1. Body responsible and contact details:
Hamberger Flooring GmbH & Co. KG is responsible for the processing of data. The data provided by the customer are processed in accordance with the provisions of the European General Data Protection Regulation (hereinafter referred to as the GDPR).
The contact details of the body responsible are as follows:
Hamberger Industriewerke GmbH
represented by the managing directors
Dr. Peter M. Hamberger and Michael Huck
Rohrdorfer Straße 133
Tel.: 08031 7000
Fax: 08031 700199
2. Access data and hosting
You can visit our websites without providing details about yourself.
Each time that you access a website, the web server will automatically save a so-called server log file which documents this access and contains for example the name of the file requested, your IP address, the date and time of access, the quantity of data transferred and the provider making the request (access data).
These access data are used exclusively to ensure that the website operates smoothly and to improve our offering. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. In order to guarantee your right to data protection, all access data will be deleted at the latest seven days after your visit to the website ends.
Hosting services by a third-party provider
If data are processed on our behalf, a third-party provider will provide services for hosting and displaying the website and for processing data as part of an application. This enables us to safeguard our justified interest in ensuring that our offering is displayed correctly – an interest which prevails when the interests of all parties are taken into account. All data which are collected as described below when you use this website or the forms provided will be processed on the third-party provider’s servers. Data shall be processed on other servers only to the extent described here.
This service provider shall be based within a country which is part of the European Union or the European Economic Area.
3. Data collection and use
We collect personal data if you provide them when making a query, if you contact us (e.g. via the contact form or e-mail) or if you submit an application. Mandatory fields are mandatory because we require the data to process your query or for the application process. Without these data, we will not be able to finish dealing with your query or respond when you contact us. The relevant entry forms indicate what data are collected. We use the data that you provide to process your queries in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR. Once we have finished dealing with your query, access to your data for further processing will be restricted and your data will be deleted as soon as the retention periods required under fiscal, labour and commercial law expire, unless you have explicitly consented to further use of your data or we reserve the right to make further use of your data in a manner which is permitted by law as set out in this data protection statement. You can delete your customer account at any time, either by sending a message to the address below or using a function provided in your customer account.
4. Data transfer
In order to allow performance of a contract in accordance with Art. 6 Para. 1 S. 1 lit. b of the GDPR, your data will – subject to your consent to commissioned processing in accordance with Art. 28 of the EU-GDPR – be transferred directly and in encrypted form to a server of rexx systems GmbH, Suderstraße 75-79, 20097 Hamburg. Personal data shall be transferred to this company only to the extent necessary to allow performance of the contract.
Further information regarding the scope of data collection, the further processing and use of data by the provider as well as a contact address and your rights and the settings options available to protect your privacy can be found in the provider’s data protection statement:
5. Cookies and web analysis
We use so-called cookies on various pages in order to make our website attractive, to allow the use of specific functions, to display suitable products or for market research purposes. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is displayed in the optimum manner – an interest which prevails when the interests of all parties are taken into account. Cookies are small text files which are automatically stored on your end device. Some of the cookies that we use (so-called session cookies) are deleted at the end of the browser session, i.e. when you close your browser. Other cookies (persistent cookies) remain on your end device and allow us to recognise your browser again the next time that you visit. None of the cookies set by this website contain personal data. They are used solely to save your product selection in the shopping basket or to record your product preferences. The cookie settings for your web browser indicate how long cookies will be kept. You can set your browser in such a way that it notifies you when cookies are to be set and allows you to decide whether to accept them in individual cases. Alternatively, you can block cookies in specific cases or block all cookies. Each browser differs in terms of the way in which cookie settings are managed. The help menu of every browser explains how to change your cookie settings. You can access these settings for a particular browser via the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html
If you do not accept cookies, the functionality of our website may be limited.
Use of Google (Universal) Analytics for web analyse
If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a of the GDPR, this website will use Google (Universal) Analytics, a web analysis service provided by Google LLC (www.google.de), for website analysis purposes. Google (Universal) Analytics uses methods, e.g. cookies, which allow your use of the website to be analysed. The information regarding your use of this website which is collected automatically will generally be transferred to and stored by Google on a server in the USA. If IP anonymisation is enabled on this website, the IP address will be abbreviated within the member states of the European Union or in other European Economic Area member states before data are transferred. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. The anonymised IP address provided by your browser for the purpose of Google Analytics shall not be linked to other data held by Google. If we stop using Google Analytics and there is no longer any reason to retain data, the data collected for this purpose shall be deleted.
Google LLC has its headquarters in the USA and is certified under the EU-US Privacy Shield. An up-to-date certificate can be found here. Because of this agreement between the USA and the European Commission, the latter has defined an appropriate data protection level for companies certified under the Privacy Shield.
You can revoke your consent for the future at any time by downloading and installing the browser plug-in which is available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de . Doing this will prevent the data generated by the cookie regarding your use of the website (including your IP address) being collected and processed by Google.
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics collecting data via this website in the future. An opt-out cookie will then be placed on your end device. If you delete your cookies, you will be asked to give your consent again.
6. Social media plug-ins
Use of social plug-ins from Facebook, Google, Xing with the “2-click solution”
So-called social plug-ins (“plug-ins”) from social networks are used on our website. In order to provide greater protection for your data when you visit our website, the plug-ins are incorporated into the site using the so-called “2-click solution”. This ensures that when you access a page on our website containing such plug-ins, a connection to the servers of the relevant social network will not be established straight away. Your browser will only establish a direct connection to the servers of the relevant social network if you enable the plug-ins.
The content of the relevant plug-in will then be transferred by the plug-in provider straight to your browser and incorporated into the page. By incorporating the plug-ins, the providers are informed that your browser has accessed the relevant page of our website, even if you do not have a profile with the relevant provider or are not currently logged in. This information (including your IP address) will be transferred by your browser directly to a server of the relevant provider (possibly in the USA), where it is then saved. If you interact with the plug-ins, e.g. by clicking on the “Like” or the “Share” button, the relevant information will likewise be transferred directly to a server of the provider and saved there. The information will also be published on the social network and shown to your contacts there. In accordance with Art. 6 Para. 1 S. 1 lit. f of the GDPR, this enables us to safeguard our justified interest in ensuring that our offering is marketed in the optimum manner – an interest which prevails when the interests of all parties are taken into account.
Information regarding the purpose and scope of data collection, the further processing and use of data by the provider as well as a contact address and your rights and the settings options available to protect your privacy can be found in the providers’ data protection statements:
In order to prevent Google Analytics tracking cookies being set, you may refuse the storage of cookies by selecting the appropriate settings in your browser software. Please note however that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting and processing the data generated by the cookie regarding your use of this website (including your IP address) by downloading and installing the browser plug-in via the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics collecting data via this website in the future. An opt-out cookie will then be placed on your end device. If you delete your cookies, you will have to click on the link again.
7. Google Fonts:
In order to incorporate external fonts from Google Fonts, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is granted access to the customer’s personal data. This website uses Google Fonts in order to incorporate external fonts. Google makes available the fonts. If the customer accesses this website, the necessary fonts are loaded into the customer’s browser cache in order to display the texts and fonts on the page correctly.
For this purpose, the information typically collected when a website is accessed, in particular the IP address of the customer and the referrer URL, will be transferred to a Google Inc. server. Further information can be found at
For this purpose, the information typically collected when a website is accessed, in particular the IP address of the customer and the referrer URL, will be transferred to a Google Inc. server. Further information can be found at and in the Google data protection statement policies.google.com/privacy. and in the Google data protection statement https://policies.google.com/privacy?hl=de.
Personal data shall not be made accessible to other third parties without the customer’s consent unless this is necessary owing to legal requirements.
8. Retention period
Upon completion of the contract, including payment in full, any customer data which must be retained for legal reasons will be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
In the case of the application process, the data shall automatically be reduced to “stub data” three months after a rejection or the completion of the project for which the user applied. These data are:
- First name
- Date of birth
- Method used to submit application
- Answer to the question “How did you find us?”
As a result, the data cannot be traced back to a specific person. Duplicates can be ruled out with a probability calculation.
In the event that the customer uses the contact form, the personal data will be used for as long as the query is processed. Any data which must be retained for legal reasons will then be blocked. These data will no longer be available for further use. These blocked data shall be deleted as soon as the legal requirement no longer applies.
The body responsible is subject to various legal retention and documentation requirements, especially those set out in the German Fiscal Code (AO). The retention and documentation periods stipulated therein are anywhere between two and ten years. Retention periods are also governed by the legal limitation periods. These are generally three years, especially in accordance with the German Civil Code (BGB), but in certain cases can be up to thirty years.
9. Contact information and your rights
As the person concerned, you have the following rights:
- in accordance with Art. 15 of the GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- in accordance with Art. 16 of the GDPR, the right to request the immediate correction of incorrect personal data or the completion of incomplete personal data stored by us;
- in accordance with Art. 17 of the GDPR, the right to request the deletion of your personal data stored by us unless further processing is necessary
- to exercise your rights as regards freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of the public interest or
- to assert, exercise or defend legal claims;
- in accordance with Art. 18 of the GDPR, the right to restrict the processing of your personal data where
- you dispute the accuracy of the data;
- the processing is not lawful but you decline to have the data deleted;
- we no longer require the data but you require the data in order to assert, exercise or defend legal claims or
- you have objected to the processing of data in accordance with Art. 21 of the GDPR;
- in accordance with Art. 20 of the GDPR, the right to obtain your personal data which you provide in a structured, standard and machine-readable format or to request that the data be transferred to another body responsible;
- in accordance with Art. 77 of the GDPR, the right to complain to a supervisory authority. Generally speaking, you can contact the supervisory authority at your usual place of residence, your workplace or our company headquarters.
Contact persons for data protection
If you have any questions regarding the collection, processing or use of your personal data, if you require information about these data or wish to have them corrected, blocked or deleted or if you wish to revoke any consent given, please contact our Data Protection Officer:
Dipl.-Inf.(FH) Tim Prinz, Prinz Service & Entwicklung GmbH
Liebigstr. 9, 91166 Schwabach
E-Mail: E-Mail: email@example.com
Right to object
If we process personal data as described above to safeguard our justified interest – an interest which prevails when the interests of all parties are taken into account, you can object to this processing for the future. If data are processed for direct marketing purposes, you can exercise this right as described above at any time. If data are processed for other purposes, you may object only if there are reasons for doing so resulting from your particular situation.
If you exercise your right to object, we shall no longer process your personal data for these purposes unless we can demonstrate compelling, legitimate grounds for such processing which outweigh your interests, rights and freedoms or if such processing is necessary to assert, exercise or defend legal claims.
This shall not apply if data are processed for direct marketing purposes. In this case, we shall not process your personal data further for this purpose.