Privacy policy

When the website is used purely for informational purposes, the following technically necessary data is processed:

• IP address of the user
• Browser used (type, version, language)
• Operating system used
• Internet service provider of the user
• Date and time of access to our websites
• Files retrieved from our websites
• Website from which the user accessed our website
• Website that the user accesses via our website.

The processing of the aforementioned data is carried out for the performance of pre-contractual measures or for the fulfilment of the contract in accordance with Article 6(1b) GDPR. In addition, the data may also be processed to protect the legitimate interests of Hermann Paus Maschinenfabrik GmbH on the basis of a balancing of interests in accordance with Article 6(1f) GDPR. In the event of unlawful use of this website, this data is also used to clarify possible infringements of the law.

Hermann Paus Maschinenfabrik GmbH also analyses this information for statistical purposes and to improve this website, without creating personal user profiles in the process.

Website Hosting

This website is operated by external service providers (hosters) in Germany. The personal data collected when visiting the website (in particular the server log files mentioned above) are stored on the hosters' servers. The following are used:

• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
• Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany

The hosters are used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Art. 6 para. 1 lit. f GDPR). We have concluded a data processing agreement (DPA) with each hoster, which ensures processing in accordance with instructions and in compliance with data protection regulations. Data processing takes place on servers within Germany.

When contacting us (e.g. by contact form, e-mail, telephone or via social media) as well as in the context of existing user relationships and business relationships, the data submitted by the persons making the enquiry is processed to the extent necessary to answer the contact enquiries and perform any measures requested. In this process, we collect the following data from our communication partners:

• Contact details (e-mail addresses, telephone numbers)
• Content data (entries in online forms)
• Usage data (websites visited, interest in content, access times)
• Meta/communication data (device information, IP addresses).

Our processing is undertaken for the purposes of the contact enquiry and communication, as well as the provision of contractual services and customer service. In addition, the processing of this data serves to manage and respond to enquiries and to provide our online offering and ensure user-friendliness.

The contact and application form is provided technically via our content management system TYPO3 on this website. Your inputs are initially captured and transmitted via our web server hosted in Germany (see section "Website Hosting").

To process your enquiry and for sending emails, the transmitted data is then forwarded to Salesforce (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany) and processed there. Salesforce acts as our data processor in this regard. The legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR. If the contact is aimed at concluding a contract, Art. 6 para. 1 lit. b GDPR is the legal basis.

We have concluded a data processing agreement (DPA) with Salesforce. The transfer of data to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. For more information on how Salesforce handles user data, please refer to Salesforce's privacy policy: https://www.salesforce.com/de/company/privacy.

 

Consent Management

We use a consent management tool (Real Cookie Banner) on our website to obtain, manage and document consent for the use of cookies and comparable technologies in accordance with legal requirements. Services that require consent are only activated after you have given your consent via the banner.

Advertising and marketing services use cookies and comparable identifiers (including mobile advertising IDs) for both personalised and non-personalised advertising. For personalised advertising, your data is used to display ads tailored to your presumed interests and to measure the success of advertising campaigns (including conversion tracking and remarketing). The personal data required for this is processed exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.

Information on how Google processes personal data collected as part of our advertising services can be found under Google's "Responsible business practices" page: https://business.safety.google/privacy/.

Your consent is voluntary and can be withdrawn at any time with effect for the future. You can withdraw or adjust your selection at any time via the cookie settings on our website.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager is a tool that allows us to integrate and manage tracking, statistics and marketing tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies or carry out independent analyses. It is used solely for the management and delivery of the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google's parent company in the United States.

This service is used on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time.

Google Tag Manager itself does not set any cookies of its own. The services integrated through it (e.g. Google Analytics 4, Google Ads) set their own cookies, which are listed under the respective service.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. For more information on how Google handles user data, please refer to Google's privacy policy: https://policies.google.com/privacy.

Google Ads

Google Ads is an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use Google Ads to display online advertising to you, using Google Ads conversion tracking and remarketing. Cookies and comparable identifiers (including mobile advertising IDs) are used for both personalised and non-personalised advertising. Google uses these identifiers to measure the success of our advertising campaigns — for example by recording ad impressions or user clicks — and to show you ads that match your presumed interests, such as products you have already researched on our website.

Based on this data, target audiences can be created and addressed via Google Ads, with the aim of reaching you primarily with products you are interested in. We receive statistical evaluations from Google showing how often which ads were clicked. However, we do not receive any information that allows direct conclusions to be drawn about individual users.

The following cookies are used via Google Ads:

Cookie Name	Provider	Purpose	Duration
_gcl_au	Google Ads	Stores information about ad clicks for conversion tracking.	90 days
_gcl_aw	Google Ads	Stores information about ad clicks for conversion tracking.	90 days
_gcl_dc	Google Ads	Stores information about ad clicks (DoubleClick) for conversion tracking.	90 days

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. For information on how Google processes personal data as an advertising service provider, please refer to "Responsible business practices": https://business.safety.google/privacy/. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

Google Analytics 4 (Category: Statistics and Optimisation)

This website uses functions of the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

We use Google Analytics to measure and analyse the use of our website on the basis of a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It is used to assign analysis information to a device in order to identify which content users have accessed, which search terms they have used, or how they have interacted with our website. The time and duration of use are also recorded, along with the sources of users and technical aspects of their devices and browsers. Google Analytics does not log or store individual IP addresses for EU users; for EU traffic, IP address data is used solely to derive approximate geolocation data and is then immediately deleted.

Google Analytics 4 uses, among others, the following cookies:

Cookie Name	Provider	Purpose	Duration
_ga	Google	Used to distinguish users.	2 years
ga<container-id>	Google	Stores session status.	2 years
_gid	Google	Used to distinguish users.	1 day
_gat	Google	Used to throttle request rate.	1 day

This service is used on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission.

For more information on how Google handles user data, please refer to Google's privacy policy: https://policies.google.com/privacy. You can also prevent data collection by Google by installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

YouTube

We embed videos from the YouTube platform on our website. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Videos are embedded in enhanced privacy mode and are only loaded after your consent.

When you visit a page with an embedded YouTube video and have consented to the embedding, a connection is established to YouTube's servers. YouTube is informed which of our pages you have visited and your IP address is transmitted. YouTube may store cookies on your device or use comparable recognition technologies to collect information about you, including storing video preferences and interactions with videos, and to analyse these for statistical and marketing purposes.

The following cookies are used via YouTube:

Cookie Name	Provider	Purpose	Duration
VISITOR_INFO1_LIVE	YouTube (.youtube.com)	Estimates bandwidth and collects data on video settings.	6 months
YSC	YouTube (.youtube.com)	Tracks interactions with embedded videos.	Session
PREF	YouTube (.youtube.com)	Stores preferred configuration and playback settings.	8 months
__Secure-YEC	YouTube (.youtube.com)	Stores user preferences for personalised recommendations.	up to 13 months
VISITOR_PRIVACY_METADATA	YouTube (.youtube.com)	Stores the user's privacy settings.	6 months
SOCS / pm_sess	YouTube (.youtube.com)	Store cookie decisions and maintain the browser session respectively.	Session to 13 months

Processing is carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

LinkedIn Plugins and Embedded Content

We embed content elements on our website that are sourced from the servers of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "third-party provider"). These may include, for example, graphics or videos (hereinafter "content").

The embedding always requires the third-party provider of this content to process the IP addresses of users, as without the IP address the provider would be unable to send the content to their browser. The IP address is therefore necessary for the display of this content. Third-party providers may also use so-called pixel tags (web beacons) for statistical or marketing purposes. Through these pixel tags, information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information may also be stored in cookies on users' devices and may contain technical information about the browser and operating system, referring websites, time of visit, and other details about the use of our website, as well as being linked to such information from other sources.

The following cookies are used via LinkedIn:

Cookie Name	Provider	Purpose	Duration
li_gc	LinkedIn (.linkedin.com)	Stores the guest's consent to non-essential cookies.	6 months
lidc	LinkedIn (.linkedin.com)	Used for data centre selection.	24 hours
bcookie	LinkedIn (.linkedin.com)	Browser identifier for unique device identification.	1 year
UserMatchHistory	LinkedIn (linkedin.com)	ID synchronisation (advertising/retargeting).	30 days
AnalyticsSyncHistory	LinkedIn (.linkedin.com)	Stores the time of synchronisation with lms_analytics.	30 days
li_sugr	LinkedIn (.linkedin.com)	Probabilistic identity matching.	90 days
__cf_bm	LinkedIn (Cloudflare)	Bot detection.	30 minutes

The processing of your personal data is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG). You have the option to withdraw your consent at any time via the cookie settings. A further opt-out option can be found here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. We have concluded a data processing agreement with LinkedIn (https://legal.linkedin.com/dpa). Data transfer to a third country takes place in accordance with the EU-US Data Privacy Framework (DPF) and supplementary standard contractual clauses. Further information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.

OpenStreetMap

We embed map content from OpenStreetMap on our website, which is loaded via the "Leaflet" software library. The map service provider is the OpenStreetMap Foundation (OSMF), St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

When you visit a page with an embedded map and have consented to the embedding, a connection is established to OpenStreetMap's servers. Your IP address is transmitted, as it is required for the delivery of the map content to your browser. In addition, information about your browser and operating system as well as the page accessed may be transmitted.

Processing is carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent can be withdrawn at any time. An adequacy decision by the EU Commission exists for the United Kingdom. Further information can be found in OpenStreetMap's privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

You have the following rights with regard to Hermann Paus Maschinenfabrik GmbH concerning your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The supervisory authority responsible for us is:

State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover

Right to object on a case-by-case basis

On grounds relating to your particular situation, you shall have the right to object at any time to the processing of personal data concerning you which is based on Article 6(1e) GDPR (data processing in the public interest) and Article 6(1f) GDPR (data processing on the basis of a balancing of interests); this shall also apply to profiling as defined in Article 4(4) GDPR based on this provision.

If you file an objection, your personal data will no longer be processed by Hermann Paus Maschinenfabrik GmbH, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

Objecting to the processing of your data for direct marketing purposes

In individual cases, Hermann Paus Maschinenfabrik GmbH processes your personal data for direct marketing. You have the right to submit an objection to the processing of your personal data for the purposes of direct marketing at any time; this also applies to profiling insofar as this is linked to such direct marketing.

If you object to your data being processed for the purposes of direct marketing, Hermann Paus Maschinenfabrik GmbH shall cease using your personal data for these purposes.

Your objection can be submitted in any form and should be addressed to the following where possible:

Hermann Paus Maschinenfabrik GmbH
Siemensstrasse 1–9
D-48488 Emsbüren, Germany
e-mail: datenschutz@remove-this.paus.de