DATA PROTECTION
General information
Thank you for visiting our website and for your interest in our company and our products. The protection of your personal data is very important to HAHN Plastics (North America) Ltd. We process personal data that is collected when you visit our online offers confidentially and only in accordance with the statutory provisions. It is important for us to inform you about which personal data is collected, how it is used and what options you have in this regard.
1. RESPONSIBLE PERSON
The data controller is HAHN Plastics (North America) Ltd., 50 Northland Road, Waterloo ON N2V 1N3, Canada. Exceptions are explained in this data protection notice. If you have any questions about data protection, you can contact our data protection officer at info@hahnplastics.ca.
2. COLLECTION, PROCESSING AND USE OF PERSONAL DATA
2.1 Categories of data processed
Communication data (e.g. name, telephone number, e-mail address, personal address, IP address) and / or usage data (e.g. session duration, browser and operating system) with and without personal reference can be processed.
2.2 Principles
Personal data is all information that relates to an identified or identifiable natural person, e.g. names, addresses, telephone numbers or e-mail addresses that express the identity of a person. We collect, process and use personal data (including IP addresses) only if there is a legal basis for this or if you e.g. have given your consent when contacting us.
2.3 Processing purposes and legal bases
We and service providers commissioned by us process your data for the following processing purposes:
- Legal basisOverriding legitimate interest on our part in direct marketing as long as this is done in accordance with data protection and competition law requirements.
- RecipientTechnical service providers (e.g. hosting)
- Legal basisOverriding legitimate interest on our part in marketing and in the improvement of our products and services, as long as this is in accordance with data protection and competition law requirements or the fulfilment of the contract or consent.
- RecipientHAHN Plastics (North America) Ltd. and Technical service providers
- Legal basisFulfilment of our legal obligations in the area of data security and an overriding legitimate interest in the elimination of disruptions and the security of our offers.
- RecipientTechnical service providers
- Legal basisConsent or overriding legitimate interest on our part in direct marketing, as long as this is in accordance with data protection and competition law requirements.
- RecipientMarketing service provider
- Legal basisLegitimate interest on our part in asserting and defending our rights./div>
- RecipientLegal institutions
2.4 Transfer of data
- Transfer of data to other responsible partiesYour personal data will only be transmitted by us to other responsible parties insofar as this is necessary to fulfil the contract (e.g. delivery with a shipping and logistics company), we or the third party have a legal requirement to pass it on (e.g. Customs clearance) or you have given your consent (e.g. forwarding of the data to subsidiaries or dealers of HAHN Plastics Ltd.). Details on the legal bases and the recipients or the categories of recipients can be found in the section "Processing purposes and legal bases" (see No. 2.3). In addition, data can be transmitted to other responsible parties, insofar as we are obliged to do so due to statutory provisions or an enforceable official or judicial order.
- Service provider (general)We commission external service providers who do not use the data themselves, with tasks such as marketing services, programming and data hosting under contract processing agreements. We have carefully selected these service providers and regularly monitor them, in particular their careful handling and protection of the data stored with them. All service providers are obliged by us to maintain confidentiality and to comply with legal requirements. Other companies in the HAHN Group can also be service providers.
- Duration of storage and retention periodsWhen ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number or other details to help you with your experience. We collect information from you when you subscribe to a newsletter, fill out a form or enter information on our site. We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:
(a) To improve our website in order to better serve you
(b) To allow us to better service you in responding to your customer service requests - Protecting visitor informationWe do not use vulnerability scanning and/or scanning to PCI standards. We use regular Malware Scanning. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology. We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information. All transactions are processed through a gateway provider and are not stored or processed on our servers. According to CalOPPA we agree to the following: Users can visit our site anonymously. Once this privacy policy is created, we will add a link to it on our home page or as a minimum on the first significant page after entering our website.
- California Online Privacy Protection ActCalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. For more information, please visit the following link.
2.5 Log-Files
Each time you use the Internet, your Internet browser automatically transmits certain information and saves it in so-called log files. We store the log files for a period of 14 days to identify faults and for security reasons (e.g. to investigate attempted attacks) and then delete them. Log files, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified and can be passed on to investigating authorities in individual cases. Log files are also used for analysis purposes (without or without a full IP address) subject to the requirements of Section 2.3 "In-house and third-party advertising as well as market research and reach measurement to the extent permitted by law or on the basis of consent".
In particular, the following information is stored in the log files:
- IP address (Internet protocol address) of the device from which the online offer is accessed
- Internet address of the website from which the online offer was accessed (so-called origin or referrer URL)
- Name of the requested URL of our website (request URL)
- Date of retrieval
- Amount of data transferred
- Information on the Internet browser used (user agent) including installed add-ons (e.g. for the Flash Player).
2.6 Age Requirement
This online offer is aimed at adults. The resulting age limit is based on the regulations of the corresponding country or location from which our online offer is accessed.
3. USE OF COOKIES AND SIMILAR TECHNOLOGIES
Cookies and similar technologies can be used as part of the provision of our online offer. Cookies are small text files that can be saved on your device when you visit an online offer. Tracking is possible using various technologies.
3.1 Required Cookies
Required cookies are necessary for you to navigate the website and use essential functions.
| Cookie | Purpose | Validity period |
|---|---|---|
| cookie-preference | Saves the selected cookie settings of a user. | 1 Month |
| acris_cookie_acc | Stores a user's cookie settings over multiple browser sessions. | 1 Hour |
| acris_cookie_landing_page | Saves the user's origin page and first visited page for further use. | Session |
| acris_cookie_referrer | Saves the user's origin page and first visited page for further use. | Session |
| acris_cookie_first_activated | Stores which cookies have already been accepted by the user for the first time. | Session |
| csrf.* | Protection against CSRF attacks on a user's identity. | Session |
| sw-cache-hash | This cookie replaces the sw-currency cookie and contains the active rules and the active currency. This cookie is set when the active rules no longer match the default (e.g. customer login / items in shopping cart). | Session |
| sw-currency | This cookie is set when the customer who is not logged in changes the current currency with an empty shopping cart. | Session |
| sw-states | This cookie describes the current session in simple tags like "cart-filled" and "logged-in". If the client tags match the sw-invalidation-states response header, the cache is skipped. This function is used, for example, to save the cache only for logged-in customers. | Session |
| __TAG_ASSISTANT | Provision of management functions. | Session |
| _GRECAPTCHA | This cookie is used to better distinguish a human from a robot program and to provide spam protection. | 6 Months |
| timezone | Stores the time zone of a user. | 1 Month |
| ^session-.* | Allows you to save information about the current session, e.g. the state of the shopping cart or watch list. | Until the browser is closed. May vary depending on browser settings. |
3.2 Functional cookies
Functional cookies store information such as usernames and language selection. Based on this information, these cookies provide improved and personalized features. All stored information is anonymized.
| Cookie | Purpose | Validity period |
|---|---|---|
| wishlist-enabled | This cookie is needed to use the wish list function of the website. The cookie is used to store information about products that the site user has placed in the wish list and acted accordingly with the wish list, and to enable interaction. | Session |
| store-locator-cookie | Allows Google Maps to be loaded on this page. | 1 Month |
| youtube-video | Allows YouTube videos to be played on this page. | 8 Months |
3.3 Performance cookies
Performance cookies help us to better understand your user behaviour. For example, we use performance cookies to analyse user behaviour based on anonymous and pseudonymous information. It is not possible to draw any direct conclusions about a person.
| Cookie | Purpose | Validity period |
|---|---|---|
| _ga | Contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits. | 2 Years |
| _gid | Contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits. | 24 Hours |
| _gat_.+ | Reading and filtering of bot requests. | 1 Minute |
| _dc_gtm_UA-.+ | Used by Google Tag Manager to control the loading of a Google Analytics script tag. | Session |
| ga-disable-UA-.+ | Used to disable Google Analytics. | Permanent |
| __utma | Saving the calculation of days and time to purchase. | Permanent |
| __utmb | Storage of the time of a user's visit. | Session |
| __utmc | Storage of the time of a user's visit. | 30 Minutes |
| __utmd | Storing and tracking the flow of visitors to the website and classifying them into groups. | 1 Second |
| __utmt | Speicherung der Anzahl von Serviceanfragen. | 10 Minuten |
| __utmv | Storage of the number of service requests. | 2 Years |
| __utmx | This cookie is only set when Google Website Optimizer is used and implemented correctly. If the GWO code is executed correctly, the cookie stores the information about which variation of a page or element the respective visitor has accessed. | 2 Years |
| __utmz | Storage of the search term used and the search engine. | 6 Months |
| _gat | Used by Google Analytics to throttle the request rate. | Session |
| _swag_ga_.* | This cookie is set so that we can store information regarding your site usage. In particular, individual settings are determined and stored. | 24 Hours |
| _gac.* | Storage of campaign information. | 90 Days |
| _ga.* | Storage and counting of page views. | 1 Year |
| dtgsAllowGtmTracking | Purchase and surfing behaviour with Google Tag Manager. | 1 Month |
3.3.1 Technologies used in connection with performance cookies
Google Analytics
If you have given your consent, Google Analytics, a web analysis service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Scope of processing
Google Analytics uses cookies that enable your use of our website to be analysed. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.
We use the user ID function. With the help of the user ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across all devices.
We use the anonymizeIP function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to the website the following data may be collected:
- The pages you have visited, your "click path"
- Achievement of "website goals" (so-called conversions, e.g. newsletter registrations, downloads)
- Your user behaviour (e.g. clicks, length of stay, bounce rates)
- Your approximate location (region)
- Your IP address (in abbreviated form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- The referrer URL (via which website / which advertising material you came to this website)
Purposes of processing
On behalf of the website operator, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as the processor. We have concluded an order processing contract with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.
Transfer to third countries
A transmission of data to the USA cannot be ruled out.
Storage period
The data sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data whose retention period has expired takes place automatically once a month.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking
a. Do not give your consent to the setting of analytical cookies or
b. Download and install the browser add-on to deactivate Google Analytics.
You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser so that all cookies are rejected, functionality on this and other websites may be restricted.
Legal basis and possibility of withdrawal
The legal basis for this data processing is your consent in accordance with Art. 6 (1) S.1 lit. a GDPR and s. 25 (1) TTDSG (Teleservices Data Protection Act). You can revoke your consent at any time with effect for the future by changing the cookie settings via this link and change your selection there.
For more information see the terms of use of Google Analytics and data protection at Google.
3.4 Marketing cookies
Marketing cookies are used to display personalized and relevant promotional content to users. It is not possible to draw any direct conclusions about a person. Marketing and retargeting cookies help us display possible relevant advertising content for you. By suppressing marketing cookies, you will continue to see the same number of advertisements, but they may be less relevant to you.
| Cookie | Purpose | Validity period |
|---|---|---|
| mediameets-facebook-pixel-enabled | We use the Facebook Pixel to track the effectiveness of our Facebook ads. | 180 Days |
| linkedin-enabled | We use the LinkedIn Insight tag to track the effectiveness of our LinkedIn ads. | 180 Days |
| tm_googleads_tracking | This service is used to present interest-based advertisements on third-party sites to visitors of the website. | 2 Years |
3.4.1 Technologies used in connection with marketing cookies
Google Ads
This website uses the remarketing function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Scope of processing
This function is used to present interest-based advertisements to visitors to the website as part of the Google advertising network. The website visitor's browser saves so-called “cookies”, text files that are saved on your computer and enable the visitor to be recognized when they visit websites that belong to the Google advertising network. On these pages, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function. According to its own information, Google does not collect any personal data during this process.
Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as the processor. We have concluded an order processing contract with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities can access the data stored by Google.
Legal basis and possibility of withdrawal
The legal basis for this data processing is your consent in accordance with Art. 6 (1) S.1 lit. a GDPR and s. 25 (1) TTDSG (Teleservices Data Protection Act). You can revoke your consent at any time with effect for the future by changing the cookie settings via this link and change your selection there.
Further information can be found at Google ads settings.
3.5 Management of cookies
Management of your settings regarding technically unnecessary cookies and tracking mechanisms
When you visit our website, you will be asked in a cookie layer for which categories of cookies you give us your consent. The cookie settings you have chosen are saved for a month before you are automatically prompted to set your cookie preferences when you visit our website again. You can use the link in our privacy policy to call up the cookie layer again at any time and edit or revoke your settings with effect for the future or give us your consent at a later point in time.
Switch off all cookies
You can manage your cookie settings individually in the browser. The settings you have made only relate to the browser used. If you want to turn off all cookies, please go to your browser settings and deactivate the setting of cookies. Please note that this can impair the functionality of the website.
Details on the browsers used in many cases can be found here:
Mozilla Firefox
Internet Explorer
Google Chrome
Safari
3.6 Google Maps
This website uses the Google Maps map service via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you click on the integrated Google Maps map, personal data (in this case the IP address) are forwarded to Google. This information is usually transmitted to a Google LLC server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This represents an overriding legitimate interest on our part within the meaning of Art. 6 (1) S.1 lit. a GDPR and s. 25 (1) TTDSG (Teleservices Data Protection Act).
You can find more information on handling user data in Google's privacy policy.
3.7 Google Fonts Local
On our website we use Google Fonts from the company Google. The company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for the European region. We have integrated the Google fonts locally, e.g. on our web server - not on Google's servers. This means that there is no connection to Google servers and therefore won´t be any data transfer or storage.
3.8 YouTube
We embed videos on our websites that are not stored on our servers. We use YouTube. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “YouTube”.
We use YouTube in connection with the “Enhanced Privacy Mode” function in order to be able to show you videos. In the event that you have given your consent for this processing, the legal basis is Art. 6 (1) (a) GDPR. The legal basis may also be Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Enhanced Privacy Mode” function means that data described in more detail below are only transmitted to the YouTube server when you actually start a video. Without this “Enhanced Privacy”, a connection to the YouTube server in the USA is established as soon as you access our internet pages on which a YouTube video is embedded. This connection is required to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time and the website you visited. Moreover, a connection to Google’s “DoubleClick” advertising network is established.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyse user behaviour, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies via a setting in your internet browser. You can find more information on this above under “Cookies”.
Google provides more information on the collection and use of data as well as your rights and protection options in this respect in its privacy policy.
Please note that embedding a large number of videos will result in your data being processed outside the EU/EEA. In some countries there is a risk that the authorities will access the data for security and surveillance purposes without informing you or allowing you to seek legal redress. If we use providers in insecure third countries and you consent, the transfer to an insecure third country takes place on the basis of Art. 49 (1) (a) GDPR.
Provider
YouTube/Google (USA)
Adequate data protection level
No adequate data protection level. The transfer takes place on the basis of Art. 49 (1) (a) GDPR.
If you have clicked on a thumbnail, the third-party provider’s content is immediately reloaded. If you do not want such reloading on other pages, please do no click on the thumbnails any more.
4. External Links
Our online offer may contain links to third-party websites that are not affiliated with us. After clicking the link, we no longer have any influence on the collection, processing and use of any personal data transferred to the third party when the link is clicked (such as the IP address or the URL of the page on which the link is located), since the behaviour of third parties is naturally beyond our control. We are not responsible for the processing of such personal data by third parties.
5. Safety
Our employees and the service companies commissioned by us are bound to secrecy and compliance with the provisions of the applicable data protection laws. We take all necessary technical and organisational measures to ensure an appropriate level of protection and to protect your data managed by us, in particular from the risks of unintentional or unlawful destruction, manipulation, loss, alteration or unauthorised disclosure or unauthorised access. Our security measures are continuously improved in line with technological developments.
6. User rights
To assert your rights, please use the information in the "Contact" section (see No. 8). Please make sure that we can clearly identify you.
6.1 Right to information and access
You have the right to receive information from us about the processing of your data. To do this, you can assert a right to information in relation to the personal data that we process about you.
6.2 Right to rectification and erasure
You can ask us to correct incorrect data. As long as the legal requirements are met, you can request the completion or deletion of your data. This does not apply to data that are required for billing and accounting purposes or are subject to statutory retention requirements. If access to such data is not required, their processing will be restricted (see below).
6.3 Restriction of processing
If the legal requirements are met, you can request that we restrict the processing of your data.
6.4 Data portability
As long as the legal requirements are met, you can request that the data you have made available to us be transmitted in a structured, common and machine-readable format or - if technically feasible - that the data be transmitted to a third party.
6.5 Right to object
- Objection to direct marketing
You can object to the processing of your personal data for advertising purposes at any time ("advertising objection"). Please note that, for organizational reasons, there may be an overlap between your objection and the use of your data in the context of an ongoing campaign. - Objection to data processing on the legal basis “legitimate interest “
You have the right to object to data processing by us at any time, provided this is based on the legal basis of "legitimate interest". We will then stop processing your data, unless we can - in accordance with the legal requirements - prove compelling reasons worthy of protection for further processing, which outweigh your rights.
6.6 Revocation of Consent
If you have given us your consent to process your data, you can revoke this at any time with effect for the future. This does not affect the legality of processing your data until you withdraw your consent.
6.7 Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. You can contact the data protection supervisory authority that is responsible for your place of residence or your state or the data protection supervisory authority responsible for us.
Complaints body in Canada
Office of the Privacy Commissioner of Canada
Office of the Privacy Commissioner of Canada
30, Victoria Street
Gatineau, Quebec
K1A 1H3
Toll-free: 1-800-282-1376
Phone: (819) 994-5444
TTY: (819) 994-6591
Complaints body in USA
U.S. Department of State – Bureau of Administration Privacy Office
Office of Global Information Services
Privacy Office – A/GIS/PRV
State Annex 9
U.S. Department of State
Washington, DC 20006
Email: privacy@state.gov
7. Change of data protection notice
We reserve the right to change our security and data protection measures. In these cases, we will also adapt our information on data protection accordingly. Therefore, please note the current version of our data protection notice.
8. Contact
If you would like to get in contact with us, you can reach us at the address given in the “Responsible” section (see No. 1). For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our data protection officer: info@hahnplastics.ca.
Data protection information as of 01 September 2023
Required cookies are necessary for you to navigate the website and use essential functions.
Marketing cookies are used to display personalized and relevant promotional content to users. It is not possible to draw any direct conclusions about a person. Marketing and retargeting cookies help us display possible relevant advertising content for you. By suppressing marketing cookies, you will continue to see the same number of advertisements, but they may be less relevant to you.
Performance cookies help us to better understand your user behaviour. For example, we use performance cookies to analyse user behaviour based on anonymous and pseudonymous information. It is not possible to draw any direct conclusions about a person.
Functional cookies store information such as usernames and language selection. Based on this information, these cookies provide improved and personalized features. All stored information is anonymized.
These cookies are used to display personalized advertising.
This website uses cookies and similar technologies. By clicking on "Accept all cookies", you consent to the processing and transfer of your data to third-party providers. The data is used for analysis, retargeting and for displaying personalized content and advertising on websites of HAHN Kunststoffe, subsidiaries of HAHN Kunststoffe and on third-party websites. Further information, including data processing by third-party providers, can be found in the settings and in our data protection information. You can refuse the use of cookies or adjust at any time in your settings.