Privacy policy

At a glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Your data is collected, on the one hand, through information you provide to us, for example via the contact or application form. Other data is automatically recorded by our IT systems when you visit the website, in particular technical data such as browser, operating system or the time of the page request. This website does not set cookies for visitors, does not embed content from third-party providers and does not use any tools to analyse user behaviour.

Data controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

Hosting

This website is operated by our web service provider on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. Personal data collected on this website is stored there. This mainly includes IP addresses, enquiries and applications as well as technical access data.

Hosting is carried out for the performance of contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online services (Art. 6 (1) (f) GDPR). We have a data processing agreement pursuant to Art. 28 GDPR with our web service provider; Hetzner Online GmbH is included therein as a sub-processor.

Your rights

You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data. You may request the correction or deletion of this data and, under certain circumstances, the restriction of processing. Data that we process automatically on the basis of your consent or for the performance of a contract will be provided to you, on request, in a common, machine-readable format.

You may revoke any consent given at any time with effect for the future. The lawfulness of processing carried out before the revocation remains unaffected.

Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time for reasons arising from your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to assert, exercise or defend legal claims.

You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner.

For any questions concerning data protection, you can reach us at the address stated above.

Data collection on this website

Server logs

When each page is accessed, your browser transmits technically necessary information: IP address, date and time, address accessed, browser and operating system. We use this data exclusively to provide the website securely and without errors and to defend against attacks (Art. 6(1)(f) GDPR). It is not combined with other data sources and is only retained for as long as necessary for these purposes.

Cookies

This website does not set cookies for visitors and does not read out any information from your device that is not technically essential for this purpose (Section 25(2) TDDDG). A cookie notice is therefore not required.

Encryption

The transmission of all pages and forms is encrypted using TLS. You can recognise this by "https://" and the padlock symbol in your browser's address bar.

Enquiry form

If you write to us using the enquiry form, we store your details (area, quantity and date if you wish, description, name, company, e-mail and telephone) on our server and forward them by e-mail to our team in order to process your enquiry and any follow-up questions. We do not pass on this data without your consent.

Drawings and other files you attach to your enquiry are stored in a protected area of our server that is not accessible via the internet, and sent as an attachment to our team. These files are automatically deleted from the web server 180 days after receipt.

The legal basis is Art. 6(1)(b) GDPR, provided your enquiry is related to a contract or serves pre-contractual measures; otherwise, our legitimate interest in processing enquiries (Art. 6(1)(f) GDPR). The data remains with us until you request its deletion or the purpose no longer applies; statutory retention periods remain unaffected.

Applications

You can apply to us via our application form. In doing so, we process the information you provide: name, contact details, for apprenticeships and internships optionally your date of birth, details of your schooling or vocational training, your message, and uploaded documents such as your CV and certificates.

The purpose is exclusively to carry out the application process. The legal basis is Art. 6 (1) (b) GDPR (initiation of an employment relationship). Insofar as you voluntarily provide special categories of personal data, for example regarding your health, processing takes place on the basis of Art. 9 (2) (b) GDPR in conjunction with § 26 (3) BDSG.

Your application is transmitted in encrypted form, stored on our server in Germany in a protected area that is not accessible via the internet, and sent by email to our HR department (personal@herold-maschinenbau.de). Only persons involved in the application process have access. You will receive an automatic confirmation of receipt by email.

Retention period: On the web server, applications and documents are automatically deleted 90 days after receipt. If an employment relationship is established, we transfer the data to the personnel file. Otherwise, we also delete it in our HR department no later than six months after the process is concluded, unless you have consented to a longer retention period or we need it to defend against legal claims, for example under the General Act on Equal Treatment.

Providing your data is voluntary. However, without your name and email address, we cannot process your application.

Email dispatch via Resend

For sending emails from the contact and application forms, we use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend transmits the emails to us and the confirmation of receipt to you; in doing so, the content of the message, attachments and email addresses are processed. Resend only stores the messages for as long as necessary for delivery and troubleshooting.

The legal basis is our legitimate interest in reliable dispatch (Art. 6(1)(f) GDPR), or the conduct of the application process. A data processing agreement is in place with Resend. Any transfer to the USA is based on the standard contractual clauses of the EU Commission.

Fonts

The fonts used on this website are hosted on our own server. No connection to servers operated by Google or other providers is established when the page is accessed.

Google review and social networks

In the footer, we display the rating of our Google business profile. It is retrieved and cached by our own server; your browser does not establish any connection to Google in doing so. Only when you click on the rating does our profile open on Google Maps. There, Google's privacy policy applies.

The references to our pages on Facebook, Instagram and LinkedIn are simple links. When you visit this website, no data is transmitted to these networks; this only happens when you click a link and the respective platform opens.

Last updated: September 2026