1. Controller
The controller within the meaning of Art. 4 No. 7 GDPR is
Hummel GmbH u. Co. KG
Hutwiesenstraße 20
71106 Magstadt
Phone: +49 7159 402-0
Fax: +49 7159 402-277
Email: hummelhummel-print.com
If you have questions about data protection or wish to exercise your rights, please contact the controller named above or our data protection officer directly (see section 9).
2. General purposes of processing
We process personal data in order to provide, optimise and secure this website, to respond to contact enquiries, to prepare and perform contractual services and to fulfil legal obligations.
3. Which data we use and why
3.1 Hosting
We use hosting services to provide infrastructure, platform, computing capacity, storage, database and security services. The legal basis is Art. 6(1)(1)(f) GDPR. We have concluded data processing agreements pursuant to Art. 28 GDPR with our hosting partners.
3.2 Access data
Each time our website is accessed, we process server log files (e.g. name of the file retrieved, date and time of retrieval, volume of data transferred, browser type and version, operating system, referrer URL, IP address). The processing is based on Art. 6(1)(1)(f) GDPR in order to ensure trouble-free operation and to investigate any cases of misuse.
3.3 Cookies
We use session and persistent cookies to make our website user-friendly. Optional cookies and comparable access to your device only take place with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(1)(a) GDPR. Technically necessary access is governed by Section 25(2) TDDDG; the subsequent processing is based on Art. 6(1)(1)(f) GDPR. You can adjust or withdraw your consent at any time via our consent management.
3.4 Contract and order data
In order to perform contracts, we process names, contact details, invoicing and payment information as well as communication histories. The legal basis is Art. 6(1)(1)(b) GDPR. Data is deleted once the statutory retention periods have expired, provided no further obligations exist.
3.5 Contact enquiries
If you contact us by form, email or telephone, we process your details in order to handle your request. The legal basis is Art. 6(1)(1)(b) GDPR (contract-related enquiries) or Art. 6(1)(1)(f) GDPR (general enquiries). Where consent is required, we rely on Art. 6(1)(1)(a) GDPR. To handle incoming emails and contact enquiries more quickly, we may process them with the support of AI-based systems, for example to assign requests, summarise them or prepare draft replies. For this purpose, the content is transmitted via the AI service Opper (Opper Technology AB, Sweden), acting as our processor, to an AI model hosted in the EU. An employee decides on your request and on every reply; no decision based solely on automated processing within the meaning of Art. 22 GDPR takes place. The legal basis is Art. 6(1)(1)(f) GDPR; our legitimate interest lies in handling your enquiry efficiently, and for contract-related enquiries additionally Art. 6(1)(1)(b) GDPR. Data transfers to third countries take place on the basis of the safeguards under Art. 44 et seq. GDPR.
3.6 Use of SalesViewer®
We use SalesViewer® technology from SalesViewer® GmbH on the basis of Art. 6(1)(1)(f) GDPR to collect company-related data. The data is pseudonymised. You can object to this collection at any time at https://www.salesviewer.com/opt-out.
3.7 Use of HubSpot
We use HubSpot (HubSpot Ireland Limited, Dublin) for marketing, sales and service processes. HubSpot processes contact, interaction and usage data in order to send emails, process forms and personalise content. The legal basis is your consent (Art. 6(1)(1)(a) GDPR) or our legitimate interest in efficient customer communication (Art. 6(1)(1)(f) GDPR). A data processing agreement is in place with HubSpot; data transfers to the USA take place on the basis of standard contractual clauses.
3.8 Analytics and marketing tools
We use Google Analytics (with IP anonymisation) and, optionally, Google Ads and Microsoft Advertising. The legal basis is your consent pursuant to Art. 6(1)(1)(a) GDPR. Further information on opting out can be found in our consent banner and in the providers' documentation (e.g. Google Analytics Opt-Out).
3.9 Microsoft Teams & collaboration
We use Microsoft Teams (Microsoft Ireland Operations Limited) for internal communication. If you send a message via our contact form, it may be forwarded automatically to Microsoft Teams via integrations. The legal basis is Art. 6(1)(1)(f) GDPR. Data transfers outside the EU take place on the basis of standard contractual clauses.
3.10 Consent management with Cookiebot
We use Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to obtain, document and technically implement your consent. In particular, consent status, time, browser information and a pseudonymous identifier are processed. The legal bases are Art. 6(1)(1)(c) and (f) GDPR as well as Section 25(2) TDDDG. You can change your selection at any time via “Cookie settings” in the footer.
3.11 Maps, videos and external content
On individual pages we embed external content subject to your consent, in particular Google Maps (Google Ireland Limited), YouTube videos (Google Ireland Limited), Vimeo videos (Vimeo.com, Inc., USA) and the job advertisement widget from JOIN Solutions AG. When this content is loaded, your IP address, browser and device information as well as the page accessed may be transmitted to the respective provider. The legal bases are Section 25(1) TDDDG and Art. 6(1)(1)(a) GDPR. A transfer to third countries, in particular to the USA, is possible and takes place on the basis of the safeguards provided for in Art. 44 et seq. GDPR.
3.12 AI assistant
If you use our AI assistant, we process your input, the selected language, a pseudonymous user identifier and the previous course of the conversation in order to answer your enquiry and continue the conversation. For this purpose, the content is transmitted via the AI service Opper (Opper Technology AB, Sweden) to an AI model hosted in the EU. If the optional knowledge search is technically enabled, a model hosted in Sweden on Microsoft Azure is additionally used via Opper to create a search representation. Please do not enter any confidential information or special categories of personal data. The legal basis is your consent pursuant to Art. 6(1)(1)(a) GDPR; where your enquiry relates to a contract, additionally Art. 6(1)(1)(b) GDPR. Data transfers to third countries take place on the basis of the safeguards under Art. 44 et seq. GDPR.
4. Google Analytics
We use Google Analytics (Google Ireland Limited) with IP anonymisation enabled. The processing is based on your consent (Art. 6(1)(1)(a) GDPR). Google processes data in the EU and, where applicable, the USA (standard contractual clauses). You can deactivate the collection at any time via the browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en) or via our consent management.
5. Retention period
We store personal data only for as long as is necessary for the respective purposes. Statutory retention periods (e.g. under commercial and tax law) remain unaffected.
6. Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and to object to processing (Art. 15–21 GDPR). You may also withdraw consent you have given at any time (Art. 7 GDPR) and lodge a complaint with a supervisory authority (Art. 77 GDPR). Please address your request to datenschutzhummel-print.com.
7. Data security
We secure our systems by means of technical and organisational measures in accordance with Art. 32 GDPR. Sensitive data is transmitted in encrypted form (TLS). Nevertheless, complete security on the internet cannot be guaranteed.
8. Disclosure of data
Data is disclosed exclusively where this is necessary for the performance of a contract (e.g. logistics service providers) or where we are legally obliged to do so. A transfer to third countries only takes place with appropriate safeguards in place (Art. 44 et seq. GDPR).
9. Data protection officer
Our external data protection officer can be reached at:
datenschutzhummel-print.com
Hummel GmbH u. Co. KG – Data Protection
11. Changes to this privacy policy
We reserve the right to amend this privacy policy in order to adapt it to changes in the legal situation or to changes in the service and in data processing. The version currently available on this page applies.