Privacy Notice

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to use this Privacy Notice to explain how we process your personal data. If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose of Data Processing

The purpose of the data processing is to take steps prior to entering into a contract and to perform the contract on the basis of Art. 6(1)(b) GDPR.

Categories of Recipients

In the course of providing our services, we use service providers for specific areas that are separately bound by confidentiality and data protection obligations and for whom access to personal data cannot be excluded.

These categories of recipients include: IT service providers, service providers for the printing and mailing of letters, tax advisors, auditors where applicable, data destruction companies, and our external Data Protection Officer.

Before an order is placed, creditworthiness information is obtained from a credit agency. Only the creditworthiness of the company placing the order is checked.

Data is disclosed to public authorities only where required by overriding statutory provisions.

Some of the service providers used by Hedson Technologies AB are located in third countries. An appropriate level of data protection is generally ensured through EU Standard Contractual Clauses or in compliance with the requirements of Art. 44 et seq. GDPR.

Sanctions List Screening

We are legally required to perform sanctions list screening. The legal basis for this processing is Art. 6(1)(c) GDPR.

For this purpose, your contact details are transmitted to a service provider that is separately bound by confidentiality and data protection obligations in order to check them against the applicable sanctions lists.

Your data is processed solely for the purpose of sanctions list screening and is deleted after the expiry of the statutory retention period.

Storage Period and Deletion of Data

Your data will be stored for the duration of the contractual relationship. After the contractual relationship has ended, we are required to retain documents relevant for tax purposes for 10 years following the end of the financial year and calendar year.

The data will subsequently be deleted.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Obligation to Provide Data

It is not possible to enter into a contract without you providing accurate information.

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to use this Privacy Notice to explain how we process your personal data.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose of Data Processing

The purpose of the data processing is to take steps prior to entering into a contract and to perform the contract on the basis of Art. 6(1)(b) GDPR.

Categories of Recipients

In the course of providing our services, we use service providers for specific areas that are separately bound by confidentiality and data protection obligations and for whom access to personal data cannot be excluded.

These categories of recipients include: IT service providers, external secretarial services, service providers for the printing and mailing of letters, tax advisors, auditors where applicable, data destruction companies, and our external Data Protection Officer.

We also use services provided by our parent company, Hedson Technologies AB in Sweden.

Data is disclosed to public authorities only where required by overriding statutory provisions.

No personal data is transferred to third countries for processing purposes.

Storage Period and Deletion of Data

Your data will be stored for the duration of the contractual relationship. After the contractual relationship has ended, we are required to retain documents relevant for tax purposes for 10 years following the end of the financial year and calendar year.

The data will subsequently be deleted.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Obligation to Provide Data

It is not possible to enter into or properly perform a contract without you providing accurate information.

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to use this Privacy Notice to explain how we process applicant data.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose of Data Processing

The purpose of the data processing is to take steps prior to entering into an employment relationship on the basis of Art. 6(1)(b) and Art. 88(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

Your data will not be disclosed to other companies. If a vacancy requires the involvement of relevant managers at our parent company, Hedson Technologies AB, your data will be transmitted to them.

Categories of Recipients

Applicant data will not be disclosed to third parties.

As we use service providers for our information technology that are separately bound by confidentiality and data protection obligations, access to personal data within this context cannot be excluded.

Categories of recipients outside executive management and HR management include service providers for the hosting, support and operation of this website, IT service providers, service providers for the printing and mailing of letters, tax advisors, auditors where applicable, data destruction companies, and our external Data Protection Officer.

Data is disclosed to public authorities only where required by overriding statutory provisions.

Where personal data is transferred to third countries, we comply with the requirements of Art. 44 et seq. GDPR.

Storage Period and Deletion of Data

Your data will be stored for the duration of the application process.

If you enter into an employment relationship with us, your application data will be stored by us for the duration of your employment.

If your application is unsuccessful, we will retain your data for a further six months on the basis of applicable legal requirements and delete it thereafter.

In the case of unsolicited applications, or where you have consented to us retaining your data for a longer period for possible future employment opportunities, we will retain your data until you withdraw your consent, but for no longer than two years.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Please contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Obligation to Provide Data

It is not possible to carry out the application process without you providing accurate information. As a result, your application may not be considered as part of an ongoing recruitment process.

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to use this Privacy Notice to explain how we process your personal data.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose of Data Processing

If you contact us and the communication is not related to taking steps prior to entering into a contract, we process your data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR for the purpose of conducting and organising our business operations.

In doing so, we ensure that personal data is not processed unless there is an overriding legitimate interest, for example when coordinating data protection matters with our customers’ suppliers.

Categories of Recipients

In the course of providing our services, we use service providers for specific areas that are separately bound by confidentiality and data protection obligations and for whom access to personal data cannot be excluded.

These categories of recipients include: IT service providers, service providers for the printing and mailing of letters, tax advisors, auditors where applicable, data destruction companies, and our external Data Protection Officer.

Data is disclosed to public authorities only where required by overriding statutory provisions.

Where personal data is transferred to third countries, we comply with the requirements of Art. 44 et seq. GDPR.

Storage Period and Deletion of Data

Your data will be stored for the duration of the processing and deleted once the purpose for which it was processed no longer applies.

Where statutory retention requirements apply, the data will be retained for the period required by law and deleted thereafter.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted. The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Obligation to Provide Data

It is not possible to enter into or properly perform a contract without you providing accurate information.

We, Hedson Technologies AB, info@hedson.com, would like to explain below what personal data we process and how we process it.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Purpose of Data Processing

The purpose of sending our newsletter is to provide information about new products and services offered by our company.

Your consent is required in order to receive the newsletter. The legal basis for the processing of your personal data is Art. 6(1)(a) GDPR.

When you subscribe to the newsletter, we use the so-called double opt-in procedure. This means that you must actively confirm your newsletter subscription by clicking on the link contained in the confirmation email sent to you.

You may withdraw your consent at any time. You can do so either by clicking on the “Unsubscribe” link in the footer of each newsletter email or by sending your unsubscribe request by email to the address stated above.

Your data will not be disclosed to third parties.

Personal data may be transferred to third countries for processing purposes. Such transfers take place exclusively in compliance with the requirements of Art. 44 et seq. GDPR.

Categories of Recipients

For the technical distribution of our newsletter, we use service providers that are separately bound by confidentiality and data protection obligations.

The relevant category of recipients is: newsletter distribution service providers.

Data is disclosed to public authorities only where required by overriding statutory provisions.

Storage Period and Deletion of Data

Your data will be stored for the duration of your consent or until the purpose for which it was collected no longer applies. It will then be deleted.

Where legal requirements oblige us to retain the data, it will be stored until the end of the applicable statutory retention period and deleted thereafter.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted. The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Obligation to Provide Data

Without accurate information from you, we are unable to deliver the newsletter to you.

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to explain below how we process your personal data in connection with our Instagram presence.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Joint Controllership

Instagram is a service provided by Meta Platforms Ireland Ltd.

We have entered into a joint controllership agreement with Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which you can access here:

https://www.facebook.com/legal/terms/dataprocessing

https://www.facebook.com/legal/terms/page_controller_addendum

Meta Platforms Ireland Ltd. assumes primary responsibility under the EU General Data Protection Regulation (GDPR).

Instagram’s Privacy Policy can be found here:

https://help.instagram.com/155833707900388

Purpose: Presentation of Our Company and Interaction with Our Users

The purpose of data processing in connection with our Instagram presence is to provide information about our products and services and to give users the opportunity to interact with us directly.

The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest is, in particular, our commercial interest in sharing information with our users and communicating with them.

Data is disclosed to public authorities only where required by overriding statutory provisions.

Where we publish images of individuals, this is done either on the basis of consent (legal basis: Art. 6(1)(a) GDPR) or on the basis of a contractual transfer of usage rights (legal basis: Art. 6(1)(b) GDPR).

Use of Instagram Insights

We place advertisements on Instagram and use Instagram Insights to analyse the behaviour of our target audience in connection with their interaction with our page.

Targeted advertising to specific audiences constitutes a legitimate interest of our company. Instagram users are informed about this. Responsibility for the collection of data lies primarily with Meta Platforms Ireland Ltd.

The users’ conflicting interests requiring protection, in particular with regard to the display of personalised, target-group-specific advertising, do not override our legitimate interests.

The legal basis for our processing is Art. 6(1)(f) GDPR.

Transfers to Third Countries

It cannot be ruled out that users’ data may be processed on systems located outside the European Union.

Personal data is transferred to third countries only where the requirements of Art. 44 et seq. GDPR are met.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Where your rights must be exercised directly against Meta Platforms Ireland Ltd., we will forward your request to Meta Platforms Ireland Ltd.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Updates and Amendments to this Privacy Notice

We reserve the right to amend the content of this Privacy Notice at any time. This will generally occur where the services we use are further developed or modified.

In addition to this Privacy Notice, you can access the current privacy information on our website at any time.

Last updated: 21 November 2025

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to explain below how we process your personal data in connection with our LinkedIn presence.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose: Presentation of the Company and Interaction with Visitors

We use our LinkedIn presence to provide information about our company, products and services and to give visitors the opportunity to interact with us directly.

The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is, in particular, our commercial interest in sharing information about our company with customers, prospective customers, applicants and other third parties and in being able to communicate with them.

Where we publish images of individuals, this is done either on the basis of consent (legal basis: Art. 6(1)(a) GDPR) or on the basis of a contractual transfer of usage rights (legal basis: Art. 6(1)(b) GDPR).

Through our LinkedIn account, we process personal data for the purposes of establishing contact, presenting our company externally and providing information. Our company processes your personal data when you use functions such as following our page, sending messages, commenting or interacting with posts.

Your data is disclosed to public authorities only where required by overriding statutory provisions.

When using LinkedIn, each user enters into a direct contractual relationship with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Information on how LinkedIn processes user data can be found in LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

We would like to point out that it cannot be ruled out that users’ data may be processed on systems located outside the European Union. LinkedIn has committed to complying with EU data protection standards.

Data is transferred to systems outside the EU only where the requirements of Art. 44 et seq. GDPR are met.

Further information can be found here:

https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de

Use of Page Insights

When a LinkedIn member visits, follows or interacts with our LinkedIn page, LinkedIn processes personal data in order to provide us with Page Insights.

In particular, LinkedIn processes data that the member has provided to LinkedIn, such as job function, country, industry, seniority, company size and employment status information contained in the member’s profile.

LinkedIn also processes information about how a member has interacted with our company page, for example whether the member follows our page.

This data processing is based on our legitimate interest in tailoring our company profile to our target audience. The users’ conflicting interests requiring protection, in particular with regard to the display of personalised, target-group-specific advertising, do not override our legitimate interests.

With regard to these Page Insights, we and LinkedIn act as joint controllers pursuant to Art. 26 GDPR. LinkedIn users are informed about this, and responsibility for the collection of data lies primarily with LinkedIn.

We have entered into a joint controllership agreement with LinkedIn, which can be found here:

https://legal.linkedin.com/pages-joint-controller-addendum

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Where your rights must be exercised directly against LinkedIn, we will forward your request to LinkedIn.

Further information on exercising your rights as a data subject against LinkedIn can be found in LinkedIn’s Privacy Policy:

https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Further information on how you can exercise or implement your rights as a data subject directly with LinkedIn, for example through account settings, downloads or requests, can be found here:

https://www.linkedin.com/help/linkedin/answer/50191?trk=microsites-frontend_legal_privacy-policy&lang=de

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Updates and Amendments to this Privacy Notice

We reserve the right to amend the content of this Privacy Notice at any time. This will generally occur where the services we use are further developed or modified.

The current Privacy Notice can be accessed on our website at any time.

Last updated: 21 November 2025

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to explain below how we process your personal data in connection with our XING presence.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

We use our XING presence to provide information about our company, products and services and to give users the opportunity to interact with us directly.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is, in particular, our commercial interest in sharing information with our users and communicating with them.

Where we publish images of individuals, this is done either on the basis of the individual’s consent (legal basis: Art. 6(1)(a) GDPR) or on the basis of a contractual transfer of usage rights (legal basis: Art. 6(1)(b) GDPR).

We process personal data ourselves through our XING account, while personal data is also processed by New Work SE. Where users make use of commenting functions, the legal basis is consent pursuant to Art. 6(1)(a) GDPR.

Storage Period and Deletion of Data

Your data will be stored for the duration required to process your request. As a rule, requests are transferred to the appropriate communication channels outside XING.

The data stored within XING is regularly reviewed by our Social Media Team and deleted once the purpose for which it was processed no longer applies.

Data Processing by XING

When you visit our XING presence, XING collects users’ personal data through the use of cookies. Such data collection by XING may also take place in relation to visitors who are not logged in to or registered with XING.

Information about which data is processed by New Work SE and for what purposes it is used can be found in XING’s Privacy Policy:

https://privacy.xing.com/de/datenschutzerklaerung

You also have the option of requesting information via XING’s privacy form or archive request:

www.xing.com/settings/privacy/data/disclosure

It cannot be ruled out that users’ data may be processed on systems located outside the European Union. XING has committed to complying with EU data protection standards.

Data is transferred to systems outside the EU only where the requirements of Art. 44 et seq. GDPR are met.

Further information can be found here:

https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender

Your data is disclosed to public authorities only where required by overriding statutory provisions.

Our Use of Your Data

On the basis of our contractual relationship with New Work SE and New Work SE’s legitimate interests, we receive anonymous statistics relating to the use of the website and our XING presence.

The following information is provided:

• Followers: Number of people following us, including growth and developments over a defined period of time.
• Reach: Number of people who see a specific post and the number of interactions with a post. This enables us, for example, to identify which content is better received by the community than other content.
• Advertising performance: Shows how many people were reached by or interacted with a post or paid advertisement.

We use these statistics, which do not allow us to identify individual users, to continuously improve our online presence on XING and to better tailor it to the interests of our users.

We are unable to link statistical data with the profile data of our followers. You can use your XING settings to determine how targeted advertising is displayed to you.

We receive personal data via XING if you actively provide it to us through a personal message on XING, for example through a chat function. We use your data, such as your first name and surname, to respond to your request as part of our customer service activities.

We may also receive personal data via XING where you use a form containing fields pre-filled with information from your profile and actively submit this data to us by clicking the relevant button.

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to the processing.

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Where your rights must be exercised directly against XING, we will forward your request to XING.

Further information on how you can exercise your rights as a data subject directly against XING can be found here:

https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Profiling

We do not carry out profiling as part of this processing.

Updates and Amendments to this Privacy Notice

We reserve the right to amend the content of this Privacy Notice at any time. This will generally occur where the services we use are further developed or modified.

The current Privacy Notice can be accessed on our website at any time.

Last updated: 21 November 2025

We, Hedson Technologies AB, info@hedson.com, and our affiliated companies would like to explain below how we process your personal data in connection with our YouTube channel.

If you have any questions regarding data protection, our Data Protection Officer will be happy to assist you at herkules@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Within the scope of this processing, the following companies act as joint controllers pursuant to Art. 26 GDPR:

• Herkules Hebetechnik GmbH, Miramstraße 68b, DE-34123 Kassel, Germany, +49 40 53 42 00, info.de@hedson.com
• Hedson Technologies AB, Hammarvägen 4, SE-232 37 Arlöv, Sweden, +46 40 53 42 00, info@hedson.com

The joint processing activities relate in particular to the operation and use of jointly used databases, platforms and IT systems (e.g. ERP systems).

For this purpose, we have entered into a joint controllership agreement defining the respective tasks and responsibilities in connection with the processing of personal data and specifying which party fulfils the respective data protection obligations. In particular, we have defined how an appropriate level of security and the exercise of your rights as a data subject can be ensured.

Purpose and Legal Bases of Data Processing

We operate a YouTube channel provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The purpose of data processing on our YouTube channel is to provide information about our products, services and news and to give users the opportunity to interact with us directly.

The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest is, in particular, our commercial interest in sharing information with visitors to our YouTube channel and communicating with them.

Google’s service is used on the basis of a data processing agreement. This agreement can be accessed via the following link:

https://www.youtube.com/t/terms_dataprocessing

As a general rule, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for collecting and further processing users’ personal data on YouTube’s websites.

Please note that YouTube may collect and process certain information about your visit to our YouTube channel even if you do not have a YouTube user account or are not logged in to YouTube.

As the operator of this YouTube channel, we can only view your public YouTube profile. The information visible to us depends on the settings in your profile.

Information on the processing of personal data by YouTube can be found in Google’s Privacy Policy:

https://policies.google.com/privacy?hl=de&gl=de

Data is disclosed to public authorities only where required by overriding statutory provisions.

Where we publish images of individuals, this is done either with the consent of the individuals concerned (legal basis: Art. 6(1)(a) GDPR) or on the basis of a contractual agreement (legal basis: Art. 6(1)(b) GDPR).

YouTube Analytics

We also process information about your activities on our channel using the YouTube Analytics statistics service.

This processing serves to optimise our channel and is consistent with the purposes of data processing described above.

Anonymised statistics are generated based on user activity. These may provide us with information including interactions and activities of our subscribers, views of our channel, the reach of our content, the countries and cities from which our visitors originate, as well as statistics concerning the gender distribution, age structure, providers and interests of our visitors.

Administrators cannot use this information to identify individual users or access individual user profiles.

Transfers to Third Countries

As Google Ireland Limited is part of the Google Group, whose headquarters are located in the United States, it cannot be ruled out that personal data may be transferred to Google LLC and therefore to countries in which Google operates data centres.

To ensure an appropriate level of data protection, Google Ireland Limited bases such transfers, where required, on the Standard Contractual Clauses of the European Commission.

In this context, we would like to point out that you use the YouTube service provided by Google Ireland Limited and all related functions, such as sharing and rating videos or participating in discussions, on your own responsibility.

Data that you voluntarily provide on YouTube is processed by Google, such as your name, username, email address or telephone number, and may therefore also be transferred to third countries.

According to the European Commission, personal data transferred from the EU to US companies participating in the EU-U.S. Data Privacy Framework (DPF), including Google, is considered to benefit from an adequate level of protection.

You have the option of restricting the processing of your data by Google. To do this, you can access the general settings of your Google Account and adjust your privacy settings.

Information on customising your privacy settings can be found here:

https://policies.google.com/privacy?hl=de&gl=de#infochoices

You can also change certain settings on your mobile devices, such as smartphones or tablets, to restrict Google’s access to information including your contacts, location data, calendar data or photos.

The available settings vary depending on the operating system used on your mobile device.

Your Rights to Access, Rectification, Erasure and Data Portability

You may exercise your rights to access, rectify and erase your personal data at any time. Simply contact us using one of the methods described above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked).

You may exercise your right to data portability insofar as the necessary technical capabilities are available both to us and to the recipient.

Where your rights must be exercised directly against Google Ireland Limited, we will forward your request to Google Ireland Limited.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Updates and Amendments to this Privacy Notice

We reserve the right to amend the content of this Privacy Notice at any time. This will generally occur where the services we use are further developed or modified.

In addition to this Privacy Notice, you can access the current privacy information on our website at any time.

Last updated: 21 November 2025

Who we are

Our website address is: https://www.hedson.com.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.