1. data protection at a glance
Hubl GmbH appreciates your visit to this website and your interest in our company and our products. The protection of your personal data during the collection, processing and use on the occasion of your visit to our website is very important to us.
Below you will find information about which data is collected during your visit to the website and how it is used.
Data collection on this website
Who is responsible for data collection on this website?
How do we collect your data?
Your data is collected, on the one hand, by you telling us. This may be, for example, data that you enter in a contact form.
Other data is collected automatically or after your consent when visiting the website by our IT systems. These are mainly technical data (eg Internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about this and other questions on the subject of data protection.
Analysis tools and third-party tools
When visiting this website, your surfing behavior may be statistically analyzed. This is done primarily with so-called analysis programs.
We host the content of our website with the following providers:
Provider is DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany (hereinafter DomainFactory). When you visit our website, DomainFactory collects various log files including your IP addresses.
The use of DomainFactory is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. for device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
We have concluded an order processing agreement (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This can be v. a. IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The external hosting is for the purpose of contract performance to our potential and existing customers (Art. 6 para 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 para 1 lit. f DSGVO). Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Our hoster(s) will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding such data.
We use the following hoster(s):
checkdomain GmbH a dogado group company
Große Burgstraße 27/29
We have concluded a contract on order processing (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the DSGVO.
3. General notes and mandatory information
We point out that data transmission on the Internet (for example, when communicating by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
Phone: +49 (0) 70 42 / 982 45 - 0
Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, or the like)
General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a DSGVO or Art. 9 (2) lit. a DSGVO, if special categories of data are processed in accordance with Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1) a DSGVO. If you have consented to the storage of cookies or to the
Data Protection Officer
We have appointed a data protection officer.
Phone: +49 (0) 7946 9893516
Note on data transfer to the USA and other third countries
Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.
For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 DSGVO)
If YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO
PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU DISAGREE, YOUR PERSONAL DATA WILL FOLLOWINGLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (DISAGREE IN ACCORDANCE WITH ARTICLE 21 ABS. 2 DSGVO).
Right of appeal to the competent supervisory authority
In the event of violations of the GDPR, data subjects have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if necessary, a right to correct or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection under Article 21 (1) of the GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
- If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from
"http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Objection to advertising e-mails
The use of contact data published within the framework of the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam e-mails.
4. Data collection on this website
Our Internet pages use so-called "cookies". Cookies are small data packets and do no harm to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until an automatic deletion by your web browser.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for the processing of payment services).
Cookies have different properties.
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.
Cookies that are necessary to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. Insofar as consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of this website may be limited.
Consent with Klaro Consent Manager
a) Klaro is a free open source tool that allows you to manage consent for your website in an intuitive, user-friendly and privacy compliant way. The project initiator of this technology is KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin. Only when you agree to its use in the "opt-in" process, a Klaro! cookie ("klaro") is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data will not be shared with developers of Klaro! The collected data will be stored until you delete the Klaro! cookie or the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. You can access the Klaro Consent Manager at any time and check and update your settings here.
We have concluded an order processing agreement (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the DSGVO.
If you send us inquiries via contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request is related to
the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests directed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this was requested; the consent can be revoked at any time. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not disclose this data without your consent.The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this was requested; the consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.
5. Analytics Tools and Advertising
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. Here, the website operator receives various usage data, such as page views, dwell time, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.
Furthermore, we can use Google Analytics to record, among other things, your mouse and scroll movements and clicks
. Further, Google Analytics uses various modeling approaches to augment the data sets it collects and employs machine learning technologies in its data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.
We use Google signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history, as well as demographic data (visitor data). This data can be used for personalized advertising with the help of Google signal. If you have a Google account, Google Signal's visitor data is linked to your Google account and used for personalized advertising messages. The data is also used for the creation.
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities in the use of Google Analytics.
Google Analytics E-Commerce Measurement
This website uses the "E-Commerce Measurement" function of Google Analytics. With the help of e-commerce measurement, the website operator can analyze the buying behavior of website visitors to
improve its online marketing campaigns. This involves recording information such as orders placed, average order values, shipping costs and the time from viewing to purchasing
a product. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or his device.
6. Plugins and Tools
YouTube with enhanced data protection
This website embeds videos of the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. According to YouTube, this mode causes YouTube not to store information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube may store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user experience, and prevent fraud attempts.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.
The use of YouTube is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Google Fonts (local hosting)
jQuery is distributed for the JS Foundation via the StackPath CDN. The provider of the CDN is StackPath LLC, 2021 McKinney Ave, Suite 1100, Dallas, TX 75201, USA. For more information about StackPath LLC's privacy practices, please visit: https://www.stackpath.com/privacy-statement/#Contact-Information.
7. Proprietary Services
How we handle applicant data
We offer you the opportunity to apply to us (e.g., by e-mail, postal mail or via online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.), insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 BDSG under German law (initiation of an employment relationship), Art. 6 (1) lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 (1) lit. a DSGVO. The consent can be revoked at any time. Your personal data will only be disclosed within our company to persons involved in processing your application.
If the application is successful, the data you submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6 (1) lit. b DSGVO for the purpose of implementing the employment relationship.
Storage period of data
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted with us on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the termination of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for continued retention no longer applies.
A longer retention may also take place if you have given a corresponding consent (Art. 6 para. 1 lit. a DSGVO) or if legal retention obligations oppose the deletion.
Inclusion in the applicant pool
If we do not make you a job offer, it may be possible to include you in our applicant pool. In the event of inclusion, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies. Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a DSGVO). The provision of consent is voluntary and is not related to the current application process. The data subject may revoke his/her consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
We collect, process and store contact data that you have provided to us in our CRM system. This enables us to contact you if you have requested this and to maintain our customer relationship. In addition, your contact details are necessary to contact you in order to carry out pre-contractual or contractual measures.
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit a) DSGVO or Art. 6 para. 1 lit b) DSGVO in the case of a contractual relationship with you.