Privacy Policy (Training)

Information on the processing of personal data in connection with training courses

Version 08/05/2025
 

Hilscher Gesellschaft für Systemautomation mbH operates Hilscher U! —the competence center for technical knowledge transfer and professional training—a central facility for conducting and coordinating training and qualification measures for internal and external participants.
When using the services provided, personal data is collected, processed, and used exclusively in accordance with the applicable statutory data protection provisions. In the following we provide information on the nature and scope of data that we collect, the purpose of the collection and use thereof.

1. Name and contact details of the controller and company data protection officer
 

Controller:
Hilscher Gesellschaft für Systemautomation mbH
Rheinstrasse 15
65795 Hattersheim, Germany

Phone: +49 (0) 6190 9907-0 Fax: +49 (0) 6190 9907-50

E-mail: info@hilscher.com

You can reach the company data protection officer using the aforementioned address, to the attention of the data protection officer, or by sending an e-mail to privacy@hilscher.com.

2. Collecting and storing personal data and the nature, purpose and use thereof

(1) If you commission our services, we collect the following information:

• Title, first name, last name;
• A valid e-mail address;
• The (company) address you have provided,
• Phone (optional)
• VAT number

We collect this data

• In order to be able to identify you as our customer;
• In order to be able deliver to you;
• To correspond with you;
• For invoicing;
• Where applicable, to enforce claims against you;

Personal data of participants will only be processed within the scope of the use of internal IT systems (in particular the learning management software). Processing is carried out for the purpose of providing, implementing, and organizing training measures and for related communication.

In detail, this includes:

• Sending registration e-mails for the creation and use of a user account
• Notifications about registrations and cancellations for training courses
• Automated reminders before the start of a training course
• Follow-up e-mails with feedback forms, training documents, or certificates of participation

Data is processed on the basis of your request/proposal/order and is required according to Art. 6 (1.1b) GDPR for the aforementioned purposes in order to be able to process the order/the contract appropriately and to mutually meet the obligations as stipulated in the contract for work or services or in the purchase contract.

Data shall only be processed and used if

(a) processing is necessary for the performance or in order to take steps prior to entering into a contract (Art. 6 (1b) GDPR).

Personal data is processed to render services, for purchasing and sales in the context of the performance of our contracts with our customers/suppliers/partners or to take steps prior to entering into a contract.

(b) to protect the legitimate interests of the Controller or a third party (Article 6 (1f) GDPR

Where necessary, we continue to process your data beyond the actual fulfillment of the contract for the purpose of protecting our legitimate interests or those of third parties.

• Enforcement of legal claims and defense in the event of legal disputes
• Ensuring IT security and the company’s IT operation
• Preventing or prosecuting criminal offenses
• Measures towards building and equipment security (such as access controls)
• To ensure the ability to determine who shall be allowed or denied access

(c) you have given your consent for one or more specific purposes (Art. 6 (1a) GDPR)

If you have given us your consent to the processing of your personal data for specific purposes (such as sending information, product announcements, invitations to events), the lawfulness of processing your personal data is given on the basis of your consent. You may revoke the consent you had once given us at any time. This also applies to revoking declarations of consent that were given to us prior to the effective date of the EU General Data Protection Regulation, thus prior to May 25, 2018. Please keep in mind that said revocation shall only take effect for the future and does not affect any prior processing.

(2) Duration of the storage

• The personal data we collect shall be stored and then erased once storage thereof is no longer necessary to fulfill the contract, unless
• According to Article 6 (1.1c) GDPR we are obligated to store data for longer periods of time due to storage and documentation deadlines applicable under tax and commercial law (German Commercial Code (HGB), German Penal Code (StGB) or German Tax Code (AO), i.e. HGB 10 years, bank account statements 10 years, contract and order documents 6 years).
• Preservation of evidence in the context of regulations on limitation periods: According to Sections 195 ff German Civil Code (BGB), such limitation periods may be up to 30 years, whereas a limitation period is generally three years.
• Or you have given your consent to such extended limitation periods according to Art. 6 (1) (a) GDPR.

3. Sharing data with third parties

We do not share your personal data with third parties other than for the purposes listed below.

(1) We only share your personal data with third parties if:

• You have given your express consent according to Art. 6 (1.1a) GDPR;
• The sharing of data according to Art. 6 (1.1f) GDPR is necessary for the establishment, exercising or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection that your data should not be shared;
• In the event that there is a legal obligation to share the data according to Art. 6 (1.1c) GDPR, and
• Doing so is legally permissible and required according to Art. 6 (1.1b) GDPR for processing our contractual relationships with you. Accordingly, the sharing of your personal data by us with third parties relates exclusively to such service partners involved in the contract processing, such as transport companies assigned with the delivery and the bank assigned with payment matters, or if paid by credit card, the relevant credit card company.

• To partners/trainers: In individual cases, we will share your data with our partners/trainers if doing so is necessary for the fulfillment of your contract.

  
  External partners or trainers are:
  
  NetTechnix E&P GmbH
  Leusbündtweg 49a
  6800 Feldkirch, Austria
  Managing Director Thomas Grebenz

(2) Data transmission within the EU, into a Third Country or to an international organization does not take place.

4. Your rights

You have the right:

• Pursuant to Art. 7 (3) GDPR you may revoke the consent you had once given us at any time. The consequence of this is that in the future we will no longer be allowed to process data that was based on this consent;
• To obtain information from us pursuant to Art. 15 GDPR on the personal data that we process. In particular, you may obtain information on the purposes of the processing, the categories of personal data concerned,
  the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data, the right to lodge a complaint , information as to their source of the personal data where such are not collected from us, the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information as to their details;
• Pursuant to Art. 16 GDPR to obtain from the controller without undue delay the rectification of inaccurate or completion of your personal data that we have stored;
• Pursuant to Art. 17 GDPR, the right to obtain from us the erasure of personal data we have stored on you, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercising or defense of legal claims;
• Pursuant to Art. 18 GDPR, to obtain from the controller restriction of processing your personal data where you contest the accuracy of the personal data, the processing is unlawful, yet you opposes the erasure thereof and we no longer need the data, yet you require said data for the establishment, exercising or defense of legal claims, or you have objected to the processing of your data pursuant to Art. 21 GDPR;
• Pursuant to Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller, and
• Pursuant to Art. 77 GDPR the right to lodge a complaint with a supervisory authority. Generally, you may address the supervisory authority in your habitual residence, place of work or place of our company headquarters.

5. Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation. If you would like to exercise your right to object, it will suffice to send an e-mail to privacy@hilscher.com

For any information on data collection, processing, use, rectification, blocking or erasure, as well as on the revoking of consent given or objection to a particular use of data or any other questions, please contact:

Hilscher Gesellschaft für Systemautomation mbH
- Privacy -
Rheinstrasse 15
65795 Hattersheim, Germany

by Phone: +49 (0) 6190 9907-0 by Fax: +49 (0) 6190 9907-50
or by e-mail to privacy@hilscher.com

You can find the comprehensive privacy policy for our website by visiting:

German https://www.hilscher.com/de/datenschutzerklaerung/
English https://www.hilscher.com/privacy-policy/
Italian https://www.hilscher.com/it/informativa-sulla-privacy/