Privacy Policy

Thank you for your interest in HÖRMANN Rawema Engineering & Consulting GmbH. Data protection is a top priority for the company.

In general, you can use the website without providing any personal data. However, if a data subject wishes to use our services via the website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will always obtain the consent of the data subject.

The processing of personal data (e.g., name, address, email address, or phone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to us, in particular the Federal Data Protection Act.

With the following Privacy Policy, we aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. This privacy policy also informs data subjects of their rights.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive possible protection of the personal data processed via the website.

However, data transmissions over the Internet may inherently involve security vulnerabilities. Consequently, 100% protection cannot be guaranteed. Therefore, data subjects may, of course, alternatively provide personal data to the company by other means, such as by telephone.

1. Definitions

This Privacy Policy is based on the definitions used by the European legislator when enacting the GDPR. The Privacy Policy is intended to be both easy to read and easy to understand for everyone. To ensure this, the terms used are explained first. Among others, the following definitions are used in this Privacy Policy:

“personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
“data subject” means any identified or identifiable natural person whose personal data is processed by the controller.
“processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;
“Restriction of processing” means the marking of stored personal data with the aim of limiting its future processing;
“Profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person;
“controller” means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data; if the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States;
“Recipient” means a natural or legal person, public authority, agency, or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients; the processing of such data by the aforementioned authorities is carried out in accordance with applicable data protection regulations and in line with the purposes of the processing;
“third party” means a natural or legal person, public authority, agency, or other body, other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data;
“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

2. Name and Contact Information of the Data Controller

This Privacy Notice applies to data processing by the following data controller:
HÖRMANN Rawema Engineering & Consulting GmbH, represented by the management: Benjamin Bielefeld, and the management, in turn, represented by info@hoermann-rawema.de or T +49 371 6512-0.

3. Contact information for the Data Protection Officer:

Prof. Dr. Thorsten B. Behling
BUSE Rechtsanwälte Steuerberater GmbH & Co. KG
Berliner Allee 41
40212 Düsseldorf
T + 49 (0) 211 388 000
M +49 (0) 179 4922302
behling@buse.de
https://wwww.buse.de

Any data subject may contact the Data Protection Officer directly at any time with questions or suggestions regarding data protection.

4. Deletion and Blocking of Personal Data

We process and store the data subject’s personal data only for the period necessary to fulfill the purpose of storage, or to the extent required by applicable laws to which the data controller is subject.

If the purpose of storage no longer applies or a legally prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

5. Collection and Storage of Personal Data, as well as the Nature and Purpose of Its Use

a) When Visiting the Website

You may generally use this website without disclosing your identity. When you access the website, the browser used on your device automatically sends information to the website’s server. This information is temporarily stored in a so-called log file. The following information is collected automatically without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer,
date and time of access,
Name and URL of the retrieved file,
Website from which the access originated (referrer URL),
the browser used and, if applicable, your computer’s operating system, as well as the name of your Internet service provider.

The company processes the aforementioned data for the following purposes:

To ensure a smooth connection to the website,
Ensuring a convenient user experience on the website,
Evaluating system security and stability, as well as
for other administrative purposes.

The legal basis for data processing is Art. 6(1)(f) of the GDPR. The company’s legitimate interest stems from the purposes of data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your identity. The data will be deleted after 14 days at the latest.

In addition, we use cookies and analytics services when you visit the website. You can find further details on this in Sections 9 and 11 of this Privacy Policy.

b) When using the contact form or contacting us via email

If you have any questions, we offer you the option to contact the company via a form provided on the website or by email. You must provide a valid email address so that we know who the inquiry is from and can respond to it. Additional information may be provided voluntarily. It is entirely up to you whether you wish to enter this data via the contact form or in the email.
The data you enter is processed for the purpose of handling your inquiry. The data will be deleted immediately after your inquiry has been processed, provided there are no statutory retention periods.

The legal basis for data processing is, if the inquiry is necessary for the performance of a contract or for pre-contractual measures, Article 6(1), sentence 1, subparagraph (b) of the GDPR; and, in the case of statutory retention requirements, Article 6(1), sentence 1, subparagraph (c) of the GDPR; otherwise, legitimate interests, Article 6(1), first sentence, letter f of the GDPR. We have a legitimate interest in processing your inquiries, even those that are not of a pre-contractual or contractual nature, in order to provide you with the best possible service.
The data is processed exclusively for the purpose of responding to your inquiry and is retained for the duration of the statutory retention period (6 years pursuant to Section 257(1)(2) and (4) of the German Commercial Code (HGB)), provided that the data consists of business correspondence. Otherwise, the data will be deleted immediately after your inquiry has been answered.

6. Further Details on the Legal Basis for Processing

Article 6(1)(a) of the GDPR serves as the legal basis for processing operations where consent must be obtained for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of inquiries regarding services and products. If we are subject to a legal obligation that requires the processing of personal data, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. In this case, the processing is based on Article 6(1)(d) of the GDPR. Furthermore, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases when the processing is necessary to safeguard a legitimate interest of ours or of a third party, provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not take precedence. Such processing operations are permitted in particular because they were specifically mentioned by the European legislator (see Recital 47, Sentence 2 of the GDPR).

7. Consideration of Legitimate Interests

If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct and fulfillment of business activities for the benefit of employees and shareholders.

8. Use of Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit the company’s website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.
The cookie stores information related to the specific device you are using. However, this does not mean that the company thereby gains direct knowledge of your identity.
The use of cookies serves, on the one hand, to make your experience with our website more convenient. For example, we use so-called session cookies that recognize when you have already visited individual pages on the website. They are automatically deleted when you leave the website.

In addition, to optimize user-friendliness, we also use temporary cookies that are stored on your device for a specific, predetermined period of time. If you visit our website again to use our services, the system automatically recognizes that you have been there before and recalls the entries and settings you made, so you do not have to re-enter them.

We also use cookies to collect statistical data on website usage and to analyze this data for the purpose of optimizing our offerings for you (see Section 7). These cookies make it possible to automatically recognize that you have already visited the website when you return. These cookies are automatically deleted after a defined period of time, at the latest after 6 months. You can also delete the cookies earlier via your browser. Please refer to your browser’s help pages for instructions.

The data processed by cookies is necessary for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Article 6(1)(f) of the GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before a new cookie is created. Completely disabling cookies, however, may prevent you from using all features of the website.

9. Analytics and Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Article 6(1), first sentence, letter f of the GDPR. The company uses these tracking measures to ensure that the website is designed to meet user needs and to continuously optimize it. Additionally, the company uses these tracking measures to statistically record the use of the website and to evaluate this data for the purpose of optimizing the content offered to you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

10. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. Please note that on this website, Google Analytics has been extended with the “anonymizeIp” code to ensure that IP addresses are collected anonymously (so-called IP masking). Your IP address is therefore truncated within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can prevent data collection by Google Analytics by clicking the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Prevent Google Analytics from tracking me

For more information on terms of use and privacy:

The IP address and other personal data are stored only for the minimum retention period specified by Google Analytics, which is 14 months.

11. Social Media Plug-ins

We use social media plug-ins from social networks (e.g., Facebook, Twitter, Google+) on our website based on Art. 6(1)(f) of the GDPR to raise awareness of the company. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for ensuring compliance with data protection regulations lies with the respective providers. The company integrates these plugins using the so-called “two-click” method to provide the best possible protection for website visitors.

a) YouTube

This website uses YouTube videos in the privacy-friendly “two-click” version, meaning that personal data is processed only after you activate the plug-in by clicking on it. YouTube plugins are provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When the plugins are activated, information is sent to YouTube LLC and, if applicable, Google Inc. in the United States. This allows YouTube and Google to see that you have visited our site. If you are logged into your YouTube or Google account when the plugins are activated, YouTube and/or Google may be able to identify you directly.

Please note that, as the provider of this website, we have no information regarding the data transmitted to YouTube and Google, the purposes of data collection, or the use of this data by Facebook. For more information about the data collected, please refer to Google’s Privacy Policy, which you can access at https://policies.google.com/privacy?hl=de.

We cannot provide any information regarding the storage period, as this falls solely within the sphere of influence and responsibility of YouTube and Google, respectively.

b) Google Maps

This website has embedded a Google Maps map to show you our locations. As soon as you visit our website featuring the Google Maps map, a connection to Google’s servers is established, and personal data may be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged into your Google account, Google may be able to identify you directly. If you do not wish this to happen, please log out of your Google account.

Google’s privacy policy can be found here: https://policies.google.com/privacy?hl=de.

12. Job Applications

If you apply for a position with us via our careers page or by email, your personal data will be processed for the purpose of handling your application. The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) (data processing for the purposes of the employment relationship) and Article 6(1)(f) of the General Data Protection Regulation (GDPR) (legitimate interest). Your data will be deleted six months after your application is rejected. We have a legitimate interest in retaining the data for a period of six months even after your application has been rejected in order to be able to defend against claims under the General Equal Treatment Act (AGG).

13. Data Subject Rights

You have the right:

to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; as well as the existence of automated decision-making, including profiling, and, if applicable, relevant information regarding the details thereof,
pursuant to Art. 16 of the GDPR, to request without delay the rectification of inaccurate personal data or the completion of your personal data stored by us,
pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defense of legal claims,
to request the restriction of the processing of your personal data pursuant to Art. 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you object to its erasure, and we no longer need the data but you require it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR,
pursuant to Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller,
pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future, and
pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority responsible for your usual place of residence, your workplace, or the registered office of one of our companies. You can find an overview of the supervisory authorities here (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_link…); the supervisory authority generally responsible for HÖRMANN Rawema GmbH is:

Dr. Juliane Hundert

P.O. Box 11 01 32

01330 Dresden

Maternistraße 17

01067 Dresden

Phone: 0351 85471-101

Email: post@sdtb.sachsen.de

14. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honor without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to:
datenschutz@hoermann-gruppe.com

15. Data Security

When you visit our website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest encryption level supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, the company will use 128-bit v3 technology instead. You can tell whether a specific page on our website is being transmitted securely by the closed key or lock icon displayed in the status bar at the bottom of your browser.
We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. These security measures are continuously improved in line with technological developments.

16. Validity and Changes to This Privacy Policy

This Privacy Policy is currently valid and is effective as of April 2025.

Due to the further development of our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.