1. Controller
The controller responsible for data processing on this website is:
hps SystemTechnik Lehr- + Lernmittel GmbH
Altdorfer Str. 16
88276 Berg
Germany
Phone: +49 751 / 560 75 70
Email: support@hps-systemtechnik.com
For questions about data protection, contact us at datenschutz@hps-systemtechnik.com.
2. Server Log Files
When this website is accessed, the web server processes technically required information. This may include browser type, operating system, referrer URL, host name of the accessing device, time of access and the IP address. Processing serves the secure and stable provision of the website on the basis of Art. 6(1)(f) GDPR.
3. Technically Necessary Cookies and Quote Cart
When you use the quote cart, we set a technically necessary first-party session cookie. It contains only a random session identifier. Selected products and quantities are assigned to this session on the server so that the quote cart remains available while you browse. The cookie is not used for analytics, advertising or profiling.
Storage and access are based on Section 25(2)(2) TDDDG because the cookie is required for the quote cart function you expressly requested. Where personal data is processed, this is done to prepare your request under Art. 6(1)(b) GDPR and to provide the function securely under Art. 6(1)(f) GDPR. The cookie is deleted when the browser is closed; server-side session data expires after no more than two hours of inactivity and is cleared after successful submission.
4. Quote Requests
When you request a quote through our website, we process the selected products, quantities and free-text positions as well as the contact details you enter. Only your email address is mandatory. First name, last name, telephone number and customer number are voluntary. Repeating the email address is used only to check for typing errors; we store the address only once.
The purpose is to review, process and answer your request and to prepare and coordinate a quote. Where you make the request with a view to a possible contract, the legal basis is Art. 6(1)(b) GDPR. If you act as a contact person for a company or other organisation, processing is additionally based on Art. 6(1)(f) GDPR. Our legitimate interest is processing business enquiries and initiating business relationships.
Within our company, access is limited to staff involved in sales, quote preparation and necessary technical administration. Service providers used for hosting and email may receive access as processors. We do not disclose the data for advertising, use automated decision-making or conduct profiling. Transfer of form data to recipients outside the EU or EEA is not intended. We cannot process your request without a reachable email address; all other details are voluntary.
5. Protection Against Abusive Submissions
To protect the form against spam and automated abuse, we use a locally operated security question, a honeypot, a minimum completion time and rate limiting. No third-party CAPTCHA content is loaded and no data is transferred to external CAPTCHA providers. For short-term rate limiting, the network address is pseudonymised with a secret key; the raw IP address is not stored with the quote request. These separate security data are deleted after no more than 24 hours. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting our systems and communication channels against spam and abuse.
6. Retention
Quote carts that are not submitted expire after no more than two hours of inactivity. Submitted requests and their positions are initially stored for processing and subsequently only for as long as required for business initiation, contract handling or statutory retention obligations. Commercial and business correspondence may in particular be subject to a six-year retention period from the end of the calendar year. Once the purpose and applicable obligations cease, the data are deleted or archived in compliance with data protection requirements and subsequently deleted.
7. Contact by Other Means
If you contact us by email or phone, we process your details to handle the enquiry and, where applicable, for further business initiation or contract processing under Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
8. Analytics and Marketing Tools
This website currently does not use third-party analytics or marketing tools, newsletter tools or tracking services.
9. Your Rights
Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.
If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a supervisory authority.