Privacy Policy

1. Name and address of the responsible party

Hero Tech Center Germany GmbH is the responsible party within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG) as well as other data protection regulations for this website and the associated data processing.

Comprehensive information about our company can be found in our legal notice.

2. Data Protection Officer

Enquiries regarding data protection at Hero Tech Center Germany GmbH can be sent at any time to:

Hero Tech Center Germany GmbH
Kronstaudener Weg 1
83071 Stephanskirchen

Phone: +49 (0) 8036 30311-20
E-mail: info@herotcg.de

3. Website provision and log files generation

3.1 Data processing description and scope

Information is automatically collected by the system, i.e. the web server, from the system of the calling computer or end device of the user each time the website is called up.

Following data will be collected:

Information about the type of browser and the version used
Operating system of the user’s terminal device
Internet service provider of the user
IP address of the user
Date and time of access
Previous website from which the user accessed this website

3.2 Legal basis for data processing

The legal basis for the temporary storage of this data and the log files is Art. 6 para. 1 lit. f) GDPR (our legitimate interest as the responsible website operator).

3.3 Data processing purpose

Temporary storage of the user’s IP address by the system is necessary to enable delivery of the website to the user’s computer. This requires the user’s IP address to remain stored for the duration of the session. The above data is stored in the log files to ensure the functionality of the website. In addition, this data is used to optimize the website and to ensure the security of the information technology systems (e.g. for attack detection). No evaluation of data for marketing purposes takes place in this context.

3.4 Storage duration

Once the above-mentioned data is no longer required to achieve the purpose for which it was collected, it is deleted. If data is collected to provide the website, this is the case when the respective session has ended. If data is stored in log files, this is the case after 14 days at the latest.

4. E-mail, telephone and contact form

4.1 Data processing description and scope

Contact can be made via the provided e-mail address, telephone number and contact form (under “Find us” → “CONTACT”). Personal data submitted with your enquiry will be stored on our system.

4.2 Legal basis for data processing

The legal basis for the processing of your data, which you transmit to us in the course of sending an enquiry via contact form, is Art. 6 para. 1 lit. a) GDPR (consent). The legal basis for the processing of the data you send us in the course of sending an e-mail or by telephone is Art. 6 para. 1 lit. f) GDPR (our legitimate interest in answering your enquiry). In case the request aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR (fulfilment of a contract).

4.3 Data processing purpose

The processing of this personal data is used for us to process your contact and answer your enquiry.

4.4 Storage duration

The above-mentioned data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. With regard to personal data sent by telephone, e-mail or via the contact form, this is the case when the respective conversation with you has ended.

4.5 Possibility of objection

At any time, you have the possibility to object to the data processing. The objection should be sent to the following e-mail address: info@herotcg.de
In this case, all personal data stored in the course of contacting us will be deleted.

5. Application process

5.1 Data processing description and scope

You have the option of applying to us for current vacancies or for a training position (under “Careers” → “JOIN US TODAY”) by e-mail, contact form or application form (“Aktuelle Jobs”/”Current openings” → “Apply for this position”). If you click on the link under “Aktuelle Jobs”/”Current openings” → “Apply for this job”, you will be redirected to the application form of our recruiting site of personio.de (Personio SE & Co. KG, Seidlstraße 3, 80335 Munich). When applications are submitted, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.

5.2 Legal basis for data processing

The legal basis for processing your data in the course of an application procedure is Section 26 (1) BDSG in conjunction with Art. 88 (1) GDPR. Art. 88 para. 1 GDPR. If you explicitly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, in accordance with Art. 7 Para. 3 GDPR, you can of course revoke your consent at any time by making a declaration to us with effect for the future.

5.3 Data processing purpose

Your data will be processed for the purpose of carrying out the application procedure.

5.4 Storage duration

In case of rejection of an application, we delete the data transmitted to us six months after notification of the rejection. After the application process has ended, we store your personal data for as long as we are legally obliged to do so or as long as you have given us your consent to do so. However, the data will not be deleted if it is required to be stored for a longer period due to legal provisions, e.g. due to the obligation to provide evidence according to the General Equal Treatment Act (AGG), or until the conclusion of legal proceedings. In this case, the legal basis is § 24 para. 1 no. 2 BDSG.

5.5 Possibility of objection

At any time, you have the possibility to object to the data processing. The objection should be sent to the following e-mail address: info@herotcg.de

6. Forwarding (links) to third party websites

6.1 Data processing description and scope

On our website, we have implemented links to third-party websites. These are clearly marked, e.g. by the sign for “linking”. For example, we have included links under “Hero’s like us” to our parent company “heromotocorp.com” and to the affiliated companies “heromotosports.com” and “vidaworld.com”. A link to Google Maps has been added under “Find us” → “Google Maps”. Under the link “Apply for this job” you will be redirected to our recruiting page and the online application form at “personio.de”. In case you like this website, click on the lettering “Shytsee” and you will be redirected to the website of the advertising agency that designed it. For websites designed and provided by third parties, we have no control over the design, content and function of these third-party services. Please note that the third-party services linked from our website may install their own cookies on your end device or collect personal data. In this respect, please obtain information directly from the providers of these linked third-party services (e.g. via their privacy policy).

6.2 Legal basis for data processing

The legal basis for forwarding you to the linked website is Art. 6 para. 1 lit. a) GDPR (your consent through your voluntary click on the link in question).

6.3 Data processing purpose

Links to the relevant third-party site are provided to enable you to easily access the information concerned.

7. Rights of the data subject

If a user’s personal data is processed, this person is a “data subject” within the meaning of the GDPR. The user has the following rights vis-à-vis us as the controller:

Right to information
Right to rectification
Right to restriction of processing
Right to deletion
Right to consultation
Right to data portability
Right of objection
Right to revoke the declaration of consent under data protection law
Right to complain to a data protection supervisory authority

Note on revocation of consent:
A data subject has the right to revoke their declaration of consent under data protection law at any time. However, this does not affect the legitimacy of the processing performed on the basis of the consent until the revocation.

Note on complaints to a supervisory authority:
Without prejudice to any other administrative or judicial remedy, a data subject shall have the right to lodge a complaint with a supervisory authority – in particular in the Member State of the user’s residence, the user’s place of work or the place of the alleged infringement – if the user considers that the processing of their personal data by us infringes the GDPR.

Note on the transmission of data to third countries
The GDPR requires guarantees for the adequacy of the level of data protection in third countries (outside the European Economic Area) for the transfer of personal data to these countries. Regarding data transfers to the U.S., this is the EU-U.S. Data Privacy Framework. This requires that the organizations concerned are certified under the EU-U.S. Data Privacy Framework (such as Google). Please note that by clicking on a link (e.g. to the websites “heromotocorp.com”, “heromotosports.com”, “vidaworld.com”), your voluntarily given consent may also extend to the transfer of data to an “unsafe third country”.