Data Protection Declaration

All personal data will be handled in a confidential manner. Our data protection policy complies with the German Federal Data Protection Act (BDSG)and the General Data Protection Regulation (GDPR). Please find below information about the data protection details in our company.

CONTROLLER ACCORDING TO GDPR AND BDSG

HiScience GmbH
Köhlerwaldstr. 60, 58300 Wetter

Phone: +49 (0) 2335–1702440
Fax: +49 (0) 2335–1702449
E-Mail: info@hiscience.de

Contact person of the Controller is
Mr. Benjamin Böcker
E-Mail: benjamin.boecker@hiscience.de

1. THE REASONS FOR DATA RECORDING

We record and process your data with the aim of setting up our website to give you the best possible service by facilitating easy access to our services.

2. WHICH DATA IS RECORDED, PROCESSED OR USED?

2.1 VISITING OUR WEBSITE

If you access our website, our servers automatically record the following information of a general nature, in particular for the purpose of maintaining functions and system security:

• our visited website
• the date and time of the visit
• amount of data sent in bytes
• source/reference from which you are visiting us
• type of browser used
• the operating system used
• IP address

This data is not merged with other data sources. The data’s will be deleted after 7 days. The legal basis for the processing of your personal data is Art. 6 Para. 1 lit. f) DSGVO.

2.2 CONTACT FORM

If you contact us via the contact form, you must enter your e-mail address and your message to us. These fields are marked “optional”. All other information is optional. The data will be stored for the purpose of processing your request. We do not pass on this data without your consent. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain the data. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. b) DSGVO if it concerns your contacting us in the context of a contract conclusion. Furthermore, it is our legitimate interest to answer your enquiries, so that in this case Art. 6 para. 1 lit. f) DSGVO is the legal basis.

3. ERASURE

Personal data will be erased or blocked as soon as it no longer needs to be saved. Data will also be blocked or deleted in those cases in which a storage period specified by a named standard expires, unless there is a need to continue to save the data for the purposes of entering into a contract or fulfilling a contract or if you have granted your consent thereto.

4. COOKIES

Cookies are used to make it easier to use our websites and to offer website users what they want. This will, for example, save your details for the selection of a language or the contents of the shopping basket. Cookies are text files placed on your hard disc to identify your browser should you return to the website.

You can prevent cookies from being saved on your hard disc by adjusting the setting on your browser appropriately. Cookies already used may be deleted at any time. Your browser instructions will tell you how to delete cookies or prevent them from being saved. If you do not accept cookies, this may result in the use of our website being sub-optimal.

5. USE OF GOOGLE ANALYTICS FOR WEB ANALYSIS

This website uses Google Analytics, a web analytics service provided by Google, Inc. (www.google.de). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The data will be deleted after 38 months.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

The terms of use and information on data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

We only use Google Analytics with your prior consent. The legal basis is therefore Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time with future effect by sending an email to the above contact address or by deleting the cookies in your browser.

We would like to point out that with the discontinuation of the EU-US Privacy Shield, there is currently no adequacy decision for the United States within the meaning of Article 45 (3) DSGVO of the Commission for a sufficient level of data protection. Therefore, we conclude standard data protection clauses within the meaning of Article 46 (2) (c) of the GDPR with Google to protect your data.

6. FACEBOOK FANPAGE/ INSTAGRAM PAGE

We maintain social media profiles on the social networks of Facebook and Instagram (so-called “fan pages”). We regularly publish and share content, offers and product recommendations on our fanpages. With every interaction on our fanpages or other Facebook or Instagram websites, the operators of the social networks record your usage behaviour with cookies and similar technologies. Fan page operators may view general statistics on the interests and demographic characteristics (such as age, gender, region) of the fan page audience. If you use social networks, the type, scope and purposes of the processing of data in social networks are primarily determined by the operators of the social networks. Furthermore, we offer you the possibility to share content provided by us for further use in accordance with our licence conditions (e.g. photo and advertising content) on your own fan page. You yourself are then the “responsible party” for this content within the meaning of Art. 4 No. 7 DSGVO.

The social networks Facebook and Instagram are each offered by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

Insofar as you communicate directly with us via our fan pages or share personal content with us, we are responsible for processing your data. An exception applies to the data processing described below for usage analysis (page insights); for this we are jointly responsible with Facebook.

Processing of your data by Facebook

Please note that Facebook also processes your data when you use our fan pages for its own purposes, which are not illustrated in this data protection declaration. We have no influence on these data processing procedures at Facebook. In this respect, we refer you to the data protection information of the respective social networks:

• Data protection information from Facebook
• Data protection information from Instagram

When you visit our fan pages, we generally record all messages, content and other information that you communicate to us directly there, for example when you post something on a fan page or send us a private message. If you have an account with the respective social network, we can of course also see your public information, such as your user name, information in your public profile and content that you share with a public audience.

Usage analysis (page insights)

Every time you interact with Fanpages, Facebook uses cookies and similar technologies to record the usage behaviour of Fanpage visits. On this basis, the fan page operators receive so-called “page insights”. Page insights only contain statistical, depersonalised (anonymised) information on visitors to the fan page, which can therefore not be assigned to any specific person. We have no access to the personal data used by Facebook to create Page Insights (“Page Insights data”). The selection and processing of Page Insights data is carried out exclusively by Facebook. With the help of Page Insights, we obtain insights into how our fan pages are used, what interests the visitors to our fan pages have and which topics and content are particularly popular. This enables us to optimise our fan page activities, for example by better responding to the interests and usage habits of our audience when planning and selecting our content.

We and Facebook are jointly responsible for processing your data to provide Page Insights. To this end, we and Facebook have entered into an agreement specifying which company fulfils which data protection obligations under the GDPR in relation to the processing of Page Insights data.

You can view the joint responsibility agreement with Facebook here: https://www.facebook.com/legal/­terms/page_controller­_addendum

Facebook has summarised the main contents of this agreement (including a list of Page Insights data) for you here: https://www.facebook.com/legal/­terms/information_about­_page_insights_data

Legal basis:

Insofar as you have consented to Facebook in relation to the creation of page insights described above, the legal basis is Article 6(1)(a) DSGVO (consent). Otherwise, the legal basis is Article 6(1)(f) DSGVO, whereby our legitimate interests lie in the above-mentioned purposes.

Your data protection rights described in section 4 “Data subject rights” also exist in relation to the processing of your data in connection with our fan pages.

For the processing of your Page Insights data together with Facebook, we have agreed with Facebook that Facebook is primarily responsible for providing you with information about the processing of your Page Insights data and for enabling you to exercise your data protection rights under the GDPR (e.g. rights to object). You can find more information about your data protection rights in relation to Page Insights and how to exercise them directly with Facebook here: https://www.facebook.com/legal/­terms/information_about­_page_insights_data

You can also send your request to us; we will then forward your request to Facebook as agreed.

We would like to point out that with the discontinuation of the EU-US Privacy Shield, there is currently no adequacy decision for the United States within the meaning of Article 45 (3) of the GDPR of the Commission for a sufficient level of data protection. Therefore, we conclude standard data protection clauses within the meaning of Article 46 (2) (c) of the GDPR with Facebook to protect your data.

7. THE RIGHTS OF PERSONS AFFECTED

If your personal data is processed, you will be the person affected within the meaning of GDPR and you will be entitled to the following rights against us:

7.1 RIGHT OF ACCESS

You may request confirmation from us as to whether your personal data will be processed by us.
If we have processed your information, you will be entitled to the following information:

• The purposes for which your personal data is to be processed;
• The categories of personal data which are to be processed;
• The recipient or the categories of recipients to whom your personal data has been disclosed or will be disclosed;
• The intended length of time over which your personal data will be stored or, if it is not possible to give a definitive response, the criteria upon which the length of time of storage will be decided;
• The existence of a right to correct or delete your personal information, of a right to restrict processing by the person responsible or the right to object to processing;
• The existence of a right to lodge a complaint with a supervisory authority;
• All available information about the source of the data if the personal data is not collected from the person to which it refers;
• The existence of an automatic decision making procedure including profiling in accordance with Article 22 Section 1 and 4 GDPR and – in these cases at least – meaningful information about the reasons involved as well as the extent of coverage and the impact sought with such processing for the person affected.

7.2 RIGHT TO RECTIFICATION

You will be entitled to have your personal data rectified and/or completed, provided that the processed personal data is incorrect or incomplete. Rectifications must be carried out straight away.

7.3 RIGHT TO RESTRICTION OF PROCESSING

Subject to the following preconditions you may request that the processing of your personal data is restricted:

• If you contest the accuracy of your personal data for a period of time, enabling the person responsible to check the accuracy of your personal data;
• The processing is unlawful and you refuse to have your personal data deleted and instead of which request that the use of your personal data is restricted;
• The personal data is no longer required for the purposes for which it is being processed, but is required to assert claims, exercise or mount a defence against legal claims, or
• If you have objected processing pursuant to Article 21 Section 1 GDPR pending the verification whether the legitimate grounds of the controller override yours.

If the processing of your personal data has been restricted, this data may – apart from being saved – only be processed with your consent or to assert or exercise mount a defence against legal claims or to protect rights of another natural person or legal entity or for reasons of an important public interest of the European Union or a member state.

If the processing has been restricted in accordance with the above preconditions, you will be informed by the person responsible prior to the restriction.

7.4 RIGHT TO ERASURE

• ERASURE OBLIGATION
  You may request that your personal data is erased undue delay and we shall have the obligation to erase your personal data without undue delay where one of the following grounds applies:

• Your personal data is no longer necessary to the purposes for which they were collected or otherwise processed;

• You withdraw your consent on which the processing is based according to Article 6 Section 1 a) or Article 9 Section 2 a) GDPR and where there is no other legal ground for the processing;

• You object to the processing pursuant to Article 21 Section 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 Section 2 GDPR;

• Your personal data was processed unlawfully;

• Your personal data has to be erased for compliance with a legal obligation in the European Union or a Member State law to which we are subject;

• Your personal data was collected in relation to the offer of information society services referred to in Article 8 Section 1 GDPR.

• INFORMATION TO THIRD PARTIES
  If the person responsible has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.

• EXCEPTIONS
  You will not be entitled to have your personal data deleted if processing is necessary:

• To exercise your right to freedom of expression and information;

• For compliance with a legal obligation to which requires processing by the European Union or a member state which we are subject to or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

• For reasons of public interest in the area of public health in accordance with Article 9 Section 2 h) and i) as well as Article 9 Section 3 GDPR;

• For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Section 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

• For the establishment, exercise or defence of legal claims.

7.5 RIGHT TO NOTIFICATION

If you have asserted your right to have the processing of your personal data corrected, deleted or restricted, we shall be obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of data or restriction of processing unless it turns out to be impossible to do so or entails disproportionate expenditure. You shall be entitled to be informed of these recipients.

7.6 RIGHT TO DATA PORTABILITY

You are entitled to receive your personal data you have provided us with in a structured, common format which can be read by computer. Besides which, you will be entitled to transfer this data to another responsible person without hindrance, provided that

• Processing is based upon consent in accordance with Article 6 Section 1 a) GDPR or Article 9 Section 2 a) GDPR or on a contract in accordance with Article 6 Section 1 b) GDPR and
• Processing takes place with the assistance of automated systems.

In exercising this right you will, moreover, be entitled to arrange for your personal data to be sent directly to another person responsible, provided that this is technically feasible. The freedoms and rights of other persons must not be impaired as a result thereof.

The right of data transferability shall not apply for processing personal data which is required for discharging a duty which is in the public interest or for exercising of public authority transferred to the person responsible.

7.7 RIGHT TO OBJECT

You shall have the right to object on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on points (e) or (f) of Article 6 (1) GDPR, including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You will have the option of exercising your right of objection in connection with the use of the services of the information company - regardless of the directive 2002/58/EC – by means of automated systems in which technical specifications are used.

7.8 RIGHT TO REVOKE THE DATA PROTECTION LAW DECLARATION OF CONSENT

You will be entitled to revoke your declaration of consent provided for by German data protection law at any time. The lawful nature of the processing carried out up until revocation on the basis of consent granted shall not be affected by the revocation of consent.

7.9 RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is in breach of the GDPR.

The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

As of: 11.2021