Data privacy

Last updated: January 2020

I. General information on data processing
Your personal data is processed within the HABA FAMILYGROUP by HABA Group B.V. & Co. KG, August-Grosch-Str. 28-38, 96476 Bad Rodach for itself and HABA Sales GmbH & Co.KG, August-Grosch-Str. 28-38, 96476 Bad Rodach with its independent brands HABA, Wehrfritz, JAKO-O, FIT-Z and Qiero. Furthermore, data processing is carried out for HABA Project GmbH, Gerbstedter Chaussee 13, 06295 Lutherstadt Eisleben, Heldbergs GmbH & Co. KG, August-Grosch-Str. 28-38, 96476 Bad Rodach as well as for the holdings HABA Digital GmbH, Gesellschaft für digitale Bildung mbH and Fox & Sheep GmbH.

The responsible entity for data processing at the HABA FAMILYGROUP pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is the HABA Group B.V. & Co. KG, August-Grosch-Str. 28-38, 96476 Bad Rodach.

If you have any questions about data protection, please contact our data protection officer by mail: HABA Group B.V. & Co.KG, Subject: Data privacy, PO box 1107, 96473 Bad Rodach or by email: personal@HABA and the subject: data privacy.

The declaration below gives you an overview of how we guarantee the protection of your data in accordance with the GDPR and the German Federal Data Protection Act (BDSG). As a visitor to our website, we would like to explain the type of data we collect, why we collect this data, how we use this data and how you can decide at any time how we handle your personal data. When you contact us by mail, email or using a contact form, the data you provide will be stored by us to answer your questions. We delete these data once its storage is no longer necessary or restrict its processing if there are legal obligations to retain the data.

In section VI you can find additional information on the use of our applicant portal.

II. What happens when I visit the HABA FAMILYGROUP website?
If you use our website for information purposes only, i.e., if you do not register or otherwise transmit information to us via the application form, we collect the personal data that your browser transmits to our server. This data is technically necessary for us to be able to display our web pages to you and to ensure stability and security. The legal basis for this is Art. 6 para. 1 lit. f GDPR. This concerns the following data:

IP address, date and time of the request, time zone difference, content of the request, access status/HTTP status code, amount of data transferred, website (from which the request came), browser, operating system and its interface, language and browser software version.

This information is evaluated for statistical purposes and then deleted. The individual user remains anonymous.

On request, we will provide you with information about the data stored about you or your pseudonym free of charge. If you would like such information, please send an email to We are also obligated, upon request, to correct, restrict or delete the data stored about you.

III. Which data is stored for what purpose?
As far as you made personal data available to us, we use this solely for providing our contractual services, for customer service and applicant management, and to respond to your inquiries. The data required for processing the transaction is stored. Processing also includes transfer of address data to companies of the HABA FAMILYGROUP. HABA FAMILYGROUP companies and sales areas can be found under section I.

If, in the future, you decide that you no longer wish to use our services, you can object to the data processing at any time with future effect. To do this, send a message to or by mail to HABA Group B.V. & Co. KG, HABA-Personal, August-Grosch-Str. 28-38, 96476 Bad Rodach.

Children's data - Our websites are not directed at persons under the age of 16, and we ask that persons under the age of 16 not provide us with any personal data. The data must be solely provided by the parent or guardian or with their consent. If we learn that we have unlawfully collected personal information from a child under the age of 16, we will take steps to delete that information as soon as possible.

IV. What are cookies?
Our website uses cookies in several places. They are used to make our offer more user-friendly, effective and secure.

A cookie is a small data file that is transferred by us to your browser when you surf our site. A cookie can only contain information that we ourselves send to your device – it is not possible in this way to read private data. We do not have access to your personal information, but cookies allow us to identify your browser.

We use cookies for the following purposes:

  • So that we recognize you on future visits and can display the default settings you have chosen (e.g., language).

  • So that you can make use of other specific services, such as displaying the web pages in your language and personalizing them.

  • So that we can tailor our site even better to the needs of our prospective customers.

We use "permanent" cookies: This means you only have to enter your username once on websites that require registration. The user can manually remove "permanent" cookies. Permanent cookies are stored by us for 3,000 days. In addition, we use cookies for advertisements. These cookies are stored for a maximum of 30 days. After that, they are automatically deleted.

Most browsers accept cookies by default. The Help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to turn off all cookies you receive. If you deactivate cookies, certain features on our site may not be available and some web pages may not display properly. The websites and provide information about usage-based and behavior-based online advertising, respectively, and how you can avoid them.

V. Web Analytics
When you visit our website, we perform analyses to find out, for example, which information is most in demand or which way you accessed our offer. The analysis tools require identifying individual visitors to evaluate individual behavior. However, personal identification is generally not required, as only statistical data is to be compiled. It is therefore customary, also based on the supervisory authority’s approach, that IP addresses are only collected in a shortened form.

The legal basis for processing this analytical data is to be understood as our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR to understand how our customers interact with our website so that we can optimize the user experience and the functions of our website.

a) Google Analytics and Google Tag Manager

Our website uses Google Analytics and Google Tag Manager, web analytics services provided by Google Inc. ("Google"). Google Analytics and Google Tag Manager use cookies, which are text files placed on your computer, to help the website analyze how users use the site and to improve it regularly and make it more interesting. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f) GDPR.

The information generated by the cookie about your use of our website (including your IP address in anonymized form) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By using this website, you agree to the processing of data about you by Google in the manner and for the purposes described above. You can object to the collection and storage of data at any time with future effect.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:

As an alternative to the browser add-on or within browsers on mobile devices, <a id="GAOptOut" title="Google Analytics Opt-Out Cookie Set" href="javascript:gaOptout()">please click this link</a> to prevent the collection by Google Analytics within this website in the future (the opt-out only works in the browser and only for this domain). This will place an opt-out cookie on your device. If you delete your cookies in this browser, you must click this link again.

Third-party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions:, overview of data protection:, as well as the data protection declaration:

b) DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to show relevant ads to the users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Via a cookie ID, Google records which ads are shown in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later calls up the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google by using this tool and therefore inform you according to our information status: Through the integration of DoubleClick, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn and store your IP address.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, suppressing third-party cookies will result in you not receiving ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "", de/settings/ads, in which case this setting will be deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link, in which case this setting will be deleted when you delete your cookies; d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link Please note that in this case you may not be able to use all functions of this offer to their full extent.

The legal basis for processing your data is Art. 6 para. lit. f) GDPR. For more information on DoubleClick by Google, please visit and, and on data protection at Google in general: Alternatively, you can visit the Network Advertising Initiative (NAI) website at Google has submitted to the EU-US Privacy Shield,

VI. Information on the application process (applicant portal)
6.1 Policy

The HABA FAMILYGROUP applicant portal is used jointly by the companies referred to in Section I, with the collecting and responsible entity being HABA Group B.V. & Co. KG. In the following, HABA FAMILYGROUP will be referred to for reasons of simplification.

6.2 Purpose of the processing

Your application data, which you provide via the applicant portal, will be stored and used exclusively for purposes related to the recording and processing of your interest in employment or training in the HABA FAMILYGROUP, including the contact required for this purpose. The legal basis for processing is Art. 6 para. 1 lit. a) and b) GDPR.

6.3 Collection and processing of application data.

If you wish to apply online, this requires that you enter certain personal data marked with mandatory fields in the respective online application forms, such as first and last name and contact details. Furthermore, you have the option to send us additional application documents. Please note that these documents may also contain special categories of personal data as defined in Art. 9 (1) of the GDPR. If you send us information referring to this, you give your consent to the processing of this personal data according to the data protection declaration by clicking on the corresponding checkbox.

With your application, you affirm that the declarations you have made, and the information provided are true. Please note that failure to disclose facts that you are obliged to clarify and in which HABA B.V. & Co.KG has a legitimate interest worthy of protection may result in a rejection or subsequent challenge of the employment contract.

As part of the application process, your application data is accessible to the respective personnel managers of the HABA FAMILYGROUP company seeking the job and the responsible department and is made available to the managers of the respective specialist departments seeking the job.

The current legal situation regarding data protection does not include a group privilege, which means that every connection from one group company to another group company is a connection to a third party. We therefore require your consent if your application is also to be forwarded to another Group company. Your application data will then be used within the companies and areas of activity mentioned in Section I and will only be passed on to third parties outside the HABA FAMILYGROUP in the event of an official order or with your consent.

Once you have entered your application data and clicked the "Submit" button, it will be transmitted via an encrypted connection and collected on our server in Germany; the server is hosted and administered by us.

HABA FAMILYGROUP will take all reasonable steps to ensure that your application is handled carefully and completely. However, to do this, your application documents must be truthful, up-to-date and complete. Therefore, please notify us immediately of any changes to your application data.

Unfortunately, we cannot offer the desired position to all applicants immediately. However, we would like to continually stay in contact with you so that we can offer you a potentially interesting position in a timely manner. With your consent, the data you provide as part of your application will therefore be stored for a total of 24 months after inclusion in our talent pool. If we find a suitable position for you, we will contact you to find out whether you would like to be considered for the position. Of course, you can request to be deleted from the talent pool at any time. To do so, please send an e-mail to:

6.4 Deletion of data and truncated data reduction

In addition, you also have the right at any time to view, restrict or delete your application data stored with us free of charge upon request, to object to the processing of your application data or to have incorrect application data corrected.

To do so, please send an e-mail to:

If you do not request deletion of your data, your application data will be stored for 6 months after completion of the application process. If you would like your personal data to be retained beyond the 6 months up to a maximum of 24 months to be included in the selection of possible positions to be filled in the future, we request your corresponding consent.

If your application does not lead to employment during this period (6 or 24 months), your data will automatically be reduced to your basic data. Further processing of this data serves to protect legitimate interests as defined in Art. 6 Para. 1 lit. f GDPR, such as the defense against claims for compensation and damages pursuant to Section 15 AGG. Basic data includes:

  • First name, last name

  • Zip code

  • City

  • Country

  • Nationality

  • Salutation

  • Date of birth

  • Input type

  • How found

  • Date of receipt

After an additional 12 months, this basic data will be permanently and completely deleted.

VII. Transfer to third parties
We will not sell the data you provide. It will not be transferred to third countries or international organizations. We will only share the information we receive with third parties to the extent described below:

We disclose personal information when we are required to do so by law or when such disclosure is necessary to protect our rights and those of others.

In all other cases, we will inform you when personal information is to be transferred to third parties, giving you the opportunity to give your consent.

VIII. Data security
To prevent loss or misuse of the data stored with us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress. We use SSL (RSA 256 Bit) as encryption and security software. This procedure is successfully used throughout the World Wide Web. You can recognize that you are in the secured area by a symbol (closed padlock) in the lower window bar of your browser.

All your personal data (name, address, etc.) is thus encrypted and securely transmitted on the Internet.

Only our server can decrypt your data again. During the transmission unauthorized persons cannot read your information!

However, it is also your responsibility to protect the data you provide against misuse by encryption or other measures.

IX. What rights do you have?
You have the right at any time to request information about your data stored by us and about the existence of automated decision-making and to have it deleted. Furthermore, you have the right to object to the processing of your data or to demand the restriction of the processing of your data or to have incorrect data corrected. Furthermore, you have the right to demand the return of the data provided by you in a structured, common and machine-readable format. The GDPR regulates these rights of the "data subject" and information obligations primarily in Articles 12-22 GDPR. The restrictions on the rights of the data subject, according to §§ 57, 58 BDSG, must be considered.

Please address your request to and the subject: Data Protection or by mail to HABA B.V. & Co.KG, Subject: Data Protection, P.O. Box 1107, 96473 Bad Rodach.

In addition, you have the right to file a complaint with the competent supervisory authority pursuant to Article 77(1) of the GDPR and the right to an effective judicial remedy against the controller or processor pursuant to Section 79(1) of the GDPR.

X. Which complaints office can you reach out to?
You have the option of contacting the data protection officer mentioned above or a data protection supervisory authority. Our responsible data protection supervisory authority is:

Bavarian State Office for Data Protection Supervision

P.O. Box 606
91511 Ansbach
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300

If you wish to file a complaint, you may use the Supervisor's online complaint form (available at:

XI. Our complete contact information
HABA Group B.V. & Co. KG
August-Grosch-Str. 28-38
96476 Bad Rodach
Phone: +49 9564 60100
Fax: +49 9564 662300

HABA B.V. & Co. KG
Personally liable partner: HABA Administration B.V., Venlo (The Netherlands), registered in the Commercial Register (Kamer van Koophandel) under No. 76475840, Executive Directors: Tim Steffens (CEO), Sabine Habermaass
Registered office: Bad Rodach, Register Court: AG Coburg, HRA 5240.

Share this page