HANTECH GmbH
Wikingerstraße 10
76189 Karlsruhe
Germany
Phone: +49 721 90996879
E-mail: info@hantech.eu
This website runs on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in a data centre in Germany, which we administer ourselves. With every request the web server processes technically necessary data: IP address, date and time, the page requested, the amount of data transferred, the referring page, and browser and operating system. This is required to deliver the website and keep it secure. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). The log files are deleted after 14 days at the latest. A data processing agreement is in place with Hetzner.
Fonts and images are loaded from our own server. No connection to third-party servers (such as Google Fonts) is made.
We compile anonymous visitor statistics with the open-source software Umami, which we run on our own servers in Germany. Umami sets no cookies and stores no IP addresses; it only derives a value from IP address and browser details that cannot be traced back, in order to count visits. It records the pages viewed, the referring page, browser, device type and country. The data is not passed on to third parties. The legal basis is our legitimate interest in improving our website (Art. 6(1)(f) GDPR).
With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, embedded through Google Tag Manager. Measurement runs server side: your browser does not send the data to Google directly but to our own server at gtag.hantech.eu, which we operate in Germany. There your IP address is removed before the data is passed on to Google. We record the pages viewed, time on page, referring page and campaign, device type, browser, approximate location at country or city level, and interactions such as scroll depth, clicks on external links, file downloads and the successful submission of the contact form.
Cookies are set for this (among them _ga and FPID) that recognise your browser for up to two years, so that returning visits are not counted twice. Cross-device linking to your Google account ("Google signals") is not enabled. Google also processes the data in the USA, on the basis of the EU standard contractual clauses and the certification of Google LLC under the EU-U.S. Data Privacy Framework. A data processing agreement is in place with Google. The data is deleted after 14 months.
With the same consent we use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records mouse movements, clicks, scrolling, the pages viewed and device and browser details, and creates heatmaps and pseudonymous session recordings from them, so we can see where our pages are unclear. Input in form fields is masked before transmission. Clarity sets the cookies _clck (one year) and _clsk (one day) on our domain. Microsoft also processes the data in the USA, on the basis of the certification of Microsoft Corporation under the EU-U.S. Data Privacy Framework. Microsoft keeps session recordings for 30 days, and favourited or randomly sampled recordings as well as heatmaps for up to 9 months.
The legal basis for storing the cookies is your consent under Section 25(1) TDDDG, for the subsequent processing Art. 6(1)(a) GDPR. Without your consent neither Google Analytics nor Clarity is loaded and no cookie is set. You can withdraw your consent at any time with effect for the future through the "Cookie settings" link in the footer of every page.
Without your consent this website only sets what is technically necessary: a cookie that stores your decision on the cookie notice, and the cookies Cloudflare sets during the spam check of the contact form (section 7). Only with your consent are the statistics cookies added (section 5). If you decline or withdraw, we delete the statistics cookies again. This website sets no advertising cookies.
Through the contact form we process the details you enter: title, name, address, country, phone number, e-mail address and your message, and for technical requests the device's serial number and country of origin. The purpose is to answer your request (Art. 6(1)(b) GDPR; for requests from businesses Art. 6(1)(f) GDPR).
The form data is stored in the backend of a cloud provider based in the USA, which we run in its EU region (Ireland), and sent through the e-mail service Mailgun Technologies, Inc. (EU region) to our customer service, which handles requests in a ticket system of Odoo S.A. (Belgium). Data processing agreements are in place with these providers, with the EU standard contractual clauses where required. Requests are deleted automatically from the form backend 24 months after receipt, and from the ticket system once the request is settled and no statutory retention obligations apply.
To protect against automated submissions we use Cloudflare Turnstile of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which checks technical characteristics of your browser and your IP address when you submit; Cloudflare is certified under the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in a form free of abuse (Art. 6(1)(f) GDPR). To limit the number of requests per sender we also store a value derived from your IP address that cannot be traced back, and the browser identifier, together with the request; the IP address itself is not stored.
If you contact us by e-mail or phone, we process your details to answer your request (Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR). The data is deleted once the request is settled and no statutory retention obligations apply.
Our pages link to websites of our partners. Their operators are responsible for the processing of data on those websites; their privacy policies apply.
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You can withdraw a consent at any time with effect for the future (Art. 7(3) GDPR). Please contact info@hantech.eu.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.