Privacy

Data protection

We are pleased that you visit our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the internet offer of plus h GmbH & Co. KG, which can be reached under the domain plus-h.de and the various subdomains (“our website”).

Who is responsible and how can I contact you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

plus h GmbH & Co. KG
Ahornstraße 59
08525 Plauen, Germany
info@plus-H.de
DE

Data protection officer

dc plus dubiel consulting GmbH
Am Veitsbronner Weg 23
90556 Seukendorf
DE
Darius Dubiel
info@dc-dsb.de

Why is?

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behavior when visiting a website. Information that we cannot (or only with a disproportionate amount of effort) relate to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, querying, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory storage obligations.

Who gets my data?

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of order processing in accordance with Art. 28 DSGVO, these can be recipients of your personal data. More information on the use of processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by understanding how you use our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not damage your end device. They cannot run programs and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information on the cookies used in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

  • Information according to Art. 15 GDPR about die stored personal data in the form of meaningful information on the details of processing and a copy of your data;
  • Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
  • Deletion of the data stored by us in accordance with Art. 17 GDPR, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Restriction of processing in accordance with Art. 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR.
  • Data transferability in accordance with Article 20 GDPR, insofar as you have provided us with personal data as part of your consent in accordance with Article 6 Paragraph 1 lit. a GDPR or on the basis of a contract in accordance with Article 6 Paragraph 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person in charge, insofar as this is technically feasible.
  • Objection pursuant to Article 21 GDPR against the processing of your personal data, insofar as this is based on Article 6 Paragraph 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling reasons worthy of protection for the processing can be proven or the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.
  • Revocation in accordance with Art. 7 Para. 3 GDPR of your given consent with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

 

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

provision of the website
Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

[Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf for the purpose of Art. 28 DSGVO.]

Purpose and Legal Basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Article 6 (f) GDPR. The collection of the data and the storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as further storage of the log files is required by law, processing is carried out on the basis of Article 6 (1) (c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to access our website without providing the data.

storage duration

The aforementioned data is stored for the duration of the display of the website [and for technical reasons for a maximum of [7 days]].

Newsletter
Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address as well as your name, location and customer number and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration within 48 hours, verthis falls automatically and the data will not be processed for sending the newsletter.

[The newsletter is sent directly by us. Your data will not be passed on to third parties or processors within the meaning of Art. 28 GDPR.]

To send the newsletter, we use a service from GetResponse S.A., which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and Legal Basis

We process your data for the purpose of sending the newsletter on the basis of your consent in accordance with Article 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Article 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

storage duration

After registering for the newsletter, we store the data for a maximum of 48 hours until the registration is confirmed. After successful confirmation, we will store your data until you revoke your consent (unsubscribe from the newsletter) and, for technical reasons, for a maximum of 7 days.

Registration of a user account
Type and scope of processing

You have the option of registering a user account to use certain areas of our website. The information collected during registration via the mandatory fields is required to provide access to the user account. In addition, you can voluntarily provide additional information for additional (comfort) functions.

For the registration of a user account, your personal data will only be passed on in accordance with this data protection declaration.

Purpose and Legal Basis

We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with Article 6 (1) (b) GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you personally and for us to fulfill the contract. There is no legal obligation to provide the data. Without the provision of this information, it is not possible to register a user account and thus conclude a contract.

In addition, the processing of additional information provided voluntarily for the purpose of providing additional (comfort) functions is based on your consent in accordance with Article 6 (1) (a) GDPR. By deactivating the functions / by deleting the voluntary information in the user account, you can declare your revocation in accordance with Article 7 (3) GDPR at any time with effect for the future.

storage duration

We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After the end of the contract / deletion of the user account, your data will only be stored further if there are statutory storage requirements (e.g. tax and commercial law).

Additional information that you provide to us based on your consent will only be stored until you revoke your consent by deactivating the functions/deleting the data, but no longer than the end of the contract on which the provision of the user account is based.

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers within social networks and to offer you other ways of contacting us and finding out about our offers. In the following, we will inform you about which of your data we or the respective social network process in connection with accessing and using our fan pages/accounts.

Data that we process from you

If you want to contact us via messenger or direct message via the respective social network, we usually process your user name, which you use to contact us, and store any other data you have provided insofar as this is necessary to process/answer your request.

The legal basis is Art. 6 Para. 1 Sentence 1 f) GDPR (processing is necessary to protect the legitimate interests of the person responsible).

(Static) usage data that we receive from social networks

We receive automated statistics about our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, information on page activity and post interactions, reach, video views/views and information on the proportion of men/women among our fans/followers.

The statistics only include aaggregated and non-personally identifiable information. You are not identifiable for us in this way.

Which data the social networks process from you

In order to be able to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and in this respect no user account is required for the respective social network.

Please note, however, that the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies when the respective social network is called up, over which we have no influence. For details, please refer to the privacy policy of the relevant social network (see relevant links above)

If you want to interact with the content on our fan pages/accounts, e.g. want to comment on, share or like our postings/contributions and/or want to contact us via messenger functions, you must first register with the respective social network and provide personal data.

We have no influence on data processing by the social networks as part of your use. As far as we know, your data will be stored and processed in particular in connection with the provision of the services of the respective social network, as well as to analyze usage behavior (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests will be displayed both inside and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.

Information, among other things, on the exact scope and purposes of processing your personal data, the storage period/deletion and guidelines for the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the data protection regulations/cookie guidelines of the social networks. There you will also find information on your rights and options to object.

Facebook site

When you visit our Facebook page, Facebook (Meta) records, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: https://facebook.com/help/pages/insights.

Using the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use them to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We only collect your data via our fan page in order to realize a possible provision for communication and interaction with us. This survey usually includes your name, message content, comment content and the profile information you have provided “publicly”.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Article 6 Paragraph 1 f) GDPR. If you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis for the processing extends to Art. 6 Para. 1 a), Art. 7 DSGVO.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

Together with Facebook, we are responsible for the personal content of the fan page. Data subject rights can be exercised at Meta Platforms Ireland Ltd. as well as be asserted against us.

According to the GDPR, primary responsibility for the processing of Insights data lies with Facebook and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. represents the essence of the page-insights supplement available to the data subjects.

We do not make any decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly on Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

For more information, including the exact scope and purposes of processing your personal data, the storage period/deletion and guidelines for the use of cookies and similar technologies during registration and use, see Facebook’s data protection regulations/cookie guidelines:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram page

When you visit our Instagram page, Instagram (Meta) records, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more information on this under the following link (note: clicking on the following link will take you to the website of the social network Facebook, also part of the Meta Group. However, the information provided via the link applies equally to the social network Instagram): https://facebook.com/help/pages/insights.

Using the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use them to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We only collect your data via our fan page in order to realize a possible provision for communication and interaction with us. This survey usually includes your name, message content, comment content and the profile information you have provided “publicly”.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Article 6 Paragraph 1 f) GDPR. If you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis for the processing extends to Art. 6 Para. 1 a), Art. 7 DSGVO.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

Together with Instagram, we are responsible for the personal content of the fan page. Data subject rights can be exercised at Meta Platforms Ireland Ltd. as well as be asserted against us.

According to the GDPR, the primary responsibility for the processing of Insights data lies with Instagram and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. makes the essence of the Page Insights supplement available to the data subjects.

We do not make any decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

For more information, including the exact scope and purposes of processing your personal data, the storage period/deletion and guidelines for the use of cookies and similar technologies in the context of registration and use, see Instagram’s data protection regulations/cookie guidelines (note: clicking on the following link will take you to the website of the social network Facebook):
https://help.instagram.com/519522125107875/?helpref=uf_share
This information can also be viewed in the help section of the Instagram website via the following link:
https://help.instagram.com/581066165581870

Youtube channel
Type and scope of processing

Plus-H uses a YouTube channel owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We would like to point out that you are responsible for using the YouTube channel offered here and its functionsuse. This applies in particular to the use of the “Discussion” function.

Information about which data is processed by Google and for what purposes can be found in Google’s data protection declaration:

https://policies.google.com/privacy?hl=de&gl=de#infocollect

Plus-H has no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. It also has no effective means of control in this respect. With the use of Google, your personal data will be collected, transferred, stored, disclosed and used by Google and thereby transferred to, stored and used in the United States, Ireland and any other country in which Google does business, regardless of your place of residence. It is transmitted to companies affiliated with Google as well as to other trustworthy companies or persons who process them on behalf of Google.

On the one hand, Google processes your voluntarily entered data such as name and user name, e-mail address, telephone number. Google also processes the content that you create, upload or receive from others when using the services. This includes, for example, photos and videos you save, documents and spreadsheets you create, and comments you write on YouTube videos.

On the other hand, Google also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, information about wireless networks or your IP address in order to send you advertising or other content.

Google may use analysis tools such as Google Analytics for evaluation. Plus-H has no influence on the use of such tools by Google and was not informed about such a potential use. If tools of this type are used by Google for Plus-H’s YouTube channel, Plus-H has neither commissioned them nor supported them in any way. The data obtained during the analysis is also not made available to her. Only certain profiles of the subscribers can be viewed by the Plus-H via their account. Furthermore, Plus-H has no way of preventing or stopping the use of such tools on its YouTube channel.

Finally, Google also receives information when you view content, for example, even if you have not created an account. This so-called “log data” can be the IP address, the browser type, the operating system, information about the previously accessed website and the pages you accessed, your location, your mobile operator, the end device you are using (including device ID and application ID), the search terms you are using and cookie information.

You have options for restricting the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers specific privacy settings for YouTube. You can read more about this in Google’s guide to data protection in Google products:

https://policies.google.com/technologies/product-privacy?hl=de&gl=de

Further information on these points can be found in Google’s data protection declaration under the term “data protection settings”:

https://policies.google.com/privacy?hl=de&gl=de#infochoices

You also have the option of requesting information via the Google data protection form:

https://support.google.com/policies/troubleshooter/7575787?visit_id=637054532384299914-2421490167&hl=de&rd=2

Data processed by plus-H

plus-H also processes your data when you communicate with us via YouTube.

The processing is carried out for the purposes of plus-H’s public relations work in connection with the data assigned to it by law

Tasks (Art. 6 e para. 1 lit. e GDPR in connection with the respective specialist law).

The recipient of the data is initially Google, where they may be passed on to third parties for their own purposes and under the responsibility of Google. The recipient of publications is also the general public, i.e. potentially everyone. Plus-H does not collect any data itself via its YouTube channel. The IP addresses of the site visitors are not transmitted to Google when the Plus-H YouTube videos are integrated into its website (https://www.plus-H.de). In particular, no tracking takes place on the website.

However, the data you enter on YouTube, in particular your user name and the content published under your account, will be processed by us insofar as we may answer your publications under “Discussions”. The ones freely published and distributed by you on YouTube In this way, Plus-H includes eten data in its offer and makes it accessible to its followers.

Usercentrics
Type and scope of processing

We have integrated Usercentrics on our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which consent to the storage of cookies can be obtained and documented. Usercentrics uses cookies or other web technologies to recognize users and to save the given or revoked consent.

Purpose and Legal Basis

The use of the service is based on obtaining the legally required consent to the use of cookies in accordance with Article 6 Paragraph 1 Letter c. GDPR.

storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Usercentrics GmbH. You can find further information in the data protection declaration for Usercentrics: https://usercentrics.com/privacy-policy/.

eRecht24 CDN
Type and scope of processing

We use eRecht24 CDN to provide the content of our website properly. eRecht24 CDN is a service provided by eRecht24 GmbH & Co. KG, which acts as a Content Delivery Network (CDN) on our website.

A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of eRecht24 GmbH & Co. KG, Lietzenburger Str. 94, 10719 Berlin, Germany, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above purposes and to maintain the security and functionality of eRecht24 CDN.

Purpose and Legal Basis

The content delivery network is used on the basis of our legitimate interests, i.e. interest in a secure and efficient provision and optimization of our online offer in accordance with Article 6 Paragraph 1 lit. f GDPR.

storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by eRecht24 GmbH & Co. KG. Further information can be found in the data protection declaration for eRecht24 CDN: https://www.e-recht24.de/datenschutzerklaerung.html.

Whatsapp
Type and scope of processing

We offer visitors to our website the opportunity to contact us via the WhatsApp message service. We use the “WhatsApp Business Version” for this.

This service is offered by WhatsApp Inc., a subsidiary of Meta Platforms Inc. WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible for the European area.

If you contact us on the occasion of a specific transaction (e.g order) via WhatsApp, we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Article 6 Paragraph 1 lit. b. DSGVO for processing and answering your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address or e-mail address) in order to be able to assign your request to a specific transaction.

If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will save and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Article 6 Paragraph 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the desired information.

Your data will always only be used to answer your request via WhatsApp. A disclosure to third parties does not occur.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.

To operate our WhatsApp business account, we use a mobile end device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Article 6 (1) (a) GDPR when they first use the app on their device by accepting the WhatsApp terms of use. A transmission of data from users who do not use WhatsApp and/or do not contact us via WhatsApp is excluded in this respect. Information on the data transfer from WhatsApp and the underlying standard contractual clauses of the EU Commission can be found at:
https://www.whatsapp.com/legal/business-data-transfer-addendum/?locale=de_DE

The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your rights in this regard and setting options for protecting your privacy can be found in WhatsApp’s data protection information: https://www.whatsapp.com/privacy