Privacy policy
Introduction
Introduction
With the following privacy policy, we would like to inform you about the types of personal data (hereinafter also referred to as "data") we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and in particular on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").
The terms used are gender-neutral.
As of: June 2026
Datenschutzerklärung
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
Halloren Vertriebs GmbH
Delitzscher Strasse 70
06112 Halle (Saale)
E-Mail: info@halloren.de
Tel.: +49 (0) 3 45 / 56 42 - 0
Fax: +49 (0) 3 45 / 56 42 - 299
II. Contact Details of the Data Protection Officer
Data Protection Officer
Delitzscher Strasse 70
06112 Halle (Saale)
Tel: +49 (0) 3 45 / 56 42 - 0
E-Mail: datenschutz@halloren.de
III. Bereitstellung der Website und Erstellung von Logfiles
1. Description and Scope of Data Processing
Our website is hosted by Alfahosting GmbH, Edmund-von-Lippmann-Straße 13–15, 06112 Halle. This service provider collects and stores the following information automatically transmitted by your device on our behalf:
(1) Browser type/version
(2) Operating system used
(3) Referrer URL (the previously visited page)
(4) IP address of your device
(5) Date and time of the server request
(6) Access status (HTTP status)
This data is not stored together with other personal data of the user.
2. Legal Basis for Data Processing
Rechtsgrundlage für die vorübergehende Speicherung der Daten und der Logfiles ist Art. 6 Abs. 1 lit. f) DSGVO.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's device. For this purpose, the user's IP address must be stored for the duration of the session.
Storage in log files is carried out to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
4. Categories of Recipients of Personal Data and Data Processing Outside the European Union
We do not generally pass on personal data to third parties unless we are legally required to do so or consent has been given.
Excluded from this is the use of service providers, e.g. for hosting the website, which we select carefully with particular regard to data protection and for which we have taken all data protection measures required for lawful data processing. Data processing outside the European Union does not generally take place.
5. Duration of Storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
Data stored in log files is deleted after no more than 30 days. Storage beyond this period may be possible in the case of prosecution of administrative offenses or criminal offenses.
6. Right to Object and Erasure
The collection of data for the provision of the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.
IV. Email Contact / Contact Forms / Postal Mail
1. Description and Scope of Data Processing
Our website contains a contact form that can be used for electronic communication. If a user makes use of this option, the data entered in the input form is transmitted to us and stored.
Alternatively, contact can be made via the provided email addresses. The personal data transmitted with the email will be stored for the purpose of processing the request.
In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation and, where applicable, forwarded to the responsible contact person. Furthermore, data is processed by our contractors, such as the website host, in the context of the website.
2. Legal Basis for Data Processing
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR.
3. Purpose of Data Processing
The processing of personal data in the case of contact by email serves us solely for the purpose of handling the contact. This also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Categories of Recipients of Personal Data and Data Processing Outside the European Union
Your data is not passed on to third parties. The data is used exclusively to clarify and respond to your inquiry.
5. Duration of Storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The additional personal data collected during the sending process is deleted after no more than seven days.
6. Right to Object and Erasure
If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
Please send your objection to processing either in writing to:
Halloren Vertriebs GmbH, Delitzscher Strasse 70, 06112 Halle (Saale)
or electronically to datenschutz@halloren.de.
All personal data stored in the course of making contact will be deleted in this case.
V. Third-Party Services
1. YouTube
Scope of processing: This website contains at least one plugin from YouTube, belonging to Google Inc., based in San Bruno, California, USA. This allows us to present interesting videos directly on our website. We use the YouTube No-Cookies function, meaning we have activated "Enhanced Privacy Mode." Videos are not accessed via youtube.com but via youtube-nocookies.com. A corresponding cookie is only set once the video is opened. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all data processing in the European area.
Further information on data protection at YouTube can be found in the provider's privacy policy at:
https://www.google.de/intl/de/policies/privacy/
2. Matomo
This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies." These are text files stored on your computer that enable analysis of your use of the website. For this purpose, the usage information generated by the cookie is stored on our server. The IP address is anonymized before storage.
The information generated by the cookie about the use of this website is not passed on to third parties. You can prevent the storage of cookies by adjusting the settings of your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. If you do not agree to the storage and use of your data, you can deactivate this. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will also result in the deletion of the Matomo opt-out cookie. The opt-out must be reactivated upon your next visit to our website.
3. Links to Other Webseites
We have integrated various links to other websites. When you click on these links, you leave our area of responsibility. Please review the privacy policy of the respective responsible party.
VI. Rights of the Data Subject
If personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
1. Right of Access
You may request information from the controller at any time, subject to the conditions of Art. 15 GDPR, as to whether and how your personal data is being processed by us.
2. Right to Rectification
Subject to the conditions of Art. 16 GDPR, you have the right to rectification and/or completion from the controller if the personal data concerning you that is being processed is inaccurate or incomplete. The controller must carry out the rectification without delay.
3. Right to Erasure ("Right to be Forgotten")
You may request from the controller, subject to the conditions of Art. 17 GDPR, the erasure of your personal data and assert the right to be forgotten.
4. Right to Restriction of Processing
You may request from the controller, subject to the conditions of Art. 18 GDPR, the restriction of processing.
5. Right to Notification
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right, pursuant to Art. 19 GDPR, to be informed by the controller about these recipients.
6. Right to Data Portability
Subject to the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format.
7. Right to Object
Subject to the conditions of Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is processed on the basis of Art. 6(1)(f) GDPR.
This also applies to profiling based on these provisions.
8. Right to Withdraw Consent
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
VII. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authority responsible for us is:
https://datenschutz.sachsen-anhalt.de/
State Commissioner for Data Protection of Saxony-Anhalt
Office and visitor address: Otto-von-Guericke-Str. 34a, 39104 Magdeburg
Postal address: Postfach 1947, 39009 Magdeburg
VIII. Changes to This Privacy Policy
We reserve the right to update this privacy policy at any time with effect for the future.