This website is provided by Hydro Building System Germany GmbH. Hydro Building Systems Germany GmbH is one of five business operations of the company Hydro (referred to as 'Hydro' in accordance with these provisions).

Hydro is the supervisory authority for processing the personal data collected on this website. Hydro respects your privacy and processes your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other relevant laws. The website is managed by Episerver DXC, on behalf of Hydro.

This Privacy Notice is designed to help you understand what personal data we collect about you, why we collect it, what we use it for and what rights you have when it comes to using, accessing and correcting your personal data.

1            Data controller

The data controller, in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR), is Hydro Building Systems Germany GmbH, Einsteinstraße 61, 89077 Ulm, Germany.

info@wicona.de (see our legal notices).

2            Contact details for the data protection officer

If you have any questions relating to data privacy, please contact our data protection officer:

Maximilian Mertin

intersoft consulting services AG

Beim Strohhause 17

20097 Hamburg

Email: MMertin@intersoft-consulting.de

3            Collecting and processing personal data

If you only access our website to gain information, i.e. if you don’t register on the website or provide us with your information in any other way, we’ll only collect the personal data that your browser transmits to our server. If you wish to view our website, we’ll collect the following information about you which is technically necessary to enable us to correctly display our website, and to ensure its stability and security. The legal basis for this is Article 6 (1)(f) of the GDPR.

–IP address, date and time of request, time difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred, website making the request, browser, operating system and its interface, language and version of the browser software.

4            Contact by e-mail

When you contact us by email or by using our contact form, the data you provide (your email address, your name and telephone number) will be stored by us so that we can answer your questions.

The establishment of contact with you and the associated transmission of personal data is performed expressly on a voluntary basis and with your consent in accordance with Article 6 (1)(a) of the GDPR. As this information relates to communication channels (for example, email address and telephone number), you also provide your consent for us to contact you using these communication channels when needed, to respond to your request. You can withdraw this consent at any time, with future effect.

We’ll delete your personal data in this context once it’s no longer necessary for this to be stored, or we’ll restrict the processing of this data if it’s subject to statutory retention requirements.

5            Creating a user account (registration)

To make full use of all functions on our website, you can create your own user account. As part of the registration process for this, we collect and store certain personal data that you provide on the registration form. This includes your title, name, company, address, e-mail address and telephone number.

After you have successfully registered, you’ll have access to our WIC product range through www.wictip.com, download documentation and technical data sheets, as well as our various tool functions. You can also use the same user account information to access another website provided by us: www.wictip.com.

Processing of data is performed based on your voluntarily granted consent in accordance with Art. 6 (1)(a) of the GDPR. You can revoke your consent at any time and thereby delete your user account. We’ll delete all stored personal data, as there are no statutory retention periods that apply for certain data you provided.

6            Use of cookies:

When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard drive assigned to the browser you are using, and which provide certain information to the location setting the cookie. Cookies cannot run programs, access your files or transmit viruses to your computer. They serve to make your experience of using the internet more user-friendly and effective.

The legal basis for the processing of personal data using cookies being technically necessary for the use of our website is provided for by Art. 6 (1)(f) of the GDPR. The legitimate interest of the data controller is to facilitate the user-friendly and effective design of their website.

This website uses the following types of cookies, the scope and function of which are explained below:

6.1            Transient cookies

These cookies are deleted automatically when you close your web browser. These include session cookies. Session cookies save a session ID, which can be used to assign different requests from your browser to a common session. These cookies allow us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.

6.2            Persistent cookies

These cookies are automatically deleted after a specified period, which may differ depending on the type of cookie. You can delete these cookies at any time by going to the security settings in your web browser.

6.3            Prevention of cookies

You can configure your browser settings according to your own wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that if you do so you may not be able to use all the functions of this website.

7            Third party content

7.1            Google Webfonts

This website makes use of Google Webfonts. Google Webfonts are provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. To load the displayed fonts and effects, your browser connects directly to Google's servers in the United States. Google collects personal information. This information includes your IP address, as well as other device data, information about your browser as well as the operating system you are using. This is essential to use the plug-in correctly.

For more information, please see the following Notes as well as Google’s Privacy Policy. The legal basis for the processing of this data is Article 6 (1), p. 1 (f) of the GDPR. Our legitimate interest is derived from our intention to provide a consistent and user-friendly presentation of our content, as well as improving the loading times on our website.

7.2            Google Maps

The Google Maps service is used on our website. Google Maps are provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. This always assumes that Google receives the IP addresses of the users. This is because without this IP address they would not be able to send the content to the browser of the respective user. Your IP address is required for this content to be presented to you. We endeavour only to use content; whose respective providers use your IP address only to deliver the content to you. However, we don’t have any influence over whether Google stores your IP address, for example, for statistical purposes. If we become aware of this, we’ll inform our users.

The legal basis for this is Article 6 (1)(f) of the GDPR. The legitimate interest is the analysis, optimisation and cost-effective operation of our online offering. For more information, refer to the Google Maps Terms of Service and Google's Privacy Policy.

7.3            AddThis

We use AddThis on our website. AddThis provides a Tell-a-Friend feature that you can use to recommend our website to other interested parties. To do this you would need to enter both your e-mail and the e-mail of the person who you’d like to recommend our website. You will have the option to also enter a personal message. Please note, you are responsible for the notification you send and the data you enter will be transferred to and processed by AddThis LLC 1595 Spring Hill Rd Suite 300 Vienna, VA 22182, USA. The use of "AddThis" also results in the use of cookies. The data acquired from this (such as time of use or browser language set) are also transmitted to and processed by AddThis LLC 1595 Spring Hill Suite 300 Vienna, VA 22182, USA. For more information about the privacy policies of AddThis LLC, please visit www.addthis.com/privacy. We receive from AddThis details of the data processed and its intended use. We don’t process this data on our end. By using the "Addthis" button, you consent to the processing of the data by AddThis LLC. You can decline to the use of your data for this purpose by setting an "Opt Out Cookie". The legal basis for this is Article 6 (1)(f) of the GDPR. Our justified legitimate interest lies with the distribution of our online offer.

8            Website analysis

We use various services for the purposes of analysing and optimising our website and these are detailed below. Using these services, we’re able to analyse how many users visit our site, what information is viewed the most, and how users find this information. We collect data about which website was used to access our website (referrer), which sub-pages of our website were viewed and how often and for how long these sub-pages are viewed. This helps us to design and improve our website and content to be more user-friendly. The data collected isn’t intended to personally identify individual users. Anonymous or pseudonymous, data is collected. The legal basis for this is Article 6 (1)(f) of the GDPR.

The legitimate interest of the data controller is to optimise their website by means of website analysis programs.

8.1            Google Analytics

This website uses Google Analytics, a web-analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This includes the use of the Universal Analytics operating mode. Using Google Analytics means we can assign data, sessions and interactions across multiple devices to a single pseudonymous user ID analyse the activities of a user across different devices.

Google Analytics uses cookies, which enables us to analyse the use of our website. The information regarding your use of this website, which is generated using the cookie, is usually transferred to a Google server in USA and stored there. However, in cases where IP anonymisation is activated on this website, your IP address will be truncated in advance by Google within the Member States of the European Union or other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and then truncated. The IP address provided by your browser as part of Google Analytics won’t be merged with any other data from Google. On behalf of the operator of this website, Google use this information to evaluate your use of the website, to compile reports about the website activities and to provide other services relating to the use of the website and the services associated with the use of the website to the website operator. To ensure the lawfulness of the processing of this data, we only process your data for use by Google Analytics based on your consent in accordance with Art. 6 (1)(a) of the GDPR. If you prefer not to provide consent, you can revoke this at any time. The data sent by us and linked by means of cookies, user identities (e.g. user ID) or advertising IDs will be deleted automatically after 26 months. Data, which has reached the end of this retention period, will be deleted automatically once a month. For more information, please refer to the Terms of Use and Privacy Policy.

You can prevent cookies from being stored by changing the settings in your browser software; however, if you do this you may not be able to use all the features of this website. You may prevent Google from collecting and processing the data generated by the cookie relating to your use of the website (inc. your IP address) by downloading and installing the Google Analytics Opt-Out browser plugin. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent tracking by Universal Analytics across various devices, you must opt out on all systems that you use. Clicking this link sets the opt-out cookie: <a href="javascript:gaOptout()"><strong>Google Analytics deaktivieren</strong></a></p>

8.2            GA Audience

This website makes use of GA Audience, an analysis software by Google Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. GA Audience is used to advertise content to our target audiences based on data collected by Google Analytics. GA Audience gains access to the cookies set by Google Analytics to statistically analyse this data in accordance with various criteria such as age, nationality, language, gender, device and browser information, as well as miscellaneous criteria pertaining to user behaviour. This enables us to operate a marketing campaign that’s based on the interests of our users and to always show content that interests you.

Due to the use of GA Audience, data and your IP address may be transmitted to Google's servers in the United States and stored there. However, in cases where IP anonymisation is activated on this website, your IP address will be truncated in advance by Google within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and then truncated. To ensure the lawfulness of the processing of this data, we’ll only process your data for the use by Google Audience based on your granted consent in accordance with Art. 6 (1)(a) of the GDPR. You can revoke your consent at any time. Additional information is provided in the following Terms of Use.

If you wish to prevent the processing of your data by GA Audience, please use the option to deactivate tracking by Google Analytics as specified in Section 8.1.

8.3            Hotjar

This website uses Hotjar, an analysis software provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar enables us to measure and evaluate usage behaviour on our website. The information generated about your visit, by means of the tracking code and cookie are transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following information based on your device:

The following information may be recorded by your device and your browser:

• the IP address of your device (collected and stored in an anonymous format)
• your personal information including email address and full name, if you’ve registered for a user account and are logged in.
• screen size of your device
• device type and browser information
• geographical location (country only)
• your preferred language for viewing our website
• log data

The following data is automatically collected by our servers when Hotjar is used:

• referring domain
• pages visited
• geographical location (country only)
• your preferred language for viewing our website
• date and time the website was accessed

Hotjar use this information to evaluate your use of our website, generate reports about this usage and to provide other services relating to website usage and online evaluation of the website.

To provide its services, Hotjar also uses third-party services, such as Google Analytics and Optimizely. These third parties may store information sent by your browser during your visit, for example, cookies or IP requests. For specific information on how Google Analytics and Optimizely store and use your data, please refer to their privacy policies. You can prevent Hotjar from collecting your data by using this link.

The legal basis for using Google Analytics is Article 15 (3) of the German Telemedia Act [TMG] and Article 6 (1)(f) of the GDPR. Our legitimate interest is justified by the user-oriented presentation and evaluation of our content, as well as the improvement of our services.

9            Advertising

We use cookies for marketing purposes, so that we can target our users with advertising based on their interests. In addition, we use cookies to limit the likelihood that an ad will be displayed and to measure the effectiveness of our ads. This information also may be shared with third parties, such as ad networks. The legal basis for this is Article 6 (1)(a) and (f) of the GDPR. The purposes of using data processing have the legitimate interest of direct marketing. You have the right to object to your data being processed for this means of advertising. We make this possible by providing an option to opt out of the DoubleClick service. Alternatively, you can use your browser settings to prevent cookies from being set.

9.1            DoubleClick

We use DoubleClick, a service provided by Google Inc. DoubleClick uses cookies to display user-based advertisements. The cookies recognise which ads have already been displayed in your browser and whether you have accessed a website via the displayed ad. The cookies do not collect any personal data and cannot be associated with such data.

If you don’t wish to receive user-based advertisements, you can disable these by using Google's Ad Preferences.

You can read more about how Google uses cookies in Google's Privacy Policy.

10       Your rights

You have the following rights regarding your personal data:

10.1         General rights

You have the right to be informed about your personal data, the right to correction and erasure of that data, the right to restrict and object to processing, and the right to data portability. As processing is based on your consent, you have the right to withdraw that consent with future effect.

10.2         Rights when data is processed for legitimate interests

In accordance with Article 21 (1) of the GDPR, you have the right, at any time and for your own personal reasons, to raise an objection against the processing of your personal data. This is carried out on the basis of Article 6 (1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1)(f) of the GDPR (data processing to safeguard a legitimate interest). This also applies to profiling based on this regulation. If you make an objection, we’ll no longer process your personal data unless we can demonstrate compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms, or in the case that the data processing serves the establishment, exercise or defence of legal claims.

10.3         Rights regarding direct advertising

As we process your personal data to pursue direct advertising, you have the right, at any time and in accordance with Article 21 (2) of the GDPR, to raise an objection to the processing of your personal data for the purpose of this means of advertising. This also applies to profiling, as this relates to direct advertising.

If you object to your data being processed for direct advertising, we’ll no longer process your data for this purpose.

10.4         Right of appeal to a supervisory authority

You also have the right to appeal to a supervisory authority regarding the processing of your personal data carried out by us.

11       Data transfer

Your personal data will not be transferred to third parties unless we are legally obliged to do this. the disclosure of data is required for executing the contractual relationship, or you have previously consented to your data being disclosed.

External service providers and partner companies such as server hosts, or providers of analysis tools will only receive your data if this is necessary to fulfil the respective purpose. In these cases, the data transfer is limited to the minimum required. As our service providers encounter your personal data, within the context of order processing in accordance with Article 28 of the GDPR, we’ll ensure that they comply with the provisions of the data privacy laws in the same way. For more information on how they do this, refer to the privacy policies of those providers. Each service provider is responsible for the content of third-party services; we therefore check the services for compliance with legal requirements, to the extent which can be reasonably expected of us.

We attach great importance to processing your data within the EU/EEA. However, it may be the case that we use service providers who process data outside of the EU/EEA. In these cases, we’ll ensure that the recipient provides a suitable level of data protection before your personal data is transferred to them. This means that an EU Standard Contract or other adequate provision, such as the EU Privacy Shield, is in place which achieves a level of data protection that is comparable to the standards within the EU.

12       Data privacy

We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in keeping with technological progress.

Our Privacy Policy is reviewed on a regular basis. This Privacy Policy was last updated in July 2019.