Privacy Policy
HEXONIA® GmbH is responsible for the processing of personal data as described in this Privacy Policy. In this Privacy Policy, we explain which personal data we collect, the purposes for which we process it, and the rights you have in relation to your personal data.
This Privacy Policy applies to the website:
Data Controller
The data controller responsible for data processing on this website is:
HEXONIA® GmbH
Van-der-Upwich-Str. 40
41334 Nettetal
Germany
Phone: +49 2153 8031 600
Email: info@hexonia.de
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Personal data we collect and process
We process personal data only to the extent necessary to operate our website, communicate with you, provide our content, analyze website usage, or comply with legal obligations.
In particular, the following categories of personal data may be processed:
- Contact information, such as your name, email address, telephone number, and other information you provide to us.
- Communication data, such as the content of messages, inquiries, or other correspondence.
- Technical data, such as IP address, browser type, browser version, operating system, referrer URL, hostname of the accessing device, time of the server request, and similar technical information.
- Usage data, such as information about how our website is used, where such data is collected through analytics or tracking technologies.
- Consent data, such as information about cookie and tracking consent that has been granted or withdrawn.
Personal data is either provided directly by you, for example through a contact form or by email, or collected automatically by our technical systems when you visit our website.
Purposes of data processing
We process personal data for the following purposes:
- Providing, operating, and securing the website.
- Handling inquiries and communicating with you.
- Maintaining customer, partner, and business relationships.
- Analyzing and improving our website.
- Embedding external content, such as videos.
- Managing and documenting cookie and tracking consent.
- Complying with legal obligations.
- Preventing misuse, attacks, and unauthorized access.
Provision of the website
We process technical data in order to provide our website securely, reliably, and in a functional manner. This includes, in particular, server log files, security logs, and technical information automatically transmitted by your browser.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Handling inquiries
If you contact us via a contact form, email, or telephone, we process the data you provide in order to handle your inquiry and, where applicable, answer follow-up questions.
The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to an existing or potential contractual relationship. In all other cases, processing is based on our legitimate interest in handling your inquiry pursuant to Art. 6(1)(f) GDPR.
The data you provide as part of an inquiry will be deleted once the inquiry has been fully resolved, provided that no statutory retention obligations prevent deletion.
Communication and business relationships
We process personal data in order to communicate with customers, partners, prospective customers, suppliers, and other contacts and to maintain existing business relationships.
The legal basis is Art. 6(1)(b) GDPR where processing is necessary to take steps prior to entering into a contract or to perform a contract. Where no contractual relationship exists, processing is based on Art. 6(1)(f) GDPR.
Security and prevention of misuse
We process technical data to protect our systems against misuse, attacks, spam, manipulation, and unauthorized access. This may include, in particular, IP addresses, server log files, and security-related events.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring IT security and protecting our website.
Compliance with legal obligations
In certain cases, we are legally required to process or retain personal data, for example due to commercial, tax, or other statutory retention obligations.
The legal basis is Art. 6(1)(c) GDPR.
Hosting and technical provision by Webflow
Our website is operated and hosted using Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
Webflow processes personal data on our behalf to the extent necessary for the technical provision, delivery, security, and administration of the website. This may include, in particular, IP addresses, server log files, technical access data, and other information that is generated automatically when the website is visited.
We have entered into a data processing agreement with Webflow. Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are made on the basis of appropriate safeguards within the meaning of the GDPR, in particular Standard Contractual Clauses.
The legal basis for our use of Webflow is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, high-performance, and efficient provision of our website.
Further information about data processing by Webflow can be found at:
https://webflow.com/legal/privacy
Server log files
When you visit our website, information is automatically processed in so-called server log files. This information is transmitted automatically by your browser.
The data processed may include:
- Browser type and browser version.
- Operating system used.
- Referrer URL.
- Hostname of the accessing device.
- Time of the server request.
- IP address.
This data is not combined with other data sources unless this is necessary for security reasons. The processing is carried out to ensure technical operation, analyze errors, and prevent attacks.
The legal basis is Art. 6(1)(f) GDPR.
Contact form
If you send us inquiries via a contact form, we process the information you provide in the form, including the contact details you enter, in order to handle your inquiry and any follow-up questions.
Depending on the content of the inquiry, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
The data will be deleted once it is no longer required to handle the inquiry, provided that no statutory retention obligations prevent deletion.
Cookies and similar technologies
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Similar technologies may also store information on or access information from your device.
Some cookies and technologies are technically necessary for the website to function properly. Other cookies and technologies may be used for analytics, optimization, embedding external content, or improving our online offering.
Technically necessary cookies and similar technologies are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.
Non-essential cookies and similar technologies are used only on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
You can withdraw or adjust your consent at any time via the cookie settings.
Cookie Declaration
An up-to-date overview of the cookies and similar technologies used on this website can be found in our Cookie Declaration.
[Insert Cookiebot cookie declaration here]
Consent Management with Consent Pro
We use Consent Pro as a consent management platform to obtain, manage, and document consent for cookies and similar technologies.
In particular, information about your consent decision, technical information about your browser and device, and the date and time of your consent may be processed.
The processing is carried out in order to manage your consent and provide evidence of it.
The legal basis is Art. 6(1)(c) GDPR to the extent that processing is necessary to comply with statutory documentation obligations. In addition, processing is based on our legitimate interest in legally compliant and user-friendly consent management pursuant to Art. 6(1)(f) GDPR.
You can change or withdraw your consent at any time via the cookie settings.
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 enables us to analyze the use of our website and improve our online offering. Information about your use of the website, technical information about your device and browser, approximate location information, referrer URL, duration of use, page views, and interactions may be processed.
Google Analytics 4 is used only if you have previously provided your consent via our cookie banner. Processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Where personal data is transferred to the USA or other third countries in connection with the use of Google Analytics 4, such transfer is made on the basis of appropriate safeguards within the meaning of the GDPR, in particular Standard Contractual Clauses or an adequacy decision by the European Commission, where applicable.
You can withdraw or adjust your consent at any time via the cookie settings.
Further information about data processing by Google can be found at:
https://policies.google.com/privacy
Google Tag and Consent Mode
We use Google Tag to technically integrate Google services such as Google Analytics 4 and to take into account the cookie and tracking consent you have provided.
Google Consent Mode can be used to control whether and to what extent Google services may use cookies or similar technologies for analytics or marketing purposes. Processing is carried out in accordance with the choices you make in the cookie banner.
The legal basis for processing is Art. 6(1)(a) GDPR and Section 25(1) TDDDG where non-essential cookies or similar technologies are used.
Where Google Tag is used exclusively for the technical management of consent and the integration of services, processing is additionally based on our legitimate interest in the technically reliable and privacy-compliant administration of our website pursuant to Art. 6(1)(f) GDPR.
Embedding external content
Our website may embed content from external providers, such as videos, maps, social media content, or other external media. When such content is loaded, personal data, in particular IP addresses and technical information, may be transmitted to the respective providers.
Where required, external content is loaded only after you have provided your consent. If you consent to the integration of external content or actively access such content, the respective provider may process personal data.
The legal basis is Art. 6(1)(a) GDPR where consent is required. Otherwise, processing is based on our legitimate interest in presenting our website in an appealing and informative manner pursuant to Art. 6(1)(f) GDPR.
Links to external websites
Our website may contain links to external third-party websites. We have no influence over the content or privacy practices of these websites. The respective provider or operator is responsible for data processing on external websites.
Please refer to the respective external websites for information about the privacy provisions that apply there.
Retention period
We retain personal data only for as long as necessary for the respective purposes or for as long as statutory retention obligations apply.
Data you provide to us as part of an inquiry will be deleted once the inquiry has been fully resolved, provided that no statutory retention obligations prevent deletion.
Technical data and server log files are retained only for as long as necessary for secure operation, error analysis, and protection against attacks.
Consent data is retained for as long as necessary to document your consent or its withdrawal.
Disclosure of data
Personal data is disclosed to third parties only where this is necessary to fulfill the purposes stated above, where there is a legal obligation to do so, where you have provided your consent, or where another legal basis under the GDPR applies.
Recipients of personal data may include, in particular, technical service providers, hosting providers, IT service providers, communication service providers, analytics providers, providers of external media content, or other processors.
Where service providers process personal data on our behalf, we enter into appropriate data processing agreements pursuant to Art. 28 GDPR where required by law.
Transfers to third countries
Where personal data is transferred to countries outside the European Union or the European Economic Area, this takes place only if the requirements of Art. 44 et seq. GDPR are met.
This may be based, in particular, on an adequacy decision by the European Commission, Standard Contractual Clauses, or other appropriate safeguards.
When using services from international providers, in particular Webflow or Google services, the transfer of personal data to third countries cannot be ruled out.
Your rights
Under the applicable legal provisions, you have the following rights:
- Right of access pursuant to Art. 15 GDPR.
- Right to rectification pursuant to Art. 16 GDPR.
- Right to erasure pursuant to Art. 17 GDPR.
- Right to restriction of processing pursuant to Art. 18 GDPR.
- Right to data portability pursuant to Art. 20 GDPR.
- Right to object pursuant to Art. 21 GDPR.
- Right to withdraw consent pursuant to Art. 7(3) GDPR.
- Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.
If you wish to exercise any of these rights, you can contact us at any time:
Withdrawal of your consent
Many data processing operations are possible only with your consent. You can withdraw consent that you have already provided at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected by the withdrawal.
You can change or withdraw your cookie and tracking consent at any time via the cookie settings.
Objection to processing
If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
Right to lodge a complaint with the competent supervisory authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
For North Rhine-Westphalia, the competent authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Website: https://www.ldi.nrw.de
Email: poststelle@ldi.nrw.de
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the browser address bar begins with “https://” and by the lock symbol in your browser.
When SSL or TLS encryption is enabled, the data you transmit to us cannot easily be read by third parties.
Objection to unsolicited advertising emails
We hereby object to the use of contact details published as part of the legal notice requirements for the purpose of sending unsolicited advertising and informational materials.
We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam emails.
Updates and changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the legal situation, our website, or the technologies we use change.
Cookie Declaration
The following overview shows the cookies and similar technologies used on this website. Non-essential cookies and technologies are used only in accordance with your consent.
Cookies used
Manage cookie settings
You can change or withdraw your consent to non-essential cookies and similar technologies at any time. You can access the cookie settings at any time via the corresponding link in the footer of this website.