Privacy policy

1. Controller

Herrmann Industrielackiererei GmbH
Gitschiner Straße 20–22, 10969 Berlin
Phone: +49 30 6140155-5
Email: mail@herrmannlack.de

2. Hosting and form processing

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the site is accessed and when a form is submitted, the data generated in the process are processed on Netlify servers, which involves a transfer to the USA. The transfer is based on the Standard Contractual Clauses of the EU Commission. The legal basis for this use is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of this website.

3. Server log files

When this website is accessed, data transmitted by your browser are collected automatically: browser type and version, operating system, referrer URL, time of the request and IP address. These data serve the technically error-free operation and the security of the website and are not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.

4. Enquiry form

If you contact us via the enquiry form, we process the data you provide – name, company where applicable, email address, phone number, your details about the part, the pickup location if you request pickup, and any drawings or photos you upload – in order to handle your enquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR, as the processing serves the performance of pre-contractual measures. We delete the data as soon as they are no longer required for this purpose; retention periods under commercial and tax law remain unaffected.

5. Callback request

If you request a callback, we process your phone number and the time slot you selected solely for the purpose of calling you back. The legal basis is Art. 6(1)(b) GDPR. Once your request has been dealt with, we delete the number unless it results in an order or a further business relationship.

6. Coating advisor

The coating advisor (German only, Beschichtungsberater) evaluates your answers (such as material, size, quantity and colour) in your browser. We do not store these answers. So that you can share your details or open them again later, they are kept in your browser’s address bar. When the page is loaded, they are therefore processed in the server log files like any page address (section 3) and, if you have given consent, transmitted to Google Analytics (section 10). Your name, phone number and email address never appear in the address bar.

We only receive data when you trigger it: if you enter a phone number or email address in the optional step “Sollen wir uns melden?” and click “Ergebnis anzeigen und Angaben senden”, or if you send an enquiry, order request or callback request from the advisor. We then process the data you entered (name, phone number, email address, company where applicable, message and uploaded files) together with your answers from the advisor, the result and a link to your details, in order to contact you and handle your enquiry. The legal basis is Art. 6(1)(b) GDPR. Deletion is handled as for the enquiry form (section 4).

If you have consented in the cookie banner, the advisor also reports usage events to Google Analytics, for example which step was reached and which process was recommended. These events contain no contact details.

7. Job applications

We process application data solely for the purpose of carrying out the application process on the basis of § 26(1) BDSG (German Federal Data Protection Act) and Art. 6(1)(b) GDPR. After the process has been completed, we delete the documents after six months at the latest, unless you have expressly consented to longer storage.

8. Fonts

This website uses the IBM Plex typeface. The font files are stored on our own web server and are loaded from there. No connection to third-party servers, such as those of Google, is established in the process.

9. Error analysis and performance monitoring (Sentry)

We use the Sentry service of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, to detect and fix technical errors on this website. The data are stored on servers in the EU (Frankfurt am Main). A transfer to the USA can nevertheless not be completely ruled out; any such transfer takes place on the basis of the Standard Contractual Clauses of the EU Commission. A data processing agreement has been concluded with Sentry.

Error tracking: If a technical error occurs when a page is accessed, information about the error, the page accessed, the browser, operating system and device type is transmitted to Sentry. IP addresses are not stored in the process. The Sentry software is loaded from our own server. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the error-free and secure operation of the website.

Performance monitoring and session recording: Only if you give your consent in the consent banner do we additionally measure loading times and record a portion of visits (mouse movements, clicks, page rendering). All text, form entries and images are masked in your browser beforehand and are not transmitted. For the recording, a session identifier is stored in your browser’s storage (sessionStorage). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). We store your choice in your browser’s local storage (§ 25(2) no. 2 TDDDG). If you choose a language with the DE | EN switch, we store that choice in the cookie “nf_lang” for one year so that the website is shown to you in that language in future (§ 25(2) no. 2 TDDDG). You can withdraw your consent at any time with effect for the future via Privacy settings.

Further information on data protection at Sentry: sentry.io/privacy.

10. Web analytics (Google Analytics)

Only if you consent in the cookie banner do we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how visitors use our website – for example which pages are viewed, for how long and from which type of device – so that we can improve content and usability.

For this purpose, cookies (“_ga”, “_ga_…”) with a lifetime of up to two years are stored in your browser, and usage data such as pages viewed, time on page, browser, device type, approximate location and a truncated IP address are transmitted to Google. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses apply in addition. We have concluded a data processing agreement with Google.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future via Privacy settings; the analytics cookies are then deleted. Further information: policies.google.com/privacy.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, please use the contact details given above.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

13. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser begins with https://.