Privacy policy
Privacy Policy
for the use of the digital operating logbook "eThemis" (web portal & mobile app) Herborner Pumpentechnik GmbH & Co KG
Version 1.1
1. Responsible
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Herborner Pumpentechnik GmbH & Co. KG Littau 3-5 35745 Herborn Phone: +49 (0) 2772 / 933-0 Email: datenschutz@herborner-pumpen.com
2. General information on data processing
(1) We process personal data exclusively in accordance with the provisions of the GDPR and the Federal Data Protection Act (BDSG).
(2) The data is only processed to the extent necessary to provide our app and web portal and to fulfill contractual obligations.
3. Collection and processing of personal data
a) When visiting the website/web portal
- IP address of the end device
- Date and time of access
- Browser type and version
This data is technically necessary to display the content of our website and serves to ensure system security.
b) When using the app
- Device information (model, operating system version)
- Log and usage data (time stamp, actions performed)
c) When registering and using the user account
- First and last name
- Email address, username, password
- Organizational affiliation (e.g., facility/company)
- Role and authorization information
d) Support and communication
- Contents of inquiries via email or support form
- Contact details (e.g., phone number, email address)
4. Purposes of processing
We process personal data for the following purposes:
- Provision and operation of the digital operating log "eThemis" and other digital services of Herborner Pumpentechnik GmbH & Co KG
- Fulfillment of contractual obligations towards our customers
- Ensuring security, stability, and accuracy
- Support and response to user inquiries
- Further development and improvement of our services
5. Legal basis
Processing is based on:
- Art. 6 (1) (b) GDPR (performance of a contract),
- Art. 6 (1) (c) GDPR (legal obligation),
- Art. 6 (1) (f) GDPR (legitimate interest, e.g., IT security, prevention of misuse),
- Art. 6 (1) (a) GDPR (consent, e.g., for location data).
6. Disclosure of data
(1) Personal data will only be disclosed to third parties within the framework of legal requirements.
(2) Subcontractors (e.g., hosting providers, cloud services) will only be involved if they meet the requirements of Art. 28 GDPR.
(3) Data will only be transferred to third countries outside the EU/EEA if an adequate level of data protection is guaranteed (e.g., EU standard contractual clauses).
7. Storage period and deletion
(1) Personal data will only be stored for as long as is necessary for the respective purposes.
(2) After the end of the contract or at the customer's request, personal data will be deleted after a transition period of three (3) months, provided that there are no legal retention obligations to the contrary.
8. Rights of data subjects
Users have the following rights under the GDPR:
- Information about the data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Deletion ("right to be forgotten," Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to certain processing (Art. 21 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To assert their rights, data subjects can contact datenschutz@herborner-pumpen.com at any time.
9. Security of processing
We use technical and organizational measures (TOMs) in accordance with Art. 32 GDPR to protect personal data from loss, misuse, unauthorized access, or disclosure. These include, in particular:
- SSL/TLS encryption,
- Role and authorization concepts,
- Access controls,
- Regular security updates and backups.
10. Cookies and tracking
(1) Cookies that are necessary for the operation of our website may be used.
(2) If analysis or tracking tools are used (e.g., to improve the app), this is done exclusively on the basis of consent in accordance with Art. 6 (1) (a) GDPR.
11. App stores (Apple/Google)
(1) When downloading the app, personal data is processed by the respective app store (Apple App Store/Google Play Store).
(2) The provider has no influence on this processing. The data protection regulations of the respective store operators apply.
12. Changes to the privacy policy
We reserve the right to amend this privacy policy in order to adapt it to changed legal situations or technical developments. The current version is available on our website at any time.
13. Right to lodge a complaint with the supervisory authority
Users have the right to complain to a data protection supervisory authority if they believe that the processing of their personal data violates the GDPR.