Welcome to the website of Hartmann GmbH ("Hartmann"). In the following, we will inform you about the processing of personal data when using this website and thus comply with our legal obligations, in particular from the General Data Protection Regulation (hereinafter: GDPR). "Personal data" is understood to mean all data that can be related to you personally, e.g. name, address, email addresses, user behavior, etc. (cf. Art. 4 No. 1 GDPR).
The person responsible for the processing of personal data within the meaning of the GDPR is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. The person responsible for data processing on this website is:
Hartmann GmbH
The following data protection officer has been appointed at Hartmann GmbH:
Dr. Jan Moritz Schilling
Our site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. All data collected when you visit our website and stored by us is therefore stored on the servers of Hetzner Online GmbH or its contractually bound partner companies. The servers of Hetzner Online GmbH are located in Germany. Hetzner Online GmbH handles the user data collected there strictly in accordance with the instructions of Hartmann as the responsible party. We specify the purpose and means of processing in accordance with Art. 28 GDPR.
The purpose of data processing in the context of hosting is to ensure the functionality and accessibility of our website. The legal basis is our legitimate interest in reliable and secure web hosting in accordance with Art. 6 Para. 1 lit. f) GDPR.
When you visit our website, we automatically collect information from your device's system and save it in so-called server log files. This data is automatically transmitted to us by your browser when you visit the website. This includes the following information:
The purpose of this data processing is to make our website accessible and to enable it to be displayed correctly on your device. In addition, the data is used to technically optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context. The legal basis for this data processing is our legitimate interest in accordance with Art. 6 Para. 1 lit. f) GDPR, which lies in the aforementioned purposes.
We use cookies on our websites. Cookies are small text files that are assigned and stored on your device using a characteristic character string and through which certain information is sent to the provider that sets the cookie. Cookies cannot run programs or transmit viruses to your computer and therefore cannot cause any damage. They are designed to make the Internet more user-friendly and effective overall, and therefore more pleasant for you.
Cookies can contain data that makes it possible to recognize the device used. However, cookies sometimes only contain information about certain settings that are not personally identifiable. However, cookies cannot directly identify a user.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, cookies are again divided into:
Any use of cookies that is not strictly technically necessary represents data processing that only takes place with your express and active consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR. This applies in particular to the use of marketing or sharing cookies. In addition, we only pass on your personal data processed by cookies to third parties if you have given your express consent to do so in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR.
Cookies are only stored on the user's device. Therefore, you as the user have full control over the use of cookies. The storage of cookies can be deactivated or restricted in your browser. If cookies are deactivated, the functionality of this website may be restricted. You can delete stored cookies manually at any time and also activate the automatic deletion of cookies when closing the browser.
For more information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking, please see the following paragraphs of this privacy policy.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
This data is not merged with other data sources.
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal message to us by email is sufficient. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your inquiry has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
If you have given your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
We primarily record the interactions between you as a website user and our website using cookies, device/browser data and IP addresses. Google Analytics also records your IP addresses to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user comes (so-called "IP location determination"). The information generated by cookies and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there.
This website uses the scroll tracking function of Google Analytics. This enables reports to be created that contain information about how far visitors to our website have scrolled down. This enables us to draw conclusions about which content is interesting for visitors to the site and which content is of less interest. From this we deduce which content needs improvement so that we can tailor our site content even better to users. By anonymizing the IP address, the data cannot be assigned to a specific person. You can revoke your permission to use this function in our Consent Manager at https://www.purewater-hartmann.de/en/privacy.html via the link Edit my privacy settings by deactivating Google Analytics.
The User ID function is activated in our Google account, although we do not use the User ID function. Deactivating User ID could have a negative impact on the performance of our advertising campaigns. If User ID is used, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyze user behavior across devices. Further information can be found at the following link: https://support.google.com/analytics/answer/3123662/ You can revoke your permission to use this function in our Consent Manager at https://www.purewater-hartmann.de/en/privacy.html via the link Edit my data protection settings by deactivating Google Analytics.
We continue to use the Google Signals function. In Google Analytics, we collect additional information about users who have activated personalized ads. This gives us extended reports on demographic characteristics and interests, and ads can also be delivered to you in cross-device remarketing campaigns. If you do not want your data to be processed in this way, you can object to the individual advertisements in our Consent Manager at https://www.purewater-hartmann.de/en/privacy.html via the link Edit my data protection settings by deactivating Google Analytics.
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. Using the reports provided by Google Analytics, we can analyze and improve the performance of our website and the success of our marketing campaigns, making them more interesting for you as a user.
Recipients of the data collected by Google Analytics are or can be:
Due to current legislation in the USA, it cannot be ruled out that US authorities will access the data stored by Google.
The parent company of Google Ireland Limited., Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. Based on the decision of July 10, 2023 for the EU-US data protection framework according to Art. 45 GDPR, Google LLC has a data protection level corresponding to the European standard. Google LLC is certified according to the Data Privacy Framework. The list of companies participating in the EU-US data protection framework can be found at https://www.dataprivacyframework.gov/
The personal data collected by Google Analytics is automatically deleted after 2 months. Data whose retention period has been reached is automatically deleted once a month.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 Clause 1 Letter a) of GDPR.
You can revoke your consent at any time with effect for the future. The easiest way to do this is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings by deactivating Google Analytics. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent Google from collecting and transmitting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by:
We have concluded a contract for order data processing with Google. You can view this at the following Google link:
For more information on Google Analytics' terms of use, see:
Google provides information on data processing when using Google Analytics at the following link:
General information on data protection, which Google says should also apply to Google Analytics, can be found in Google's privacy policy at:
We use the Google Ads service to draw attention to our offers using advertisements. If you access our website via a Google ad, Google Ads will store a cookie on your device.
The advertising material is delivered by Google via so-called "ad servers". For this purpose, we and other websites use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be contacted) are usually stored as analysis values for this cookie.
The cookies set by Google enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and been redirected to this page. Each Ads customer is assigned a different cookie so that the cookies cannot be tracked across the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We do not independently collect personal data in the advertising measures mentioned, but only provide the opportunity to collect the data for Google. We only receive statistical evaluations from Google that provide information about which ads were clicked on, how often and at what prices. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users based on this information.
Recipients of the data collected by Google Ads are or can be:
Due to current legislation in the USA, it cannot be ruled out that US authorities will access the data stored by Google.
The parent company of Google Ireland Limited., Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. Based on the decision of July 10, 2023 for the EU-US data protection framework according to Art. 45 GDPR, Google LLC has a data protection level corresponding to the European standard. Google LLC is certified according to the Data Privacy Framework. The list of companies participating in the EU-US data protection framework can be found at https://www.dataprivacyframework.gov.
The legal basis for the processing of your data is Art. 6 Para. 1 Clause 1 Letter a of GDPR, i.e. the integration only takes place with your consent.
You can revoke your consent at any time without affecting the legality of the processing up to the time of revocation. The easiest way to revoke your consent is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings or via the following functions: a) by setting your browser software accordingly, in particular the suppression of third-party cookies means that you will not receive any advertisements from third parties; b) by setting your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers who are part of the self-regulation campaign “About Ads” via the link www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating in your browsers Firefox, Internet Explorer or Google Chrome under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.
We have concluded a contract for order data processing with Google. You can view this at the following link:
We use Google Ads with the additional application "Google Conversion Tracking". This is a process that allows us to check the success of our advertising campaigns. To do this, the advertisements are provided with a technical precaution, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This gives us statistical information about the total number of readers of our advertisements, which advertisements are particularly popular and, if applicable, further information about the consequences of the advertisement.
Date and time of the conversion; IP address, referrer URL, browser type, browser language, cookie ID, user behavior, ads clicked, web request, session duration
When collecting personal data, we pursue various purposes in order to optimize the use of our service and offer our customers the best possible experience. This includes analyzing usage patterns in order to deliver content in a targeted manner and to continuously improve our service. We also use cloud computing services for this purpose, which enable efficient and secure processing of the data. The data also serves to protect our platform from malicious bots and attacks.
We measure the success of our marketing campaigns and carry out conversion tracking to determine the extent to which our advertising measures lead to desired actions. In addition, we use the data to manage and maintain customer data and to analyze customer behavior in order to better understand interactions with our offering.
We use personalized marketing techniques to offer our customers relevant advertising content tailored to their interests. The insights gained help us optimize conversion rates and continuously improve our services.
Recipients of the data collected by Google Ads Conversion Tracking are or can be:
Due to current legislation in the USA, it cannot be ruled out that US authorities will access the data stored by Google.
The parent company of Google Ireland Limited., Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. Based on the decision of July 10, 2023 for the EU-US data protection framework according to Art. 45 GDPR, Google LLC has a data protection level corresponding to the European standard. Google LLC is certified according to the Data Privacy Framework. The list of companies participating in the EU-US data protection framework can be found at https://www.dataprivacyframework.gov
The personal data collected by Google Ads Conversion Tracking is automatically deleted after 90 days. Data whose retention period has been reached is deleted once a month.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 Clause 1 Letter a) GDPR
You can revoke your consent at any time with effect for the future. The easiest way to do this is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings by deactivating Google Ads Conversion Tracking. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection and transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by not giving your consent to the setting of the cookie.
We have concluded a contract for order data processing with Google. You can view this at the following link:
For more information on the terms of use of Google Ads Conversion Tracking, see:
Google provides information on data processing when using Google Ads Conversion Tracking at the following links:
Google provides general information on data protection regarding Google Ads Conversion Tracking at the following link:
We have integrated the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") on our website. This integration is done so that we can distinguish whether an input is made by a natural person or by machine and automated processing.
The legal basis for the use of the function is Art. 6 Para. 1 Clause 1 Letter f of GDPR. Our legitimate interest is in identifying and preventing spam and misuse of the website when using it.
The following data is collected through the function: Click path; Date and time of the visit; IP address; Device operating system; Device information; Geographical location; Browser language; Browser plug-ins; Mouse movements; User behavior; Time spent on a page; User input; IP address; date and time of visit; clicks on paths; visitor behavior of the website; Javascript objects; browser plug-ins;
The information collected may be stored on the provider's servers in the United States of America. The European Commission has certified some third countries, including the United States of America, through so-called adequacy decisions that provide data protection comparable to the EU standard (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). The provider Google LLC, Mountain View California, has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. A list of providers certified under the EU-US Data Privacy Framework can be found at (dataprivacyframework.gov).
On our website, you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is sent to us. We use the so-called double opt-in procedure to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, in which we ask you to confirm that you are the owner of the email address you provided and that you wish to receive notifications. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
The following data is also collected when you register: • IP address of the device you are using • Date and time of registration Your consent is obtained for the processing of the data during the registration process and reference is made to this privacy statement.
No data is passed on to third parties in connection with data processing for sending newsletters. The data is used exclusively for sending the newsletter. The data is only collected to send the newsletter if you give us your express consent to do so in advance when you register for the newsletter. This consent can be revoked at any time.
We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on and use this to determine your personal interests. We link this data to actions you take on our website.
The legal basis for processing data after registering for the newsletter is the user's consent in accordance with Art. 6 Paragraph 1 Letter a) of GDPR.
The user's email address is collected to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription is active.
Granting consent is entirely voluntary. You can refuse to give this consent without giving reasons, without fearing disadvantages. Without granting consent, we simply cannot send you a newsletter.
You can revoke your consent at any time with effect for the future. The easiest way to do this is via a link that is included in every newsletter. Alternatively, consent to the sending of the newsletter can be revoked at any time by sending an email to dsb@hartmann-gmbh.eu. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
If you give us your consent, we will also use your personal data to send you advertising emails. As part of such consent, we will collect your email address. In addition, the following other data is collected in this context:
Your consent is obtained for the processing of the data and reference is made to this data protection declaration.
No data is passed on to third parties in connection with data processing for the sending of advertising emails. The data is used exclusively for the sending of advertising emails. The data is only collected to send advertising emails if you give us your express consent in advance. This consent can be revoked at any time.
The legal basis for processing the data to send advertising emails to the user is the user's consent in accordance with Art. 6 (1) lit. a) GDPR.
If you consent to use the data for advertising purposes, the data is collected to provide you with information about our products and services.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored until consent to send advertising emails is revoked.
The consent to send advertising emails can be revoked by the affected user at any time. For this purpose, there is a corresponding link in every advertising email.
Granting consent is entirely voluntary. You can refuse to give your consent without giving reasons and without fearing any disadvantages. Without your consent, we will simply not be able to send you any advertising emails about our products.
On our website, you have the option of participating in the VE water seminar or RDGE seminar. The VE water seminar/RDGE seminar is an information video provided online by us. When you register to participate in the VE water seminar/RDGE seminar, the data from the input mask is sent to us. For this registration, we use the so-called double opt-in procedure. This means that after you register, we will send you an email to the email address you provided, in which we ask you to confirm that you are the owner of the email address you provided and that you wish to receive notifications. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
Your consent will be obtained for the processing of the data during the registration process and reference will be made to this data protection declaration.
The prerequisite for participation in the VE water seminar/RDGE seminar is that you give us your consent to use the data entered when registering for the VE water seminar/RDGE seminar for advertising purposes and to send a newsletter. In this case, you will also receive a newsletter and advertising emails from us about our products and services, in particular about our free analysis meeting. In this case, too, the data will not be passed on to third parties in connection with the data processing for sending the newsletter and advertising emails. Your consent is voluntary and you have the right to revoke it at any time.
For the rest, please refer to the information on newsletters and advertising emails in this data protection declaration.
The legal basis for processing data after registering for the VE water seminar/RDGE seminar is the user's consent in accordance with Art. 6 Para. 1 lit. a) GDPR.
The user's email address is collected to provide the VE water seminar/RDGE seminar and to send advertising emails or the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription is active.
The consent to provide the VE water seminar/RDGE seminar can be revoked by the affected user at any time by sending an email to dsb@hartmann-gmbh.eu. The consent to receive advertising emails or the newsletter can be revoked at any time via the aforementioned email address or by using the link provided for this purpose in the advertising emails or in the newsletter.
On our website, you have the option of booking a free analysis session. When you book the free analysis session, the data from the input mask is sent to us. We use the so-called double opt-in procedure to book the analysis session. This means that after you register, we will send you an email to the email address you provided, in which we ask you to confirm that you are the owner of the email address you provided and that you want to book the free analysis session. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
The legal basis for processing the personal data collected from you when booking a free analysis consultation is Art. 6 Para. 1 lit. b) GDPR.
The collection of the user's email address and other personal data as part of the booking process serves to prevent misuse of the services or the email address used and to conduct the analysis conversation.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as is necessary to conduct the analysis conversation.
The other personal data collected as part of the registration process is usually deleted after a period of seven days.
If the request is assigned to a contract, the personal data will be deleted after the deadlines for the contract term or processing will be restricted if there are statutory retention periods or if further storage is necessary to assert, exercise or defend legal claims.
Granting consent is entirely voluntary. You can refuse to give this consent without giving reasons, without fearing any disadvantages. Without granting consent, no online analysis discussion can take place.
There is a contact form on our website which can be used for electronic contact and inquiries. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and saved. This data is:
Company, title, first name, last name, street, zip code, city, country, email address, telephone number, concern, message, acknowledgement and acceptance of the privacy policy
Your consent will be obtained for the processing of the data before submitting the contact form and reference will be made to this privacy policy.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be saved.
The data will not be passed on to third parties in this context. The data will only be used to process the request.
The legal basis for processing the data if the user has given their consent is Art. 6 Para. 1 lit. a GDPR.
The legal basis for processing the data transmitted when sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.
The processing of the personal data from the input mask serves us solely to process the request. In the case of contact by email, this also represents the necessary legitimate interest in processing the data.
The other personal data processed when sending the contact form serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the user's respective request has been completed. The request is completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The user has the option of revoking his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke this consent at any time. An informal message by email to us is sufficient. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation. All personal data that was stored in the course of contact will be deleted in this case.
If you would like to voluntarily set up and use a customer account, you must register by providing your email address, a password of your choice and your freely selectable user name. There is no obligation to use your real name; pseudonymous use is possible. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete when you have previously confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. If you do not confirm this within [24 hours], your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory; you can provide all other information voluntarily by using the account. After setting up a customer account, you do not need to enter data again. In addition, you can view or change the data stored about you in your customer account at any time. You have the option of deleting your customer account at any time. Please note, however, that this does not mean that the data visible in the customer account is deleted. The user name and password are used to access your customer account. Please treat your personal access data confidentially and in particular do not make it available to any unauthorized third parties. We cannot accept any liability for passwords that are used improperly, unless we are responsible for the misuse.
If you use your customer account, we will save your data required to fulfill the contract, including information on the payment method, until you permanently delete your access. We will also save the voluntary data you provide for the duration of your use of the customer account, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6 Para. 1 Clause 1 Letters a and f of the GDPR.
When paying using the payment method "Purchase on account via PayPal", the purchase price claim is assigned to PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"). The data required to process the payment is transmitted by us to PayPal. For the purpose of its own credit check, PayPal transmits data to credit agencies (credit agencies) and receives information from them and, if applicable, credit information based on mathematical-statistical procedures (probability or score values), the calculation of which includes address data, among other things. By selecting the payment method mentioned, you agree to the transmission of the data to PayPal and the performance of credit checks by PayPal. PayPal works with credit agencies as part of the credit checks. Detailed information on this and the credit agencies used can be found in PayPal's privacy policy https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE (https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE).
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)
We use the Content Management System (CMS) from Contao on our website. Our CMS automatically records and stores certain information that your browser sends to our server each time you access our website. This includes:
This data is evaluated exclusively for statistical purposes and used to improve the website. This data is not merged with other data sources.
Contao CMS uses technically necessary cookies to ensure website functionality, for example for managing sessions in the backend or for user registration. These cookies store information such as the session ID to identify logged-in users.
The legal basis for processing the data is Art. 6 Para. 1 lit. f GDPR.
We also use other plugins and extensions in Contao. These offer additional functions (e.g. newsletter modules, contact forms). Such extensions could store or process additional data, such as your IP address, form data when you fill out forms, user data when users register or when you use interactive functions.
The extensions we use in Contao are shown below.
We use the Contao Notification Center to manage notifications. This enables us to process information such as inquiries, newsletter registrations or notifications.
Personal data such as your email address and other contact information that you provide with your inquiry may be processed in order to send the desired notifications.
We use the Notification Center to forward inquiries made via the homepage contact form to our local email program in the form of an email notification.
The personal data collected by the Contao Notification Center is automatically deleted after 90 days. Data whose retention period has been reached is deleted once a week.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 Clause 1 Letter a) GDPR or, if necessary to fulfill a contract, Art. 6 Para. 1 Letter b GDPR or our legitimate interest in accordance with Art. 6 Para. 1 Letter f GDPR.
You can revoke your consent at any time with effect for the future. The easiest way to do this is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings by deactivating Contao Notification Center. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection and transmission of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by not giving your consent to the setting of the cookie.
We use the Contao Leads module to collect and store data from forms that are filled out on our website.
Depending on the type of form, this may include information such as names, email addresses and other details that you provide to us voluntarily.
This data is used to answer inquiries and maintain contact.
Here, too, data processing is carried out on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR or, if necessary to fulfill a contract, in accordance with Art. 6 Para. 1 lit. b GDPR.
The personal data collected by Contao Leads will be deleted if they are no longer required. The user's personal data will therefore be stored within the scope of Art. 6 Para. 1 lit. b GDPR until the request has been processed and the personal data is no longer required to fulfill the contract and we are no longer subject to any legal retention obligation.
If the processing of the user's personal data is based on their consent, the user's data will be stored until the consent is revoked.
If we have obtained your consent for data processing, you can revoke your consent at any time with effect for the future. The easiest way to do this is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings by deactivating Contao Leads. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the collection and transmission of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by not giving your consent to the setting of the cookie.
Automated decision-making or profiling within the meaning of Art. 22 GDPR are not used on this website.
We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. The legal basis for the use of the maps is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. This means that the integration only takes place with your consent.
When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as IP address and time stamp, are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want to be associated with your Google profile, you must log out before activating the button. Google saves your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
The information collected is stored on the provider's servers, including in the United States of America. The European Commission has certified that some third countries, including the United States of America, have data protection comparable to the EU standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). The provider Google LLC, Mountain View California, has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. A list of providers certified according to the EU-US Data Privacy Framework can be viewed at Participant Search (dataprivacyframework.gov).
We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph 2 transferred. We have no influence on this data transfer.] The legal basis for displaying the videos is Art. 6 paragraph 1 sentence 1 lit. a GDPR. This means that the integration only takes place with your consent.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as IP address and time stamp, are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your YouTube profile to be assigned, you must log out before activating the button. YouTube saves your data as user profiles and uses them for the purposes of advertising, market research and/or tailoring its website to meet your needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
The information collected is stored on the provider's servers, including in the United States of America. The European Commission has certified that some third countries, including the United States of America, have data protection comparable to the EU standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). The provider YouTube LLC, based in San Bruno, California, a subsidiary of Google LLC, Mountain View California, has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. A list of providers certified according to the EU-US Data Privacy Framework can be found at Participant Search (dataprivacyframework.gov).
Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy.
We currently use the following social media plug-ins: X (formerly Twitter) and LinkedIn, which are only loaded if you have previously activated the function with your consent. We use the plug-ins to offer you the opportunity to interact with social networks and other users. The legal basis for the use of the plug-ins is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, i.e. integration only takes place with your consent.
The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider to exercise this right. The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent your profile from being assigned to the plug-in provider.
The information collected is stored on the providers' servers, including in the United States of America. The European Commission has certified that some third countries, including the United States of America, have data protection comparable to the EU standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). The providers X Corp., based in Nevada, administrative headquarters in San Francisco, California, and LinkedIn Corporation, based in Sunnyvale, California USA, have joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. You can view a list of providers certified according to the EU-US Data Privacy Framework at Participant Search (dataprivacyframework.gov).
You can revoke your consent at any time without affecting the legality of the processing up to the time of revocation. The easiest way to revoke your consent is via our consent manager or via the functions of the social media providers.
You can find more information about the purpose and scope of data collection and its processing by the plug-in provider in the data protection declarations of these providers provided below. There you will also find further information about your rights in this regard and setting options for protecting your privacy. Addresses of the respective plug-in providers and URL of the respective data protection notices.
Privacy Policy Hartmann GmbH
1. General
1. Person responsible for data processing
Head office
Frankenberger Str. 64
09661 Hainichen
Telephone: +49 37207 4070
E-mail: info@hartmann-gmbh.eu
2. Name and address of the data protection officer
Moog & Partner Steuerberatungsgesellschaft mbH
Holzhofallee 15A
64295 Darmstadt
E-mail: dsb@hartmann-gmbh.eu
Telephone: +4937207407
3. Hosting
4. Server log files
2. Data collection on our website
Cookies
1. Description, scope and purpose of data processing
2. Legal basis for processing
3. Possibility of objection and removal
4. More information about the use of cookies
Server log files
The basis for data processing is Art. 6 Para. 1 lit. f GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.
Contact form
3. Analysis tools and advertising
Google Analytics
1. Description, scope and purpose of data processing
To make Google Analytics easier to manage, we use the Google Tag Manager.
1. Scope of data processing
2. Purpose of data processing
3. Recipients of the data
4. Transfer of data to third countries (especially the USA)
5. Storage period
6. Legal basis for data processing
7. Revocation of consent to data processing
You can also prevent the storage of cookies from the outset by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
8. Order processing and further information
https://business.safety.google/adsprocessorterms/
https://marketingplatform.google.com/about/analytics/terms/de/
https://support.google.com/analytics/answer/6004245?hl=de/
https://policies.google.com/?hl=de
Google Ads
1. Description and scope of data processing
2. Purpose of data collection
3. Recipients of the data
4. Transfer of data to third countries (in particular the USA)
5. Legal basis
6. Revocation of consent
7. Order processing
https://business.safety.google/adsprocessorterms/
Google Ads Conversion Tracking
1. Description
2. What data is collected?
3. Purpose of data collection
4. Recipients of the data
5. Transfer of data to third countries (especially the USA)
6. Storage period
7. Legal basis for data collection
8. Revocation of consent to data processing
9. Order processing and further information
https://business.safety.google/adsprocessorterms/
https://policies.google.com/terms
https://support.google.com/google-ads/answer/93148?hl=de&ref_topic=3119146
https://policies.google.com/privacy
www.google.com/intl/de/policies/privacy
services.google.com/sitestats/de.html
Google reCaptcha
4. Newsletter
1. Description and scope of data processing
2. Legal basis for data processing
3. Purpose of data processing
4. Duration of storage
5. Voluntary consent
6. Possibility of revocation and removal
5. Advertising emails
1. Description and scope of data processing
2. Legal basis for data processing
3. Purpose of data processing
4. Duration of storage
5. Possibility of revocation and removal
Alternatively, consent to send advertising emails can be revoked at any time by sending an email to dsb@hartmann-gmbh.eu.
6. Voluntary consent
6. Registration for the VE water seminar, RDGE seminar, newsletter and advertising emails
1. Description and scope of data processing
The following data is also collected when you register:
No data will be passed on to third parties in connection with data processing. The data will be used exclusively for the provision of the VE water seminar//RDGE seminar and for the purposes listed in the following paragraph. The data is only collected to provide the VE water seminar/RDGE seminar, provided that you give us your express consent to do so in advance when registering. This consent can be revoked at any time.
2. Legal basis for data processing
3. Purpose of data processing
4. Duration of storage
The other personal data collected during the registration process is usually deleted after a period of seven days.
5. Possibility of revocation and removal
7. Online analysis session
1. Description and scope of data processing
In addition, the following data is collected when you register:
2. Legal basis for data processing
3. Purpose of data processing
4. Duration of storage
Voluntary consent
8. Contact form
1. Description and scope of data processing
2. Legal basis for data processing
3. Purpose of data processing
4. Duration of storage
The additional personal data collected when sending the contact form will be deleted after a period of seven days at the latest.
5. Possibility of revocation and removal
9. Online shop
Using our web shop
10. Contao (CMS)
11. Contao Notification Center
1. Description
2. What data is collected?
3. Purpose of data collection
4. Storage period
5. Legal basis for data collection
6. Revocation of consent to data processing
11. Contao Leads
1. Description
2. What data is collected?
3. Purpose of processing
4. Legal basis for data processing
5. Storage period
6. Revocation of consent to data processing
13. Profiling or automated decision-making
14. Cookie consent tool
15. Plugin and other
1. Google Maps
2. Youtube Video
3. Social media plug-ins
4. LinkedIn Insight Tag
Description
We also use the LinkedIn Insight Tag. The provider of this service is LinkedIN Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag is a JavaScript code that is integrated into our website. Using the LinkedIn Insight Tag, we gain insight into the use of our website and can carry out conversion tracking and target group analysis. We also receive anonymous reports on the performance of advertisements and information on website interaction. The LinkedIn Insight Tag establishes a connection to the LinkedIn server when you visit our website. If you visit this website and are logged into your LinkedIn account at the same time, LinkedIn can identify you. To prevent this, you can log out of LinkedIn before visiting our website. If you are logged in to LinkedIn, you can deactivate data collection at any time using the following link:
https://www.linkedin.com/mypreferences/d/categories/ads
Purpose of processing
The LinkedIn Insight tag is used for the following purposes:- Conversion tracking (measuring the success of advertising campaigns)
- Target group analysis (identifying relevant target groups)
- Retargeting (displaying relevant ads on LinkedIn after visiting our website)
- IP address (in anonymized form
- LinkedIn member ID (if you are logged in to LinkedIn
- Website metadata (e.g. pages visited, timestamps
- Browser and device information
Legal basis for data collection
The legal basis for processing the data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR. This consent is obtained through our cookie banner.
Recipients of the data and third country transfer
Recipients of the data are:- LinkedIn Ireland Unlimited Company, Wilton Place, Dub 2, Ireland
- LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA94085, USA
Data is therefore also stored on LinkedIn's servers in the USA. The European Commission has certified that some third countries, including the United States of America, have data protection comparable to the EU standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). LinkedIn Corporation, based in Sunnyvale, California USA, has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. A list of providers certified according to the EU-US Data Privacy Framework can be viewed at Participant Search (dataprivacyframework.gov).
Storage period
The data collected is stored for a maximum period of one year. After that, the data is anonymized or deleted.
Revocation of consent
You can revoke your consent at any time with effect for the future by changing the cookie settings on our website or by deactivating the LinkedIn Insight Tag using appropriate browser settings or tools. The easiest way to do this is via our Consent Manager at https://www.purewater-hartmann.de/de/datenschutz.html via the link Edit my data protection settings by deactivating the LinkedIn Insight Tag. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.You can also prevent the storage of cookies from the outset by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
5. Facebook Pixel (Meta)
We also use the Facebook pixel on our website, a tracking pixel from Meta Platforms Ireland Limited, 6 Serpentine Ave, Dublin 4, Ireland ("Meta"). We use the meta pixel to track the success of our advertising campaigns on Meta services (e.g. Facebook or Instagram) and to optimize the delivery of our advertising campaigns to interested target groups. We do not receive any data about you or other users, but only statistics that show us aggregated for all users in a certain period of time how our offers and advertisements were used on other Meta platforms (e.g. Facebook or Instagram).
After you click on one of our advertisements displayed on a Meta service (e.g. Facebook or Instagram) or when you visit our website, a cookie is stored on your device using the meta pixel. The cookie processes data about whether you came to our website via a corresponding advertisement and enables the user's behavior on the website to be analyzed. This enables us to track the success rate of our advertising campaigns.
When you visit our website, a direct connection is established to Meta's servers via the Facebook pixel. The information collected by the Meta pixel about your visit and use of our website as well as other identifiable data (e.g. information about the browser or app used, language settings, time, IP address, advertising ID) are transmitted to Meta. If you are registered with a Meta service (e.g. Facebook or Instagram), Meta can assign the visit to your account. Even if you are not registered with a Meta service or have not logged in, there is a possibility that Meta will use your IP address and other identification features to create a profile, for example to show you advertising that is tailored to your interests. Meta processes the data from the time of transmission under its own responsibility; we have no influence on the further use of the data by Meta.
The cookies set as part of the use of the Facebook pixel via our website are deleted no later than 3 months after the last interaction.
The legal basis for the collection and further processing of this information is your informed and voluntary consent in accordance with Art. 6 Para. 1 Clause 1 Letter a of GDPR or Section 25 Para. 1 TDDDG. If you do not give your consent, the meta pixel will not be activated when you visit our website. Consent is given by your express selection in the cookie banner and can be revoked at any time with effect for the future. The easiest way to revoke your consent is via our Consent Manager. In addition, users (only those logged in to the Facebook meta service) can object using the provider's function at the following link: https://www.facebook.com/settings/?tab=ads#
Note on data collection in third countries: The information collected is also stored on the provider's servers in the United States of America. The European Commission has certified that some third countries, including the United States of America, have data protection that is comparable to the EU standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). The provider Meta Platforms, Inc. Menlo Park, California, has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission. You can view a list of providers certified under the EU-US Data Privacy Framework at Participant Search (dataprivacyframework.gov).
When collecting and transmitting the data collected by the Facebook pixel, we act with Meta as so-called "joint controllers" in accordance with Art. 26 GDPR. We have concluded a separate agreement for this (see here: https://www.facebook.com/legal/controller_addendum). Meta is solely responsible for further processing. If you exercise your rights to information, deletion, etc., Meta is responsible for implementing your rights as part of the joint responsibility. For more information on how Meta processes personal data, including the legal basis on which Meta relies, and the options for exercising your rights vis-à-vis Meta, please see Meta's data policy at: https://www.facebook.com/about/privacy
5. Rights of data subjects
- In principle, you have the following rights:
- according to Art. 15 GDPR: Confirmation as to whether we process personal data concerning you, as well as information about the processed personal data about you;
- according to Art. 16 GDPR: to immediately request the correction of incorrect or incomplete personal data stored by us;
- according to Art. 17 GDPR: the to request deletion of your personal data stored by us;
- according to Art. 18 GDPR: to request restriction of the processing of your personal data;
- according to Art. 20 GDPR: your personal data, that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party;
- according to Art. 7 Para. 3 GDPR: to revoke your consent at any time revoked, resulting in that we may no longer continue the data processing based on this consent in the future, and
- according to Art. 77 GDPR: to lodge a complaint with a data protection supervisory authority if you are of the opinion that the Processing of your personal data by us violates the GDPR.
In addition, you have the right to object to the processing as set out below:
If we base the processing of your personal data on the balancing of interests within the framework of a legitimate interest (Art. 6 para. 1 lit. f) GDPR), you can object to the processing. The requirements for this can be found in Art. 21 GDPR. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and stop or adjust the data processing unless we can demonstrate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. .
If we process your personal data for direct marketing purposes, you naturally have the right to object to such data processing at any time. This also applies to profiling if such is carried out for direct marketing purposes. If you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for these purposes.
If you would like to assert your rights against us, please contact our data protection officer, see section 2.