I AM HYDRO
The specialists in demanding data collection and challenging inquiries
Privacy Policy
For website users of I AM HYDRO GmbH
1 At-a-Glance Data Privacy
1.1 General Information
We appreciate your interest in our website. Protecting your personal data during your visit to our homepage is of utmost importance to the management of I AM HYDRO GmbH. In the following information, we provide an overview of how we process your personal data and your rights related to data protection. Personal data includes all data that can be attributed to you personally, such as your name, address, email addresses, and user behavior.
If an individual wishes to utilize special services provided by our company through our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally seek the consent of the individual concerned. The processing is always carried out in accordance with the EU General Data Protection Regulation (GDPR) and in compliance with the specific data protection regulations applicable to I AM HYDRO GmbH.
I AM HYDRO GmbH, as the data controller, has implemented technical and organizational measures to ensure the most comprehensive protection of the personal data processed through this website against loss, destruction, access, alteration, or distribution by unauthorized individuals. This includes the use of SSL or TLS encryption on this site for security and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the change of the browser’s address line from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
However, absolute protection cannot be guaranteed due to inherent security vulnerabilities in internet-based data transmissions.
1.2 Person responsible for data processing
The entity responsible, as per Article 4(7) of the GDPR and the applicable local data protection regulations, is:
I AM HYDRO GmbH
Leopoldstraße 1
78112 St.Georgen
Telefon: +49 (0) 07724-9350123
E-Mail: kontakt@iamhydro.com
1.3 How do we collect your data?
Your data is collected, in part, by you providing it to us. This may include data you enter into a contact form, for example.
Other data is collected automatically or with your consent when you visit the website through our IT systems. These are primarily technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.
1.4 What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.
1.5 Who receives my data?
Unless otherwise specified in the detailed descriptions of the services, those within our company who need access to your data to fulfill our contractual and legal obligations or to implement our legitimate interests will have access to your data. We will only disclose information about you outside the company if legal or regulatory obligations allow or require us to do so, if the disclosure is necessary to process and fulfill the contract or, at your request, to carry out pre-contractual measures, if we have your consent, or if we are authorized to provide information.
If we use external service providers for certain functions of our offer, they have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. Your personal data may be processed on the basis of data processing agreements in accordance with Article 28 of the GDPR, and we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. In this case, the categories of recipients are our service providers for website hosting.
1.6 General information about the legal bases for data processing on this website
If you have given your consent to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data according to Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing additionally takes place based on § 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Data processing can also occur based on our legitimate interest according to Art. 6(1)(f) GDPR. The relevant legal bases for each specific case are described in the following paragraphs of this privacy policy.
1.7 Data retention period
Unless a more specific retention period is stated within this privacy information, your personal data will be stored by us until the purpose for data processing no longer exists. If you make a legitimate request for deletion or revoke your consent for data processing, your data will be deleted, provided we have no other legally permissible reasons for retaining your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur once these reasons no longer apply.
2 Your Rights
2.1 Information, Correction, and Deletion
Under the applicable legal provisions, you have the right to obtain information about your stored personal data, their origin, recipients, and the purpose of data processing at any time, free of charge, and, if applicable, the right to correct or delete this data. For this purpose, as well as for any other questions related to personal data, you can contact us at any time.
2.2 Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of your personal data stored with us, we typically need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data has occurred or is occurring unlawfully, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you require them for the exercise, defense, or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have filed an objection according to Art. 21(1) GDPR, a balance between your interests and ours must be made. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has been restricted, these data, apart from their storage, may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
2.3 Right to Data Portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.
2.4 Right to Object to Data Collection in Certain Cases and Against Direct Marketing (Art. 21 GDPR)If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, including profiling based on these provisions. You can find the respective legal basis for processing in this data protection information. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).
2.5 Withdrawal of Your Consent for Data Processing
Many data processing operations are only possible with your explicit consent. You can withdraw your consent at any time. The legality of data processing carried out prior to the withdrawal remains unaffected by the withdrawal.
2.6 Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged infringement. This right to lodge a complaint is without prejudice to other administrative or judicial remedies.
In the case of Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10a, 70173 Stuttgart.
3 Data Collection on Our Website
3.1 External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated through a website.
The use of the host is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and for the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
If the respective consent has been obtained, the processing is carried out exclusively based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Our host will process your data only to the extent necessary to fulfill its performance obligations and will follow our instructions regarding these data. To ensure data processing complies with data protection regulations, we have concluded a data processing agreement with our host.
3.2 Use of Cookies
“Cookies” are referred to as small files that are stored on users’ devices. Cookies can store various information, such as language settings on a website or the point at which a video was watched.
Our website does not currently use any cookies.
3.3 Inquiries via Email, Phone, or Fax
When you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not disclose these data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send us in contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after the completion of processing your request). Mandatory legal provisions, especially statutory retention periods, remain unaffected.
3.4 Handling of Applicant Data
We offer you the opportunity to apply to us (e.g., by email, postal mail, or via an online application form). In the following, we will inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection laws and all other legal regulations, and your data will be treated strictly confidential.
3.4.1 Scope and Purpose of Data Collection
When you submit an application to us, we process the associated personal data (e.g., contact and communication data, application documents, etc.) as far as necessary to make a decision about establishing an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contract), and, if you have given consent, Art. 6(1)(a) GDPR. Consent can be revoked at any time, with effect for the future. Your personal data will only be disclosed within our company to individuals who are involved in the processing of your application.
If the application is successful, the data you submitted will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.
3.4.2 Retention Period of Data
If we are unable to offer you a job, if you reject a job offer, or if you withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for a period of up to 6 months from the end of the application process (rejection or withdrawal of the application). Subsequently, the data will be deleted, and physical application documents will be destroyed. This retention is primarily for the purpose of evidence in the event of legal disputes. If it becomes apparent that the data will be required after the expiration of the 6-month period (e.g., due to a pending or threatened legal dispute), deletion will only take place when the purpose for further retention no longer applies.
Longer retention may also occur if you have given your consent (Art. 6(1)(a) GDPR) or if legal retention obligations prevent deletion. Consent can be revoked at any time, with effect for the future.
4 Our Social Media Profiles
4.1 Purpose of Data Processing on Social Media Profiles
We maintain publicly accessible profiles on social networks. The specific social networks we use can be found below. The purpose of such social media presences is to engage in public relations, which means providing our customers with information about offers, products, contests, news, and, of course, interacting with our visitors on various platforms on all these topics, including responding to relevant inquiries. The purely informational visit to our social media platform is generally possible without the active provision or collection of personal data.
Furthermore, social media platforms offer the opportunity to leave various types of content, such as videos, images, public messages, and comments (posts) on our company profiles. We, in conjunction with the platform operator, are responsible for the deletion of unlawful or inappropriate posts and content on our presence (including, but not limited to, posts that violate the law or regulations, hate comments, explicit sexual content, or attachments such as images or videos, as well as violations of copyright, personal rights, and criminal laws). In cases of direct communication directed at us (personal private messages, letters, or emails), the platform operator has no influence.
Social media platforms can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). The visit to our social media presences may trigger numerous data protection-relevant processing operations. These may include, for example:
- The entire infrastructure of the social media platforms is the responsibility of the respective operator. They maintain their own privacy policies and a corresponding user relationship with you should you act as a registered user.
- When you are logged into your social media account and visit our social media presence, the operator of the social media portal can associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, data collection can occur, for example, through cookies stored on your device or through the technically required collection of various data and information in so-called log files or server log files, such as your IP address.
- With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please note that we cannot fully trace all processing processes on the social media portals. Depending on the provider, further processing may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Wherever we have the opportunity, we strive to make our social media offerings as privacy-friendly as possible.
4.1.1 The legal basis
Our social media presences serve our public relations efforts and aim to ensure a comprehensive online presence. In addition, there is a legitimate interest in answering inquiries from our users and visitors to maintain and promote customer satisfaction. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
The analysis processes initiated by social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g., consent within the meaning of Article 6(1)(a) of the GDPR).
4.1.2 Responsible Party and Exercise of Rights
If you visit one of our social media profiles (e.g., Facebook), we share responsibility with the operator of the social media platform for the data processing activities triggered during your visit. You can exercise your rights (information, correction, deletion, restriction of processing, data portability, and complaint) against both us and the operator of the respective social media platform (e.g., Facebook).
Please note that despite our shared responsibility with the social media platform operators, we do not have full control over the data processing activities of the social media platforms. Our abilities are primarily governed by the corporate policies of each respective provider.
4.1.3 Retention Period
The data that is directly collected by us through the social media presence will be deleted from our systems as soon as the purpose for their storage is no longer applicable, you request us to delete it, revoke your consent for storage, or when the purpose for data storage no longer applies. Mandatory legal requirements, especially retention periods, remain unaffected.
We have no influence on the storage duration of your data that is stored by the social media platform operators for their own purposes. For details regarding this, please refer directly to the operators of the social media networks (e.g., in their privacy policies, see below). Stored cookies remain on your device until you delete them.
Public posts made by you on one of our social media presences generally remain in existence indefinitely. Of course, you have the option to delete the post on your own if that’s possible. As mentioned earlier, we reserve the right to independently delete posts and content that are unlawful or inappropriate on our presence. We have no control over the deletion of your data or content by the social media platform operator. The privacy policies of the respective platform operators apply in addition to this.