Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that provides information about you and can be used to identify you. In this Privacy Policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

The following entity is responsible for data processing on this website and within our company:

Hexin, Inc.

6 Marie Curie Street

85055 Ingolstadt

Germany

Phone number: to be provided later

Email: kaichen.hu@he-xin.de

General Information

SSL or TLS encryption

When you enter your information on websites, place online orders, or send emails over the Internet, you should always be aware that unauthorized third parties may access your data. There is no such thing as complete protection against such access. However, we do everything in our power to protect your data as best we can and to close any security gaps to the extent possible.

An important security measure is the SSL or TLS encryption used on our website, which ensures that data you send to us cannot be intercepted by third parties. You can recognize this encryption by the padlock icon next to the website address in your browser, and by the fact that our website address begins with https:// rather than http://.

How long do we retain your data?

In certain sections of this Privacy Policy, we inform you about how long we or the companies that process your data on our behalf will retain your data. If no such information is provided, we will retain your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing.

However, in the event of an objection or withdrawal, we may continue to process your data if at least one of the following conditions is met:

We have compelling legitimate grounds for continuing to process your data that override your interests, rights, and freedoms.
Data processing is necessary to assert, exercise, or defend legal claims.
We are legally required to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Transfer of data to the United States

We also use tools on our website from companies that transfer your data to the United States, where it is stored and, where applicable, further processed. The European Commission has adopted an adequacy decision regarding the EU-U.S. data protection framework. This establishes that the U.S. ensures an adequate level of protection for personal data from the EU that is transferred to U.S. companies. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search

It cannot be ruled out that the European Commission may revise its decision.

Your rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE PROCESS IT ON THE BASIS OF ART. 6(1), SENTENCE 1, POINT F) of the GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS UNDER ART. 21 OF THE GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR SPECIFIC SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF YOUR OBJECTION IS THAT WE ARE NO LONGER PERMITTED TO PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE INTERESTS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS.
THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AT DIRECT MARKETING OR AT PROFILING RELATED TO SUCH MARKETING.

Additional rights

Withdrawal of Your Consent to Data Processing

Many data processing operations are based on your consent. You provide this consent, for example, by checking the appropriate box on online forms before submitting them, or by accepting certain cookies when you visit our website. You may withdraw your consent at any time without providing a reason (Art. 7(3) GDPR). From the time of revocation, we may no longer process your data. The only exception: We are legally required to retain the data for a certain period of time. Such retention periods exist in particular under tax and commercial law.

Right to file a complaint with the competent supervisory authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority. You may contact a supervisory authority in the Member State where you reside, where you work, or where the alleged violation occurred. The right to lodge a complaint exists in addition to administrative or judicial remedies.

Right to data portability

We must provide you or a third party with data that we process automatically based on your consent or in fulfillment of a contract in a commonly used machine-readable format if you request it. We may only transfer the data to another controller to the extent that this is technically feasible.

Right to access, delete, and correct data

Under Article 15 of the GDPR, you have the right to obtain, free of charge, information about what personal data we have stored about you, where the data comes from, to whom we disclose the data, and for what purpose it is stored. If the data is incorrect, you have the right to have it corrected (Article 16 of the GDPR); under the conditions set forth in Article 17 of the GDPR, you may request that we delete the data.

Right to restriction of processing

In certain situations, you may request that we restrict the processing of your data in accordance with Article 18 of the GDPR. In such cases, with the exception of storage, the data may only be processed as follows:

with your consent
to assert, exercise, or defend legal claims
to protect the rights of another natural or legal person
for reasons of an important public interest of the European Union or a Member State

You have the right to restrict processing in the following situations:

You have disputed the accuracy of your personal data stored with us, and we need time to verify this. You have the right to do so for the duration of the verification process.
The processing of your personal data is unlawful or was unlawful in the past. In this case, you have the right to have the data erased.
We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. In this case, you have the right to request that the data be retained instead of being deleted.
You have lodged an objection under Article 21(1) of the GDPR, and now your interests and ours must be weighed against one another. You retain this right until the outcome of this assessment is determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server provided by the following internet service provider (host):

HOSTINGER operations, UAB

34 Švitrigailos Street

Vilnius 03230, Lithuania

Has a data processing agreement been entered into with the hosting provider, or are Standard Contractual Clauses (SCCs) being used?

Yes

How do we process your data?

Our web host stores all data from our website. This includes all personal data collected either automatically or through your input. In particular, this may include: your IP address, pages visited, names, contact information and inquiries, as well as metadata and communication data. When processing data, our web host follows our instructions and processes the data only to the extent necessary to fulfill its obligations to us.

On what legal basis do we process your data?

Since we use our website to reach potential customers and maintain contact with existing customers, the data processing carried out by our hosting provider serves the purpose of entering into and fulfilling contracts and is therefore based on Article 6(1)(b) of the GDPR. Furthermore, it is in our legitimate interest as a company to provide a professional website that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Article 6(1)(f) of the GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all (essential cookies). Others are required to perform certain actions or functions on the site (functional cookies). Still other cookies are used to analyze user behavior or optimize advertising. If we use third-party services on our website, these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are stored on your device only for the duration of a session. This means they are automatically deleted as soon as you close your browser. Persistent cookies, on the other hand, remain on your device unless you delete them yourself. You can use your browser settings to control how it handles cookies:

Would you like to be notified when cookies are set?
Do you want to block cookies in general or only in certain cases?
Would you like cookies to be automatically deleted when you close your browser?

If you disable or block cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analytical purposes, we will inform you of this in this Privacy Policy. We will also ask for your consent regarding this when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that visitors can use our online services without technical issues and that all desired features are available to them. Necessary and functional cookies are therefore stored on your device pursuant to Article 6(1)(f) of the GDPR. We use all other cookies on the basis of Article 6(1)(a) of the GDPR, provided that you give us your consent. You may revoke this consent at any time with future effect. If you have consented to the placement of necessary and functional cookies when asked for your consent, the storage of these cookies is also based exclusively on your consent.

Cookie Consent with Complianz

What is Complianz?

Consent Management Provider (CMP) for obtaining, processing, and forwarding GDPR-compliant consents.

Who processes your data?

Complianz is a locally integrated tool; data processing is carried out directly by the controller. Complianz is provided by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.

How do we process your data?

We use Complianz to obtain your consent to store cookies on your device and to document this in accordance with data protection regulations. When you visit our website and close the Complianz cookie window requesting your consent, the following data is stored:

Your IP address, which is also used to determine your country
the browser being used
the language used
the webpage that was opened

In addition, Complianz stores various cookies in your browser so that it can associate the consents you have given—or their revocation—with your browser. All collected data is stored until the cookies are no longer needed, you delete the Complianz cookies, or you request that we delete the data. This does not apply if we are legally required to retain the data. No connection to third-party servers is established.

On what legal basis do we process your data?

We are legally required to obtain consent from our website visitors for the use of certain cookies. To fulfill this obligation, we use Complianz. The legal basis for data processing is therefore Article 6(1)(c) of the GDPR.

Server log files

Server log files record all requests and visits to our website and log error messages. They also contain personal data, specifically your IP address. However, this address is anonymized by the provider shortly thereafter, so we cannot link the data to you personally. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores server log files to track activity on our website and identify errors. The files contain the following data:

Browser type and version
operating system used
Referrer URL
Hostname of the connecting computer
Time of the server request
IP address, anonymized if necessary

We do not combine this data with any other data; we use it solely for statistical analysis and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website operates without errors. We also have a legitimate interest in obtaining an anonymized overview of visits to our website. Data processing is therefore lawful under Article 6(1)(f) of the GDPR.

Contact Form

You can send us a message using the contact form on this website.

How do we process your data?

We will save your message and the information provided in the form so that we can process your inquiry, including any follow-up questions. This also applies to the contact information you provided. We will not share this information with anyone else without your consent.

How long do we retain your data?

We will delete your data as soon as any of the following conditions are met:

Your request has been processed.
You are requesting that we delete the data.
You are revoking your consent to the storage of your data.

This does not apply only if we are legally required to retain the data.

On what legal basis do we process your data?

If your inquiry relates to our contractual relationship or serves to implement pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. In all other cases, it is in our legitimate interest to effectively process inquiries directed to us. The legal basis for data processing is therefore Article 6(1)(f) of the GDPR. If you have consented to the storage of your data, Article 6(1)(a) of the GDPR serves as the legal basis. In this case, you may revoke your consent at any time with future effect.

Inquiries by email or phone

You can send us an email or give us a call if a phone number is listed on this website.

How do we process your data?

We store your message, as well as the contact information you provided or the phone number you submitted, so that we can process your inquiry and any follow-up questions. We will not share this information with anyone else without your consent.

How long do we retain your data?

We will delete your data as soon as any of the following conditions are met:

Your request has been processed.
You are requesting that we delete the data.
You are revoking your consent to the storage of your data.

This does not apply only if we are legally required to retain the data.

On what legal basis do we process your data?

Communication via WhatsApp

What is WhatsApp?

Instant messaging service.

Who processes your data?

WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Has a data processing agreement been entered into with WhatsApp?

Yes

Where can you find more information about data protection on WhatsApp?

https://www.whatsapp.com/legal/#privacy-policy

On what basis do we transfer your data to the United States?

Based on the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use the "WhatsApp Business" version of the WhatsApp instant messaging service to communicate with our customers and other individuals outside our company.

Communication is secured using end-to-end encryption. This prevents WhatsApp or any other third parties from accessing the content of the communication. However, WhatsApp does have access to the metadata associated with the communication—such as the sender, recipient, and time of the communication—and, according to its own statements, shares this data with Meta, its parent company based in the United States.

How long do we retain your data?

We will delete your data as soon as any of the following conditions are met:

The purpose of the data processing no longer applies.
You are requesting that we delete the data.
You are revoking your consent to the storage of your data.

This does not apply only if we are legally required to retain the data.

On what legal basis do we process your data?

If our communication via WhatsApp is related to our contractual relationship or serves to implement pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. In all other cases, it is in our legitimate interest to effectively process inquiries directed to us and to maintain business contact with other individuals. The legal basis for data processing is therefore Article 6(1)(f) of the GDPR. If you have consented to the storage of your data, Article 6(1)(a) of the GDPR serves as the legal basis. In this case, you may revoke your consent at any time with future effect.

Analytics Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and optimize our website.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about data protection in Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the United States?

Based on the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use Google Tag Manager. This tool helps us integrate tracking codes into our website, manage them, and deploy them. Google Tag Manager does not create user profiles, place cookies on your device, or analyze your user behavior. However, it may collect your IP address and transmit it to Google’s servers.

On what legal basis do we process your data?

We have a legitimate interest in the quick and straightforward integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful under Article 6(1)(f) of the GDPR. If you have consented to the sharing of your IP address, we process your data exclusively on the basis of Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Has a data processing agreement been entered into with Google Analytics?

Yes

Where can you find more information about data protection in Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the United States?

Based on the European Commission's adequacy decision and the company's corresponding certification.

How can you prevent data collection?

One option is a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always looking to improve our website for our visitors. Google Analytics, a tool that analyzes user behavior and provides us with the data we need to make adjustments, helps us do this. Through this tool, we receive information about where our visitors come from, the pages they view, how long they stay on the site, and the operating systems they use.

Standard processing

To collect this data, Google Analytics uses cookies, device fingerprinting, or other technologies to identify users. The data may be transmitted to Google’s servers and, using the IP address that is also collected, compiled into a profile that can be associated with you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=de

IP anonymization

We have enabled the "IP anonymization" feature in Google Analytics. For you, this means that Google truncates your IP address within the EU or the EEA before transmitting it to the United States. Only in exceptional cases does Google transmit the full IP address to servers in the United States and truncate it there.

How long do we retain your data?

According to Google, data stored at the user and event levels that is linked to cookies, user IDs, or advertising IDs is deleted or anonymized after 14 months. For more information, visit: https://support.google.com/analytics/answer/7667196?hl=de

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

Plugins and Tools

Google Fonts (local hosting)

We use fonts from the U.S.-based company Google on our website. We have installed these fonts locally, so no connection to Google’s servers is established when you visit our website.

For more information about Google Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

Google Maps

What is Google Maps?

Map service provided by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about Google's privacy practices?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the United States?

Based on the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use Google Maps on our website. To enable you to use all the features of the map service, Google may store your IP address on a server.

On what legal basis do we process your data?

The maps from Google Maps make it easier for visitors to find the locations listed on our website. As a business, we have a legitimate interest in this. The processing of data is therefore lawful under Article 6(1)(f) of the GDPR.

If you have consented to the processing of your data, we will process your data solely on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.

Google reCAPTCHA

What is Google reCAPTCHA?

Google Ireland Ltd.'s test tool for distinguishing between humans and computers

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about Google's privacy practices?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the United States?

Based on the European Commission's adequacy decision and the company's corresponding certification.

How do we process your data?

We use Google reCAPTCHA to verify whether data entered into forms on our website comes from a human or a computer. The verification tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis may begin as soon as you visit our website. Various data is collected, such as your IP address, the time spent on our website, and mouse movements. The data is transmitted to Google.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our websites from spam and unauthorized access. Data processing is therefore lawful under Article 6(1)(f) of the GDPR.

Elementor

What is Elementor?

Plugin for creating websites.

Who processes your data?

Elementor, 8 THE GRN STE A, Dover, DE 19901, USA.

Has a data processing agreement been entered into with Elementor?

Yes

Where can you find more information about data protection at Elementor?

https://elementor.com/about/privacy/

On what basis do we transfer your data to the United States?

Elementor adheres to the European Commission's Standard Contractual Clauses. For more information, visit: https://elementor.com/about/privacy/

How do we process your data?

We use the "Elementor Website Builder for WordPress" plugin on our website. This plugin is used to create and design our website. Cookies are used to track page views and active sessions.

On what legal basis do we process your data?

By integrating the Elementor plugin, we aim to make our website, as well as our services and offerings, more appealing. This constitutes our legitimate interest as a business and is therefore lawful under Article 6(1)(f) of the GDPR.

Our Services / Miscellaneous

Handling of Applicant Data

If you are interested in working for us, we would be happy to receive your application. We treat all personal data you provide as strictly confidential. This also applies to any data we collect later in the application process.

How do we process your data?

We store all data collected during the application process and use it to the extent necessary to make a decision regarding the establishment of an employment relationship. In addition to contact and communication details and application documents, this also includes, for example, notes we take during job interviews. Within our company, we share your data exclusively with those individuals involved in processing your application.

If your application is successful, we will store the data necessary for the employment relationship in our data processing systems.

If we are unable to offer you a suitable position at this time, we would be happy to add your information to our applicant pool with your consent. This will allow us to contact you if a position becomes available that matches your profile.

How long do we retain your data?

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain your documents and other application data for up to 6 months after the application process has ended. The reason for this is that we may need the data for evidentiary purposes in the event of a legal dispute. After this period expires, we will delete the data and destroy the documents. If a legal dispute is imminent or is already pending, we will delete the data and documents once they are no longer needed for evidentiary purposes.

We delete data from the applicant pool no later than two years after consent is given. If you withdraw your consent before this period expires, we will delete it sooner.

The deletion of your data is always subject to the condition that we are not legally required to retain it for a longer period.

On what legal basis do we process your data?

We process your application data in accordance with Section 26 of the New Federal Data Protection Act (BDSG-neu) and Article 6(1)(b) of the General Data Protection Regulation (GDPR).

The same applies if your application is successful.

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we have a legitimate interest in using your data for evidentiary purposes in the event of a legal dispute. Data processing is therefore based on Article 6(1)(f) of the GDPR.

If you have expressly consented to the storage of your data, we process your data on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect.

Data Processing on Social Media

What is social media?

By "social media," we mean the social networks on which we have created publicly accessible profiles. You can find out exactly which social networks these are below.

Who processes your data?

The respective social media platform operators. You can find the individual operators listed below under the respective platforms.

How is your data processed?

Social media platform operators are generally able to collect and analyze comprehensive data on the behavior of visitors and users of their platforms. We are unable to track all data processing activities on the social media platforms we use; therefore, the operators of these platforms may carry out additional processing activities not listed here. You can find further information on this in the terms of use and privacy policies of the respective social networks.

The processing of your data may be triggered when you visit the social network’s website or our profile page there. Even if you visit a website that uses certain content from the network, data may already be transmitted to the social network operator. If you are a user of the social network and are logged into your user account, your visit to our profile page may be associated with your account by the social network operator. Even if you have not registered a user account yourself or are not logged in, the network operator may still collect your personal data, e.g., by recording your IP address or setting cookies.

On what legal basis is your data processed?

Our social media profiles are intended to ensure that our company has the broadest possible online presence. As a company, we have a legitimate interest in this. Data processing is therefore lawful under Article 6(1)(f) of the GDPR.

The data processing operations and analyses carried out by the social media platform operators themselves may be based on different legal grounds. These must be specified by the social media platform operators.

Who is responsible for processing your data, and how can you exercise your rights?

When you visit one of our social media profiles, we are jointly responsible with the operator of that network for the data processing activities triggered by your visit. You may generally exercise your rights with both us and the operator of that network.

However, despite our shared responsibility with social media platform operators, our influence over the data processing activities of the respective operator is limited and is primarily governed by the operator’s guidelines.

How long will your data be stored?

When we collect data through our social media profiles, our systems will delete this data as soon as the purpose for storing it no longer applies, you request that we delete it, or you withdraw your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions, particularly retention periods, remain unaffected.

We have no control over how long social media platforms store the data they collect for their own purposes. You can obtain information on this directly from the operator of the respective social media platform, for example, in their privacy policy.

What social media platforms do we use?

Instagram

What is Instagram?
A social network specializing in photos and videos.

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Is your data transferred to third countries?
Yes.

Where can you find more information about Instagram's privacy policy?
https://help.instagram.com/519522125107875/

Where can you adjust your privacy settings as a user?
As a registered Instagram user, you can adjust your privacy settings in your user account. To do so, click on the following link and log in:
https://www.instagram.com/accounts/privacy_and_security/