Please note: This text was translated from the German version.

"Cookies" are small files that are stored on users' computers. Different information can be stored within cookies. A cookie is primarily used to store information about a user (on the device on which the cookie is stored) while or after they visit a website. Temporary cookies, also known as "session cookies" or "transient cookies", are cookies that are deleted after a user leaves a website and closes his browser. For example, this cookie may be used to store the contents of a shopping basket in an online shop, or a login status. "Permanent" or "persistent" cookies remain saved even after closing the browser. This allows, for example, a login status to be saved if the user visits several days later. In the same way, this kind of cookie may be used to store user interests, which are used for reach measurement and marketing purposes. A "third party cookie" refers to cookies offered by providers other than the person responsible for operating the website (otherwise, only their cookies are referred to as "first party cookies").

We may use temporary and permanent cookies. This is explained as part of our privacy notice.

If we ask users to consent to the use of cookies (e.g. as part of cookie permission), the legal basis for this processing is Art. 6(1)(a) GDPR (General Data Protection Regulation). Otherwise, the user's personal cookies, as defined in the following within this privacy notice, are processed on the basis of our own legitimate interests (i.e. interest in the analysis, optimisation and economical operation of our website within the meaning of Art. 6(1)(f) GDPR) or, if the use of cookies is required in order for us to provide our contractual services, in accordance with Art. 6(1)(b) GDPR.

Please note that by changing the cookie setting, it is not possible to delete cookies already set in your browser automatically. If necessary, please delete the cookies no longer required manually via your browser settings.

"Do Not Track" settings

You can control the storage of cookies by using the "Do Not Track" (DNT) settings in your internet browser. Depending on the browser, the DNT is either a setting in the programme settings or a plug-in or add-on. When enabled, the browser signals that this tool's tracking measures are not desired without your explicit consent. If this setting is enabled, we will anonymise the tracking functions of this tool. Please note that the procedure differs depending on the internet browser you are using, based on which you can enable DNT. We would also like to point out that under certain circumstances, the functionality of our online service may be restricted.

Objection to data processing

If you do not wish for cookies for reach measurement to be stored on your device, you can object to the use of these files here:

• Cookie deactivation page of the Network Advertising Initiative:

http://optout.networkadvertising.org/

• Cookie deactivation page of the US American website:

http://optout.aboutads.info/?c=2#!/

• Cookie deactivation page of the European website:

www.youronlinechoices.com/de/praferenzmanagement/

Hosting

The hosting services we use are intended to provide the following services, which we use for the purpose of operating our website:

• Infrastructure and platform services
• Computing capacity
• Storage space and database services
• Email despatch
• Security services
• Technical maintenance services

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, prospective customers and visitors of this website. This data is not merged with other data sources.

Access data and log files

We, or our hosting provider, collect data about any access to the server on which this service is located (server log files) on the basis of our legitimate interests as defined by Art. 6(1)(f) GDPR. Access data includes:

• The name of the website you retrieve
• File, date and time of the retrieval
• Amount of data transferred
• Successful retrieval message
• Browser type and version
• User's operating system
• Referrer URL (the previously visited page)
• IP address and the requesting provider

Log file information is stored for security reasons (e.g. for investigating abuse or fraud) for a maximum of 7 days and then deleted. Any data whose further retention is necessary for evidence purposes is excluded from deletion until the respective incident is finally clarified.

The data processing is based on Art. 6(1)(f) GDPR, with our legitimate interest as website operators being the efficient and correct portrayal of the website as well as guaranteeing secure operation of the systems.

Contact and CRM system

When contacting us (e.g. via contact form, email, telephone, WhatsApp or social media), your information is stored so we can process the contact request and settle it. The processing of the data specified takes place on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR. Our legitimate interest here is quick and customer-friendly communication and to have contact with you, our customer, and to improve the quality of our advice. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

The data you provide when contacting us will remain with us until you ask us to delete it or the purpose for data storage no longer applies (e.g. after processing your request). An exception is made here by the statutory retention obligations.

CRM system Aurea

Your data may be stored in a customer relationship management system ("CRM system"). We will delete the data if it is no longer needed. We check the necessity every two years; furthermore, the statutory archiving obligations apply.

We use the CRM system "Aurea" from the provider Ajco Solutions GmbH, Jüdtstrasse 15, 91522 Ansbach, Germany, in order to be able to process your inquiries faster and more efficiently (legitimate interest in accordance with Art. 6(1)(f) GDPR).

We only use your data in Aurea for the technical processing of your enquiries and do not pass it on to third parties. While processing service requests, it may be necessary to collect further data (name, address, company, further contact details).

For more information about our CRM system, please visit www.aurea-crm.com.

Conclusion of a contract for order processing

We have concluded a contract with Ajco Solutions for order processing in accordance with Art. 28 GDPR and have obligated it to adhere to professional confidentiality as well as comply with the provisions of the GDPR and the new BDSG (Federal Data Protection Act). Ajco Solutions is therefore obligated to protect the data of our customers and not to pass it on to third parties.

Registration and ordering in our online shop

We process the data of our customers as part of the ordering process in our online shop in order to enable them to select and order the chosen products and services, as well as their payment and delivery, or execution.

The processed data includes inventory data, contact data, communication data, usage data, order data, contract data and payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing takes place for the purpose of providing contractual services within the framework of the operation of our online shop, billing, delivery and customer service. We use session cookies for storing the contents of shopping baskets and permanent cookies for storing the login status.

We process your personal data – if you are acting on your own behalf – in accordance with Art. 6(1)(b) GDPR for the performance of our services and implementation of contractual measures (e.g. execution of order processes) and to the extent required by law (e.g. legally required archiving of business transactions for trade and tax purposes) according to Art. 6(1)(c) GDPR. The data processed, as well as the nature, scope and purpose and the necessity of its processing, is determined according to the underlying contractual relationship.

If you are acting on behalf of a company/third party, the legal basis for the processing of your personal data is Art. 6(1)(f) GDPR (data processing due to overriding legitimate interest). In normal cases, the legitimate interest is to ensure smooth business operation, to secure and implement contracts with you or your employer and to have contact with you, our customer, to improve the quality of our advice and to contact you more easily in the event of queries.

In addition, our legitimate interest is also to provide the necessary guarantee for the security and integrity of the processes and systems in the context of the use of our website.

We only disclose the data to third parties within the scope of delivery, payment or within the framework of legal permits and obligations, as well as if this is based on our legitimate interests, which we inform you about as part of this privacy notice (e.g. to legal and tax advisors, financial institutions, freight companies and authorities).

You can register in our online shop to take advantage of additional features on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested at registration must be provided in full. Otherwise, we will reject the registration.

In the event of important changes, for example in the scope of the offer or in the case of technically necessary changes, we will use the email address provided during registration to inform you in this way.

Registration in our online shop is used to execute or initiate a contract between you or your employer and HAHN+KOLB Werkzeuge GmbH (Art. 6(1)(b) GDPR).

The data collected during registration will be stored by us as long as you are registered in our online shop and will then be deleted. Legal retention periods remain unaffected. Information in the customer account remains in the case of a legal obligation or our legitimate interests (e.g. in the case of litigation) until it is deleted and is then archived. It is the responsibility of the users to secure their data before the end of the contract in the event of termination.

In the context of using our website, the registration and login functions as well as the use of the user account, we store the IP address and time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as those of the user in terms of protection against misuse and other unauthorised use. This data is generally not passed on to third parties, unless it is necessary to pursue our claims in accordance with Art. 6(1)(f) GDPR or there is a legal obligation to do so in accordance with Art. 6(1)(c) GDPR. The IP addresses are anonymised or deleted after 7 days at the latest.

Personal product recommendations

If you have selected the cookie settings on our website accordingly, your usage history can be used for product recommendations on our website after registration. This includes in particular product pages and product categories that you have visited or searched for with us. You can object to this analysis of surfing behaviour at any time. Please note that in this browser or in other distribution channels, we will then no longer be able to offer you product recommendations tailored to your needs.

The storage of cookies for the creation of personal product recommendations takes place on the basis of Art. 6(1)(f) GDPR. As a website operator, we have a legitimate interest in analysing your usage history in order to optimise both our website and our advertising.

The information generated by the cookie about the use of our website will not be passed on to third parties. You can refuse the storage of cookies using the appropriate setting in your browser software; however, we would point out that in this case you may not be able to use all the functions of this website to their full extent.

Data processing of the international online shop (AFO)

For customers/users registered in the international online shop (www.hahn-kolb.net), we forward the orders automatically to our subsidiary and sister companies as well as partner companies (AFO = Automatically Forwarded Orders). The entire business relationship, including service, contact, support etc., is handled by the responsible subsidiary/sister company or the partner company. The ordered items are delivered by HAHN+KOLB Werkzeuge GmbH Germany or by the responsible subsidiary or sister company or the partner company.

We reserve the right to store your company and contact details, which are necessary for registration, future orders and the entire processing of your interests at HAHN+KOLB Werkzeuge GmbH Germany. We also reserve the right to pass on this data to our respective subsidiaries/sister companies or partner companies in order to store the data for the purpose of the order process. For this purpose, a group data transfer agreement has been concluded with the respective WÜRTH Group companies. In this case, C2P transmissions are carried out in accordance with to Art. 28 GDPR (contract processing) and C2C transfers in accordance with Art. 26 GDPR (common responsibilities).

If the relevant data has to be transferred to recipients outside of the EU/EEC in order to fulfil the purpose, the appropriate level of protection usually comes from the presence of an adequacy decision by the European Commission, the use of inter-company or external agreements based on EU standard data protection clauses (in accordance with Art. 46(2)(c) and (d) GDPR) or the presence of an exception provided by the GDPR for the specific case (in accordance with Art. 49(1) GDPR, e.g. the transmission is required for the fulfilment of the contract between you and HAHN+KOLB).

The legal basis for the processing of your personal data is – if you are acting in your own name – Art. 6(1)(b) GDPR (data processing for contract initiation and execution). If you are acting on behalf of a company/a third party, the legal basis for the processing of your personal data is Art. 6(1)(f) GDPR (data processing due to overriding legitimate interest). Our legitimate interest is:

• To ensure smooth business operation and to sell goods and services, increase customer loyalty, promote turnover and increase sales.
• Customer service and sales: Processing for the purpose of initiating business with customers concerning the supply and service offer from HAHN+KOLB Werkzeuge GmbH. In addition, processing for route and travel planning during visits and on-site support.
• Supply chain management: Processing for the fulfilment and processing of supply contracts with customers and suppliers and for the implementation of the logistics processes along the supply chain (e.g. transfer of data for order processing to manufacturers and suppliers for direct delivery, if the goods are not in stock at HAHN+KOLB).

Your data will not be passed on to recipients who are not directly involved in the processing of your orders or interests.

The subsidiary/sister company or partner company responsible for the customer is defined according to the country of the customer's registered office. The complete list of subsidiaries and partner companies worldwide can be found here: https://www.hahn-kolb.de/en/hahn_kolb/unternehmen/standorte/standorte.php

All other countries that are not listed are supported by HAHN+KOLB Werkzeuge GmbH Germany.