Privacy policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below.
Data collection on this website
Who is responsible for collecting data on this website?
Data on this website is processed by the website operator. You can find the operator's contact details in the section entitled ‘Information about the controller’ in this privacy policy.
How do we collect your data?
We process information you send by email or telephone to respond to your enquiry. This website does not provide a contact form. When pages are requested, the hosting provider processes technical access data such as IP address, browser and access time.
What do we use your data for?
Some data is collected to ensure that the website functions correctly. Other data may be used to analyse your use of the website. Where contracts can be concluded or initiated through the website, the data provided is also processed for quotations, orders or other enquiries about services.
What rights do you have regarding your data?
You have the right to obtain information, free of charge and at any time, about the origin, recipients and purpose of your stored personal data. You also have the right to request its correction or deletion. If you have consented to data processing, you may withdraw that consent at any time with future effect. In certain circumstances, you may also request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time about these matters or other questions concerning data protection.
2. Hosting
Our website content is hosted by the following provider:
External hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider or providers. This may include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data and other data generated through a website.
External hosting is used to fulfil our contracts with prospective and existing customers (Article 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Article 6(1)(f) GDPR). Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Our hosting providers will process your data only to the extent necessary to meet their service obligations and will follow our instructions concerning that data.
We use the following hosting provider:
Provider: Hostinger International Ltd.
Address: 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
Website: www.hostinger.com
Processing on our behalf
We have concluded a data processing agreement for the service mentioned above. This agreement is required by data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.
Various personal data is collected when you use this website. Personal data is data that can identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.
Please note that data transmission over the internet, for example by email, can have security vulnerabilities. It is not possible to protect data completely against access by third parties.
Information about the controller
The controller responsible for data processing on this website is:
H.M.E-Alhelwani-Ingenieurbüro
Homam Alhelwani
Hubertusstraße 12/14,
52064 Aachen
Telephone: +4915753239933
Email: info@hme-alhelwani.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Storage period
Unless a more specific storage period is stated in this privacy policy, we retain your personal data until the purpose for processing it no longer applies. If you make a justified request for deletion or withdraw your consent to processing, your data will be deleted unless we have other lawful grounds to retain it, such as tax or commercial retention obligations. In that case, deletion takes place once those grounds no longer apply.
General information about the legal bases for processing data on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. If you expressly consent to transferring personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you consent to cookies being stored or information on your device being accessed, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required to fulfil a contract or take steps before entering into a contract, processing is based on Article 6(1)(b) GDPR. We also process data under Article 6(1)(c) GDPR where necessary to meet a legal obligation. Processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The legal bases applicable in individual cases are explained in the following sections.
Recipients of personal data
In the course of our business, we work with external organisations. This may involve transferring personal data to them. We disclose personal data only where necessary to fulfil a contract, where legally required, for example to tax authorities, where we have a legitimate interest under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers' personal data only under a valid processing agreement. Where processing is carried out jointly, a joint processing agreement is concluded.
Withdrawal of your consent to data processing
Many processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before that withdrawal.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
IF DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR THAT PURPOSE. THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (ARTICLE 21(2) GDPR).
Right to lodge a complaint with a supervisory authority
In the event of a breach of the GDPR, data subjects have the right to complain to a supervisory authority, particularly in the member state of their habitual residence, place of work or the alleged infringement. This right is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive, or have a third party receive, data that we process automatically on the basis of your consent or to fulfil a contract, in a commonly used, machine-readable format. If you request a direct transfer to another controller, we will do so only where technically feasible.
Access, correction and deletion
Within the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, to request correction or deletion. You may contact us at any time about this or other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. This right applies in the following cases:
If you dispute the accuracy of the personal data we hold about you, we usually need time to verify it. You have the right to request restriction of processing for the duration of that verification.
If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.
If we no longer need your personal data, but you need it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it has been established whose interests prevail, you have the right to request restriction of processing.
Where processing has been restricted, your personal data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
SSL or TLS encryption
For security and to protect the transmission of confidential content, such as orders or enquiries sent to us as the website operator, this website uses SSL or TLS encryption. An encrypted connection is indicated when the browser address changes from ‘http://“ to ‘https://“ and a padlock symbol appears in the browser address bar.
When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
Objection to marketing emails
We object to the use of contact details published under legal disclosure requirements to send advertising or information that has not been expressly requested. The website operators expressly reserve the right to take legal action against unsolicited advertising, including spam emails.
4. Data collection on this website
Server log files
The website provider automatically collects and stores information in server log files, which your browser sends to us automatically. This comprises:
Browser type and version
Operating system used
Referrer URL and host name of the accessing computer
Time of the server request
IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically correct presentation and optimisation of the website, which requires server log files to be collected.
Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, we store and process your enquiry, including the associated personal data such as your name and enquiry details, to deal with your request. We do not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to fulfilling a contract or is necessary for steps before entering into a contract. In all other cases, processing is based on our legitimate interest in dealing effectively with enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR), where requested. Consent may be withdrawn at any time.
Data sent to us in contact enquiries remains with us until you request deletion, withdraw consent to storage, or the purpose for storing it no longer applies, for example after your request has been fully processed. Mandatory legal provisions, particularly statutory retention periods, remain unaffected.
5. Plugins and tools
Videos and external linksYouTube
Project videos are delivered as files from this website. Playing them does not connect to YouTube. YouTube, LinkedIn and the external pump-design tool are external links; opening them takes you to the respective provider, whose privacy information then applies.
Google Maps
The location map is embedded only after you activate the button to load the Google map. Before that, this map feature does not connect to Google. Loading it transfers technical data, particularly your IP address, to Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Using Google Maps requires your IP address to be stored. This information is generally transferred to and stored on a Google server in the USA. The website provider has no influence over this transfer. When Google Maps is enabled, Google may use Google Fonts to display fonts consistently. When Maps is loaded, your browser loads the required web fonts into its cache to display text and fonts correctly.
Google Maps is used to present our online services attractively and make the locations shown on our website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where consent is requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers cookies or access to information on the user's device, such as device fingerprinting. Consent may be withdrawn at any time.
Transfers to the USA are based on the European Commission's standard contractual clauses. Details are available here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Further information on the handling of user data is available in Google's privacy policy: https://policies.google.com/privacy?hl=de.
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Companies certified under the DPF undertake to comply with those standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.