1. General information
The protection of personal data is important to us. That' s why we, the Hacon Ingenieurgesellschaft mbH (hereinafter referred to as “we” or “Hacon”), process the personal data of our customers and business partners in accordance with the applicable legal regulations on the protection of personal data.
This information sheet serves to inform Hacon's customers and business partners in accordance with the EU General Data Protection Regulation (GDPR) valid as of May 25, 2018 and the Federal Data Protection Act (BDSG).

2. Contact details of the responsible party
Hacon Ingenieurgesellschaft mbH, Lister Str. 15, 30163 Hannover, Germany, telephone: +49 (0) 511-33699-0, e-mail: info@hacon.de is responsible for processing your personal data.

3. Contact details of the data protection officer
You can contact our data protection officer at the following e-mail address: privacy@hacon.de

4. Data categories
The data collected and processed about you includes the following categories of data in particular:
- Company name
- Address data and contact information
- Company contacts
- Contract master data
- Communication data
- Billing and payment data
- Voluntary information

5. Purposes of processing, legal basis
We process the above-mentioned data primarily to fulfil the contracts concluded with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and, where applicable, to comply with legal requirements pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR.
Furthermore, your personal data may also be processed for legitimate purposes pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interests include, in particular, advertising our products, optimising our processes, communicating efficiently with you and asserting, exercising or defending legal claims.
Insofar as in individual cases we obtain your express consent for certain processing operations, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

6. Data recipients
The recipients or categories of recipients to whom your data may be disclosed include in particular:
- External contract processors (service providers)
- Companies affiliated with Hacon
- Banks
- Tax Office and other authorities

7. Place of data processing
The processing of your data takes place in countries of the European Union (EU) or the European Economic Area (EEA).
Should Hacon transfer personal data to service providers or affiliated companies in countries outside the EU/EEA (so-called third countries), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or other appropriate data protection guarantees (e.g. binding corporate rules, EU standard contract clauses) are in place.

8. Duration of storage and deletion of your data
We will delete your personal data as soon as it is no longer required for the above-mentioned purposes.
After termination of our cooperation, the data will be stored as long as we are legally obliged to do so. This happens regularly as the result of legal obligations to disclose and store data, which are regulated in the German Commercial Code (HGB) and the German Tax Code (AO). The storage periods can then be up to ten years.
In addition, personal information may be retained for the period during which warranty and other claims may be made against us (statutory limitation periods of three to thirty years).

9. Rights of those affected
According to the relevant data protection regulations, data subjects have in particular the following rights:
9.1 Right to information
You have the right to request information about whether and which of your personal data is stored by us and to whom we may have passed it on.
9.2 Right to correction
You can request the rectification of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
9.3 Right to deletion, restriction of processing
If the legal requirements are met, you have the right to demand the deletion of personal data or the restriction of its processing.
9.4 Right to data transferability
You can request that we make the personal data provided by you available to you in a structured, standard and machine-readable format so that you are able to transfer it either yourself or - if technically feasible – that we transfer it to a third party.
9.5 Right to objection
You may have the right to object to the processing of personal data concerning you for reasons arising from your particular situation.  
9.6 Right to revoke
Insofar as you have given us a separate consent for the processing of your personal data, you can revoke this at any time.
9.7 Right to appeal
You have the right to address any questions or complaints to the competent supervisory authority. You may exercise this right with a supervisory authority in the Member State where you live, at your place of work or at the place where the alleged infringement occurred.
The contact details of the supervisory authority competent for the head office of the responsible party are as follows:
The State Data Protection Officer of Lower Saxony, Barbara Thiel, Prinzenstr. 5, 30159 Hannover, Tel.: +49 (0) 511-120-4500; e-mail: poststelle@lfd.niedersachsen.de.
9.8 Exceptions
Please note that the above rights may be limited by EU law or applicable national law.