PRIVACY POLICY

§1 Information on the collection of personal data

(1) The following section provides information on the collection of personal data when using our website. Personal data refers to any data that can be personally linked to you, e.g., name, address, email addresses, and user behavior.

(2) The controller pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is HENSEL-VISIT GmbH & Co. KG (in insolvency proceedings), Robert-Bunsen-Str. 3, 97076 Würzburg, email: info@hensel.de, telephone: +49 (0)931/27881-0 (see also our legal notice/imprint).

(3) When you contact us via email or a contact form, the data you provide (your email address and, if applicable, your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

(4) We implement technical and organizational measures to protect customer data as comprehensively as possible against unauthorized access. We use an encryption method on our websites. Your data is transmitted between your computer and our server (and vice versa) via the Internet using TLS encryption. You can recognize this by the closed lock icon in your browser's status bar and the fact that the address line begins with "https://".

(5) If we engage contracted service providers for specific functions of our service or wish to use your data for advertising purposes, we will inform you in detail below regarding the respective processes. We will also specify the criteria established for the duration of data storage.

§2 Rights of the Customer

(1) The customer has the rights set out below regarding the personal data concerning them.

(2) Right of access (Art. 15 GDPR): The customer has the right to request confirmation as to whether personal data concerning them is being processed; if this is the case, the customer has the right to access this personal data and to the information detailed in Art. 15 GDPR.

(3) Right to rectification and erasure (Art. 16 and 17 GDPR): The customer has the right to demand the immediate rectification of incorrect personal data concerning them and, where applicable, the completion of incomplete personal data. They also have the right to demand the immediate erasure of personal data concerning them if one of the grounds specified in Art. 17 GDPR applies—for example, if the data is no longer required for the purposes pursued.

(4) Right to restriction of processing (Art. 18 GDPR): The customer has the right to demand a restriction on processing if one of the conditions listed in Art. 18 GDPR is met—for example, if the customer has objected to the processing, for the duration of any review.

(5) Right to data portability (Art. 20 GDPR): In certain cases detailed in Art. 20 GDPR, the customer has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format, or to request the transmission of such data to a third party.

(6) Right to object (Art. 21 GDPR): If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to safeguard legitimate interests), the customer has the right to object to the processing at any time for reasons arising from their particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

(7) Pursuant to Art. 77 GDPR, the customer has the right to lodge a complaint with a supervisory authority if they believe that the processing of data concerning them violates data protection regulations. This right to lodge a complaint may be exercised, in particular, with a supervisory authority in the Member State of the customer's habitual residence, place of work, or the place of the alleged infringement.

§ 3 Collection of personal data when visiting our website

(1) When using the website for purely informational purposes - i.e., if the customer does not register or otherwise transmit information to us - we only collect the personal data that the customer's browser transmits to our server. If the customer wishes to view our website, we collect the following data, which are technically necessary for us to display our website and to ensure stability and security (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference relative to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Volume of data transmitted
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on the customer's computer when they use our website. Cookies are small text files that are stored on the customer's hard drive, assigned to the browser being used, and through which certain information flows to the entity setting the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. Processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and solely in the interest of optimizing or enabling user navigation and adapting the presentation of our website.

(3) This website uses transient cookies (see (a) below) and persistent cookies (see (b) below); their scope and functionality are explained below: a) Transient cookies are automatically deleted when the customer closes the browser. These include, in particular, so-called session cookies. These store a "session ID," which allows various requests from the customer's browser to be assigned to the shared session. This enables the customer's computer to be recognized when returning to our website. Session cookies are deleted when the customer logs out or closes the browser. b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. The customer can delete these cookies at any time via their browser's security settings.

(4) The customer can configure their browser to notify them when cookies are placed. This makes the use of cookies transparent to them. Furthermore, the customer can delete cookies at any time via the appropriate browser settings and prevent the placement of new cookies. Please note, however, that in this case, our website may not display optimally, and some functions may no longer be technically available.

(5) We use cookies to identify the customer during subsequent visits if they have an account with us. Otherwise, the customer would have to log in again for every visit.

(6) Flash cookies are not processed by the customer's browser but by their Flash plug-in. We also use HTML5 storage objects, which are stored on the customer's device. These objects store the necessary data independently of the browser used and do not have an automatic expiration date. If the customer does not wish for Flash cookies to be processed, they must install a corresponding add-on, such as "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy) or the Adobe Flash Killer Cookie for Google Chrome. The customer can prevent the use of HTML5 storage objects by using private mode in their browser. We also recommend regularly deleting cookies and browser history manually.