Privacy policy

HELORA Oberflächentechnik GmbH is pleased about your visit to our website and your interest in our offers and services. The protection of your personal data is very important to us. With the following privacy policy declaration, we would like to inform you about the purposes and extent to which we process personal data when you use our website. Personal data is defined as data which can be related to a person, such as name, addresses, telephone and e-mail addresses, IP addresses, but also user behavior, etc.
Name and contact details of the responsible body according to Art. 4 para.7 DSGVO
HELORA Oberflächentechnik GmbH
In der Breite 3
73571 Göggingen
Tel.: +49 (0) 7175 / 922 664
Contact details of the data protection officer of the responsible body
Mr. Torsten Schmid
c/o Fa. Schmid Datenschutz
Am Berghain 5
73577 Ruppertshofen
Information on data security
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you send to us cannot be read by third parties.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
Duration of storage
Unless the following description of the individual processing purposes does not contain any specific information on the storage period, we will store your personal data until the specific processing purpose no longer applies. If you revoke a consent granted to us or if your request for deletion is granted, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in this case, we will delete the data after these reasons no longer apply.
Purpose and legal basis of the processing of personal data
Contact by e-mail or contact form
Purpose of processing
If you send us a message by e-mail or via a contact form, the data you provide will be stored by us and used to process your message and contact you. We will not pass on your data to third parties without your expressed consent.
Legal basis for processing
The legal basis for the collection and processing of your data is Art. 6 para. 1 lit. b DSGVO (contract implementation or contract initiation at the request of the person concerned), as well as Art. 6 para. 1 lit. a DSGVO (data collection and processing on the basis of a consent granted by you, if this consent has been requested).
Affected parties
Website visitors
Processed data
Name, address data, contact data, message texts
Duration of storage
The personal data collected in the course of responding to your inquiry will be deleted as soon as storage is no longer required or processing will be restricted if there is a legal obligation to retain data.
Application process
Purpose of processing
As part of our job market, you can send us an unsolicited application or apply for specific job offers. Your data transmitted to us in this context will only be processed within the scope of the respective job advertisement or if you have given your consent to be considered for further job offers. If you have given us your consent to be considered for further job offers, you can revoke this consent at any time with effect for the future.
Note on sensitive data: We expressly point out that applications, in particular CVs, certificates and other data you send us may contain particularly sensitive information about mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership in a trade union or political party or sex life.
Please note that such data that you send us by e-mail is transmitted unencrypted.
Legal basis for processing
The legal basis for the collection and processing of your personal data is Art. 6 para. 1 lit. b DSGVO, §26 BDSG (fulfillment of contracts or pre-contractual measures at the request of the person concerned or establishment of employment relationships), as well as Art. 6 para. 1 lit. a DSGVO, if you have given us your consent to be considered for further job offers.
Affected parties
Website visitors, applicants
Processed data
Name, address data, contact data, e-mail address, submitted application documents
Duration of storage
In the event of rejection or negative reply to your application, the data transmitted will be deleted at the earliest 3 months after the end of the application process, but at the latest after 6 months. This does not apply if legal regulations oppose the deletion or if further storage is necessary for the purpose of providing evidence or if you have agreed to longer storage. If you have consented to longer-term storage, we will process your data for the purpose of selecting applicants for further job advertisements over a maximum period of 2 years. Afterwards your data will be deleted.
Web hosting & use of our website
This website is hosted by an external service provider (webhoster). We use the following webhoster:
Elgendorfer Str. 57
56410 Montabaur
The personal data that we collect on this website is stored on the webhoster’s servers. This may include contact requests, meta and communication data, contract data, contact details, names and other data generated or collected via this website.
In addition, the webhoster automatically collects data in so-called server log files. The collection of these data (especially IP addresses, website accesses, visited pages) serves the purpose of technically error-free display or troubleshooting as well as, if necessary, for the pursuit and clarification of attempted attacks.
Purpose of processing
In the case of an exclusively informative use of our website, we or our webhoster only collect the personal data that your browser sends to our servers. This is data that is technically necessary for us to display our website and to ensure its stability and security.
In individual cases, personal data may be used to determine and remedy malfunctions as well as to clarify and track attempted attacks.
Legal basis for processing
The webhoster is used for the purpose of fulfilling the contract (Art. 6 para. 1 lit. b DSGVO) with interested parties and customers and in the interest of a secure, fast and efficient provision of our online offer by a professional service provider (Art. 6 para. 1 lit. f DSGVO). This service provider acts as our order processor, is bound by our instructions and is contractually bound in accordance with Art. 28 DSGVO. He is subject to our ongoing control.
In addition, data collected in individual cases may be used to identify and rectify faults and to investigate and pursue attempted attacks. The collection and processing of data is based on our legitimate interests (Art. 6 para. 1 lit. f DSGVO) in a technically error-free presentation and the secure operation of our offer.
Affected parties
Website visitors
Processed data
IP address of the computer, date and time of the page request, content of the request, access status / HTTP status code, amount of data transferred in each case, website from which the request comes (referrer website), web browser used with version number and set language, operating system used and any interface used.
Duration of storage
Log data generated by the system on the web server is stored for a period of 14 days. After this period an automated deletion will take place.
Website user analysis with Matomo
Purpose of processing
Our website uses “Matomo”, a web analytics service provided by Innocraft Ltd, 150 Willis St., 6011 Wellingtom, New Zealand. Matomo enables us to analyze the use of our website by website visitors in an anonymous form and thus to adapt our offer to the interests of our website users. In addition, the analysis serves the purpose of optimization, as possible errors (e.g. faulty links or long loading times) can be detected.
To ensure data protection, we use Matomo with the setting “Anonymous Visitors’ IP addresses”. This shortens your IP address (example: and excludes the possibility of a personal reference. Matomo is used on our own systems and exclusively for the above mentioned purposes.
Legal basis for processing
The legal basis for the collection and processing of your data is Art. 6 para. 1 lit. f DSGVO, i.e. our legitimate interest in measuring the reach and optimization of our web offer. The data collected in this process is not combined with other services or with data collected by us.
However, you have the possibility to revoke the data collection and processing at any time. Please use the following opt-out function for this purpose. An opt-out cookie will be set on your system to ensure that the data cannot be recorded during a subsequent visit. If your browser is set so that it does not store cookies or cookies are automatically deleted at the end of a browser session, you may have to confirm your opt-out again when you visit our website again. The same applies if you visit our website with a different device.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

Affected parties
Website visitors
Processed data
IP address (shortened), website accessed, duration of visit, operating system and browser used, website from which the user accessed the page (referrer URL), frequency of page access, approximate geographical location, cookie ID, opt-out
Duration of storage
The opt-out cookie is stored on your system until you delete the cookie. All other data is stored exclusively in anonymous form, i.e. without personal reference, and is not subject to any deletion obligation.
Information on the use of cookies
In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information is transmitted to the site that sets the cookie (in this case, by us). Cookies cannot open and execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.
Transistent cookies are automatically deleted when you close the browser. This includes session cookies in particular. These store a session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can configure your browser settings upon your request and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website if you do so.
For more information on blocking cookies, please contact your browser manufacturer. Below you will find corresponding information for the most common desktop browsers:
Internet Explorer:
Mozilla Firefox:
Google Chrome:
Transfer of personal data
Within HELORA Oberflächentechnik GmbH, those departments that need access to your data to fulfill our contractual and legal obligations have access to your data. HELORA Oberflächentechnik GmbH is entitled to transfer the user’s personal data to affiliated companies if this is necessary for the processing of the legal transaction or if the person concerned has consented to the transfer of data.
Even processors employed by us (Art. 28 DSGVO) may receive data for the above-mentioned purposes. These are in particular companies in the categories IT services and IT security. All service providers have been carefully selected by us and are subject to regular checks. All commissioned processors are contractually bound in accordance with Art. 28 DSGVO and are bound by our instructions.
In addition, we may be obliged to transfer your personal data to other recipients, such as public authorities to fulfill statutory notification obligations (tax authorities, etc.). A transfer to other third parties will only take place if you have given your consent.
Data transmission to third countries
Countries outside the European Union (and the European Economic Area “EEA”) handle the protection of personal data differently from countries within the European Union. In the event that data is transferred to third countries, we have taken appropriate measures to ensure that your data is processed as securely in the third countries as within the European Union. We conclude standard data protection clauses provided by the Commission of the European Union with service providers in third countries. These clauses provide appropriate guarantees for the protection of your data with service providers in third countries.
No data will be transferred to third countries during a only informative visit to our website without your consent.
Your rights
You have the following rights in relation to the personal data concerning you:
– the right to information according to Art. 15 DSGVO
– the right to correction according to Art. 16 DSGVO
– the right to deletion according to Art. 17 DSGVO
– the right to restrict processing in accordance with Art. 18 DSGVO
– the right to data transferability according to Art. 20 DSGVO
– the right to object according to Art. 21 DSGVO
The right of information and the right to deletion are subject to the restrictions of §§ 34 and 35 BDSG. In order to exercise your rights, you can contact the responsible office or the data protection officer at the contact details given above.
Furthermore, there is a right to appeal to the data protection supervisory authority (Art. 77 DSGVO in connection with § 19 BDSG):
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10a
70173 Stuttgart
Mailing Address:
Postfach 10 29 32
70025 Stuttgart
Tel.: +49 711 615541-0
Fax: +49 711 615541-15
Revocation of your consent and objection to the processing of your personal data
You can revoke your consent to the processing of personal data at any time, either in totality or in part. Please note that the revocation is only effective for the future.
Obligation to provide your personal data
In order to conclude a contract, you must provide us with the personal data that is necessary for the execution of the contractual relationship or that we are required to collect by law. If you do not provide us with these data, then the execution and processing of the contractual relationship or the provision of services is not possible for us.
As part of your application, the provision of personal data is necessary for the application process. This means that if you do not provide us with any personal data when applying, we will not carry out the application process, i.e. we cannot consider you in the selection process.
There is no automatic decision making in the terms of Art. 22 DSGVO, which has a legal effect on you.
We reserve the right to update this data protection information as necessary.
Status of the information: September 2020 TS/DSB