Privacy Policy
1. Controller
The controller for data processing on this website is:
Haslinger GmbH Metal Construction
Gewerbefeld 2
94501 Aldersbach-Uttigkofen
Germany
Telephone: +49 8543 9618-0
E-Mail: info@haslinger.group
Data Protection Contact: Robert Seibold robert.seibold@haslinger.group
2. General Information on Data Processing
We process personal data only to the extent necessary to provide a functional website, to process inquiries, to initiate and execute contracts, to ensure technical security, and - where you have consented - for analysis and marketing purposes.
Personal data are all information relating to an identified or identifiable natural person.
Where we use external service providers for individual processing, this is done within the framework of legal requirements and - where necessary - on the basis of a contract for processing.
3. Legal Bases for Processing
Where we obtain your consent for certain processing, the legal basis is Art. 6 para. 1 lit. a GDPR.
Where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b GDPR.
Where processing is necessary for compliance with a legal obligation, the legal basis is Art. 6 para. 1 lit. c GDPR.
Insofar as the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party and does not override your interests or fundamental rights and freedoms, the legal basis is Art. 6 para. 1 lit. f GDPR.
4. Provision of the website and server log files
Each time our website is accessed, our system or the hosting provider automatically collects data and information from the accessing device. This may include, in particular, IP address, date and time of access, browser type and browser version, operating system used, referrer URL, as well as accessed pages and files.
The processing is carried out to technically provide the website, ensure its stability and security, and to detect and prevent misuse or disruptions.
The legal basis is Art. 6 para. 1 lit. f GDPR.
The recipient of the data is our hosting service provider DomainFactory.
5. Contact and form processing
If you contact us via contact form, email, phone, or any other means, we process the data you provide to address your concerns and to communicate with you.
Depending on the form, the following data may be processed in particular: name, company, email address, phone number, subject, message text, uploaded files, as well as other voluntary information.
The legal basis is Art. 6 para. 1 lit. b GDPR, provided that your request is aimed at the conclusion or execution of a contract. In all other cases, the processing is based on our legitimate interest in an orderly handling of inquiries and effective communication in accordance with Art. 6 para. 1 lit. f GDPR.
The recipients of the data are the internally responsible departments as well as the technical service providers employed.
We generally store this data only as long as necessary for processing your request, for further correspondence, for contract initiation, for contract execution, for legal defence, or due to statutory retention obligations.
6. Website, forms and CRM processing via Odoo
For the operation of our website, the processing of form requests, and the management of prospect and customer data, we use Odoo.
If you submit a form via our website or otherwise contact us, the entered data may be processed in Odoo or in the connected CRM and communication processes.
The processing is particularly aimed at handling your request, the internal allocation of requests and contacts, contract initiation, customer communication, the organisation of sales and processing processes, as well as the prevention of abuse.
The legal basis is Article 6(1)(b) GDPR, insofar as the processing is necessary for pre-contractual measures or contract fulfilment, as well as Article 6(1)(f) GDPR for our legitimate interests in efficient, traceable, and structured processing of contacts and business processes.
Recipients internally are the responsible departments and - where necessary - Odoo as the technical service provider or hosting/cloud provider.
Depending on the operational model used, Odoo may be involved as a processor or - for certain additional services - in its own data protection role.
Form and CRM data will only be stored as long as necessary for the stated purposes. If there are legal retention obligations or legitimate interests in further storage, such as for the documentation of business contacts or for legal defence, deletion will only occur after these reasons have ceased.
7. Automated emails after form submission
After submitting certain forms, we may send you automated emails, such as confirmation of receipt, appointment confirmations, or relevant information regarding your specific inquiry.
Such emails are solely for the processing of your request, the execution of pre-contractual measures, or the contract fulfilment.
The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.
The use of your email address for promotional mailings, newsletters, or further marketing communication occurs separately and only to the extent that there is a separate legal basis for this, particularly an explicit consent.
8. Consent management / Cookie banner
We use consent management on our website to document and technically implement your decisions regarding the use of consent-required technologies.
In this context, information about granted, denied, or revoked consents is stored so that we can prove your selection and take it into account during further page visits.
The legal basis is Art. 6 para. 1 lit. c GDPR, as far as the processing is necessary to fulfil legal proof obligations, as well as additionally Art. 6 para. 1 lit. f GDPR.
You can change or revoke your consents at any time with effect for the future via the cookie settings.
9. Google Tag Manager
We use the Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tag management system that allows website tags to be integrated and managed centrally. No independent user profiles are created through the Google Tag Manager itself.
The service is used for the technically controlled delivery of additional scripts and tags, particularly analytics and marketing tags.
The legal basis for the use of the Google Tag Manager is Article 6(1)(f) GDPR, as far as only technically necessary administrative processes are concerned. If consent-based analytics or marketing services are loaded via the Google Tag Manager, this is done solely on the basis of your consent in accordance with Article 6(1)(a) GDPR.
The recipient of the data generated in this process is Google Ireland Limited; processing by affiliated companies of Google, particularly Google LLC in the USA, cannot be ruled out.
A transfer to a third country to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework. In addition, Google uses contractual protection mechanisms for international data transfers.
Storage duration: The Google Tag Manager itself does not store independent user-related analytics profiles to our knowledge; therefore, the storage durations of the specific tags integrated are decisive.
You can revoke your consent at any time via the cookie settings.
Haslinger Energy uses products and services for analysis and marketing purposes that are provided in cooperation with Visable GmbH (www.visable.com). For this purpose, data is collected, processed, and stored using counting pixel technology to create at least pseudonymised, and where possible and sensible, fully anonymised usage profiles. The collected data, which may initially still include personal data, is transmitted to Visable or collected directly by Visable and used there to create the aforementioned usage profiles. Personal identification of visitors to this website does not take place, and no other personal data is merged with the usage profiles. Should IP addresses be identified as personal data, they will be deleted immediately. You can object to the forms of processing described here at any time with effect for the future: <a onclick="alert('Your visits will no longer be recorded.');" href="javascript:visableLeads.optOut()">Exclude visitor tracking (Note: Link sets a 1st-party cookie for an opt-out)</a>
10. Google Analytics
As far as you have consented, we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of processing is the statistical evaluation of user behaviour on our website, reach measurement, success control of content and campaigns, as well as the optimisation of our website and our offerings.
The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Categories of processed data may include: online identifiers, cookie IDs, IP address or truncated IP/technical connection data, device and browser information, referrer information, interaction data, page views, duration of stay, approximate location data, as well as usage events.
Recipients are Google Ireland Limited and, where applicable, affiliated companies of Google, in particular Google LLC in the USA.
A transfer to a third country to the USA cannot be excluded. Google LLC is certified under the EU-U.S. Data Privacy Framework. Additionally, Google bases international data transfers on contractual protection mechanisms.
The storage duration is determined by the specific data retention configured in Google Analytics. In GA4, for standard properties, 2 or 14 months for user-related event data can be configured according to the current Google guidelines.
As of the current information available, we do not have reliable technical confirmation regarding whether additional privacy-friendly settings, such as a specific regional or granular data configuration, are activated in the specific setup. Such information should only be included if technically verified.
You can withdraw your consent at any time with effect for the future via the cookie settings.
11. Microsoft Clarity
As far as you have consented, we use on our website Microsoft Clarity and possibly Microsoft Advertising, to evaluate the use of our website and improve our offerings as well as optimise marketing measures. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
With the help of Microsoft Clarity, usage and interaction data about our website is collected and evaluated. This includes particularly behavioural metrics, heatmaps, and session replays. In this way, we can understand how visitors use our website, which content is particularly relevant, and where there is a need for optimisation.
In this context, data about the use of cookies and comparable tracking technologies may be processed. Specifically, information about website usage, accessed pages, click and scroll behaviour, technical information about the device and browser used, referrer information, and timestamps may be collected. If Microsoft Advertising is involved, the data may also be used to measure the effectiveness of advertising measures and improve marketing activities.
We also use this information for optimising the website, for security and abuse prevention as well as – where applicable – for advertising purposes..
The processing is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
The recipient of the data is Microsoft as the engaged service provider. It cannot be excluded that personal data may also be transmitted to companies of the Microsoft group in third countries, particularly to the USA. The data transmission then takes place according to the data protection guarantees provided by Microsoft.
You can revoke your consent at any time with effect for the future via the cookie settings.
Further information on data processing by Microsoft can be found in Microsoft's privacy notices.
12. Google Ads - Conversion Tracking, Remarketing and possibly Enhanced Conversions
As far as you have consented, we use functions of Google Ads, in particular conversion tracking, to measure the success of our advertisements and to optimise our campaigns. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you arrive at our website via a Google ad, Google can determine whether a specific action has been performed on our website, such as a contact request or another conversion.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Categories of processed data may include, in particular: cookie IDs, online identifiers, IP address, device and browser information, referrer data, timestamps, conversion events, and information about whether and how there was interaction with ads or website content.
Recipients are Google Ireland Limited and, if applicable, Google LLC in the USA.
A transfer to a third country to the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework. Additionally, Google uses contractual protection mechanisms.
Storage duration: The storage duration is determined by the specific Google Ads or Google Tag configuration used and the settings specified by Google.
Google describes the consent signals ad_storage, ad_user_data, and ad_personalization for advertising and measurement services in particular. These signals must be synchronised with the consent solution used.
Furthermore, we use Google Ads Remarketing to recognise visitors to our website on other websites and display interest-based advertising.
If Google Ads is linked with Google Analytics, measurement and attribution data can be merged between the services to better evaluate campaign performance and user paths.
You can withdraw your consent at any time with effect for the future via the cookie settings.
13. LinkedIn Insight Tag
As far as you have consented, we use the LinkedIn Insight Tag on our website. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The LinkedIn Insight Tag is a JavaScript code that allows us to measure the success of our LinkedIn advertisements, collect conversion data, obtain reports on website visitors, and create website audiences for retargeting purposes.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Categories of processed data may include: IP address, device and browser characteristics, URL, referrer URL, timestamp, page views, interaction data, as well as information that LinkedIn uses to create pseudonymous target groups and reports.
The recipient is LinkedIn Ireland Unlimited Company; further processing by LinkedIn Corporation in the USA cannot be excluded.
A transfer to a third country to the USA cannot be excluded. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework. Additionally, contractual protection mechanisms may be used.
Storage duration: The storage duration is determined by the deadlines set by LinkedIn and the specific account configuration.
You can withdraw your consent at any time with effect for the future via the cookie settings.
14. Newsletter and promotional email communication
If you explicitly sign up for our newsletter or other promotional email communication, we will process your email address and possibly other voluntary information to regularly send you information about our company, our services, products, events, or offers.
Registration is carried out using the double opt-in procedure. This means that after you register, we will send you an email in which you must confirm your registration again.
The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
To prove consent, we log the registration time, the confirmation time, and the technical evidence data used.
The recipients of the data are internally the responsible departments as well as the appointed shipping or marketing service provider Odoo.
The data will be stored until you revoke your consent or the purpose ceases; evidence data for consent may also be stored until the regular limitation periods expire.
We evaluate newsletter campaigns, particularly whether emails were opened and which links were clicked, in order to optimise content and communication.
You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email or by contacting us.
15. Recipients or categories of recipients
Recipients of personal data may include:
- internal specialist departments, sales, marketing and administration, as far as this is necessary for processing;
- hosting and IT service providers;
- Odoo as website, form and/or CRM service provider;
- Google Ireland Limited and affiliated Google companies when using Google services;
- LinkedIn Ireland Unlimited Company and affiliated LinkedIn companies when using the LinkedIn Insight Tag;
- other service providers, as far as they act on the basis of our instructions.
16. Transfers to third countries
When using services from Google and LinkedIn, a transfer of personal data to recipients in the USA cannot be excluded.
As of now, Google LLC and LinkedIn Corporation are certified under the EU-U.S. Data Privacy Framework. Additionally, standard contractual clauses or other suitable guarantees may be used.
Please note, however, that there may still be a residual risk with data transfers to third countries, particularly with regard to governmental access or the practical enforceability of data subject rights.
17. Retention period
As far as no more specific storage duration is mentioned in this privacy notice, we process personal data only as long as necessary for the respective purposes. Subsequently, the data will be deleted, unless there are legal retention obligations or legitimate reasons for further storage.
We generally store inquiry data and communication data for the duration of processing your request and only beyond that as far as necessary for contract initiation, contract execution, legal defence, or due to legal retention obligations.
We regularly store proof of consent for as long as necessary to demonstrate a validly granted consent and to defend against any claims.
CRM leads are only stored as long as there is a legitimate purpose for processing, documentation, contract, or legal defence.
18. Revocation of granted consents
You can revoke a consent already granted at any time with effect for the future. The revocation does not affect the lawfulness of the processing carried out until the revocation.
You can adjust your consents to analysis, marketing, or other optional technologies at any time via the cookie settings.
19. Rights of the data subjects
You have the right, in accordance with the legal requirements, to request information, correction, deletion, restriction of processing, data portability, and to object to certain processing.
If processing is based on your consent, you have the right to revoke this consent at any time with effect for the future.
You also have the right to complain to a data protection supervisory authority.
20. Status of this privacy policy
Status: 16.04.2026
We reserve the right to amend this privacy policy if this is necessary due to actual changes in data processing, new technical features or changed legal requirements.
