Privacy Policy

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section 'Notice on the responsible party' in this privacy policy.

How do we collect your data?

Your data is collected in part by you providing it to us. This may be data that you enter in a contact form, for example.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

The data controller for data processing on this website is:

HaiSoTec GmbH

Freihofstraße 4

72401 Haigerloch

Deutschland

Telefon: 07474/319968-0

E-Mail: info@haisotec.de

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website — for this purpose, the server log files must be collected.

This website uses services from Firebase, a platform for developing web applications by Google LLC (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Firebase is used for hosting the website and for Cloud Functions to process contact form enquiries. The following data may be processed:

• IP address
• Browser information
• Timestamp of access
• Data from the contact form (name, e-mail, telephone, company, message)

Usage is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation and secure provision of our website.

Google is certified under the EU-US Data Privacy Framework. Further information on data protection at Firebase can be found at:

https://firebase.google.com/support/privacy

For protected areas of our website (e.g. reseller portal, administration area), we use Firebase Authentication, an authentication service provided by Google. This service enables secure login and management of user accounts.

The following data may be processed:

• E-mail address
• Password (encrypted/hashed)
• Login timestamps and login history
• IP address at login

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) for registered users, as well as Art. 6(1)(f) GDPR (legitimate interest) in securing protected areas.

This website uses Firebase Analytics (linked with Google Analytics), a web analytics service provided by Google. We use Google Consent Mode v2: the Google tag loads on every page but defaults to 'consent denied' mode. In this mode no cookies are set; Google only receives aggregated, cookieless signals without a client ID and without personal identifiers, used for statistical reach modelling (legal basis: Art. 6(1)(f) GDPR — legitimate interest in anonymous measurement). Only after your express consent via the cookie banner are cookies set and full analytics data collected.

When analytics is enabled, the following data may be processed:

• Page views and time spent on pages
• Device and browser information
• Approximate location (based on IP address, which is subsequently anonymised)
• Interactions with the website (e.g. clicks, form submissions)

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time via the cookie banner. Data already collected will remain stored until it expires automatically.

Further information on data protection at Google Analytics can be found at:

https://policies.google.com/privacy

We use Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure the effectiveness of our online advertising. As with Firebase Analytics, we use Google Consent Mode v2. Without your consent, no cookies are set and no GCLID-based attribution is performed; Google only receives an aggregated, cookieless signal when the confirmation page /kontakt/danke is loaded, used for statistical modelling of anonymous conversion rates (legal basis: Art. 6(1)(f) GDPR — legitimate interest in anonymous measurement). Only after your express consent is full conversion attribution via the Google Click ID (GCLID) performed.

If you click on one of our Google ads and subsequently submit a request via the contact form, the following data may be transmitted to Google:

• A unique click identifier (Google Click ID / GCLID) set when the ad is clicked
• Timestamp of the conversion (contact-form submission)
• Device and browser information
• The fact that the confirmation page /kontakt/danke was loaded

No contents of the contact form (name, email, message) are transmitted to Google. Google Ads only receives the information that a conversion occurred and the click identifier required to attribute it to the ad. This data is evaluated by Google in pseudonymous form.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time via the cookie banner. Further information on data protection at Google Ads can be found at:

https://policies.google.com/privacy

When you make a choice via our cookie banner (Accept all, Decline, or save individual categories), we log this choice in our Firestore database to fulfil our obligation to demonstrate consent under Art. 7(1) GDPR.

The following data is stored:

• Timestamp of your choice (server-side)
• Your choice per category (analytics / advertising — each allowed or denied)
• Banner version (to link the applicable disclosure text)
• Your browser language (e.g. "de-DE") and user-agent string (browser and device information)

We do not store your IP address or any direct user identifier in this log. The records cannot easily be linked to you personally; they serve solely as statistical proof of consent vis-à-vis supervisory authorities.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (legal obligation to demonstrate validly obtained consent). Records are automatically deleted 3 years after collection (limitation period pursuant to § 195 BGB).

We use Google reCAPTCHA v3 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to protect our forms from automated requests (spam/bots). reCAPTCHA analyses the behaviour of website visitors based on various characteristics to distinguish between human users and automated programs.

The following data may be transmitted to Google:

• IP address
• Referrer URL
• Information about the operating system and browser
• Mouse movements, keyboard inputs, and time spent on the page

Usage is based on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our website from abusive automated use and spam.

Further information can be found in Google's privacy policy and terms of service:

https://policies.google.com/privacy

https://policies.google.com/terms

This website uses the 'Orbitron' and 'IBM Plex Mono' fonts from Google Fonts. The fonts are installed locally on our server and are not loaded from external servers (e.g. Google servers). Therefore, no connection to Google servers is established, and no data is transmitted to Google.

Further information about Google Fonts can be found at:

https://developers.google.com/fonts/faq

On our website, we offer the ability to sign documents (e.g. quotations, contracts) electronically. To strengthen the evidentiary value of the electronic signature, additional data is collected during the signing process.

The following data is processed during the signature process:

• Your IP address (determined via the service ipify.org)
• Timestamp of the signature
• The signature data itself (digital image of the signature)

To determine your IP address, the external service ipify (https://www.ipify.org) is used. A request is sent to ipify's servers, whereby your IP address is transmitted to this service. The determined IP address is then stored in the signed document.

Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the verifiability of electronic signatures).

If you contact us by e-mail or via the contact form, the information you provide (e-mail address, name, telephone number, message) will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.

Processing is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR).

The data will be deleted as soon as it is no longer required for the purpose of its collection or you request deletion.

You have the following rights regarding your personal data:

Right of Access

You have the right to obtain information about your personal data processed by us (Art. 15 GDPR).

Right to Rectification

You have the right to request the rectification of inaccurate or the completion of your personal data stored by us (Art. 16 GDPR).

Right to Erasure

You have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims (Art. 17 GDPR).

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data (Art. 18 GDPR).

Right to Data Portability

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller (Art. 20 GDPR).

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you (Art. 21 GDPR).

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence or workplace or of our registered office.

The competent supervisory authority for data protection matters is the state data protection commissioner of the federal state in which our company is based.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.