II. General information on data processing

1. Extent of personal data processing

In principle, we collect and use our users’ personal data only insofar as doing so is necessary to providing a functional website (including the HÜPPE website, the HÜPPE online shop and the HÜPPE product configurator) and to providing our contents and services. Our users’ personal data is collected and used regularly, and only after said users have given their consent to this effect. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and where data processing is permitted by law.


2. Legal basis for personal data processing

Insofar as we obtain the data subject’s consent to process their personal data, Art. 6, Para. 1, lit. a of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis for personal data processing.

In the event of personal data which is necessary to fulfilling a contract, the contracting party for which is the data subject, being processed, Art. 6, Para. 1, lit. b of the GDPR shall apply as the legal basis. This also applies to processing which is required to carry out pre-contractual measures.

If personal data needs to be processed to fulfil a legal obligation to which our company is subject, Art. 6, Para. 1, lit. c of the GDPR shall apply as the legal basis.

In cases where the vital interests of the data subject or another natural person necessitate processing of personal data, Art. 6, Para. 1, lit. d of the GDPR shall apply as the legal basis.

If processing is necessary to protecting a legitimate interest on the part of our company or a third party, and if the data subject’s interests, fundamental rights and fundamental freedoms do not take precedence over the former interest, Art. 6, Para. 1, lit. f of the GDPR shall apply as the legal basis for processing.


3. Deletion of data and duration of storage

The data subject’s personal data shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage can also take place if this was stipulated by the European or national legislator in Union regulations, legislation or other specifications to which the controller is subject. Blocking or deletion of the data also takes place if a storage period stipulated by the aforementioned standards elapses, unless the data must be stored for longer to conclude or fulfil a contract.