Start page

Privacy notice

Handelsgesellschaft Sparrenberg mbH (hereinafter: “We”) respects your privacy. Therefore, We take the protection of your personal data, such as name, company address, company e-mail address etc. very seriously.

This privacy notice informs about the processing of your personal data if and to the extent it is incurred when using Our website (hereinafter “Website”). In addition, all data subjects affected by such processing are informed of their rights.

1. Controller

The following company is the controller for processing your personal data as described in this data protection information:

Handelsgesellschaft Sparrenberg mbH
Brokstraße 77, 33605 Bielefeld, Deutschland
Tel.: +49 521 / 155-2668
E-Mail:

2. Definitions

The privacy notice contains the following terms set forth in the EU General Data Protection Regulation 2016/679 (“GDPR”).

  1. Personal data

    Personal data means any information relating to an identified or identifiable natural person (hereinafter: “You”). A natural person is considered to be identifiable who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  2. Processing

    Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  3. Controller

    The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data. Where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

  4. Processor

    The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  5. Consent

    Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  6. Supervisory authority

    Supervisory authority means an independent public authority which is established by a Member State pursuant to Article 51 GDPR.

3. Legal basis of processing

  1. We process your personal data if and to the extent that this is necessary for the establishment, implementation or termination of a contractual or quasi-contractual relationship.

    The legal basis for the processing of personal data relating to a contractual or quasi-contractual relationship is Art. 6 (1) sentence 1 b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.

  2. In addition, We process your personal data if and to the extent that you have given us your consent. The data is only used for the purpose and scope stated in the written consent.

    The legal basis for the processing of data on the basis of your consent is Art. 6 (1) sentence 1 a GDPR.

  3. If the processing is necessary for the protection of a legitimate interest of Us or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) sentence 1 f GDPR serves as the legal basis.

4. Duration of processing

We process your personal data only for the period required to achieve the purpose of the storage or if this is provided for by the relevant statutory regulations. If the purpose of storage does not apply or if a storage period prescribed by the relevant statutory regulations expires, the personal data will be erased routinely in accordance with statutory provisions or processing will be restricted. In the case of contractual relationships, this applies accordingly until the expiry of the statutory limitation periods.

  1. The personal data will be erased after the termination of the contractual or quasi-contractual relationships in compliance with the legal preservation requirements.
  2. The personal data will be erased in compliance with the legal preservation requirements after completion of the purpose pursued with the consent.
  3. The personal data will be erased in compliance with the legal preservation requirements after reaching the legitimate interests or after an objection has been raised.

5. Categories of recipients of personal data

The data is processed by Ourselves and, as far as We have not expressly excluded, by data processors and, based on your corresponding consent or in accordance with the contracts concluded by Our companies, also by third parties. Otherwise, data will only be disclosed to third parties if there are legitimate interests in accordance with Art. 6 (1) sentence 1 f GDPR. Accordingly, Our web hosts also have access to the data generated when using Our Website.

In other respects, your personal data will not be disclosed. In particular, We will not sell or otherwise use it. We will process the data only on official or legal requests as well as in the event of legal disclosure requirements, in particular transmit it to government agencies.

Within the framework of the contractual relationships, your personal data may be transmitted to third parties, which process this data solely for the purpose of performance of the contractual purpose.

Within the framework of giving consent, your personal data may be transmitted to third parties, which process this data solely for the purpose of giving consent.

Within the framework of the legitimate interests, your personal data may be transmitted to third parties, which process this data solely for the purpose of meeting such legitimate interests.

6. Transmission to third countries

In the event that your personal data is transmitted to third-country non-EU/EEA sites, this will only be done if the EU Commission has decided that the third country, territory or multiple specific sectors in that third country provide an adequate level of protection or adequate or appropriate data protection guarantees have been provided within the meaning of Art. 46 or Art. 47 or Art. 49 GDPR.

7. Rights of data subjects

  1. Right of access

    You have the right to request information from Us as to whether We process personal data of you (Art. 15 GDPR). If your personal data is processed, you have the right to obtain information about the personal data processed concerning you (Art. 15 GDPR).

  2. Right to rectification

    You have the right to demand the immediate rectification of inaccurate personal data concerning you (Art. 16 GDPR).

  3. Right to erasure (right to be forgotten)

    You have the right to demand the immediate erasure of personal data concerning you (Art. 17 GDPR).

  4. Right to restriction of processing

    You have the right to demand that We restrict processing (Art. 18 GDPR).

  5. Right to data portability

    You have the right to assert your right to data portability with regard to personal data concerning you (Art. 20 GDPR).

  6. Right to object

    You have the right to object to processing of personal data concerning you which is based on Art. 6 (1) sentence 1 e or f GDPR at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

    If your personal data is used to operate direct advertising, you have the right to object hereto at any time (Article 21 (2) GDPR).

    If you raise an objection, We will no longer process the personal data. The legality of data processing carried out until the revocation remains unaffected by the revocation.

8. Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time. The legality of data processing carried out until the withdrawal remains unaffected by the withdrawal whereby, in this case, you have the right to withdraw your consent for the future. You may address the withdrawal by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of data processing carried out until the assertion of your rights remains unaffected hereof.

9. Right to complain to a supervisory authority

In addition to these rights, you have a right to file complaints with the supervisory authority in charge of data protection (North Rhine-Westphalia: North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information, Düsseldorf).

10. Duty to provide personal data

In some cases, the provision of your personal data is required by law (such as tax regulations) or is also the result of contractual arrangements (such as details of the contracting party).

Also for a contract conclusion it may be necessary that you provide Us with personal data, which must be subsequently processed by Us. Failure to provide your personal data would mean that the contract could not be concluded with you. If you do not wish to provide personal data in these cases, you may contact the controller mentioned in section 1. above by mail or e-mail. We clarify on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and what would be the consequence of non-provision of the personal data.

11. Data protection officer

If you have any questions regarding the processing of your personal data, please contact Our data protection officer:

Handelsgesellschaft Sparrenberg mbH
Data protection officer
Brokstraße 77
33605 Bielefeld
E-Mail:

12. Rechtsgrundlage, Zwecke und Dauer der Verarbeitungen

  1. Establishment of contact

    If you contact Us by e-mail, through a contact form or via the suggestion system for new search words, the personal data provided by you will also be processed. However, this data processing is limited to the purpose of processing the inquiries or contacting you.

    If you contact Us by e-mail, through a contact form or in a similar form (for example, inquiries about the future inclusion of search words requested by you), the personal data provided by you will also be processed. However, this data processing is limited to the purpose of processing the inquiries or contacting you.

    If consent has been given, the legal basis for this processing is Art. 6 (1) sentence 1 a GDPR.

  2. Visit of the Website

    When visiting our website, no personal data is stored in log files.

13. Server logging

Each time you visit our website, we log data in server log files that originate from your end device and may also include personal data. This applies to the following data:

  • The operating system of your device
  • The type of browser you use (when accessing the website)
  • The name of your provider
  • Your IP address
  • Date and time of access
  • The pages of our website visited, including any search terms
  • The websites from which you accessed our website (when accessing the website)

The processing is necessary to ensure the functionality of the website and the app, to optimize and correctly deliver the content of our website and app and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. This is the legitimate interest for data processing and the legal basis for it is Art. 6 para. 1 f) GDPR. We regularly delete this data after 7 days, in cases of misuse after completion of the official or judicial proceedings.

14. Tracking and Cookies

Our website uses tracking technologies such as cookies, which store or read information on your end device. We distinguish between the following categories:

  • Necessary
  • Analysis & personalization

Necessary

We use cookies and similar technologies to enable certain functions of our website. This is necessary in order to be able to make our website available to you. For example, we can

  • save your preferred language version of our website or similar settings for your next visit
  • distribute requests to our website to different web servers (load balancing),
  • give multiple requests to our website a uniform context (session) and thus, for example, enable login-restricted areas of our website,
  • save your selection or settings regarding consent for tracking and control tracking technologies according to your choice.

The legal basis for this is our legitimate interest (Art. 6 para. 1 f) GDPR) and Section 25 para. 2 no. 2 TDDDG. Our legitimate interest in data processing is to enable the best possible usability of our website and to ensure that user actions originate from an authenticated user.

Analysis & Personalization

We use cookies and similar technologies to evaluate user behavior on our website and to adapt the website accordingly.

If you have given your consent, we process information about the device you are using and your web browser each time you interact with our website. For example, we can identify the language settings you use on our website, whether you are using a smartphone or a desktop computer and the country from which you are accessing our website.

We also process information about how you interact with our website, e.g. from where you are referred to our website, how long you use our website and the path you take to navigate through individual subpages. For example, we can record whether you found us via a search engine (and if so, under which search term) or an advertisement, how much time you spent on the content of a particular page and how many pages you visited in total.

We use this information to create analyses of user behavior on our website and to optimize the website accordingly. In some cases, we create different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to evaluate which version is used and how it is used in order to optimize our website.

The legal basis for this is your consent (Art. 6 para. 1 a) GDPR or Section 25 para. 1 TDDDG).

If we use tracking technologies on the basis of your consent, you can revoke or adjust this consent at any time with effect for the future. To do so, you can access our tracking settings menu. You can also make settings in your browser for the use of cookies and similar technologies.

We use the following products for analysis and personalization:

Google Analytics

Google Analytics is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. Our configuration of Google Analytics does not allow Google to use the data collected via Google Analytics to improve Google products and services.

Information about the cookies used by Google Analytics and their duration can be found here.

Usercentrics

We use the Usercentrics consent management platform to obtain and document your consent to the storage of cookies on your end device. In this context, we use Usercentrics GmbH, Rosental 4, 80331 München, Germany, as a processor.

15. Changes to this data protection information

We reserve the right to change this information at any time in compliance with the applicable data protection regulations.