Privacy Policy

1. General Declaration
2. Name and Address of the data protection officer
3. Definition of personal data
4. Collection of anonymized data/Log files/IP Addresses
5. Purpose of data collection
6. Rights of data subjects
7. Deleting or blocking of data
8. Cookies
9. SSL encryption
10. Subscribing to the newsletter
11. Google Analytics
12. Google Search Console
13. Google Tag Manager
14. Usage of Google Maps
15. Usage of Google Fonts
16. Embedded YouTube videos
17. Usage of Facebook
18. Usage of LinkedIn
19. Usage of Xing
20. Contact via email
21. Data protection during application process
22. Changes to our Privacy Policy
23. Alternative dispute resolution in accordance with Art. 14 Abs. 1 ODR-VO and § 36 VSBG
24. State of this statement

1. GENERAL DECLARATION

As user of our website you will receive all required information in this privacy policy on how, in which scope and for which purpose we or third party-party suppliers collect and use your data. We feel committed to treating your personal data with confidentiality and work strictly within the limits of all legal standards. The privacy policy of h2c GmbH is based on the terminology used by the regulator of the European GDPR.

Collecting personal data happens on a voluntary basis if possible. We will also only pass this data to third-parties if we receive your explicit consent. We provide high security for especially confidential data by using SSL encryption. Nevertheless we do not want to fail to point out the general dangers of using the internet on which we do not have any influence. Especially when communicating via email personal data is not always secure and without special precautions could possibly be captured by third-parties.

2. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

Logo
Company nameGFD Gesell­schaft für Diamant­produkte mbH
AddressAlbrecht-Berblinger-Str. 11
89231 Neu-Ulm
Germany
 
Phone+49 731 880 334-0
Fax+49 731 880 334-10
E-Mailinfo@gfd-diamond.com
Internetgfd-diamond.com
 
CEODr.-Ing. Peter Gluche
Responsibility for contentDr.-Ing. Peter Gluche
Commercial registerHRB 17999
Registration courtMemmingen
Tax number151/127/20631
VAT numberDE813947602
Place of jurisdictionNeu-Ulm, Germany

3. DEFINITION OF PERSONAL DATA

Personal data in the meaning of GDPR is all information that refers to an identified or identifiable natural person. A natural person is considered identifiable if he or she can be directly or indirectly identified by assigning an identifier such as name, ID number, location data or online ID, or if he or she can be identified by one or more special features that reveal the physic, physiologic, genetic, psychologic, economic, cultural or social identity. This personal data will only be collected if it is required in order to fulfill contracted services, for compliance with legal requirements or for one of the purposes mentioned in the following.

4. COLLECTION OF ANONYMIZED DATA/LOG FILES/IP ADDRESSES

Our website collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website (so-called referrers), the sub-websites, the date and time of access to the Internet site, an Internet protocol address (IP address), the Internet service provider of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to deliver the content of our website correctly, optimize the content of our website, ensure the long-term viability of our information technology systems and website technology, and provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, we analyze anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

5. PURPOSE OF DATA COLLECTION

We only process personal data for one of the purposes mentioned in this privacy policy. A transfer of your personal data to third-parties does not take place. We only pass personal data on to third-parties if we receive your explicit consent, if it is required to fulfill a contract, if it required to fulfill legal requirements, if the processing is necessary to ensure justified interests and if there is no assumption that you have a special interest in not transferring your data.

6. RIGHTS OF DATA SUBJECTS

Through the above mentioned contact data of our privacy officer you can exercise the following rights at any time: disclosing your stored personal data and its purpose for processing, correcting incorrect personal data, deleting stored data, restricting the processing of personal data if we are not allowed to delete it yet in order to fulfill legal requirements, objecting the processing of personal data, withdrawing previously given consent to process data.

7. DELETING OR BLOCKING OF DATA

We aim to fulfill the principles of data thrift. Therefore we only store your personal data just as long as it is required to fulfill the purposes mentioned in this privacy policy or as long as it is required by the legislator. After the expiration of the respective purpose or deadline we will block or delete personal data routinely according to all legal requirements.

8. COOKIES

Our website use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website.

You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

9. SSL ENCRYPTION

To ensure the highest possible security for the transmission of your data between your web browser and our internet system we use the Secure Socket Layer (SSL) encrypting technology. SSL enables an encrypted transfer of documents via the internet between web browser and web server. The URL of a website with SSL connection to your browser starts with https://.

If your current browser is not SSL-enabled you can download the most up-to-date version for the two most popular web browsers. Both products support SSL and are available for numerous operating systems. Should the configuration of your computer not permit an installation, please contact your system administrator.

10. SUBSCRIBING TO THE NEWSLETTER

On our website, users are given the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.

We inform our customers and business partners regularly by means of a newsletter about the company. The enterprise’s newsletter may only be received if you have a valid e-mail address and you registered for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether you as the owner of the e-mail address are authorized to receive the newsletter.

During the registration for the newsletter, we also store the IP address of your computer system assigned by the Internet service provider (ISP) at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of your e-mail address at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. You can terminate the subscription to our newsletter at any time. The consent to the storage of personal data, which you have given for shipping the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly by communicating this to the controller in a different way.

11. GOOGLE ANALYTICS

On our website, the component of Google Analytics (with the anonymizer function) is integrated. Google Analytics is a web analytics service. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics we use the application “_gat. _anonymizeIp”. By means of this application your IP address of the Internet connection is abridged by Google and anonymized when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website. With each visit to our Internet site, such personal data, including the IP address of the Internet access, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

You can, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, you have the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

12. GOOGLE SEARCH CONSOLE

We use Google Search Console, a free service from Google that allows us to monitor and manage our website’s presence in Google search results and fix any errors. We can use Search Console to better understand how our website is seen by Google and optimise it if necessary.

Search Console includes tools and reports for the following actions:

  • Ensure Google can find and crawl your site
  • Fix indexing problems and request re-indexing of new or updated content
  • Retrieve Google search query data for your website to see how often your website appears in Google searches, which searches lead to your website, click-through rate, etc.
  • Receive notifications when Google finds indexing errors, spam or other problems on your website
  • See which pages are linking to your site
  • Fix problems with AMP pages, user experience on mobile devices and with other search features

You can extract more information about data processing of Google in their privacy policy (https://www.google.com/intl/en/policies/privacy/). In their data protection center you may also adapt your personal data protection settings

13. GOOGLE TAG MANAGER

For our website, we use the Google Tag Manager of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This tag manager is one of many helpful marketing products from Google. Via the Google Tag Manager, we can centrally integrate and manage code sections of various tracking tools that we use on our website.

Google Tag Manager is an organisational tool that allows us to embed and manage website tags centrally and through a user interface. Tags are small sections of code that, for example, record (track) your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our page. The tags often come from Google-internal products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, feed marketing tools with data, embed buttons, set cookies and also track users across multiple websites.

What data is stored by the Google Tag Manager? The Tag Manager itself is a domain that does not set cookies or store data. It acts as a mere “administrator” of the implemented tags. The data is collected by the individual tags of the various web analysis tools. The data is virtually passed through to the individual tracking tools in the Google Tag Manager and is not stored.

In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this is only the use and usage of our Tag Manager and not your data stored via the code sections. We allow Google and others to receive selected data in anonymised form. We thus consent to the anonymous sharing of our website data. Which summarised and anonymous data is passed on exactly, we could not find out – despite long research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares our own results with those of our competitors.

You can extract more information about data processing of Google in their privacy policy (https://www.google.com/intl/en/policies/privacy/). In their data protection center you may also adapt your personal data protection settings.

14. USAGE OF GOOGLE MAPS

This website uses Google Maps API in order to visually display geographical information. When using Google Maps Google collects, processes and uses data about the user behavior. You can extract more information about data processing of Google in their privacy policy (https://www.google.com/intl/en/policies/privacy/). In their data protection center you may also adapt your personal data protection settings.

14. USAGE OF GOOGLE FONTS

This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.

If your browser does not support web fonts, a standard font will be used by your computer.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

15. EMBEDDED YOUTUBE VIDEOS

On some of our websites YouTube videos are embedded. The operator of applicable plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When visiting an individual page integrated with the YouTube plugin, a connection to the server of YouTube is established. During this process YouTube is informed about which page you are visiting. If you are logged into a YouTube account at the same time YouTube will be able to match you user behavior to your account. You can avoid this process by logging out of your YouTube account.

If a YouTube video is started the provider uses cookies which collect data about the user behavior. If you deactivate cookies for the Google-Ad-Program you also will not receive such cookies.

However YouTube also uses cookies to collect non-personal data about the user behavior. The usage of these cookies can be prevented by blocking cookies in your browser.

For further information on data protection of YouTube you can find the privacy policy of the provider under the following link: https://www.google.de/intl/en/policies/privacy/

16. USAGE OF FACEBOOK

On our website components of the enterprise Facebook are integrated. Facebook is a social network.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.

If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the “Like” button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.

Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.

The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.

17. USAGE OF LINKEDIN

On our website components of the LinkedIn Corporation are integrated. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy.

18. USAGE OF XING

On this website, the controller has integrated components of XING. XING is an Internet-based social network that enables users to connect with existing business contacts and to create new business contacts. The operating company of XING is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a XING component (XING plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding XING component of XING. Further information about the XING plug-in the may be accessed under https://dev.xing.com/plugins. During the course of this technical procedure, XING gains knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in at the same time on XING, XING detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the XING component and associated with the respective XING account of the data subject. If the data subject clicks on the XING button integrated on our Internet site, e.g. the “Share”-button, then XING assigns this information to the personal XING user account of the data subject and stores the personal data.

XING receives information via the XING component that the data subject has visited our website, provided that the data subject is logged in at XING at the time of the call to our website. This occurs regardless of whether the person clicks on the XING component or not. If such a transmission of information to XING is not desirable for the data subject, then he or she can prevent this by logging off from their XING account before a call-up to our website is made.

The data protection provisions published by XING, which is available under https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by XING.

19. CONTACT VIA EMAIL

If you contact us via email we will collect and process your data for the purpose of answering your request and in order to be able to pose any follow-up questions.

20. DATA PROTECTION DURING APPLICATION PROCESS

H2c collects and processes the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

21. CHANGES TO OUR PRIVACY POLICY

In order to guarantee that our privacy policy is always in accordance with legal requirements this privacy policy may be subject to change. This also applies in case the privacy policy needs to be modified because of new or revised services, e.g. new offerings. The new privacy policy will be valid from your next visit on our website on.

23. ALTERNATIVE DISPUTE RESOLUTION IN ACCORDANCE WITH ART. 14 ABS. 1 ODR-VO AND § 36 VSBG

The European Commission provides an online dispute resolution (OS) platform, which can be found at https://ec.europa.eu/consumers/odr. We are neither obliged nor willing to participate in a dispute resolution procedure before a consumer arbitration board.

24. STATE OF THIS STATEMENT

04.02.2024