Privacy statement

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data if you visit this website. Personal data is all data through which you can be personally identified. Please refer to the privacy statement below this text for detailed information on the topic of data protection.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is realised by the website operator. The operator’s contact information can be found in the “Information on the responsible entity” section in this privacy statement.

How do we collect your data?

Your data is, on the one hand, collected when you provide us with this information. This may, for example, involve data that you have entered on a contact form.

Other data is recorded automatically by our IT systems or following your consent on visiting the website. This primarily involves technical data (e.g. Internet browser, operating system or the time when the website was viewed). This data is recorded automatically as soon as you access this website.

How do we use your data?

Part of this data is collected to ensure that provision of the website is faultless. Other data may be used to analyse your user behaviour.

What rights do you have concerning your data?

You have the right at all times to obtain information free of charge on the origin, recipients and purpose of your stored personal data. You are also entitled to demand the correction or erasure of this data. If you have granted permission for the processing of data, you are entitled to revoke this permission at any time with effect for the future. You are, under certain circumstances, also entitled to demand the restriction of processing of your personal data. Furthermore, you also have the right to appeal to the responsible supervisory authority.

You may contact us at any time in this respect or if you have further questions regarding the issue of data protection.

Analytical tools and tools from third-party providers

Your surfing behaviour can be statistically evaluated when you visit this website. This is primarily achieved with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy statement.

2. Hosting and content delivery networks (CDN)

External hosting

This website is hosted by an external service provider (host). Personal data recorded on this website is stored on the host’s servers. Primarily, this may involve IP addresses, contact inquiries, meta and communication data, contractual data, contact information, names, website accessing and other data generated through a website.

The host intervenes for the purpose of contract fulfilment with regard to potential and existing customers (Art. 6 (1) b GDPR) and in the interest of safe, rapid and efficient provision of our online offering through a professional provider (Art. 6 (1) f GDPR).

Our host shall only process your data insofar as this is necessary for the host to fulfil its service obligations and to follow our instructions regarding this data.

We employ the following host:

STRATO AG
Pascalstraße 10
10587 Berlin

Conclusion of a contract on order processing

We have concluded a contract on order processing with our host in order to ensure processing in compliance with data protection.

3. General and obligatory information

Data protection

The operator of this website takes the protection of your personal data very seriously. We handle your personal data in confidence and in compliance with statutory data protection regulations and this privacy statement.

Various personal data is collected when you use this website. Personal data is data through which you can be personally identified. This privacy statement explains which data is collected and what it is used for. It also explains how and for what purpose this occurs.

We wish to point out that data transmission on the Internet (e.g. during communication per email) may involve security breaches. Complete protection of data against accessing by third parties is not possible.

Information on the responsible entity

The entity responsible for data processing on this website is:

Heppler GmbH CNC-Technik
Wilhelm-Maybach-Weg 5-7
D-78549 Spaichingen

Telefon: +49 7424 / 94 83 0
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

The responsible entity is the natural or legal person who, whether alone or acting in concert with others, determines the purposes and means for processing personal data (e.g. names, email addresses or similar).

Storage duration

Insofar as no special storage duration is mentioned in this privacy statement, your personal data remains in our possession until the purpose for data processing lapses. If you assert a legitimate request for erasure or revoke a data processing consent, your data will be erased, provided we do not have any other legally permissible reasons for storing your personal data (e.g. fiscal or commercial retention periods). Erasure occurs in the latter case after the discontinuance of these reasons.

Data protection officer prescribed by law

We have appointed a data protection officer for our company.

Heppler GmbH CNC-Technik
c/o Data Protection Officer
Mr Peter Wagner
Wilhelm-Maybach-Weg 5-7
D-78549 Spaichingen

Telefon: +49 7424 / 94 83 0
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Revocation of your data processing consent

Many data processing operations are only possible with your express consent. You can revoke an assigned consent at any time. The legality of data processing up to the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

Where data processing occurs on the basis of Art. 6 (1) E or F GDPR, you are entitled to object at any time to processing of your personal data for reasons arising from your particular situation. This also applies in the event of profiling based on these provisions. Please refer to this privacy statement for the respective legal basis on which processing is based. Should you object, we will desist from processing your particular personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and liberties, or processing is necessary for the assertion, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you are entitled to object at any time to the processing of personal data relating to you for the purpose of such marketing. This also applies to profiling, provided it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

Right to appeal to the responsible supervisory authority

In the event of breaches of the GDPR, the party concerned has a right to appeal to a supervisory authority, particularly in the member state of the party’s habitual residence, place of work or the place of the alleged infringement. The right of appeal exists without prejudice to any administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or to fulfil a contract delivered to you or a third party in a commonly used and machine-readable format. Insofar as you demand the direct transmission of the data to another responsible party, this shall only occur in as far as it is technically feasible.

SSL and TLS encryption

This website uses SSL and TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries that you send to us as the website operator. A coded transmission can be identified by “http://” changing to “https://” in the browser address line and the lock symbol in your browser line.

Data which you transmit to us cannot be read by third parties if SSL or TSL encryption is activated.

Information, deletion and correction

In the context of applicable statutory provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of data processing and, if necessary, a right to the correction or erasure of this data. You may contact us at any time in this respect or if you have further questions regarding the subject of personal data.

Right to restriction of processing

You have the right to demand the restriction of processing of your personal data. You can contact us at any time in this respect. The right to restriction of processing exists in the following cases:

If you contest the accuracy of your personal data stored by us. We generally need time to examine this. You have the right to demand restriction of the processing of your personal data for the duration of this examination.
If processing of your personal data was/is unlawful, you may demand the restriction of data processing instead of erasure
If we no longer require your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to demand the restriction of processing of your personal data instead of erasure.
If you have registered an objection pursuant to Article 21 (1) GDPR, it must be determined whether your interests outweigh our interests or vice versa. Until it is determined which interests have priority, you have the right to demand restriction of the processing of your personal data.

Where you have restricted processing of your personal data, this data may, with the exception of its storage, only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to promotional emails

Use of contact details published in the context of the obligation to provide a legal notice for the transmission of advertisements and information material that has not been expressly requested is hereby objected to. The website operator expressly reserve the right to take legal action in the event of unsolicited transmission of promotional information such as spam emails.

4. Data collection on this website

Cookies

Our website uses so-called cookies. Cookies are small text files that do no damage to your device. They are either stored temporarily on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.

Cookies from third-party companies can, to an extent, also be stored on your device if you access our website (third-party cookies). These enable you or us to exploit certain services offered by the third-party company (e.g. cookies for the transaction of payment services).

Cookies have a variety of functions. Many cookies are necessary for technical purposes, as certain website functions would otherwise not function without these (e.g. the shopping cart function or the viewing of videos). Other cookies are used to evaluate user behaviour or to show advertisements.

Cookies required to establish electronic communication (essential cookies), to provide certain functions you desire (functional cookies such as for the shopping cart function) or to optimise the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6 (1) f GDPR, provided no other legal basis is specified. The website operator has a legitimate interest in the storage of cookies for technically flawless and optimised provision of its services. Insofar as consent for the storage of cookies has been requested, storage of the cookies in question occurs exclusively on the basis of this consent (Art. 6 (1) a GDPR). The consent can be revoked at any time.

You can configure your browser so that you are informed about the placing of cookies and only permit cookies in individual cases, exclude the acceptance of cookies in certain cases or in general and activate the automatic deletion of cookies when the browser is closed. The functionality of this website can be limited through the deactivation of cookies.

Insofar as cookies from third-party companies are used or for analytical purposes, we will inform you separately in the context of this privacy statement and, where appropriate, request consent.

Server log files

The provider of websites collects and stores information automatically on so-called server log files that your browser transmits automatically to us. These are:

the browser type and browser version
the operating system used
the referrer URL
the host of the accessing computer
the time of the server inquiry
the IP address

This data is not mixed with other data sources.

This data is recorded on the basis of Art. 6 (1) f GDPR. The website operator has a legitimate interest in the technically flawless depiction and optimising of its website. The server log files must be recorded for this purpose.

Contact form

If you send inquiries to us using the contact form, your details from the inquiry form and the contact details indicated there by you are stored by use for processing the inquiry and in case there are subsequent questions. We will not pass on this data to third parties without your consent.

This data is processed on the basis of Art. 6 (1) b GDPR, provided your inquiry is required for the realisation of a contract or precontractual measures. Processing in all other cases is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 (1) f GDPR) or your consent (Art. 6 (1) a GDPR) if this has been requested.

The details indicated by you on the contact form remain with us until you request their deletion by us, revoke your consent to storage or the purpose of storing this data lapses (e.g. following completion of processing of your inquiry). Mandatory statutory provisions, particularly retention periods, remain unaffected.

Inquiry by email, telephone or fax

If you contact us by email, telephone or fax, your inquiry and all personal data emanating from it (name, inquiry) are saved by us and processed for the purpose of processing. We will not pass on this data to third parties without your consent.

The details communicated by you to us in contact inquiries remain with us until you request their deletion by us, revoke your consent to storage or the purpose of storing this data lapses (e.g. following completion of processing of your inquiry). Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

5. E-commerce and payment providers

Processing of data (customer and contractual data)

We only record, process and utilise personal data in as far as it is required for the substantiation, content-related design or amendment of the legal relationship (inventory data). This is achieved on the basis of Art. 6 (1) b GDPR that permits the processing of data for the realisation of a contract or precontractual measures. We only record, process and use personal data on the use of this website (usage data) in as far as this is necessary to enable the user to use the service or invoice the user for the same.

Customer data recorded is deleted following completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

6. Own services

Handling of applicant details

We offer you the chance to apply for a position with us (e.g. by email, post or via the online application form). The following information covers the scope, purpose and use of your personal data collected in the context of the application process. We assure you that the collection, processing and use of your data complies with applicable data protection law and all other statutory provisions and that your data is handled with the strictest of confidence.

Scope and purpose of the data collected

If you send us an application, we process your personal data (e.g. contact and communication details, application documents, notes in the context of application interviews, etc.) relating to this application, insofar as this is necessary for reaching a decision on the establishment of an employment relationship. The legal basis for this is Section 26 of the new German Data Protection Act (Bundesdatenschutzgesetz (BDSG)) under German law (initiation of an employment relationship), Art. 6 (1) b GDPR (general contract initiation) and, insofar as you have granted consent, Art. 6 (1) a GDPR. This consent can be revoked at any time. Your personal data is forwarded exclusively to persons within our company involved in processing your application.

If the application is successful, the data submitted by you is recorded on the basis of Section 26 of the new German Data Protection Act (Bundesdatenschutzgesetz (BDSG)) and Art. 6 (1) b GDPR for the purpose of processing the employment relationship in our data processing systems.

Storage duration for data

If we are not in a position to offer you an employment position, you refuse an employment offer or you withdraw your application, we reserve the right to retain the data transmitted by you on the basis of our legitimate interest (Art. 6 (1) f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents destroyed. Storage is particularly necessary for verification purposes in the event of a legal dispute. Insofar as it is apparent that the date is required after expiry of the 6-month period (e.g. due to the threat of or a pending legal dispute), deletion only occurs if the purpose of continued storage lapses.

Longer storage can also occur if you have issued appropriate consent (Art. 6 (1) a GDPR), or if statutory retention obligations prevent deletion..

Inclusion in the applicant pool

If we are not in a position to offer you an employment position, it is possible to include you in our applicant pool. In the event of being included, all documents and details from the application are imported into the applicant pool to facilitate your contacting in the event of a suitable vacancy.

Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 (1) a GDPR). Issuing of consent is voluntary and in no way related to the current application process. The person concerned can revoke his or her consent at any time. In this event, the data in the applicant pool is irrevocably deleted, provided no statutory retention obligation exists.

Data from the applicant pool is irrevocably deleted two years at the latest after the issuing of consent.