This data protection policy applies to Haubis.
2. Purpose of the data processing
Haubis processes the personal data of its employees, partners, customers, suppliers and visitors for the purpose of performing its business activities and for the fulfilment of associated legal and contractual requirements.
2.1 Processing of customer data
Haubis collects and processes personal data provided by customers and interested parties in order to generate quotes and complete orders, as well as to fulfil the associated legal and contractual obligations. In order to fulfil its legal obligations, data is also shared with the relevant authorities and public bodies.
2.2 Processing of visitor data
Haubis collects and processes the personal data of visitors for the purposes of organising and holding events at the Haubiversum World of Bread Experience.
2.3 Job applicants
Contact data and application documents submitted as part of a job application are processed electronically by us for the purposes of selecting a suitable candidate for employment.
In the case of an unsuccessful application, the application documents will only be kept on file with the consent of the candidate.
2.4 Website & cookies
2.4.1 IP address
By visiting our website, some information is automatically stored on the web server. This includes the browser used, your operating system, which site you visited our website from, your IP address, the time at which you accessed our website and other information. This data is pseudonymised and cannot be clearly linked to any one individual without the provision of further data.
Haubis does not analyse this data unless the website is used in an unlawful manner.
Cookies are small files that allow this website to store user-specific information on the user's computer while the user is visiting the website. Cookies help us to analyse the frequency of visits and the number of visitors to our website, as well as to make our website more user-friendly and efficient for visitors.
Haubis uses 'session cookies', which are only stored for the duration of your visit to our website, as well as 'permanent cookies', which are used to store information about visitors for their next visit to our website.
The purpose of using these cookies is to provide visitors to the website with the best user experience, as well as to enable us to recognise users and offer return visitors the most appealing website and interesting content possible. The content of a permanent cookie is limited to an identification number. Your name, IP address, etc. are not saved. We do not create an individual profile of your user behaviour.
Our website can also be used without cookies. In your browser settings, you can deactivate cookies, limit them to certain websites or set your web browser (Chrome, IE, Firefox etc.) to notify you when a cookie is sent. You can also delete cookies from the hard disk of your PC at any time. Please be aware that this may result in a limited display and limited usability of the website.
2.4.2 Google Analytics
This website uses Google Analytics, a web analytics service offered by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website (including your IP address) is sent to a Google server in the USA and stored there. Google uses this information to analyse your use of the website, produce website activity reports for the owner of the website and provide other services relating to website activity and internet usage. If necessary, Google may also share this information with third parties as required by law or within the framework of an agreement with Google to process data on their behalf. Google does not link your IP address with any other information collected by Google. You can prevent cookies from being saved by selecting the appropriate setting in your browser software; however, please note that as a result you may not be able to use the full functionality of this website. By using this website, you consent to the processing of your personal data by Google in the manner described above and for the aforementioned purposes.
2.4.3 Google Maps
This website uses an API for the mapping service Google Maps. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address is collected and stored in order to enable you to use the full functionality of Google Maps. This information is normally sent to a Google server in the USA and stored there. The provider of this website does not have any influence on this data transfer.
Google Maps is used in the interests of ensuring that our online ^ presence is appealing and to make it easier to find the locations we indicate on the website. This qualifies as a legitimate interest as per Article 6 Paragraph 1 (f) of the GDPR.
2.4.4 Social media plugins
This website uses social media plugins. These plugins are only activated when clicked on by the visitor to the website. Haubis does not process any personal data collected through these plugins.
188.8.131.52 Embedded YouTube videos
Functions provided by the service YouTube have been implemented into this website. These functions are provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The embedded videos store cookies on the computer of the user when they access the website. If you have deactivated cookies for Google Ads, no such cookies will be saved when accessing YouTube videos. However, YouTube does store cookies containing usage information that does not relate to the user's personal data. If you would like to block this type of cookie, you can change this in your browser settings.
184.108.40.206 Use of Google+
Using the Google +1 button, you can publish information around the world. By using the Google +1 button, you and other users will receive personalised content from Google and our partners. Google saves both the information that you have given a +1 for a piece of content, as well as information about the website that you were viewing when you clicked on +1. Your +1 may be displayed as a piece of information alongside your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and adverts online.
Google records information about your +1 activity in order to improve Google services for you and others. To be able to use the Google +1 button, you require a globally visible, public Google profile that must include at least the name given for the profile. This name is used for all Google services. In some cases, this name may replace another name that you have used when sharing content about your Google account. The identity of your Google profile may be shown to users who know your email address or have other identifying information about you available to them.
220.127.116.11 Use of Instagram
Functions provided by the service Instagram have been embedded into this website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, clicking the Instagram button on our website may link the content of our website with your Instagram profile. This enables Instagram to link your visit to our website with your user account. Please note that we, as the provider of the website, do not have any knowledge of the content of the data shared with Instagram or how it is processed by Instagram.
18.104.22.168 Use of Facebook
Plugins provided by the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are embedded into our website. The Facebook plugins can be identified by the Facebook logo or the "Like button" on our website. An overview of the Facebook plugins can be found here: developers.facebook.com/docs/plugins/.
If you would not like Facebook to link your visit to our website with your Facebook user account, please log out of your Facebook user account.
We use the information that you provide when signing up for the newsletter in order to regularly contact you and keep you up to date with news about the company and current offers.
In order to ensure that the user fully consents to receiving the newsletter, we use the "Double opt-in" procedure. The process involves the potential recipient requesting to be added to a distribution list. Subsequently, the user must legally confirm through a confirmation email that they wish to subscribe to the distribution list. Only when the confirmation is received is the email address actively added to the distribution list.
We use this data exclusively to send users the requested information and offers. The user may revoke their consent to their data and email address being stored and their email address being used to send the newsletter at any time, for example by clicking on the "unsubscribe" link in the newsletter.
We use the newsletter software Newsletter2Go. Your data is therefore shared with Newsletter2Go GmbH. Newsletter2Go is forbidden from selling your data and from using your data for any purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected in accordance with the requirements of the GDPR and German data protection law.
More information can be found here: www.newsletter2go.de/informationen-newsletter-empfaenger/
2.6 Principles relating to the processing of personal data
The processing of personal data is based on strict principles that ensure that the protection and security of data, as well as the rights of the data subject, are the top priority.
2.6.1 Legality & transparency
Data processing is carried out on a lawful basis and in good faith. The data subject is made aware of the intended processing and the way their data is handled during the collection of said data. The data subject is provided with information about the following points:
The controller The purpose of the data processing The legal basis of the data processing
2.6.2 Purpose limitation
Data is collected and processed for specific, explicit and legitimate purposes. The processing of this data is not carried out in a manner that is not compliant with these purposes.
2.6.3 Data minimisation
Only the data that is absolutely necessary for the stated purposes is collected and processed. If it is possible for the achievement of the goal and if the level of effort required is appropriate, only anonymised data is processed.
2.6.4 Storage limitation and deletion
Personal data is deleted as soon as the purpose for which it was originally collected is no longer valid and deletion is not prohibited by legally obligated retention periods.
If, in individual cases, there are legitimate interests in this data, the data will continue to be stored
until the legitimate interest is legally resolved.
2.6.5 Data security
Data confidentiality applies to personal data. This data must be kept confidential and protected against unauthorised access, illegal manipulation or transmission as well as protected against loss and destruction using appropriate organisational and technical measures.
2.6.6 Accuracy of information
Personal data must always be accurate, complete and up-to-date. Appropriate measures are in place to enable the correction of outdated, incorrect or incomplete data.
3. Obligation to data confidentiality
All employees of Haubis are contractually obliged to observe data confidentiality and are given regular training and information about the secure handling of personal data and other critical data.
4. Data security
The protection of the confidentiality, availability and integrity of data is an important obligation of Haubis. This applies equally to trade secrets, customer information, personal data and other critical information.
To this end, technical and organisational security measures based on the latest technology and internationally recognised best practices and safety standards have been established and are continually being improved.
5. Data protection officer
Haubis is not under an obligation to appoint a data protection officer as Article 37, Paragraph 1 of the EU GDPR does not apply.
6. Rights of the data subject
Each data subject whose personal data is processed by Haubis has certain rights that they are able to exercise at any time.
To exercise your rights as a data subject, please get in touch with us by email at .
Data subjects have the right to request information about whether their personal data is being processed, and if so, which personal data and the purposes of this processing.
Data subjects have the right to request the immediate rectification of incorrect personal data.
Data subjects have the right to restrict the processing of their personal data if the accuracy of the personal data is contested by the data subject, the processing is unlawful, the controller no longer needs the personal data for the purposes of the processing, or the data subject has objected to processing.
6.4 Withdrawal of consent
Data subjects have the right to withdraw their consent to the processing of their personal data at any time.
6.5 Data portability
Data subjects have the right to request access to the personal data that they have provided to Haubis. This data shall be provided to the data subject in a structured, commonly used and machine-readable format. They also have the right to demand that this data is transmitted to another controller, as far as this is technically achievable. The right to data portability applies only to personal data that is processed using automated procedures.
6.6 Erasure - the right to be forgotten
The data subject has the right to request that their personal data is immediately deleted if there is no legal basis or no longer any legal basis for processing the personal data or the data is no longer required for the purpose for which it was collected, if the data subject objects to the processing, or if the data processing is unlawful, and no legally required retention periods apply.
Data security is a top priority when it comes to the rights of the data subject, which is why the rights of the data subject may only be exercised once the data subject can be indisputably identified.
You have the right to lodge a complaint with the relevant data protection authorities at any time.
7. Data transfer
The transfer of personal data to recipients outside of the organisation, as well as recipients in EU third countries, may only take place in compliance with the relevant regulations and on a lawful basis, as well as taking into consideration the highest levels of confidentiality and data security.
Haubis uses the services of a number of different processors to carry out its data processing. All of our processors are contractually bound by a processor agreement to comply with the data protection requirements set out by the appropriate regulations.
8. Continuous inspection and improvement
The continuous improvement of quality and processes is a top priority for Haubis.
Compliance with data protection regulations and appropriate legislation, as well as the effectiveness of data protection and data security measures, is continually monitored and improved in order to be able to guarantee the optimum implementation of the data protection measures.