The protection of personal data is an important concern to us. Therefore, we always strive to perform our activities in compliance with applicable legal provisions on the protection of personal data and data security. The following document explains to you the purposes for which we collect, store and use personal data and the ways in which we protect them.
Processing of personal data
Our websites collect and store the IP address assigned to your computer to transfer to your computer the contents of our website which you accessed (e.g. texts, pictures, files made available for download etc.; see point (b) of Article 6(1) of the GDPR). We process this data also for the purpose of identifying and tracking cases of abuse. Our legitimate interest in data processing is to ensure that our website works properly and that we can communicate with you via that website (see point (f) of Article 6(1) of the GDPR).
In addition, we do not collect any personal data (e.g. names, addresses, telephone numbers or e-mail addresses), unless you voluntarily provide such data to us (e.g. by registering, completing a contact form or transmitting information), you consented to data processing (e.g. by subscribing to our newsletter) or unless valid laws on the protection of your data allows for this.
We generally use personal data you provided to react to your inquiries, to process your queries or to grant you access to certain information or offers (see point (b) of Article 6(1) of the GDPR). It might still be necessary for us to store or process your personal data to maintain the existing customer relationship, to be able to better respond to your requests or to improve our products or services. It goes without saying that we respect your request to not use your personal data to support our customer relationship with you (especially for direct marketing purposes). You have the possibility to unsubscribe from our newsletter at any time free of charge (simply click the relevant button for this).
Disclosure to third parties As a rule, HSM is the exclusive processor of your personal data. We commission newsletter marketing service providers (domiciled in Germany) who process your personal data on our behalf. Necessary information is forwarded to these third parties to make further processing possible. We carefully select all these external service providers and they are bound by all the instructions we give them. Accordingly, we oblige such processors to treat your data exclusively in accordance with the instructions we give them and applicable data protection laws. We also prohibit them from processing the data for purposes other than those agreed. Data is transferred to processors pursuant to Article 28 (1) of the GDPR. We will neither sell your personal data to third parties nor market it in any other way.
Applicants We use and store job application documents, contact data and other data which you provide when submitting (unsolicited) job applications by mail, during a telephone call or in a personal interview to contact you and to be able to process your application.
HSM® will collect, process and use personal data you provide on the internet only for the purposes of which you have been informed, unless such data is collected, processed or used
for another purpose directly related to the original purpose for which personal data had been collected;
since this is necessary to prepare, negotiate and fulfil a contract with you;
since this is required pursuant to legal obligations or administrative or judicial orders;
to prevent misuse or other illegal activities, such as intentional attacks on our data security system.
We (HSM® Stahl- und Metallhandel GmbH) exclusively use the data you provide to deliver the newsletter and only pass that on to our e-mail marketing service provider, CleverReach, Schafjückenweg 2, 26180 Rastede, Germany, based on a valid data processing agreement.
As a first step, we send a confirmation e-mail to the e-mail address you provided to avoid that third-party data is used for registration. That e-mail includes a link on which recipients must click to confirm their subscription to the newsletter. We then receive a message stating that subscription to the newsletter has been confirmed. Only after that will newsletters be sent to the registered e-mail address.
When subscribing to the newsletter, the subscriber’s IP address, the date and time of subscription will be stored. Collection serves misuse prevention and legal protection.
You have the right to unsubscribe from the newsletter at any time. For this purpose, each newsletter includes a link which transfers the withdrawal of your registration to our system.
Data relating to communication or use
Technical means automatically generate data relating to communication (e.g. the internet protocol address) or to the use (e.g. the beginning, the duration of use and the telecommunications services you applied) when you use telecommunications services to access our websites. Such data might make it possible to draw conclusions about personal data. Insofar as collection, processing and use of your data relating to communication or use is absolutely necessary, these activities are subject to legal data protection provisions.
Automatic collection of non-personal data
When you access our website, sometimes we automatically collect data which is not associated with a specific individual (e. g. the internet browser; operating system in use; domain name of the referrer website; number of visits; average website visit period; accessed web pages). We use this information to rate the attractiveness of our websites and to improve its performance and content.
This website uses “cookies” (small bits of information) to guide you through your user session (a “cookie” is a file stored on your computer which contains data on how you use this website). Cookies may help recognising returning visitors, customising and supplementing the features and interfaces for your website visits and collecting data for website visitor statistics. The cookies used by this website may include your preferred language, your geographic region and a single session identification key which allows it to record your user session and distinguish it from all the other users currently using the website. Data collected for this purpose is in no way restricted. It is not necessary to store cookies in your browser which are capable of accessing and using this website. However, some website features may depend on the presence of cookies so that you may not have access to those features without accepting the relevant cookies.
Use of Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Inc. (“Google”). Google Analytics 4 uses “cookies”, text files stored on your computer which help to analyse how you use our website. Information generated by the cookie about your use of this website (including your IP address) is usually transferred to and stored on a Google server in the United States.
We activated IP anonymisation on these websites so that the IP address of Google users located in EU Member States or in other contracting states of the Agreement on the European Economic Area is shortened prior to transmission. Only in exceptional cases will the full IP address be transmitted to and shortened on a Google server in the US. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activities and to provide other services relating to the use of the website and the internet to the website operator. The IP address transferred by your browser in the context of Google Analytics 4 will not be combined with any other data from Google. You can prevent the storage of such cookies by changing the settings of your browser software accordingly; however, please note that, in this case, you may not be able to make full use of all the functions of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) from being processed by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout; https://tools.google.com/dlpage/gaoptout?.
We would like to point out that this website uses Google Analytics with the “anonymizeIP” code extension to ensure anonymised collection of IP addresses (“IP masking”) and to exclude direct identifiability of individuals.
Social network integration
Our website uses buttons for the below social networks:
Instagram and Facebook: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
LinkedIN, Linkedin Ireland United Company, Wilton Place, Dublin 2, Ireland
YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
The buttons all show the respective social network’s logo. However, they are no standard social plug-ins, but buttons with links embedded in them. You must activate these buttons by separately clicking on them. As long as you do not click on the buttons, no data will be transmitted to the social networks; only when you click on the buttons consenting to communication with the social network servers will the buttons be activated and will a connection be established (for the YouTube plug-in as an exception, please see below). After clicking on the button, the button turns into a “share plug-in”. The relevant social network is provided with information about the pages you visited, and you can share that web page with your contacts on your social network. If you want to “share” that information, you must be logged on. If you are not logged on, you will be forwarded to the log-on page of the relevant social network leaving the HSM website. If you are logged on, the social network is informed about you intending to recommend the respective product. When activating the button, the social networks will be informed, among other things, about the fact that you clicked on the button, the time when you accessed the relevant web page, about you IP address, the browser you used and about the language settings. When you click on the button, your click will be transmitted to the social network and used according to their data usage guidelines.
For more information on the purpose and the extent of data collection, processing and use by the relevant social network and on your related rights and the settings to protect your privacy, please refer to the information provided by:
If you do not want the social network to receive any data about you, you must not click on the button.
Our website uses plug-ins of the YouTube website operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. If you visit one of our pages equipped with a YouTube plug-in, a connection to YouTube’s servers is made. In this way, this server receives information about which of our web pages you have visited. If you are logged in to your YouTube account, you allow YouTube to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
Withdrawal of Consent
If you request any information about products and services or similar, we may use your personal data to contact you again by e-mail after the requested information has been sent to present additional offers or information relevant to you. If you do not agree to this, you may inform us at any time so that we can block or erase your personal data accordingly. It goes without saying that you may unsubscribe from the newsletter at any time free of charge.
Your rights concerning the processing of personal data
Right of access At all times you have the right to request access to your personal data which we process to the extent provided for under Article 15 of the GDPR. To do this, you can submit your application by letter or by e-mail to the below address.
Right of rectification of inaccurate data You have the right to request us to immediately rectify your personal data if such data is inaccurate (Article 16 of the GDPR); please refer to the below contact address for this.
Right to erasure You have a right to request that your personal data be immediately erased (“right to be forgotten”) in cases where the legal reasons according to Article 17 of the GDPR apply (these reasons apply if the purpose of use no longer exists or you withdrew your consent and erasure is not prevented by any contractual or legal reasons). To exercise the above right, please refer to the below contact address.
Right to restriction of processing You have the right to restrict the processing if the relevant requirements for this are fulfilled and if this complies with Article 18 of the GDPR. According to this, the restriction of processing may be necessary in particular if data processing is unlawful and if the data subject refuses to erase their the personal data and instead requests that the use of their personal data be restricted or if the data subject lodged an objection to the processing in accordance with Article 21(1) of the GDPR, unless it is obvious that the controller’s legitimate reasons prevail over those of the data subject. To exercise the above right, please refer to the below contact address.
Right to data portability You have a right to data portability according to Article 20 of the GDPR. To exercise the above right, please refer to the below contact address.
Right to object You have the right, on grounds relating to your particular situation and at all times, to object to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the GDPR. We will no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims. To exercise the above right, please refer to the below contact address.
We take technical and organisational security measures to protect your personal data against accidental or unlawful erasure, alteration or loss and against unauthorised disclosure or access. All our employees and all third parties involved in data processing are obliged to comply with the relevant standards, including the German Federal Data Protection Act and the German Telemedia Act, and they must confidentially handle all personal data.
Links to other websites
Questions and queries
HSM® and the HSM Data Protection Officer will respond to any reasonable requests for access to, and, where applicable, correction, addition or erasure of personal data. If you have any questions or remarks regarding the processing of your personal data, please do not hesitate to directly contact our company data protection officer who is also available in the case of requests for information, proposals or complaints.
Data protection officer
HSM Stahl und Metallhandel GmbH Breitenloher Weg 12 91166 Georgensgmünd email@example.com