Privacy policy

1. Controller

Herrmann Industrielackiererei GmbH
Gitschiner Straße 20–22, 10969 Berlin
Phone: +49 30 6140155-5
Email: mail@herrmannlack.de

2. Hosting and form processing

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the site is accessed and when a form is submitted, the data generated in the process are processed on Netlify servers, which involves a transfer to the USA. The transfer is based on the Standard Contractual Clauses of the EU Commission. The legal basis for this use is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of this website.

3. Server log files

When this website is accessed, data transmitted by your browser are collected automatically: browser type and version, operating system, referrer URL, time of the request and IP address. These data serve the technically error-free operation and the security of the website and are not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.

4. Enquiry form

If you contact us via the enquiry form, we process the data you provide – name, company where applicable, email address, phone number, your details about the part, the pickup location if you request pickup, and any drawings or photos you upload – in order to handle your enquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR, as the processing serves the performance of pre-contractual measures. We delete the data as soon as they are no longer required for this purpose; retention periods under commercial and tax law remain unaffected.

5. Callback request

If you request a callback, we process your phone number and the time slot you selected solely for the purpose of calling you back. The legal basis is Art. 6(1)(b) GDPR. Once your request has been dealt with, we delete the number unless it results in an order or a further business relationship.

6. Job applications

We process application data solely for the purpose of carrying out the application process on the basis of § 26(1) BDSG (German Federal Data Protection Act) and Art. 6(1)(b) GDPR. After the process has been completed, we delete the documents after six months at the latest, unless you have expressly consented to longer storage.

7. Fonts

This website uses the IBM Plex typeface. The font files are stored on our own web server and are loaded from there. No connection to third-party servers, such as those of Google, is established in the process.

8. Error analysis and performance monitoring (Sentry)

We use the Sentry service of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, to detect and fix technical errors on this website. The data are stored on servers in the EU (Frankfurt am Main). A transfer to the USA can nevertheless not be completely ruled out; any such transfer takes place on the basis of the Standard Contractual Clauses of the EU Commission. A data processing agreement has been concluded with Sentry.

Error tracking: If a technical error occurs when a page is accessed, information about the error, the page accessed, the browser, operating system and device type is transmitted to Sentry. IP addresses are not stored in the process. The Sentry software is loaded from our own server. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the error-free and secure operation of the website.

Performance monitoring and session recording: Only if you give your consent in the consent banner do we additionally measure loading times and record a portion of visits (mouse movements, clicks, page rendering). All text, form entries and images are masked in your browser beforehand and are not transmitted. For the recording, a session identifier is stored in your browser’s storage (sessionStorage). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). We store your choice in your browser’s local storage (§ 25(2) no. 2 TDDDG). If you choose a language with the DE | EN switch, we store that choice in the cookie “nf_lang” for one year so that the website is shown to you in that language in future (§ 25(2) no. 2 TDDDG). You can withdraw your consent at any time with effect for the future via Privacy settings.

Further information on data protection at Sentry: sentry.io/privacy.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, please use the contact details given above.

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

11. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser begins with https://.