Privacy Policy.

The controller responsible for data processing on this website is:
Hagener Feinstahl Bender GmbH
Herdecker Str. 4–10, 58089 Hagen, Germany
Phone: +49 (0) 2331 9393-0
Email: info@hagener-feinstahl.de

Our data protection officer is:
Dr. Ralf Heine, M.M.
Frankenstraße 348
45133 Essen

When you access this website, our hosting provider automatically stores information transmitted by your browser in server log files. This includes in particular the IP address, date and time of the request, time zone difference to GMT, the URL accessed, the HTTP status code, the amount of data transferred, the referrer URL, browser type and version, and operating system. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable, secure website operation). The logs are deleted after 30 days at the latest, unless security-related incidents require longer storage.

This website does not contain a contact form. Contact can only be made using the email addresses and phone numbers provided. If you contact us in this way, we process the data you provide (e.g. name, email address, phone number, content of your message) exclusively to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Your message is processed via our email infrastructure or telephone system and deleted once the purpose no longer applies and no statutory retention obligations (in particular commercial and tax law periods of 6 or 10 years) apply.

Applications reach us by email. We process the submitted application documents exclusively to carry out the application process (Art. 6(1)(b) GDPR, § 26(1) BDSG). If no employment relationship is established, we delete the documents no later than six months after completion of the process, unless you have consented to longer storage in our applicant pool.

To provide this website, we use carefully selected service providers, each bound by data processing agreements pursuant to Art. 28 GDPR. In particular, we use:

• Hosting and delivery of this website (Lovable / Cloudflare, EU server location).
• Content delivery for static assets (images, documents).

Your data is not passed on to third parties beyond this, unless we are legally obliged to do so.

Technically necessary storage is only used where strictly required for operating the site (Art. 6(1)(f) GDPR, § 25(2) TDDDG). This also includes the local storage of your cookie decision. Fonts are served locally from our own server; there is no connection to Google Fonts or similar services.

All non-essential services — in particular the reach measurement described under item 6a — are only loaded after your explicit consent via our cookie notice. Without consent, no third-party scripts are loaded and no cookies are set. You can change or withdraw your decision at any time via the "Cookie settings" link in the footer.

Once consent has been given, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of this website (e.g. pages viewed, time spent, approximate location, device and browser, referrer). The IP address is shortened (IP anonymisation); advertising and personalisation features (Google Signals, remarketing) are disabled.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer; we will then delete the analytics cookies that have been set.

A transfer of personal data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR) also apply. Despite these safeguards, there is generally a risk of access by local authorities in third countries. Usage data in Google Analytics is retained for a maximum of 14 months. Further information: Google's privacy policy.

We use Google Tag Manager (Google Ireland Limited) to deliver and manage our measurement tags. Tag Manager itself does not create user profiles and does not set analytics cookies. It loads with the page but keeps all measurement and marketing functions disabled through Google Consent Mode v2. Analytics are only enabled after you consent in the cookie notice; withdrawing consent via "Cookie settings" in the footer disables them again immediately. The legal basis for the technical delivery is our legitimate interest in a secure, manageable setup (Art. 6(1)(f) GDPR); for the measurement itself it is your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG).

To understand how often our content is retrieved by AI systems (e.g. GPTBot, PerplexityBot, ClaudeBot) or opened from AI assistants, we keep a purely server-side, anonymous count. We only store the date, the detected source, the requested page path, the language version and a counter. No IP addresses, cookies or other personal data are stored, so individual persons cannot be identified. The legal basis is our legitimate interest in measuring reach (Art. 6(1)(f) GDPR).

On individual sub-pages (e.g. "Locations") we link to external map services such as Google Maps. Data is only transmitted to these providers once you actively select the link. The privacy notices of the respective provider apply to any data processing there.

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent given at any time (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority, e.g. the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (Art. 77 GDPR).

We secure data transmission using TLS encryption (HTTPS). Access to stored contact enquiries is restricted to authorised personnel through technical and organisational measures.

We update this privacy policy as legal requirements or our data processing change. The version published on this page is always the current one.