3.2 User-friendliness of the website
We use cookies to make the Hermes website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The cookies can be used to store settings related to the account.
The legal basis for data collection and processing is Art. 6 (1) (a) GDPR, provided that you have consented to the use of cookies on the Hermes website.
The collection and processing of data for the purposes specified in this section is absolutely necessary for the operation of the Hermes website. Consequently, there is no possibility of objection on your part.
3.3 Statistics Cookies and Google Analytics
Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc, (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The usage includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices. Google Analytics uses so-called Google Analytics. “Cookies” are text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage.
Sessions and campaigns end after a certain amount of time has elapsed. By default, sessions end after 30 minutes of inactivity, and campaigns end after six months. The time limit for campaigns can be a maximum of two years.
The legal basis for the use of Google Analytics is your consent (Article 6 (1) sentence 1 (a) GDPR). This means that you can voluntarily decide for yourself whether you want to allow this cookie or not. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser addon. Optout cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across devices, you must opt-out on all systems you use.
For more information on terms of use and data protection, please see https://marketingplatform.google.com/about/analytics/terms/gb/ and https://policies.google.com/?hl=en.
3.4 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect the data from access by third parties.
On the basis of our legitimate interests (interests in the optimisation, analysis and economic operation of our online offering within the meaning of Art. 6 (1) (f) GDPR), we use content and services from third-party providers within our online offering in order to integrate their content and services. These are, for example, videos or fonts.
4 Integration of third-party services for credit checking purposes
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 (1) (f) GDPR), we use content or services offered by third-party providers within our online offering in order to integrate their content and services, such as videos or fonts (hereinafter referred to as “content”).
The following content will be integrated:
Vimeo
The provider’s video platform: Vimeo Inc.,
Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
Privacy Policy: https://vimeo.com/privacy
Youtube
The provider’s video platform: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://www.google.com/policies/privacy/
OpensStreetMap
Maps are integrated into the “OpenStreetMap” service, which are offered by the OpenStreetMap Foundation (OSMF) on the basis of the Open Data Commons Open Database License (ODbL).
Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy
Xing
Social network of the provider XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Privacy Policy:https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn
Social network of the provider Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
Instagram
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
Privacy Policy: https://privacycenter.instagram.com/policy
5 Comparison with sanctions lists
Customers:
Furthermore, we are obliged to protect your data with personal sanctions lists / embargoes (esp. Financial sanctions against listed persons) in order to provide the listed persons with non-economic resources or financial means and to ensure compliance with foreign trade law (Article 6 (1) (c) GDPR).
6 Your rights
With regard to your personal data, you have the following rights vis-à-vis Hermes:
Right of access (according to Article 15 GDPR)
You have the right to request information as to whether or not we are processing personal
data about you. When we process your personal data, you have the right to know:
- why we process your data
- what types of data we process about you
- what kind of recipients receive or are expected to receive data from you
- how long we will keep your data; if it is not possible to specify the storage period, we must inform you how the storage period is determined (e.g. after expiry of statutory retention periods)
- that you have the right to rectification and deletion of data concerning you, including the right to restriction of processing and/or the right to object
- that you have the right to lodge a complaint with a supervisory authority
- where your data comes from, if we have not collected it directly from you
- whether your data will be used for an automated decision and, if so, to know the logic behind the decision and the impact and scope of the automated decision for you
- that if data about you is transferred to a country outside the European Union, you have the right to know whether and, if so, on the basis of which safeguards an adequate level of protection is ensured for the data recipient
- that you have the right to request a copy of their personal data. Copies of data are generally provided in electronic form. The first copy is free of charge, but a reasonable fee may be charged for further copies. A copy can only be provided if it does not affect the rights of other persons.
Right to rectification or erasure (pursuant to Articles 16 and 17 GDPR)
You have the right to ask us to correct your data if it is inaccurate and/or incomplete. This right also includes the right to be completed by means of supplementary declarations or communications. A correction and/or addition must be made without undue delay.
You also have the right to ask us to erase your personal data if:
- the personal data are no longer necessary for the purposes for which they were collected and processed
- the data processing is carried out on the basis of your consent and you have withdrawn your consent.
(However, this does not apply if:
- there is another legal permission for data processing
- you have objected to data processing whose legal permission is based on the so-called “legitimate interest” (referred to in Article 6(1)(e) or (f))
- There are overriding, legitimate grounds for further processing.)
- you have objected to data processing for the purpose of direct marketing
- your personal data has been unlawfully processed
- it is data of a child that has been collected for information society services (= electronic service) on the basis of consent (pursuant to Art. 8 para. 1 GDPR).
There is no right to erasure of personal data if:
- the right to freedom of expression and information precludes the request for erasure
- the processing of personal data is necessary for compliance with a legal obligation (e.g. statutory retention obligations), for the performance of public tasks and interests under applicable law (including “public health”) or for archiving and/or research purposes
- the personal data is necessary for the establishment, exercise or defence of legal
claims.
The deletion must take place immediately (without undue delay). If personal data has been made public by us (e.g. on the Internet), we must ensure, within the scope of what is technically possible and reasonable, that other data processors are also informed about the deletion request, including the deletion of links, copies and/or replications.
Right to restriction of processing (pursuant to Article 18 GDPR)
You have the right to have the processing of your personal data restricted in the following cases:
- If you have disputed the accuracy of your personal data, you can ask us not to use your data for any other purpose for the duration of the verification of accuracy and thus to restrict its processing.
- In the event of unlawful data processing, you can request the restriction of data use instead of data deletion.
If you need your personal data to assert, exercise or defend legal claims, but we no longer need your personal data, you can request that we restrict the processing to the purposes of legal prosecution.
If you have objected to data processing (Art. 21 para. 1 GDPR) and it is not yet clear whether our interests in processing outweigh your interests, you can request that your data not be used for other purposes for the duration of the review and thus that their processing be restricted.
Personal data, the processing of which has been restricted at your request, may only be stored, subject to storage:
- with their consent,
- to assert, exercise or defend legal claims,
- to protect the rights of another person or entity, or
- processed for reasons of important public interest.
If a processing restriction is lifted, you will be informed in advance.
Right to data portability (according to Art. 20 GDPR)
You have the right to request from us the data you have provided to us in a commonly used electronic format (e.g. as a PDF or Excel document). You can also ask us to transmit this data directly to another company (designated by you), if this is technically possible for us. The prerequisite for you to have this right is that the processing is carried out on the basis of consent or for the performance of a contract and is carried out with the help of automated processes. Exercising the right to data portability must not adversely affect the rights and freedoms of other persons. If you exercise the right to data portability, you still have the right to data deletion in accordance with Article 17 GDPR.
Right to object to certain data processing operations (pursuant to Art. 21 GDPR)
If your data is processed for the performance of tasks carried out in the public interest or for the pursuit of legitimate interests, you may object to such processing. To do this, you must explain to us the reasons for your objection that arise from your particular situation. These can be, for example, special family circumstances or confidentiality interests worthy of protection.
In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless
- there are compelling legitimate grounds for processing which outweigh their interests, rights and freedoms, or
- the processing is necessary for the establishment, exercise or defence of legal claims.
You can object to the use of your data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is related to direct marketing. In the event of an objection, we may no longer use your data for direct marketing purposes.
Prohibition of automated decision-making/profiling (Art. 22 GDPR)
Decisions by us that have a legal effect on you or significantly affect you may not be based solely on automated processing of personal data. This also includes profiling.
This prohibition does not apply to the extent that the automated decision-making
- is necessary for the conclusion or performance of a contract with you,
- is permitted by law where that legislation contains appropriate measures to protect your rights and freedoms and legitimate interests, or
- with their explicit consent.
Decisions based solely on automated processing of special categories of personal data (= sensitive data) are only permissible if they are made on the basis of your explicit consent or if there is a significant public interest in the processing and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
6.1 Exercising the rights of data subjects
To exercise your rights as a data subject, please contact the authorities listed under 6.2. Requests submitted electronically are usually answered electronically. The information, communications and measures to be made available under the GDPR, including “the exercise of the rights of data subjects”, are generally provided free of charge. Only in the case of manifestly unfounded or excessive requests are we entitled to charge an appropriate fee for the processing or to refrain from taking action (Art. 12 (5) GDPR).
If there are reasonable doubts about your identity, we may request additional information from you for the purpose of identification. If we are unable to identify you, we are entitled to refuse to process your request. We will notify you separately if there is no possibility of identification (see Art. 12 para. 6 and Art. 11 GDPR).
Requests for information and information are usually processed immediately (within one month) of receipt of the request. The deadline may be extended by a further two months if necessary, taking into account the complexity and/or number of requests; in the event of an extension of the deadline, we will inform you of the reasons for the delay within one month of receipt of your request. If we fail to act on a request, we will inform you of the reasons for this without undue delay within one month of receipt of the request and inform you of the possibility of lodging a complaint with a supervisory authority or seeking judicial remedy. (Art. 12 para. 3; 4 GDPR).
Please note that you can only exercise your rights as a data subject within the limits and limitations provided for by the Union or the Member States. (Art. 23 GDPR)
6.2 Contact
If you have any questions regarding the collection, processing or use of your personal data, as well as if you would like information, corrections, deletions, processing restrictions, objections or regarding the transfer of your data, please contact:
HERMES Einrichtungs Service GmbH & Co. KG
Data Protection Coordination
Albert-Schweitzer-Straße 33
D-32584 Löhne
E-Mail: datenschutz-2mh@hermes-2mh.de
When making your request, please make sure to provide us with your full contact details (first name, surname and address); this is the only way we can clearly identify you and respond to your request quickly.
The data protection officer of our company is Mr. Georg Möller. The Data Protection Officer can be contacted as follows:
SK-Consulting Group GmbH
Osterweg 2; 32549 Bad Oeynhausen
E-Mail: datenschutz@sk-consulting.com
6.3 Right to lodge a complaint
You have the right to complain to a data protection supervisory authority about the processing of your personal data by Hermes.
A list of supervisory authorities and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
In case of complaints, you can contact the competent supervisory authority at any time. You have the right to an effective judicial remedy against a supervisory authority (Art. 78 GDPR), as well as against our company (Art. 79 GDPR).
7 Responsible body
According to Art. 4 para. 7 GDPR, the following is responsible:
HERMES Einrichtungs Service GmbH & Co. KG
Albert-Schweitzer-Straße 33
32584 Löhne
Headquarters: Löhne
Registry court: Amtsgericht Bad Oeynhausen
Registration number: HRA 10039
Managing Director: Carsten Meinders, Michael Dildey, Viviane Reichert-Brown
VAT identification number according to § 27a UStG: DE 813 973 991
Personally liable: Verwaltungsgesellschaft HERMES Einrichtungs Service mbH, AG Hamburg HRB 79507
Contact details:
HERMES Einrichtungs Service GmbH & Co. KG
Albert-Schweizer-Straße 33
D-32584 Löhne
Phone +49 (0)5732 103-0 (no shipment information possible)
E-mail info-2mh@hermes2mh.de (no shipment information possible)
