Privacy Policy
Information on Data Processing Pursuant to Art. 12 et seq. of the GDPR by Hägele GmbH
We take the protection of your personal information very seriously. We treat your personal information confidentially and in accordance with applicable data protection laws and this Privacy Policy.
We would like to provide you with the following information regarding the processing of your personal data:
Privacy Policy
The provisions under Section I apply to all processing operations.
1. Data Controller
The data controller is:
Hägele GmbH
Am Niederfeld 13
73614 Schorndorf
Phone: +49 7181 96988 700
Email: info@cleanfix.org
Statutory Data Protection Officer
We have appointed a data protection officer for our company.
D3 Datenschutz UG (limited liability)
Nico Villing
Hauptstr. 106/108
78549 Spaichingen
Phone: +49 7424 603939-0
Email: privacy@cleanfix.org
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our website, to handle inquiries, to carry out contractual or precontractual measures, to conduct marketing activities, or to comply with legal obligations.
Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, name, contact information, IP address, usage data, or the content of communications.
Processing is carried out, in particular, on the following legal grounds:
Article 6(1)(a) of the GDPR, to the extent that you have provided consent, for example for analytics, marketing, or external media services.
Article 6(1)(b) of the GDPR, to the extent that the processing is necessary for the performance of a contract or for the implementation of precontractual measures, such as contact requests, registrations, or customer accounts.
Art. 6(1)(c) of the GDPR, to the extent that we are legally required to process data, for example due to retention requirements under commercial or tax law.
Art. 6(1)(f) of the GDPR, to the extent that the processing is necessary to safeguard legitimate interests and your interests, fundamental rights and freedoms do not override them—for example, for IT security, fraud prevention, processing general inquiries, or direct marketing to existing customers within the limits permitted by law.
Section 25 of the TDDDG applies additionally to the storage of information on your device or access to information on your device. To the extent that consent is required for this, processing will take place only with your prior consent. Technically necessary storage or access may occur without consent, provided that it is necessary for the provision of the explicitly requested website function.
Retention Period and Data Retention for Legal Proceedings
We store personal data only for as long as is necessary for the respective purposes of processing. The determining factors include, in particular, the duration of contract fulfillment, the processing of the respective inquiry, the use of the customer account, statutory retention requirements, and, where applicable, existing record-keeping and documentation requirements.
To the extent that statutory retention requirements apply—in particular those under commercial or tax law—further storage is based on Article 6(1)(c) of the GDPR.
In addition, personal data may be stored to the extent that this is necessary in individual cases to assert, exercise, or defend legal claims. The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in safeguarding, enforcing, and defending our legal interests.
Once the respective purpose of processing no longer applies, statutory retention periods have expired, or legitimate interests in retaining the data no longer exist, the data will be deleted, provided there is no other legal basis for its storage.
3. Website Visits and Server Log Files
When you visit our website, technically necessary data is processed so that the website can be displayed and operated securely. This may include, in particular, the following data: IP address, date and time of access, page or file accessed, amount of data transferred, browser type and version, operating system, referrer URL, hostname of the accessing computer, as well as status messages and error codes.
Data is processed for the purposes of providing the website, ensuring technical stability, maintaining IT security, analyzing errors, and preventing misuse.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure, functional, and stable operation of the website.
Server log files are generally stored only for as long as is necessary for the purposes mentioned above. They may be stored for a longer period if necessary to investigate security incidents, misuse, or attacks.
4. Hosting with Iconics
Our website is hosted by Iconics. The provider is Iconics Informations- und Computersysteme GmbH, Gartenstraße 34, 73660 Urbach, Germany.
As part of its hosting services, Iconics processes personal data that may be generated when visitors access and use the website. This includes, in particular, server log data, IP addresses, and technical connection data.
Data is processed for the purposes of providing, securely operating, and performing technical maintenance on the website. The legal basis is Article 6(1)(f) of the GDPR. To the extent that Hetzner processes personal data on our behalf, a data processing agreement in accordance with Article 28 of the GDPR is in place.
5. Cookies, Similar Technologies, and Consent Management
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Similar technologies may include, for example, local storage, session storage, pixels, tags, or scripts.
We distinguish between technically necessary services and optional services.
Technically necessary cookies and technologies are required for the website, the online store, the shopping cart feature, the login process, security features, or your cookie settings to function properly. These are used in accordance with Section 25(2) of the German Telemedia Act (TDDDG) and Article 6(1)(f) of the General Data Protection Regulation (GDPR), to the extent that they are necessary for the operation of the website.
Optional services—in particular analytics, marketing, tracking, external media, mapping, chat, or social media services—are used only if you have given your prior consent. The legal basis is Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG.
You can revoke your consent at any time, effective for the future, or change your selections. To do so, we provide a way to adjust your cookie and privacy settings on our website.
6. Technically Necessary Cookies
When you visit our website, we use technically necessary cookies and similar technologies. These are required to ensure that the website and its basic functions work properly. This includes, in particular, features related to session management, security, the shopping cart, the login area, language settings, and the storage of your privacy settings.
Processing is carried out, to the extent necessary to provide the expressly requested website function, on the basis of § 25(2) of the TDDDG. Subsequent processing of personal data is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and user-friendly operation of the website.
The specific cookies and similar technologies we use—including their purpose, provider, category, and retention period—are explained in our cookie layer and in the cookie settings available there.
Unless cookies or similar technologies are technically necessary, they will only be used with your prior consent.
7. Contact Form and Contacting Us
If you contact us via the contact form, by email, by phone, or by any other means, we will process the data you provide in order to handle your inquiry. This may include, in particular, your name, company, email address, phone number, subject line, message, communication content, and technical metadata.
Required information consists only of the details we need to process your request. Any additional information is optional.
Depending on the content of the inquiry, processing is carried out on the basis of Article 6(1)(b) of the GDPR, provided the inquiry relates to a contract or precontractual measures, or on the basis of Article 6(1)(f) of the GDPR, if it is a general inquiry. Our legitimate interest lies in the proper processing and response to your inquiry.
The data will be deleted as soon as the request has been fully processed and there are no legal retention requirements or legitimate interests that would prevent further storage.
8. Objection to Promotional Emails
We object to the use of contact information published in accordance with legal disclosure requirements or on this website for the purpose of sending unsolicited advertising and informational materials.
We reserve the right to take legal action in the event of unsolicited promotional materials, particularly spam emails.
If you are an existing customer, we may use your email address, within the limits permitted by law, for direct marketing of our own similar goods or services. You may object to this use at any time without incurring any costs other than the transmission costs charged at standard rates. We will inform you of your right to object when we collect your email address and in every promotional email.
9. Google Analytics
We use Google Analytics to analyze the use of our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and similar technologies to collect information about the use of our website. This includes, in particular, device and browser information, referrer URLs, pages viewed, duration of use, click and interaction data, approximate location data, and event and conversion data.
This processing is used to measure reach, perform statistical analysis, optimize our website, and measure the effectiveness of marketing campaigns.
In Google Analytics 4, IP addresses are not stored permanently. They are processed only temporarily to derive approximate location data and are then deleted.
Google Analytics is used solely on the basis of your consent (Art. 6(1)(a) of the GDPR in conjunction with § 25(1) of the TDDDG). You may revoke your consent at any time with future effect via the cookie/privacy settings.
The data stored in Google Analytics is retained for 14 months and then deleted.
We use Google Consent Mode to ensure compliance with data protection regulations. We do not use features for creating audiences or for cross-device analysis (e.g., Google Signals or remarketing).
10. Google Ads and Google Conversion Tracking
We use Google Ads and Google Conversion Tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
These services are used to display, track, and optimize advertisements. If you arrive at our website via a Google ad or interact with our content, cookies, pixels, or similar technologies may be used to determine whether certain actions have taken place on our website, such as contact requests, registrations, purchases, or other conversions.
In particular, the following data may be processed: IP addresses, device information, browser data, referrer URLs, ad interactions, cookie IDs, conversion data, and usage data.
Data processing is carried out solely on the basis of your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect.
11. TikTok Pixel
We use the TikTok Pixel provided by TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited (United Kingdom).
The TikTok Pixel allows us to analyze the effectiveness of our advertising efforts and deliver targeted ads.
In particular, this may involve the processing of information about your usage behavior on our website. This processing is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
We cannot rule out the possibility that personal data may be transferred to third countries. For more information, please see TikTok’s Privacy Policy.
12. Real Cookie Banner
We use Real Cookie Banner to manage and document your cookie consents.
The provider is devowl.io GmbH, Germany.
In this process, technically necessary cookies are set to store your consent and to comply with legal documentation requirements.
The processing is based on Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR and Section 25(2)(2) of the TDDDG.
13. WPML
We use the WPML plugin to power our multilingual website.
A technically necessary cookie is set to save your selected language.
Data processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR and Section 25(2)(2) of the TDDDG.
Your usage behavior will not be analyzed.
14. Social Media Presence
We maintain online presences on social media networks and platforms, particularly on LinkedIn, Facebook, and Instagram. Through these channels, we provide information about our company, products, services, news, and career opportunities. Users can also interact with us via these platforms.
When you visit our social media profiles, we process personal data to the extent that you interact with our profile, send us messages, comment on posts, share content, or contact us in any other way. This may include, in particular, your profile name, public profile information, message content, comments, interactions, the time of the interaction, and communication data.
We process your data for public relations, communication, handling inquiries, and presenting our company. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in maintaining modern corporate communications and public relations. To the extent that you provide us with your consent, the legal basis is Article 6(1)(a) of the GDPR.
In addition, the respective platform providers process personal data on their own responsibility. In doing so, they may also create usage profiles, provide statistical analyses, or process data for the platform’s own purposes. We have only limited influence over the nature and scope of this processing.
We operate a company page on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Ireland.
When you visit our LinkedIn page, LinkedIn may process personal data and provide us with statistical analyses regarding the use of the page. For certain page statistics, LinkedIn and we may share responsibility.
Further information regarding data processing by LinkedIn can be found in LinkedIn’s privacy policy.
We operate a business page on Facebook. The provider is Meta Platforms Ireland Limited, Ireland.
When you visit our Facebook page, Meta may process personal data and provide us with statistical analyses regarding the page’s usage (known as “Page Insights”). Meta and we may share responsibility for certain page statistics.
Further information regarding Meta’s processing of data can be found in Facebook’s privacy policy.
We run a business page on Instagram. The provider is Meta Platforms Ireland Limited, Ireland.
When you visit our Instagram page, Meta may process personal data and provide us with statistical analyses of the page’s usage (known as “Insights”). For certain page statistics, Meta and we may share responsibility.
Further information regarding Meta’s processing of data can be found in Instagram’s privacy policy.
TikTok
We operate a corporate account on TikTok. The service provider is TikTok Technology Limited, Ireland, or, depending on the use and area of responsibility, the respective TikTok entity.
When you visit and use our TikTok page, TikTok may process personal data. In particular, this may include information about your interactions with our content, usage data, and technical data. TikTok may also provide us with statistical analyses regarding the use of our TikTok page and our content.
For certain types of data processing and statistical analyses, TikTok and we may share responsibility.
Further information regarding TikTok’s processing of personal data can be found in TikTok’s privacy policy.
15. BITE Applicant Management
We use the BITE applicant tracking system to manage our hiring process. The provider is BITE GmbH, Germany.
If you apply using our online application form, we will process the personal data you provide (e.g., basic information, contact information, application documents, qualifications, and any other information you submit) in order to process your application and conduct the application process.
Processing is based on Article 6(1)(b) of the GDPR (initiation of an employment relationship) and Section 26 of the BDSG. If you have given your express consent—for example, to be included in a candidate pool—processing is additionally based on Article 6(1)(a) of the GDPR.
The recipients of the data are exclusively the departments within our company responsible for the application process, as well as our service provider BITE, which acts as a data processor in accordance with Article 28 of the GDPR.
Your application data will generally be stored only for as long as is necessary to conduct the application process. Unless you are hired, there is a legal obligation to retain the data, or you have consented to longer-term storage, the data will be deleted upon completion of the application process in accordance with legal requirements.
For more information on data processing by BITE, please refer to the provider’s privacy policy.
16. Recipients of Personal Data
Within our company, only those departments that need access to personal data in order to fulfill their respective purposes are granted such access.
In addition, personal data may be transferred to external recipients, in particular to: hosting and IT service providers, online store and e-commerce service providers, payment service providers, shipping and logistics service providers, newsletter and marketing service providers, analytics and advertising service providers (to the extent consent has been given), communication and support service providers, application management service providers, tax advisors, auditors, legal advisors, and government agencies, to the extent required by law.
To the extent that service providers process personal data on our behalf, we enter into data processing agreements in accordance with Article 28 of the GDPR. Where joint controllership applies, agreements are entered into in accordance with Article 26 of the GDPR.
17. Transfers to Third Countries
Some of the services used may transfer personal data to countries outside the European Union or the European Economic Area, or may allow access from such countries. This may be particularly relevant for services provided by international providers.
Data will only be transferred if the requirements of Articles 44 et seq. of the GDPR are met. This may occur, in particular, on the basis of an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework for appropriately certified companies, standard contractual clauses of the European Commission, or supplementary safeguards.
18. Are you required to provide us with your personal data?
Under the GDPR, you have various rights regarding the processing of your personal data.
Right to Information
You have the right to request information about whether we process personal data about you. If we do, you may request access to this data and additional information, including, in particular, the purposes of processing, the categories of personal data, the recipients, the retention period, the source of the data, and your other rights.
Right to Correction
You have the right to request the correction of inaccurate personal data. You may also request that incomplete personal data be completed.
Right to Erasure
You have the right to request the deletion of your personal data if the legal requirements are met. This is particularly the case if the data is no longer necessary for the purposes for which it was collected, if you have withdrawn your consent and there is no other legal basis, if you have lodged a valid objection, or if the data has been processed unlawfully.
The right to erasure does not apply if the processing is necessary to comply with a legal obligation, to exercise the right to freedom of expression and information, for reasons of public interest, or to establish, exercise, or defend legal claims.
Right to Restriction of Processing
You have the right to request that processing be restricted if the legal requirements are met. This may be the case, in particular, if you contest the accuracy of the data, the processing is unlawful and you request restriction rather than erasure, we no longer need the data but you need it to assert legal claims, or you have lodged an objection and we are still assessing whether our legitimate grounds outweigh yours.
Right to Data Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, provided that the processing is based on consent or a contract and is carried out using automated means. To the extent technically feasible, you may also request that the data be transferred directly to another data controller.
Right to Withdraw Consent
If processing is based on your consent, you may withdraw that consent at any time, effective for the future. The lawfulness of the processing prior to withdrawal remains unaffected.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on Article 6(1)(e) or (f) of the GDPR.
We will no longer process the data unless we can demonstrate compelling legitimate grounds for doing so that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for the purpose of direct marketing, you may object to such processing at any time. This also applies to profiling, to the extent that it is related to direct marketing. Once you have objected, your data will no longer be used for direct marketing.
Right to File a Complaint with a Regulatory Authority
You have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws. In particular, you may contact the supervisory authority in your place of residence, your place of work, or the location of the alleged violation.
19. Automated Decisions, Including Profiling
To the best of our current knowledge, no decisions are made exclusively by automated means within the meaning of Article 22 of the GDPR.
To the extent that analytics, marketing, or tracking services are used, usage profiles or target groups may be created. This is done solely on the basis of your consent and is used for analysis, optimization, or targeted advertising. This does not result in any legal consequences or comparable significant adverse effects.
20. Safety
We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. These measures are adapted in accordance with the state of the art and the existing risks.
21. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if our website, the services we use, our technical processes, or legal requirements change. The version currently published on the website is the one that applies.
As of September 2026