Data protection information according to the DSGVO

for https://www.hochland-professional.com 

Hochland Deutschland GmbH takes the protection of your data seriously and we want you to feel safe and comfortable when visiting our website. The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes. We process personal data collected when you visit our website in accordance with the requirements of the General Data Protection Regulation (DSGVO) and other relevant data protection regulations. Our data protection policy is also based on the Code of Conduct applicable to the Hochland Group. This page may contain links to pages of other providers to which this data protection declaration does not extend. Hochland Deutschland GmbH accepts no responsibility for compliance with data protection regulations or the content of these other websites.

In the following, you will find the information according to Art. 13, 14 DSGVO, § 25 TTDSG for your visit to this website. The table of contents helps you to get a better overview of the individual points and to find the answers relevant to you more quickly.

1. Name and address of the responsible person

The responsible party within the meaning of the DSGVO and other data protection regulations is:

Hochland Deutschland GmbH
Kemptener Str. 17
88178 Heimenkirch
Phone +49 8381-502-0

Further information can be found in the imprint.

2. Contact details of the data protection officer 

You can reach our data protection officer as follows:

By mail: Hochland Deutschland GmbH (see above for address), Data Protection Officer

or by e-mail: datenschutz@hochland.com.

3. General information on data processing 

3.1 Scope of the processing of personal data

As a matter of principle, we process personal data of our users only insofar as this is necessary for the provision of a functional website as well as for the presentation of our content and services or insofar as we are permitted to do so on the basis of other legal grounds.

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) p. 1 lit. a DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) p. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) p. 1 lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) p. 1 lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) p. 1 lit. f DSGVO serves as the legal basis for the processing.

3.3 Data deletion and storage duration

The personal data of the data subject shall be deleted as soon as the purpose of the storage ceases to apply. Storage may take place in addition if this has been provided for by the European or national legislator in Union regulations, national laws or other regulations to which the controller is subject. The data is deleted when the storage period prescribed by the aforementioned standards expires.

4. Provision of the website and creation of log files

4.1 Description and scope of data processing

As with any website, information is automatically transmitted to us by your browser when you visit our site. This data is temporarily recorded in our log files. A storage of this data together with other personal data of you does not take place.

The following data is collected:

• Information about the type of browser and the version used
• Your operating system
• Your internet service provider
• Your IP address
• Date and time of access

4.2 Legal basis for data processing

The collection and processing of this data is absolutely necessary information within the meaning of Section 25 (2) No. 2 TTDSG. The legal basis for the data protection processing for this is Art. 6 para. 1 p. 1 lit. f DSGVO.

4.3 Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website and to ward off attacks. In addition, we use the data to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f DSGVO.

4.4 Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 21 days at the latest. 

4.5 Possibility of objection

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. If you wish to object to this data processing, it will not be possible to use the website and we ask you to leave our website.

5. Contact form and e-mail contact

5.1 Description and scope of data processing

On our website, the contact form “Contact Form 7” is installed locally, which can be used for electronic contact. At the same time, the spam protection “Honeypot” is also used locally. If a user takes the opportunity to contact us via the form, the data entered in the input mask is transmitted to us and stored. The following data is processed here:

• Your IP address
• Your name
• your e-mail address
• other data entered by you within the contact request

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail will be processed as well as the e-mail address itself. 
In this context, your data will be used exclusively for processing the conversation. As a rule, the data will not be passed on to third parties. The data will only be forwarded to another Hochland company if your details indicate that your contact request should concern another Hochland company.

5.2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. f DSGVO. If the contact aims at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.

5.3 Purpose of the data processing

The processing of personal data from the input mask of the contact form or the e-mail serves us solely to process the contact. This is also the necessary legitimate interest in the processing of the data according to Art. 6 para. 1 p. 1 lit. f DSGVO.

5.4 Duration of storage 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after the request has been answered, unless there are statutory periods for storage.

5.5 Possibility of objection 

You have the option to object to the storage of your personal data at any time with effect for the future. This is possible by mail (address see above) or by e-mail via mail@hochland-professional.com. In such a case, your data will be deleted and the conversation cannot be continued. If there are statutory periods for storage, these remain unaffected.

6. Usercentrics Consent Management Platform

6.1 Description and scope of data processing

We use the Usercentrics Consent Management Tool of Usercentrics GmbH (Sendlinger Straße 7, 80331 Munich, Germany) on our site. This is a service for managing your voluntary consents that you can give as part of our deployed services, for which we legally require your consent to use. When you access our website for the first time and every time there is a change to the data processing that requires your consent, you will be shown our Consent Banner. In the Consent Banner, you have the opportunity to voluntarily consent that we may set cookies – beyond the strictly necessary technologies – and subsequently process your data to further develop and improve our website. Our Cookie Consent Tool also provides you with information on exactly which cookies we use.

When we use Usercentrics, we process the following data from you:

• Opt-in and opt-out data
• Consent ID
• Time of consent
• Consent type
• Referrer URL
• User settings
• Template version
• Banner language

6.2 Legal basis for data processing

The legal basis for the processing of your personal data is the fulfillment of our legal obligation regarding the obtaining of consent and its verifiability according to Art. 6 para. 1 p. 1 lit. c DSGVO.

6.3 Purpose of data processing

The purpose of using Usercentrics is to manage your consents and to prove compliance with legal requirements on our part.

6.4 Duration of storage

The Consent Data will be stored for three years and deleted immediately thereafter.

7. etracker – Cookie version

7.1 Description and scope of data processing

We use the cookie analysis variant of etracker (etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany) on our website for statistical coverage analysis of our website. If you give your consent to this, a cookie will be set on your computer. Cookies are small text files that are stored by the Internet browser on the user’s terminal device. The following data will then be processed from you:

• the shortened IP address
• information about the end device, operating system and browser used
• geo-information up to a maximum of city level
• the URL called up with the associated page title and optional information on the page content
• the website from which the accessed individual page was reached (referrer site
• the subsequent pages that were called up from the called-up website within a single website
• the length of time spent on the website
• other interactions (clicks) on the website, such as search terms entered or videos viewed
• frequency of visits
• random sampling of the scroll depth

A consolidation with other data or a transfer to third parties does not take place through the use of etracker.

7.2 Legal basis for data processing

The legal basis for the processing of your personal data is your voluntary consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO, § 25 (1) p. 1 TTDSG.

7.3 Purpose of data processing

The use of etracker allows us to get to know the surfing behavior of our users better in order to continuously improve our website and its user-friendliness.

7.4 Duration of storage

The IP address is anonymized directly. The cookies set are deleted after a maximum storage period of 13 months. The statistics resulting from the analyses are merely aggregated reports that cannot be assigned to any person.

7.5 Possibility of revocation

You can revoke your consent at any time with effect for the future. Your revocation will not have any adverse consequences for you. To do so, please go to the Cookie Consent Tool and move the slider at the “etracker” paragraph to the left. We will then no longer use the cookie analysis variant with you.

8. etracker – Cookieless version

8.1 Description and scope of data processing

If you do not wish to give your consent for the use of cookies, we use the cookieless analysis variant of etracker. The software uses website data from web servers, which is transferred by default with each individual page view. No information is read from the memory of the user’s terminal device and no information is stored on this terminal device. The pseudonymous information makes it possible to link individual page views to related sessions. The linking with a time stamp prevents page views beyond a 24-hour time window from being linked.

The following data is processed when a page is called up:

• the shortened IP address
• Information on the end device, operating system and browser used
• geographic information up to city level
• the URL called up with the associated page title and optional information on the page content
• the website from which the accessed individual page was reached (referrer site)
• the subsequent pages that were called up from the called-up website within a single website
• the length of time spent on the website
• further interactions (clicks) on the website, such as search terms entered or videos viewed

The data is not used in any other way, e.g. combined with other data or passed on to third parties.

8.2 Legal basis for data processing

The legal basis for the processing of your personal data is Art. 6 para. 1 p. 1 lit. f DSGVO.

8.3 Purpose of the data processing

The use of the cookie-free analysis variant of etracker allows us to get to know the surfing behavior of our users better in order to continuously improve our website and its user-friendliness. These purposes are also our legitimate interest in processing the data according to Art. 6 para. 1 p. 1 lit. f DSGVO. The anonymization of the IP address takes into account the interest of website visitors in the protection of their personal data.

8.4 Duration of storage

The IP address is anonymized directly. The pseudonymized recognition of the user by an assigned hash value is deleted after a maximum of 24 hours. The resulting analyses are only used further in aggregated form.

8.5 Possibility of objection

You can object to the collection and storage of data at any time with effect for the future. Your objection will not have any adverse consequences for you. To do so please click the “Decline” option in the CookieBanner.

9. Place of data processing / no transfer to third countries 

The data is processed exclusively in a member state of the European Union. The data is not passed on to recipients in third countries.

10. Automated decision making / profiling

Automated decision making including profiling according to Art. 22 DSGVO does not take place within the scope of your visit to this website. 

11. Recipients or categories of recipients 

For the hosting of our website and for technical support regarding the website we use the agency LightsOn Gmbh (Karl-Drais-Straße 4c, 86159 Augsburg). There is a contract for order processing here (Art. 28 para. 3, 4 DSGVO).

With regard to contacting us via the form or by e-mail, it is possible that your data will be forwarded to other Hochland companies if it should become apparent from your contact that your inquiry is intended for another company.

In addition, your personal data may be forwarded to law enforcement authorities if it is necessary to clarify illegal use of our services or for legal prosecution. However, this only happens if there are concrete indications of unlawful or abusive behavior. Disclosure may also take place for law enforcement purposes. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines and the tax authorities.

12. Your rights as data subject

12.1 Right to information

You have the right to receive from us, upon request, information about your personal data processed by us within the scope of Art. 15 DSGVO. For this purpose, you can submit a request by mail or e-mail to the addresses given above. 

12.2 Right to correct incorrect data

You have the right to demand that we correct your personal data without delay if it is incorrect (Art. 16 DSGVO). For this purpose, please contact us at the contact addresses given above. 

12.3 Right to deletion

You have the right to immediate deletion of the personal data concerning you if the legal grounds pursuant to Art. 17 DSGVO exist. These are, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or you have withdrawn your consent and if there is no other legal basis for the processing. To exercise your above right, please contact us at the contact addresses provided above.

12.4 Right to restriction of processing

You have the right to restrict processing if the conditions are met and in accordance with Art. 18 DSGVO. Accordingly, the restriction of processing may be required in particular if the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data. To exercise your above right, please contact us at the contact addresses provided above. 

12.5 Right to data portability

You have the right to data portability according to Art. 20 DSGVO. Here, you have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out with the help of automated processes. To exercise your above right, please contact us at the above contact addresses.

12.6 Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out, inter alia, on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO, in accordance with Article 21 DSGVO. The objection may also be lodged against profiling. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. To exercise your above right, please contact us at the contact addresses provided above.

12.7 Right to complain to a supervisory authority 

If you believe that the processing of personal data concerning you by us is unlawful, you have the right to complain to the supervisory authority responsible for us, which you can contact as follows:

Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, phone: +49 (0) 981 180093-0, e-mail: poststelle@lda.bayern.de.

13. Modification of the privacy information

We revise this data protection information when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website.

Status 09/2022

Data protection information in accordance with the DSGVO for our LinkedIn presence

We (Hochland Deutschland GmbH, Kemptener Str. 17, 88178 Heimenkirch; hereinafter “Hochland”) operate a company profile on the online platform of the social network LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) where personal data is processed. We would like to explain below what data we process from you and how as the operator of our LinkedIn presence.

1. Joint responsibility

Together with LinkedIn, we are jointly responsible for data processing in connection with our company profile. When you visit our company profile, personal data is thus processed by LinkedIn and us as the responsible party. The use of our company profile is based on LinkedIn’s terms of use, in particular LinkedIn’s “Page Insights Joint Controller Addendum”. In addition, it is possible that LinkedIn may also process your data generated in this context for its own purposes, which are not depicted in this data protection declaration. For more information, please see LinkedIn’s privacy policy: www.linkedin.com/legal/privacy-policy.

2. Contact details of the data protection officer

You can reach our data protection officer either by mail: Hochland Deutschland GmbH (address see above), Data Protection Officer or by e-mail: datenschutz@hochland.com.

3. Page insights

3.1 Description and scope of data processing

Hochland receives information on visitors to the company’s website in connection with the “Page Insights” service from LinkedIn. These are aggregated statistics regarding the use and utilization of the Page. We are provided with the following information, which cannot be assigned to any individual person:

• Followers: Number of people who follow us, including growth and development of followers over a defined time frame.
• Demographic data regarding visitors to our site: field of activity, location, career level, industry, visitor’s company size.
• Reach posts: Number of people viewing a specific post as well as the number and type (sharing, commenting) of interactions related to a post. From this, it is possible to deduce, for example, which content is well/better/worse received by the community.

3.2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. f DSGVO.

3.3 Purpose of the data processing

The purpose of data processing is to be able to evaluate the behavior of our target group or users in the context of interaction with our site. This is also the necessary legitimate interest in processing the data.

3.4 Possibility of objection

The provision of your data for the aforementioned purpose is neither contractually nor legally required on your part. You can control the use of your personal data in the account settings of LinkedIn. More information can be found here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4. Lead Gen Forms

4.1 Description and scope of data processing

We also use so-called “Lead Gen Forms” to inform you, for example, about products or events that may be of interest to you. If you contact us via LinkedIn forms for lead generation, personal data will be processed by LinkedIn and transmitted to us. The following data from you may be processed in this context:

• Contact data: First and last name, (business) email address, (business) phone number, LinkedIn profile URL, city, state/province, country/region, postal code.
• Qualification Data: Education, degrees, college/vocational school, start/graduation date.
• Employer details: company name, company size, industry sector
• Job details: job title, areas of activity, career level.
  We then use this data to contact you subsequently (usually within one month at the latest) and send you targeted information about products or events.

4.2 Legal basis for data processing

The legal basis for the processing of your personal data is your voluntary consent according to Art. 6 para. 1 p. 1 lit. a DSGVO.

4.3 Purpose of data processing

The purpose of data processing is lead generation within Linkedin and the possibility for us to get in touch with new prospects.

4.4 Duration of storage

Your data will be deleted at the latest 14 months after the last contact by us, unless there are legal retention periods. LinkedIn itself automatically deletes the lead data after 90 days. You can find more information about this under the following link: LinkedIn Marketing Solutions and the General Data Protection Regulation (DSGVO).

4.5 Option to revoke

You can revoke your consent at any time with effect for the future. Your revocation will not have any adverse consequences for you. To do so, please use the contact address given above or send us a message to the following e-mail address: mail@hochland-professional.com. We will then no longer process your data for the aforementioned purposes.

5. Direct contact by you

5.1 Description and scope of data processing

We receive personal data via LinkedIn if you actively communicate it to us, e.g. by contacting us via a personal message or comment on LinkedIn. In this case, we may also process data that you have published as a LinkedIn member. The following data from you may be processed in this context:

• Contact details: First and last name, (business) email address, (business) phone number, LinkedIn profile URL, city, state/province, country/region, postal code.
• Qualification Data: Education, degrees, college/vocational school, start/graduation date.
• Employer information: company name, company size, industry sector
• Occupation data: job title, areas of activity, career level
  In this context, your data will be used exclusively for processing the conversation. As a rule, the data will not be passed on to third parties. The data will only be forwarded to another Hochland company if your details indicate that your contact request should concern another Hochland company.

5.2 Legal basis for data processing

The legal basis for the processing of data is Art. 6 para. 1 p. 1 lit. f DSGVO. If the purpose of contacting you is to conclude a contract, the legal basis for processing is Art. 6 (1) p. 1 lit. b DSGVO.

5.3 Purpose of data processing

The purpose of the data processing of our LinkedIn presence is to disseminate and continuously improve information about our company, our products and services, combined with the possibility for users to interact with us in a targeted manner. The processing of your personal data serves us solely to process the contact. This is also the necessary legitimate interest in processing the data.

5.4 Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case directly after answering the request, unless there are legal periods for retention. If you have left a public comment, it will remain until you delete it yourself.

5.5 Possibility to object

You have the option to object to the processing of your personal data at any time with effect for the future. This is possible by mail (address see above) or by e-mail via mail@hochland-professional.com. In such a case, your data will be deleted and the conversation cannot be continued. If there are statutory periods for storage, these remain unaffected.

6. Place of data processing

It is possible that data collected about you will be transferred to third countries, in particular the USA. There is no adequate level of data protection here from the point of view of the European Commission, i.e. your data is not as protected there from access by authorities as it is within the EU/EEA. However, we have no influence on these data processing operations and refer in this respect to the data protection information of LinkedIn. LinkedIn has undertaken to comply with the data protection standards of the EU. According to LinkedIn, a data transfer to systems outside the EU only takes place if the requirements of Art. 44 et seq. DSGVO are complied with. You can find out more about this at: www.linkedin.com/help/linkedin/answer/62533. A data transfer to third countries by Hochland Deutschland GmbH does not take place in the context of the operation of our company profile.

7. Recipients or categories of recipients

The data is hosted on the servers of our service provider, Hochland SE (Kemptener Str.17, 88178 Heimenkirch), We have concluded a contract for commissioned processing (Art. 28 para. 3, 4 DSGVO) with Hochland SE.
In addition, your personal data may be forwarded to law enforcement authorities if it is necessary to clarify an illegal use of our services or for legal prosecution. However, this only happens if there are concrete indications of unlawful or abusive behavior. Disclosure may also take place for law enforcement purposes. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines and the tax authorities.

8. Your rights as a data subject

8.1 Right to information

You have the right to receive from us, upon request, information about your personal data processed by us within the scope of Art. 15 DSGVO. For this purpose, you can submit a request by mail or e-mail to the addresses given above.

8.2 Right to rectification of incorrect data

You have the right to request that we correct the personal data concerning you without delay if it should be incorrect (Art. 16 DSGVO). To do so, please contact us at the contact addresses provided above.

8.3 Right to deletion

You have the right to immediate deletion of the personal data concerning you if the legal grounds pursuant to Art. 17 DSGVO exist. These are, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or you have withdrawn your consent and if there is no other legal basis for the processing. To exercise your above right, please contact us at the contact addresses provided above.

8.4 Right to restriction of processing

You have the right to restriction of processing if the conditions are met and in accordance with Article 18 of the GDPR. According to this, the restriction of processing may be required in particular if the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data. To exercise your above right, please contact us at the contact addresses provided above.

8.5 Right to data portability

You have the right to data portability according to Art. 20 DSGVO. Here, you have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out with the help of automated processes. To exercise your above right, please contact us at the above contact addresses.

8.6 Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out, inter alia, on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO, in accordance with Article 21 DSGVO. The objection may also be lodged against profiling. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. To exercise your above right, please contact us at the contact addresses provided above.
8.7 Right to lodge a complaint with a supervisory authority.
If you believe that the processing of personal data concerning you by us is unlawful, you have the right to complain to the supervisory authority responsible for us, which you can contact as follows:
Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, phone: +49 (0) 981 180093-0, e-mail: poststelle@lda.bayern.de

9. Change of the data protection information

We revise this data protection information when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website.

Status 09/2022