Notes on data protection 

Thank you for visiting our website. In the following we would like to inform you about the handling of your personal data according to Art. 19 Data Protection Act (DSG).
 

Responsible

The hmmh multimediahaus AG 
Am Weser-Terminal 1 
29217 Bremen 
Tel.: +49 421 696500 
E-Mail: kontakt@hmmh.de

is responsible for the data procurement and processing described below.
 

Storage of the IP address

We store the IP address transmitted by your web browser strictly for the purpose of recognising, limiting and eliminating attacks on our websites for a period of seven days. After this period, we delete or anonymise the IP address.
 

Usage data

When you visit our websites, so-called usage data is temporarily stored as a log on our web server at our hosting partner for statistical purposes in order to improve the quality of our websites. This data record consists of

• of the page from which the file was requested,
• the name of the file,
• the date and time of the query,
• the amount of data transferred,
• the access status (file transferred, file not found),
• the description of the type of web browser used,
• the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.

The aforementioned log data is only stored anonymously.
 

Cookies

We use cookies on our websites. Cookies are small text files that are stored on your terminal device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies can contain data that make it possible to recognise the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to a specific person. We use session cookies and permanent cookies on our websites. The data processing by the implemented cookies only takes place after your consent.

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed optimally and some functions may no longer be technically available.
 

Cookie Consent Management

hmmh uses a consent management service for the use of cookies on our website. Usercentrics GmbH is used as a processor on the hmmh website for the purpose of consent management. 
Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany, e-mail address: datenschutzmail@usercentricsweb.com.

Data protection officer: SECUWING GmbH & Co. KG, Maximilian Hartung, Frauentorstr. 9, 86152 Augsburg, Germany, e-mail address: epost@datenschutz-agentur.de, telephone number: +49 821 90786450, fax: +49 821 90786459.

With the help of this tool, we collect your rejection or consent regarding the use of cookies on our website.

The cookie layer also provides you with an overview of all the cookies we use, their purpose and their origin. There you can individually determine which use and which cookie you wish to consent to or reject. By clicking on the fingerprint button at the bottom left of our website, you can call up the cookie layer at any time and adjust your permissions. 
 

Disclosure of data to third parties

We disclose your data within the scope of order processing pursuant to Art. 9 DSG to service providers who support us in the operation of our websites and the associated processes. Our service providers are strictly bound by instructions and are contractually obligated to us accordingly. We use the following service providers: Google Analytics, Google Ads, Google Tag Manager, SC-Networks, Softgarden, Zoom, YouTube, Usercentrics and our hosting partner.
 

Data disclosure abroad

In some cases, we transfer personal data to countries outside Switzerland. In each case, we have ensured an appropriate level of data protection. Personal data may only be disclosed if the principles of data disclosure pursuant to Art. 16 and 17 FADP are complied with. The countries to which personal data is disclosed and the associated data protection guarantees are as follows: 

• Germany / European Union, there is a positive decision according to Art. 16 para. 1 FADP.
• United States of America, standard contractual clauses have been concluded in accordance with the European Commission's Implementing Decision on standard contractual clauses for the transfer of personal data to third countries under Regulation (EU) 2016/679, together with associated transfer impact assessments.
   

Download and contact form

On our website you can enter personal data via a contact form. When you use the contact form, we obtain and store the data you enter in the input mask (e.g. surname, first name, e-mail address). We do not disclose this information to third parties.

We provide forms for the registration for events of hmmh and/or hmmh partners. We store the data you provide there (first name, last name, function, business e-mail address and your company) in our internal CRM system. The purpose of the processing is the generation of business contacts. Therefore, we also disclose your data to the respective partners involved. Access to your data within hmmh is restricted to our marketing and sales teams.
 

Matomo

We use Matomo on our website, an open source, self-hosted software, to collect anonymous usage data to optimise our internet presence. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Matomo's European representative, who acts as the data controller within the meaning of the GDPR, is: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg. Matomo's data protection officer is: ePrivacy GmbH, represented by Prof. Dr. Christoph Bauer, Große Bleichen 21, 20354 Hamburg. Matomo can be reached at the email address privacy@matomo.org or at matomo.org/contact. 

Data on the behaviour of visitors is collected anonymously, e.g. to find out about problems such as pages not found, search engine problems or unpopular pages. Matomo generates reports for hmmh as website operator from the collected data. hmmh hosts Matomo on its own servers at our hosting service provider in Germany.

Matomo sets the following cookies (with the corresponding lifetime):

• pk_id (unique visitor ID, up to 13 months)
• _pk_ref (referrer initially used to visit the website, up to 6 months)
• _pk_ses, _pk_cvar, _pk_hsr (Technical cookies, up to 30 minutes)
• mtm_consent (or mtm_consent_removed) (status of the given consent, up to 30 days)
• mtm_cookie_consent (status of the given cookie consent, up to 30 days)
• matomo_ignore (opt-out tracking, up to 30 years)
• matomo_sessid (Technical cookie, up to 14 days)

The following usage data is collected:

• Anonymised IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
• Location (based on the anonymised IP address
• Date and time
• Title of the page accessed
• URL of the accessed page
• URL of the previous page (if this is allowed)
• Screen resolution
• Local time
• Files that have been clicked and downloaded
• External links
• Duration of the page layout
• Main language of the browser
• User agent of the browser
• Interactions with the website and forms (but not their content) for heatmaps and session recordings

The data procured is used for internal analysis and, apart from Matomo, is not disclosed to any other third parties.

Google Ads

As an Ads customer, we also use Google Conversion Tracking, an analysis service from Google. Google Adwords sets two double-click cookies on your computer ("conversion cookie") if you have accessed our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of ours and the cookie has not yet expired, we and Google can recognise that someone has clicked on the ad and thus been redirected to our site. Each AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. Ads clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in the tracking procedure, you can also refuse the setting of a cookie required for this - for example, by means of a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com".
 

YouTube

We embed videos on our websites that are not stored on our servers. To ensure that accessing our web pages with embedded videos does not automatically lead to content from the third-party provider being reloaded, we only display locally stored preview images of the videos in a first step. This does not provide the third-party provider with any information.

Only after a click on the preview image, the content of the third party provider is reloaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data that is technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider. Please note that the embedding of many videos leads to your data being processed outside of Switzerland.
 

hmmh Newsletter

On our website, we offer you the opportunity to subscribe to our newsletter, in which we inform you about our company's products and services. For this purpose, we only need your e-mail address and a few other voluntary details. By clicking on "Subscribe", you give us your consent to send you an hmmh newsletter, which you can revoke at any time. If you no longer wish to receive a newsletter in the future, you can unsubscribe at any time by clicking on the corresponding link at the end of each newsletter. We will delete your data within 3 months after you have unsubscribed from the newsletter.

We use the product "Evalanche" from the operator SC-Networks GmbH to send our newsletters. There, we store the opening data (date/time, browser type, mail client type, mailing) for each newsletter, as well as the clicks on image and text links, so that we can tailor our information to you and provide it in the best possible way. For this purpose, we set cookies when you register and receive the newsletter, which are deleted after 24 months at the latest. This data is stored and evaluated centrally. If you click the checkbox with the reference to this data protection declaration when registering for the newsletter, you give us your consent for this personalised data processing. You can object to personalised tracking by clicking on a link provided for this purpose at the end of each newsletter. The date of subscription and unsubscription to the newsletter as well as the consent or objection to tracking is always stored in a personalised manner with your IP address so that hmmh can provide you with information.

For security purposes, all data is stored in a backup that is deleted after 12 months. The operator of Evalanche (SC-Networks GmbH, Starnberg) processes personal usage data exclusively for us on specially secured systems in compliance with Swiss data protection law.

Zoom

hmmh offers online sessions on specialist topics by invitation. Zoom (ZOOM VIDEO COMMUNICATIONS, INC., 55 Alamden Blvd. Suite 600, San Jose, CA 95113, USA, phone: +1 888.799.96669), email: privacy@zoom.us) is the provider of the video conferencing tool we use to hold our online sessions.

hmmh draws your attention to the fact that zoom is a cloud-based online tool. By accepting the invitation, you agree to the terms of use of zoom (https://zoom.us/de-de/terms.html) and affirm that you have read and accepted the privacy policy of zoom (https://zoom.us/de-de/privacy.html). hmmh has concluded a contract for commissioned processing and controller to processor EU standard contractual clauses with zoom to ensure the protection of your personal data.

hmmh has taken the following additional measures when configuring the tool:

• End-to-end encryption for meetings and chats is enabled.
• Cloud storage of chat messages is disabled.
• Attention tracking is deactivated.
• Access to the address book is disabled.
• The camera image of the participants is always deactivated and can only be released by yourself.

In the case of a recording, we will ask for your consent in advance by email.
 

Social Media Plugins

For data protection reasons, we do not integrate social plugins in the form of Like or Share buttons directly into our website. When you visit our pages, no data is therefore transmitted to social media services such as Facebook, Twitter, XING or Google+. Profiling by third parties is therefore excluded.
 

Automated decision making

As a webpage user, you have the right not to be subjected to full automatic processing, which takes legal effect in your relation or impacts on you considerably. The legal basis for the processing is Article 22 GDPR. Automatic decision making may only be carried out if it is required for the conclusion or performance of an agreement, national exceptions exist or you expressly agree to the process. If one of the exceptions applies, we guarantee appropriate measures to maintain your rights and freedoms. If you wish to assert your rights, please contact our data protection officer at datenschutz@hmmh.de.
 

Data security

In order to protect your data from unwanted access as comprehensively as possible, we take technical and organisational measures. We use an encryption procedure on our pages. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
 

Online applications

We use the order processor Softgarden to carry out online applications. We process your personal data in accordance with the applicable data protection regulations. We process the data that you disclose to us as part of your online application exclusively for the purpose of selecting applicants. We do not process data for any other purpose. You yourself determine the scope of the data you wish to disclose to us as part of your online application. Online applications are transmitted electronically to our personnel department and processed there as quickly as possible. The transmission is encrypted. As a rule, applications are forwarded to the heads of the relevant departments in our company. Your data will not be passed on beyond this. Your details will be treated confidentially in our company. If your application is unsuccessful, your documents will be deleted after 3 months.
In the event that we may also consider your application for other or future vacancies, please make a note of this on the application.
 

Company pages on social media plattforms

We operate several different company pages on social media plattforms:

On Instagram via https://www.instagram.com/hmmh.de/

on Facebook via https://www.facebook.com/hmmh.de 

on XING via https://www.xing.com/company/hmmh 

on Twitter via https://www.twitter.com/hmmh_de 

on LinkedIn via https://de.linkedin.com/company/hmmh-ag 

We do not obtain, store or process personal data of our users on these pages at any time. Furthermore, no other data processing is carried out or initiated by us. The data you enter on these company pages, such as comments, videos or images, are never used or processed by us for other purposes. The social media platforms use so-called web tracking methods on our company pages. Please be aware of this: it cannot be ruled out that a platform provider uses your profile data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on the processing of your data by these providers. We have concluded contracts with these providers in accordance with Art. 9 para. 1 lit. b DSG.
 

Automated decision making

As a website user, you will be informed in accordance with Art. 21 para. 1 FADP of any fully automated decision-making that has a legal effect on you or significantly affects you. Upon request, you will have the opportunity to state your position on the automated decision-making process concerning you and to have the process reviewed by a natural person. 

The obligation to inform and review listed in the previous paragraph does not apply if the automated decision making is directly related to the conclusion or performance of a contract between you and us and you have agreed to our request, national exemptions exist or you expressly consent to the process. If one of the reasons applies, we will ensure appropriate measures are taken to protect your rights and freedoms.
 

Right to information

You have the right to request information from us about whether we are processing personal data about you. In accordance with Art. 25 para. 2 FADP, we will provide you with the information you need to exercise your rights under the Data Protection Act.
 

Right to data surrender or data transfer 

Under the circumstances of Art. 28 para. 1 FADP, you have the right to request that we surrender your personal data that you have disclosed to us in a common electronic format. In addition, under these circumstances, you may also request the transfer of your personal data to another data controller.

If you wish to exercise your rights, please contact our data protection officer via datenschutzmail@hmmhweb.de.