Art. 17 GDPR of data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.
  • Right to restriction of processing pursuant to Art. 18 GDPR, if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose deletion because you need the data for the assertion, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.
  • Right to data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6(1)(a) GDPR or on the basis of a contract pursuant to Art. 6(1)(b) GDPR and the data has been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, insofar as this is technically feasible.
  • Right to object pursuant to Art. 21 GDPR to the processing of your personal data, insofar as it is based on Art. 6(1)(e) or (f) GDPR and there are reasons arising from your particular situation, or if the objection is directed against direct marketing. The right to object does not exist if compelling legitimate grounds for processing can be demonstrated or if the processing serves the assertion, exercise, or defense of legal claims. If the right to object does not apply to individual processing activities, this is stated there.
  • Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future.
  • Right to lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you may contact the supervisory authority of your habitual residence, your place of work, or our company headquarters.

How are my data processed in detail?

Below we inform you about the individual processing activities, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective retention period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the Website

Type and Scope of Processing

When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a log file:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your device, as well as the name of your access provider

Purpose and Legal Basis

Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring its security and stability on the basis of Art. 6(1)(f) GDPR. The collection of data and storage in log files is essential for the operation of the website. Due to the exception pursuant to Art. 21(1) GDPR, there is no right to object. If further storage of log files is required by law, processing is based on Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing the website without providing the data is technically impossible.

Storage Duration

The aforementioned data is stored for the duration of the display of the website.

Contact Form

Type and Scope of Processing

Our website offers you the opportunity to contact us via a provided form. The information collected via mandatory fields is required to process the request. In addition, you may voluntarily provide additional information that you consider necessary for processing your inquiry.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and Legal Basis

Processing of your data via the contact form is carried out for the purpose of communication and handling your request on the basis of your consent pursuant to Art. 6(1)(a) GDPR. If your inquiry relates to an existing contractual relationship with us, processing is carried out for the purpose of fulfilling the contract pursuant to Art. 6(1)(b) GDPR. There is no legal or contractual obligation to provide your data; however, processing your inquiry is not possible without the information required in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage Duration

If you use the contact form on the basis of your consent, we store the data collected for each inquiry for a period of three years, beginning with the completion of your inquiry or until you withdraw your consent.

Google CDN

Type and Scope of Processing

We use Google CDN to ensure proper delivery of the content of our website. Google CDN is a service of Google Ireland Limited and functions as a content delivery network (CDN) on our website.

A CDN helps to deliver content of our online offering, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, a connection is established to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.

Purpose and Legal Basis

The use of the CDN is based on our legitimate interests in secure and efficient provision and optimization of our online offering pursuant to Art. 6(1)(f) GDPR.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfer to the USA takes place pursuant to Art. 45(1) GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are certified under the EU–U.S. Data Privacy Framework (EU–U.S. DPF).

In cases where no adequacy decision exists (including US companies not certified under the EU–U.S. DPF), we have agreed on other appropriate safeguards with the recipients pursuant to Art. 44 et seq. GDPR. These are, unless otherwise stated, the EU Commission’s Standard Contractual Clauses pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021.

In addition, prior to such a transfer to a third country, we obtain your consent pursuant to Art. 49(1)(a) GDPR via the consent manager (or other forms, registrations, etc.). We would like to point out that transfers to third countries may involve risks that are unknown in detail (e.g. data processing by security authorities of the third country), over which we have no influence and of which you may not become aware.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the Google CDN privacy policy: https://policies.google.com/privacy.

Google reCAPTCHA

Type and Scope of Processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated via a program.

When accessing this content, a connection is established to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. In addition, Google reCAPTCHA records the length of stay and mouse movements of the user in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and Legal Basis

The use of Google reCAPTCHA is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

The provisions regarding transfers to third countries, adequacy decisions, EU–U.S. Data Privacy Framework certification, standard contractual clauses, consent pursuant to Art. 49 GDPR, and potential risks apply accordingly.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the Google reCAPTCHA privacy policy: https://policies.google.com/privacy?hl=en-US.

Usercentrics

Type and Scope of Processing

We have integrated Usercentrics on our website. Usercentrics is a consent management solution provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, which is used to obtain and document consent for the storage of cookies. Usercentrics uses cookies or other web technologies to recognize users and store granted or withdrawn consent.

Purpose and Legal Basis

The use of the service is based on the legal obligation to obtain consent for the use of cookies pursuant to Art. 6(1)(c) GDPR and § 25(2) No. 2 TDDDG.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Usercentrics GmbH. Further information can be found in the Usercentrics privacy policy: https://usercentrics.com/privacy-policy/.

Enquiry List
2