Privacy Policy
How we process personal data when you visit our website, and what rights you have.
This privacy policy informs you about which personal data we process during your visit to our website and what rights you have. For the terms used, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR). Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address and communication data, or your email address.
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller. The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
1. Controller
Harrlachweg 5
68163 Mannheim
Tel. +49 621 460 84-0
Fax +49 621 460 84-400
Email info@hpc.de
The controller is represented by the Management Board member Janni Wahrenburg.
2. Data Protection Officer
You can reach our Data Protection Officer using the following contact details:
HPC Aktiengesellschaft– Data Protection Officer –
Harrlachweg 5
68163 Mannheim
Email teamdatenschutz@hpc.de
3. Provision of the Website and Log Files
When you visit our website, your browser transmits certain data to our web server for technical reasons. This concerns the following data (so-called server log files):
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Operating system and its access status / HTTP status code
- Amount of data transferred
- Website from which the request originates (“referrer URL”)
- Browser, language and version of the browser software
- Files accessed
These data are not stored together with other personal data of the user.
The temporary storage of the IP address by our web server is technically necessary in order to display the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website and to optimize and safeguard the security of our IT systems (e.g. for attack detection). No analysis for marketing purposes takes place.
Art. 6(1)(f) GDPR. Our legitimate interest lies in the operation and security of our website.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the provision of the website, this is the case when the respective session has ended. Data stored in log files is deleted after seven days at most. Longer storage is possible if the data is required (e.g. to investigate attacks, misuse or fraud). Data whose retention is required for evidentiary purposes is exempt from deletion until the incident has been finally resolved.
The collection of data for the provision of the website and its storage in log files is absolutely necessary for the operation of the website. There is therefore no option to object.
4. Email Contact and Contact Form
You can contact us via our contact form and the email addresses provided. In this case, we store the personal data of the sender transmitted with the enquiry.
The processing of personal data serves solely to handle your enquiry.
Art. 6(1)(f) GDPR (legitimate interests). If the enquiry aims at concluding a contract, an additional legal basis is Art. 6(1)(b) GDPR (performance of a contract).
The transmitted data is deleted as soon as it is no longer required to achieve its purpose. For data from the contact form input mask and data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter concerned has been conclusively resolved.
You can withdraw your consent to the processing of your personal data at any time. In this case, the conversation cannot be continued. Please address any withdrawal to info@hpc.de. All personal data stored in the course of the contact will be deleted in this case.
5. Job Applications
If you are interested in working for our company, you can apply online via the application form or by email. If you use the application form, we process the following data: first name, last name, email address, telephone number, street, postcode, city, position you are applying for, message text and the documents you provide as attachments. Fields marked with * are mandatory. If you apply by email, we process the data you send us.
We process your personal data to carry out the application process and to decide on establishing an employment relationship, in particular for the selection of suitable candidates and the administrative handling of the application process.
Section 26 (1) BDSG (German Federal Data Protection Act).
The recipients of your personal data are the HR department and the managers responsible for filling the position. In principle, only those persons who need it for the proper conduct of the application process have access to your data. We do not pass on your data to third parties unless you have expressly consented or we are obliged to do so by law and/or by official or court orders. No data is transferred to a third country or an international organization.
We do not use automated decision-making.
If your application does not lead to employment, we delete your personal data no later than 4 months after the end of the application process (e.g. notification of the rejection), taking into account the limitation period under the German General Equal Treatment Act (AGG), unless you have given us consent under Art. 6(1)(a) GDPR to retain your data for a longer period so that we can consider you for future vacancies. In this case, we will ask you for separate consent under Art. 6(1)(a) GDPR. If your application is successful and leads to employment, we will add your application documents, where necessary, to our personnel management system and your personnel file on the basis of Art. 6(1)(b) GDPR and Section 26 (1) BDSG. In this case, your application documents will only be deleted once your employment has ended and a further three years have passed since the end of that year.
You can have the personal data you have sent us corrected or deleted at any time on request. To do so, send an email to HR-Recruiting@hpc.de. This does not apply if you have applied for a specific position in an ongoing application process. In that case, we store the information provided for this position until the statutory limitation periods have expired (in particular Section 15 AGG).
6. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device (e.g. computer, tablet, smartphone) when you visit the website. Cookies do not harm your device and do not contain malware such as viruses or Trojans. Personal data, in particular the IP address, may be stored in cookies. However, this does not mean that we gain direct knowledge of your identity. We use cookies that are technically essential for the operation of our website (essential cookies), cookies that serve us for marketing purposes, and cookies that we use for a convenient visit to our website. Within the framework of informed consent, you can decide for yourself whether you want to accept cookies that are not necessary for the technical functions of the website.
We use cookies, firstly, to make our website attractive and user-friendly, to improve it and to speed up requests. These essential cookies are required for our website to load smoothly. Secondly, we use third-party cookies for the statistical analysis of our website, e.g. to find out how and when visitors use our website, or to provide route planning functions.
If you have consented to the use of cookies, the legal basis is Art. 6(1)(a) GDPR (consent). For the use of essential cookies required for the operation of the website, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the operation and functionality of our online offering.
We use transient and persistent cookies. Transient cookies include so-called session cookies, which are deleted automatically when you close your browser. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie.
As a user, you have full control over the use of cookies. You can adjust or withdraw your selection at any time via our cookie settings. In addition, you can manage cookies through your browser settings: in common browsers (e.g. Google Chrome, Microsoft Edge, Mozilla Firefox, Safari), the “Privacy and security” area lets you specify that cookies are not stored, are restricted, or are deleted automatically at the end of the session; cookies already stored can also be deleted there. If you use a different browser, please refer to its help function for instructions. Please note that if cookies are disabled, you may not be able to use all functions of our website.
Change cookie settings7. Web Analytics Service Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In Google Analytics, interactions of website visitors are primarily recorded and systematically analyzed with the help of cookies (in Section 6 of this privacy policy we explain what cookies are and how you can delete them). When you visit individual pages of our website, the following data is processed, among others: shortened IP address of the accessing system (anonymized IP address), the page accessed, the website from which you came to our site (so-called “referrer URL”), the subpages accessed from the visited page, the duration of the visit to our website and the frequency of visits. We have configured Google Analytics so that your IP address is not stored in full but shortened or masked (IP anonymization). This means it can no longer be assigned to your device. The information generated by the cookie about your use of this website may be transmitted to and stored on a Google server, including in the USA.
The processing of website visitors’ personal data with the help of Google Analytics enables us to analyze the browsing behavior of our users. By evaluating the data obtained, we can compile how the individual components of our website are used. This helps us to improve our website and its usability.
Art. 6(1)(a) GDPR (consent).
Insofar as data is transferred to the USA, Google bases this transfer on the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) and, additionally, on the standard contractual clauses of the European Commission.
The data stored through tracking is deleted as soon as it is no longer needed for our recording purposes. In our case, this is after twelve months.
You can prevent cookies from being stored by adjusting your browser software accordingly (see Section 6). In addition, you can prevent the collection of the data generated by the cookie and relating to your use of the website, as well as its processing by Google, by downloading and installing the browser add-on available at tools.google.com/dlpage/gaoptout. For more information on terms of use and data protection at Google, see policies.google.com/privacy.
8. SalesViewer
We use the SalesViewer® technology of SalesViewer® GmbH, Bongardstraße 29, 44787 Bochum, Germany (www.salesviewer.com). SalesViewer® identifies companies that visit our website. For this purpose, a JavaScript-based tracking code is used on our website, which determines the following visitor data: name, origin and industry of the visiting company, referrer, keyword, visitor behavior (e.g. subpages visited, time of visit, duration of visit). No cookies or similar files are stored on the end devices of website visitors. Instead, the visiting company is identified by comparison with publicly available information. For this purpose, the online identifier of the website visitor is encrypted using a one-way function that cannot be reversed (so-called hashing) and, after a preselection that filters out private access, is pseudonymized and transmitted to SalesViewer®. These online identifiers are compared by SalesViewer® with a database limited to company-related data. Where company-related access can be identified, the corresponding company-related data about the website visit is made available to us on a SalesViewer® internet platform, on which it is also possible to research further publicly available data (e.g. address and contact data) about the visiting companies.
SalesViewer® identifies companies that visit our website and thereby increases our sales efficiency. The data is collected and stored for marketing, market research and optimization purposes.
Art. 6(1)(f) GDPR. Our legitimate interest lies in the data processing purposes stated above.
Data stored in the context of SalesViewer is deleted as soon as it is no longer required for its purpose and no statutory retention obligations prevent deletion.
You can object to data collection and storage at any time with effect for the future. To prevent collection by SalesViewer® within this website in future, an opt-out cookie for this website will be placed on your device. Please note: if you delete your cookies in your browser, you will have to opt out again.
9. Google reCAPTCHA
We use the reCAPTCHA function provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which protects our contact form against spam software and misuse by non-human visitors. This function includes sending the IP address and, where applicable, other data required by Google for the service to Google.
We use this service to ensure adequate data security when submitting entries in the contact form and to distinguish whether an entry is made by a natural person or abusively by machine-based, automated processing.
Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing misuse and spam.
When Google reCAPTCHA is used, personal data may be transmitted to Google, including in the USA. Insofar as data is transferred to the USA, Google bases this transfer on the EU-US Data Privacy Framework and, additionally, on the standard contractual clauses of the European Commission. Further information on how Google handles your data is available at policies.google.com/privacy.
10. Newsletter
You can subscribe to a free newsletter on our website, which informs you at irregular intervals about news on SAP topics and events. To subscribe to the newsletter, we collect your email address. Optionally, you can provide gender, title, first name, last name, company and telephone number for personal address. We use a double opt-in procedure for registration. After registering, you will receive an email in which you must confirm your registration. We use this procedure so that nobody can register with someone else’s email address. We log registrations in order to be able to prove the registration process in accordance with legal requirements. This includes the date, time and IP address at the time of registration. Your consent to the processing of the data is obtained during the registration process, with reference to this privacy policy. The data is used exclusively for sending the newsletter.
The email address is collected in order to send the newsletter. The collection of further optional data serves personal address.
Your consent pursuant to Art. 6(1)(a) GDPR.
Your personal data from the newsletter registration is processed by our marketing department. To send the newsletter, we use the service provider Brevo GmbH (formerly Sendinblue GmbH), Köpenicker Straße 126, 10179 Berlin, Germany, under a data processing agreement pursuant to Art. 28 GDPR. Data processing takes place in the EU. You can view the privacy policy of our mailing service provider here: brevo.com/de/legal/privacypolicy. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The email address is therefore stored for as long as the newsletter subscription is active.
You can cancel receipt of our newsletter at any time, i.e. withdraw your consent. For this purpose, every newsletter contains an unsubscribe link. Alternatively, you can simply contact us by email at info@hpc.de.
11. Google Maps
We embed maps from the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive maps in order to present geographic information visually. To provide the map material, Google processes technically necessary data.
Using this service, our locations are shown to you and any journey to us is made easier.
Embedding the Google Maps service is necessary for designing our website to meet your needs. This is also our legitimate interest pursuant to Art. 6(1)(f) GDPR. Where consent is requested, the legal basis is Art. 6(1)(a) GDPR.
When you visit subpages in which Google Maps maps are embedded, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers, including in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. Insofar as data is transferred to the USA, Google bases this transfer on the EU-US Data Privacy Framework and, additionally, on the standard contractual clauses of the European Commission.
If you do not want the data to be assigned to your Google profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, which you must exercise by contacting Google. Google is responsible for any further data processing. Further information is available at policies.google.com/privacy and google.com/help/terms_maps.
12. Social Media Presences
Our website contains buttons with hyperlinks to the social network XING and the employer rating platform kununu, on which we maintain publicly accessible profiles. You can recognize the respective providers by their logo. We use these presences to communicate with users and to inform them about our offers and career opportunities.
When you visit our site, no personal data is initially transmitted to these social media platforms. Only when you click the respective button is data transmitted to them. In this case, the respective provider receives the information that you have accessed the corresponding page of our online offering (e.g. date, time, IP address, page accessed).
If you are logged in to the social media provider, the data we collect may be assigned directly to your account with the provider. We recommend that you log out regularly after using a social network, in particular before activating the button, as this allows you to avoid being linked to your profile with the provider. The provider may process your data for further purposes of its own. As we have no influence on the data collected by third parties and its processing, we cannot give binding information on the purpose and scope of processing. For further information, please refer to the privacy notices of the respective providers:
- XING (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany); privacy policy: privacy.xing.com/en/privacy-policy
- kununu (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany); privacy policy: privacy.xing.com/en/privacy-policy
13. Data Security
We implement technical and organizational measures for the security of data processing in accordance with the state of the art. This ensures that the provisions of data protection law, in particular the General Data Protection Regulation, are complied with and that the data we process is protected against destruction, loss, alteration and unauthorized access. These security measures also include the encrypted transmission of data between your browser and our web server.
You can recognize SSL/TLS encryption by the fact that your browser’s address bar begins with https:// and a padlock symbol is displayed. SSL/TLS protects data transmission against illegal access by third parties using encryption technology. All information you send us is processed on our servers in the Federal Republic of Germany.
14. Disclosure of Data to Third Parties and Third-Party Providers
Data is only disclosed to third parties within the framework of legal requirements. We only pass on users’ data to third parties if this is necessary, e.g. on the basis of Art. 6(1)(b) GDPR for contractual purposes, or on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR in the economic and effective operation of our business.
Under data processing agreements pursuant to Art. 28 GDPR, we use service providers for the operation and maintenance of our website and IT systems who may gain knowledge of your personal data in connection with maintenance and support. We have therefore put suitable legal, technical and organizational measures in place with the service providers to ensure the protection of personal data in accordance with the applicable legal provisions. Your personal data is not transferred to a third country or an international organization unless otherwise stated in this policy (e.g. for the Google services used).
15. Your Rights
If we process personal data about you, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and have the following rights against us with regard to your personal data:
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). An overview of the German supervisory authorities is available at datenschutzkonferenz-online.de.
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Königstraße 10 a · 70173 Stuttgart
baden-wuerttemberg.datenschutz.de
16. Changes to this Privacy Policy
We reserve the right to amend this privacy policy to adapt it to changes in the legal situation or to changes in the service or data processing. This applies only with regard to statements on data processing. Where users’ consent is required or components of the privacy policy contain provisions on the contractual relationship with users, changes are made only with the users’ consent. Please check the content of the privacy policy regularly.
Privacy policy last updated: July 2026