Data protection

Privacy policy

Status 23.03.2020

This statement provides you with an overview of how your personal data is collected and processed when you use our website.

Controller responsible for the processing

The responsible body within the meaning of the data protection laws is

from Hanf e.K.
Fraunhoferstr. 3
25524 Itzehoe

Represented by:

Tim Lange


Phone: +49 (0)4893/254 04 83


What is personal data?

Personal data is any information relating to an identified or identifiable natural person. The decisive factor is therefore whether the data collected can be used to establish a personal reference. This includes information such as your name, address, telephone number and e-mail address. Information that is not directly associated with your real identity – such as favorite websites or the number of users of a site – is not personal data.

How we collect and process your personal data

When you visit our websites, our web servers temporarily store the connection data of the requesting computer, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard for the purpose of system security. Additional personal data such as your name, address, telephone number or e-mail address will not be collected unless you provide this information voluntarily, e.g. as part of a registration, a survey, a competition, to execute a contract or an information request.

How we use your personal data, how we pass it on

If the opportunity for the input of personal or business data (e-mail addresses, names, addresses) is given, the input of these data takes place voluntarily. E-mails are sent via a contact form. If you send us such a message, your personal data will only be collected to the extent necessary for a response. The e-mail is transmitted unencrypted.

We use the personal data provided by you exclusively for the purpose of technical administration of the websites and to fulfill your wishes and requirements, i.e. generally to process the contract concluded with you or to respond to your inquiry.

We will only use this data for product-related surveys, marketing purposes and statistical purposes if you have given us your prior consent or if you have not objected to this – insofar as this is provided for by law.

Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of processing the contract or you have expressly consented to this.

Any consent given can be revoked at any time with effect for the future.

How long your data will be stored

In principle, we store all information that you transmit to us until the respective, e.g. contractual, purpose has been fulfilled. Z. E.g. for inquiries until they are dealt with, for newsletters until you unsubscribe from the newsletter. If longer storage is provided for by law, the data will be stored within this framework.

If you no longer wish us to use your data, we will of course comply with this request immediately (please contact us at the address given under “Contact”).

When will your data be deleted

The stored personal data will be deleted if you revoke your consent to storage, if knowledge of the data is no longer required to fulfill the purpose for which it was stored or if storage is inadmissible for other legal reasons. Data for billing and accounting purposes are not affected by a request for erasure.

Provision of the website and creation of log files

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s internet service provider
  • The IP address of the user
  • Date and time of access
  • Websites from which the user’s system accesses our website
  • Websites that are accessed by the user’s system via our website

The data is also stored in the log files of our system. This does not affect the user’s IP addresses or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of cookies

When you visit our website, we use so-called cookies. These are small text files that are stored on your computer. Cookies help us to determine the frequency of use and the number of users of our website, as well as to make our services as convenient and efficient as possible for you.

On the one hand, we use so-called “session cookies”, which are only stored temporarily for the duration of your use of one of our Internet pages. On the other hand, we use “permanent cookies” to store information about visitors who repeatedly access one of our Internet pages. The purpose of using these cookies is to be able to offer you optimal user guidance, to “recognize” you and to be able to present you with a website that is as varied as possible and new content when you use it repeatedly. The content of a permanent cookie is limited to an identification number. Name, IP address etc. are not stored. An individual profile of your usage behavior does not take place.

It is also possible to use our services without cookies. You can deactivate the storage of cookies in your browser, restrict it to certain websites or set your browser so that it notifies you as soon as a cookie is sent. Please note, however, that if you deactivate it, you must expect a limited display of the page and limited user guidance.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. a GDPR. 1 lit. f GDPR is stored. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

These are your data protection rights

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and possible recipients and the purpose of data processing (Art. 15 GDPR) and, if applicable, a right to correction of incorrect data (Art. 16 GDPR), deletion of this data (Art. 17 GDPR), the right to restriction of processing in accordance with Art. 18 GDPR, the right to object (Art. 21 GDPR) and the right to data portability of data provided by you in accordance with Art. 20 GDPR). The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure.
Furthermore, in the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link:

How you can withdraw your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Contact for questions, complaints, assertion of your rights

If you have any questions, complaints or wish to assert your data protection rights, you can contact us at any time via our email

Changes to the privacy policy

Changes may be made to this privacy policy, which will be announced on this page in good time.

Data protection for applications and in the application process

We collect and process the personal data of applicants for the purpose of handling the application process. Processing can also be carried out electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail. When an employment contract is concluded with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).