Privacy Policy

We thank you for your interest in our website and our products. The protection of your privacy is hugely important to us at Hamberger Flooring GmbH & Co. KG.
Below, we set out in detail how we deal with your data.


1. Body responsible and contact details:

Hamberger Flooring GmbH & Co. KG is responsible for the processing of data. The data provided by the customer are processed in accordance with the provisions of the European General Data Protection Regulation (hereinafter referred to as the GDPR).
The contact details of the body responsible are as follows:
Hamberger Flooring GmbH & Co. KG
Rohrdorfer Str. 133
83071 Stephanskirchen
Germany
Hamberger Flooring GmbH & Co. KG is represented by the personally liable managing partner / general partner: Hamberger Flooring Geschäftsführungs GmbH, Rohrdorfer Strasse 133, 83071 Stephanskirchen, Germany. This in turn is represented by the managing directors: Peter Hamberger, Dr. Peter M. Hamberger, Uwe Eifert, Michael Paringer.
Contact form
info@haro.com
Hotline: +49 (0) 8031 – 700714
(Mon. – Thu. 8:30 – 12:00 | 13:00 – 16:00 and Fri. 8:30 – 12:00)
Fax: +49 (0) 8031 – 700199

2. Access data and hosting
You can visit our websites without providing details about yourself.
Each time that you access a website, the web server will automatically save a so-called server log file which documents this access and contains for example the name of the file requested, your IP address, the date and time of access, the quantity of data transferred and the provider making the request (access data).

These access data are used exclusively to ensure that the website operates smoothly and to improve our offering. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. In order to guarantee your right to data protection, all access data will be deleted at the latest seven days after your visit to the website ends.

Hosting services by a third-party provider
If data are processed on our behalf, a third-party provider will provide services for hosting and displaying the website. This enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. All data which are collected as described below when you use this website or the forms provided in the online shop will be processed on the third-party provider’s servers. Data shall be processed on other servers only to the extent described here.
This service provider shall be based within a country which is part of the European Union or the European Economic Area.

3. Data collection and use for the processing of contracts and when opening a customer account
We collect personal data if you provide them when placing an order, if you contact us (e.g. via the contact form or e-mail) or if you provide them voluntarily when opening a customer account. Mandatory fields are mandatory because we require the data for processing contracts, processing your query or for opening a customer account. Without these data, we will not be able to complete your order and/or open a customer account or respond when you contact us. The relevant entry forms indicate what data are collected. We use the data that you provide for processing contracts and your queries in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR. Once we have finished processing the contract or deleted your customer account, access to your data for further processing will be restricted and your data will be deleted as soon as the retention periods required under fiscal and commercial law expire, unless you have explicitly consented to further use of your data or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement. You can delete your customer account at any time, either by sending a message to the address below or using a function provided in your customer account.

4. Data transfer
In order to allow performance of a contract in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR, we shall transfer your data to the shipping company enlisted if this is necessary in order to deliver ordered goods. Depending on which payment provider you choose during the order process, we shall pass on the payment details collected for this purpose to the credit institute enlisted to handle payment and possibly to the payment service provider enlisted by us or to the selected payment service. The selected payment service providers may collect some of these data themselves if you set up an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection statement of the relevant payment service provider shall apply.
Personal data shall be transferred to this company only to the extent necessary to allow performance of the contract.

Data transfer to shipping service providers
If you give your explicit consent while placing or after you have placed an order, we shall pass on your e-mail address to the selected shipping service provider in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR in order to allow parcel tracking and to enable the shipping service provider to contact you prior to delivery in order to announce or coordinate the delivery.

You may revoke this consent at any time by sending a message to the contact address below or by contacting the shipping service provider directly at the contact address given below. If you revoke your consent, we shall delete the data that you provided for this purpose unless you have explicitly consented to further use of your data or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
https://www.ups.com/upsemail/input?loc=de_DE

5. E-mail newsletter and postal advertising
E-mail advertising with registration for the newsletter
If you register for our newsletter, we shall use the data needed for this or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent given in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR.
You can cancel your subscription to the newsletter at any time, either by sending a message to the address below or using a link provided in the newsletter. If you cancel your subscription, we shall delete your e-mail address unless you have explicitly agreed to your data being used for another purpose or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement.
E-mail advertising without registration for the newsletter and your right to object
If we receive your e-mail address in connection with the sale of goods or provision of a service and you do not object to us doing so, we reserve the right to send you via e-mail on a regular basis details of special offers which apply to similar products to the ones you previously purchased from our range on the basis of § 7 Para. 3 of the German Act Against Unfair Competition (UWG). This enables us to safeguard our justified interest in ensuring that we provide our customers with targeted advertising – an interest which prevails when the interests of all parties are taken into account.
You can object to this use of your e-mail address at any time by sending a message to the contact address below or via a link provided in the advertising e-mail with no additional costs other than the transmission costs charged at the basic rates.
As part of the processing procedure, the newsletter shall be sent on our behalf by a service provider to which we pass on your e-mail address.
This service provider shall be based within a country which is part of the European Union or the European Economic Area.

Postal advertising and your right to object
We also reserve the right to use your first name and surname as well as your postal address for our own advertising purposes, e.g. to send you details of interesting offers and information regarding our products via post. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that we provide our customers with targeted advertising – an interest which prevails when the interests of all parties are taken into account.

6. Use of data when processing payments, “Invoice”
If you select the “Invoice” payment method and grant us the necessary consent regarding data protection in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR, personal data (first name, surname, address, e-mail, telephone number, IP address, title) together with data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) shall be sent to our partner
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg for the purpose of processing this payment method as selected by you.
In order to check the identity and creditworthiness of the customer, our partner shall make queries and seek information from publicly accessible databases and credit agencies. For details of the provider from which information and possibly creditworthiness information is obtained on the basis of mathematical and statistical procedures as well as further details regarding the processing of your data after they are passed on to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A., please see our partner’s data protection statement which can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Our partner PayPal (Europe) S.à r.l. et Cie, S.C.A shall use the information obtained regarding the statistical probability of a payment default to make a balanced decision as to whether to establish, conduct or end a contractual relationship. You can put forward your views and challenge the decision by contacting our partner PayPal (Europe) S.à r.l. et Cie, S.C.A.
You can revoke your consent to the passing on of data during the ordering process for the future at any time, without giving reasons.

7. Cookies and web analysis
We use so-called cookies on various pages in order to make our website attractive, to allow the use of specific functions, to display suitable products or for market research purposes. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed in the optimum manner – an interest which prevails when the interests of all parties are taken into account. Cookies are small text files which are automatically stored on your end device. Some of the cookies that we use (so-called session cookies) are deleted at the end of the browser session, i.e. when you close your browser. Other cookies (persistent cookies) remain on your end device and allow us to recognise your browser again the next time that you visit. None of the cookies set by this website contain personal data. They are used solely to save your product selection in the shopping basket or to record your product preferences.
The cookie settings for your web browser indicate how long cookies will be kept. You can set your browser in such a way that it notifies you when cookies are to be set and allows you to decide whether to accept them in individual cases. Alternatively, you can block cookies in specific cases or block all cookies. Each browser differs in terms of the way in which cookie settings are managed. The help menu of every browser explains how to change your cookie settings. You can access these settings for a particular browser via the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

If you do not accept cookies, the functionality of our website may be limited.

More information about the cookies can be found here: https://www.haro.com/de/cookies.php

Use of Google (Universal) Analytics for web analyse
If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR, this website will use Google (Universal) Analytics, a web analysis service provided by Google LLC (www.google.de), for website analysis purposes. Google (Universal) Analytics uses methods, e.g. cookies, which allow your use of the website to be analysed. The information regarding your use of this website which is collected automatically will generally be transferred to and stored by Google on a server in the USA. If IP anonymisation is enabled on this website, the IP address will be abbreviated within the member states of the European Union or in other European Economic Area member states before data are transferred. The full IP address is only transmitted to a Google server in the U.S. and abbreviated there in exceptional cases. The anonymised IP address provided by your browser for the purpose of Google Analytics shall not be linked to other data held by Google. If we stop using Google Analytics and there is no longer any reason to retain data, the data collected for this purpose shall be deleted.

Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. An up-to-date certificate can be found here. Because of this agreement between the USA and the European Commission, the latter has defined an appropriate data protection level for companies certified under the Privacy Shield.

You can revoke your consent for the future at any time by downloading and installing the browser plug-in which is available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de . Doing this will prevent the data generated by the cookie regarding your use of the website (including your IP address) being collected and processed by Google.

As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics collecting data via this website in the future. An opt-out cookie will then be placed on your end device. If you delete your cookies, you will be asked to give your consent again.

8. Social media plug-ins
Use of social plug-ins from Facebook, Google, Twitter, Instagram, Pinterest and Xing with the “2-click solution”
So-called social plug-ins (“plug-ins”) from social networks are used on our website. In order to provide greater protection for your data when you visit our website, the plug-ins are incorporated into the site using the so-called “2-click solution”. This ensures that when you access a page on our website containing such plug-ins, a connection to the servers of the relevant social network will not be established straight away. Your browser will only establish a direct connection to the servers of the relevant social network if you enable the plug-ins.
The content of the relevant plug-in will then be transferred by the plug-in provider straight to your browser and incorporated into the page. By incorporating the plug-ins, the providers are informed that your browser has accessed the relevant page of our website, even if you do not have a profile with the relevant provider or are not currently logged in. This information (including your IP address) will be transferred by your browser directly to a server of the relevant provider (possibly in the USA), where it is then saved. If you interact with the plug-ins, e.g. by clicking on the “Like” or the “Share” button, the relevant information will likewise be transferred directly to a server of the provider and saved there. The information will also be published on the social network and shown to your contacts there. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is marketed in the optimum manner – an interest which prevails when the interests of all parties are taken into account.
Information regarding the purpose and scope of data collection, the further processing and use of data by the provider as well as a contact address and your rights and the settings options available to protect your privacy can be found in the providers’ data protection statements:
http://www.facebook.com/policy.php
https://twitter.com/privacy
https://developers.google.com/+/web/buttons-policy
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy


YouTube video plug-ins
Content from third-party providers is incorporated into this website. This content is provided by Google LLC (“provider”).
YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
For YouTube videos which are incorporated into our website, the advanced data protection setting is enabled. This means that YouTube will not collect and store information from website visitors unless they play back the video. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, videos are incorporated into the website to enable us to safeguard our justified interest in ensuring that our offering is marketed in the optimum manner – an interest which prevails when the interests of all parties are taken into account.
Information regarding the purpose and scope of data collection, the further processing and use of data by the provider as well as your rights and the settings options available to protect your privacy can be found in Google’s data protection statements http://www.google.com/intl/de/+/policy/+1button.html.

In order to prevent Google Analytics tracking cookies being set, you may refuse the storage of cookies by selecting the appropriate settings in your browser software. Please note however that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting and processing the data generated by the cookie regarding your use of this website (including your IP address) by downloading and installing the browser plug-in via the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics collecting data via this website in the future. An opt-out cookie will then be placed on your end device. If you delete your cookies, you will have to click on the link again.

9. Google Fonts:
In order to incorporate external fonts from Google Fonts, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is granted access to the customer’s personal data. This website uses Google Fonts in order to incorporate external fonts. Google makes available the fonts. If the customer accesses this website, the necessary fonts are loaded into the customer’s browser cache in order to display the texts and fonts on the page correctly.
For this purpose, the information typically collected when a website is accessed, in particular the IP address of the customer and the referrer URL, will be transferred to a Google Inc. server. Further information can be found at https://developers.google.com/fonts/faq and in the Google data protection statement https://policies.google.com/privacy?hl=de.
Personal data shall not be made accessible to other third parties without the customer’s consent unless this is necessary owing to legal requirements.

10. Retention period
Upon completion of the contract, including payment in full, any customer data which must be retained for legal reasons will be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
In the event that the customer uses the contact form, the personal data will be used for as long as the query is processed. Any data which must be retained for legal reasons will then be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
The body responsible is subject to various legal retention and documentation requirements, especially those set out in the German Fiscal Code (AO). The retention and documentation periods stipulated therein are anywhere between two and ten years. Retention periods are also governed by the legal limitation periods. These are generally three years, especially in accordance with the German Civil Code (BGB), but in certain cases can be up to thirty years.

11. Contact information and your rights
As the person concerned, you have the following rights:
- in accordance with Art. 15 of the GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- in accordance with Art. 16 of the GDPR, the right to request the immediate correction of incorrect personal data or the completion of incomplete personal data stored by us;
- in accordance with Art. 17 of the GDPR, the right to request the deletion of your personal data stored by us unless further processing is necessary
- to exercise your rights as regards freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of the public interest or
- to assert, exercise or defend legal claims;
- in accordance with Art. 18 of the GDPR, the right to restrict the processing of your personal data where
- you dispute the accuracy of the data;
- the processing is not lawful but you decline to have the data deleted;
- we no longer require the data but you require the data in order to assert, exercise or defend legal claims or
- you have objected to the processing of data in accordance with Art. 21 of the GDPR;
- in accordance with Art. 20 of the GDPR, the right to obtain your personal data which you provide in a structured, standard and machine-readable format or to request that the data be transferred to another body responsible;
- in accordance with Art. 77 of the GDPR, the right to complain to a supervisory authority. Generally speaking, you can contact the supervisory authority at your usual place of residence, your workplace or our company headquarters.

Contact persons for data protection
If you have any questions regarding the collection, processing or use of your personal data, if you require information about these data or wish to have them corrected, blocked or deleted or if you wish to revoke any consent given, please contact our Data Protection Officer:
Dipl.-Inf.(FH) Tim Prinz, Prinz Service & Entwicklung UG
Liebigstr. 9, 91166 Schwabach
E-mail: datenschutzbeauftragter@hamberger-flooring.de

Right to object
If we process personal data as described above to safeguard our justified interest – an interest which prevails when the interests of all parties are taken into account, you can object to this processing for the future. If data are processed for direct marketing purposes, you can exercise this right as described above at any time. If data are processed for other purposes, you may object only if there are reasons for doing so resulting from your particular situation.

If you exercise your right to object, we shall no longer process your personal data for these purposes unless we can demonstrate compelling, legitimate grounds for such processing which outweigh your interests, rights and freedoms or if such processing is necessary to assert, exercise or defend legal claims.

This shall not apply if data are processed for direct marketing purposes. In this case, we shall not process your personal data further for this purpose.

Stephanskirchen, 24.05.2018