Schleuniger - Privacy Statement
Version of 13.04.2018
This Privacy Statement describes the collection and further processing of personal data by companies of the Schleuniger and its affiliates (together Schleuniger) as far as they are not covered by other data protection policies or are evident from the circumstances or are provided for by applicable law. The term personal data shall include all information relating to an identified or identifiable person.
This Privacy Statement describes in Section I processing of personal data by Schleuniger in general. Section II contains specific provisions for specific applications (e.g. online-shop, customer programs, customer service, newsletter, etc.).
1. CONTROLLER, DATA PROTECTION OFFICER
The respective subsidiary or affiliate is the controller in case Schleuniger communicates through other means of communication (email, letter, telephone, in person, etc.) and the communication does not fall within an activity for which Schleuniger has appointed a specific controller within this Privacy Statement or otherwise.
Should a Schleuniger company or affiliate disclose personal data to another Schleuniger company or affiliate for certain purposes of the receiving company or affiliate, such company or affiliate is the controller according to article 4 (7) GDPR. A comprehensive list of companies and affiliates of Schleuniger can be found here.
Schleuniger has not appointed a data protection officer according to article 37 GDPR except for Schleuniger companies and affiliates in Germany (Schleuniger GmbH; DiIT GmbH; Schleuniger Test Automation GmbH; adaptronic Prüftechnik GmbH (datenschutz(at)adaptronic.de)): datenschutz.de(at)schleuniger.com. Furthermore, any inquiry, claim or concern regarding data protection at Schleuniger (all companies and affiliates) can be addressed to the following contact person in case no specific contact is listed in Section II: dataprotection(at)schleuniger.com.
The representative of companies and affiliates of Schleuniger domiciled outside of the EU or EEA respectively (article 27 GDPR) is Schleuniger GmbH, Raiffeisenstrasse 14, 42477 Radevormwald, Germany.
2. PROCESSING OF PERSONAL DATA
Schleuniger collects and processes personal data of
(together business partner).
The personal data of business partners is generally collected directly during the course of using the website, in stores or at events of Schleuniger or Schleuniger retailers respectively or during direct communication via email, telephone or in any other way.
However, personal data can also be collected indirectly, namely when the business partner engages in a commercial activity which does not correspond with the person benefitting from the commercial activity or if a purchase is shipped to a different person (e.g. as a gift), based on the recommendation of a third party (e.g. recommendation by friends and acquaintances of the business partner) or through further obtaining or acquisition of supplementary information from third party data sources (e.g. social media, address brokers).
In particular, the following categories of personal data is processed by Schleuniger:
(together business partner data).
3. PURPOSE OF THE PROCESSING AND LEGAL BASIS
In accordance with applicable law, Schleuniger may process business partner data namely for, but not limited to, the following purposes:
(together the purpose of business partner data processing).
Schleuniger uses the business partner data for the purpose of business partner data processing based on the following legal grounds:
In accordance with applicable data protection laws, Schleuniger may namely process visitor data for the purpose of maintaining and developing the website (including the provision of functions which require identifiers or other personal data), for statistical analysis regarding the use of the website as well as for combating abusive conduct, for purposes of legal investigations or proceedings and for the response to inquiries of public authorities. The visitor data shall be processed in accordance with the principles set out for business partner data above.
In accordance with applicable data protection laws, Schleuniger may process partner data namely for the purpose of entering into and performance of contracts and other business relationships with partners, promotions, advertisement and marketing, sales measures, communication, invitation to events and participation in promotions for partners, organization of joint activities, compliance with legal and regulatory requirements and internal rules of Schleuniger, enforcement and exploitation of legal rights and claims, defense against legal claims, litigation, complaints, combating abusive conduct, engaging in legal investigations and proceedings and responding to inquiries of public authorities, for the sale or acquisition of business units, companies or parts of companies and other corporate transaction and related transfers of partner data. The partner data shall be processed in accordance with the principles set out for business partner data above.
All the purposes of processing shall be applicable for the whole Schleuniger, i.e. not only for the company which initially collected the personal data. Personal data of business partners is collected for the purpose of all Schleuniger companies.
4. DISCLOSURE OF DATA AND TRANSFER OF DATA ABROAD
In accordance with applicable data protection laws, Schleuniger may disclose business partner data, visitor data and partner data to the following categories of third parties who process personal data in accordance with the purpose of data processing on behalf of Schleuniger or for their own purposes:
(together third parties).
Schleuniger may disclose business partner data, visitor data and partner data within Schleuniger as well as to third parties and in every country worldwide, including namely all countries in which Schleuniger is represented by companies, affiliates or other offices and representatives as well as to countries in which service providers of Schleuniger process their data. If data is disclosed to countries that do not guarantee adequate protection, Schleuniger will ensure adequate protection of data disclosed by business partners, visitors or partners by way of putting adequate contractual guarantees in place, namely on the basis of EU standard clauses, binding corporate rules or it bases the transfer on the exceptions of consent, conclusion or performance of contract, the determination, exercise or enforcement of legal claims, overriding public interests or it discloses the data in order to protect the integrity of these individuals. The business partner, visitor or partner can obtain a copy of the contractual guarantees from or will be advised where to obtain such copies by the contact person named above. Schleuniger reserves the right to redact such copies for reasons of data protection or secrecy reasons.
5. STORAGE OF DATA
As a rule, Schleuniger retains contract related business partner data and partner data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship unless a longer statutory store obligation is applicable on a case-by-case basis, this is required for reasons of proof or another valid reason for an exception is pertinent based on applicable law or the deleting of the data is required earlier (namely because the data is no longer required or Schleuniger is required to delete the respective data).
As a rule, shorter retention periods are applicable for operational data containing business partner data, visitor data and partner data (e.g. protocols, logs).
Business records, including communications, will be retained as long as Schleuniger has an interest in them (namely an interest in reasons of proof in case of claims, documentation of compliance with certain legal or other requirements, an interest in non-personalized analysis) or is obligated to do so (by way of contract, law or other provisions). Deviating legal obligations are reserved namely with respect to anonymization or pseudonymizing.
6. COOKIES, GOOGLE ANALYTICS AND SOCIAL PLUG-INS
In accordance with applicable law, Schleuniger may install coding in newsletters and other marketing email which allow it to determine if the recipient has opened an email or downloaded pictures contained in the email. However, the recipient may block this application in his/her email application. In any case he consents to the application of this technology by way of receiving newsletters on other marketing related emails.
Should Schleuniger place advertisement of third parties on the website (e.g. banners) or intend to place an own ad on the website of a third party, cookies from companies specializing in the use of such advertisement may be employed [used]. Schleuniger will not disclose personal data to such companies, i.e. they shall only place a permanent cookie with users of the website in order to recognize users and do so in the sole interest of Schleuniger. This allows Schleuniger to place aimed advertisements for these individuals on external [third party] websites (e.g. in connection with products for which these individuals showed an interest in the online-shop). Schleuniger will not disclose personal data to the operators of external websites either.
Schleuniger may use Google Analytics or similar services on its website. These applications are third party services which allow Schleuniger to measure and analyze the use of its website. The provider of these services may be located in any country worldwide (in the case of Google Analytics which is operated by Google Inc. it is the U.S., www.google.com). The service provider uses permanent cookies for these applications. Schleuniger will not disclose any personal data to the service provider (who will also not save any IP addresses). The service provider may, however, monitor the use of the website by the user and combine this data with data from other websites monitored by the same service provider which the user has visited and the servicer may use these findings for its own benefits (e.g. control of advertisement). The service provider knows the identity of the user who has registered with the service provider. In this case the processing of personal data will be the service provider's responsibility and data shall be processed according to the data protection policies of the service provider. The service provider will provide data on the use of the website to Schleuniger.
In addition, Schleuniger may use plug-ins from social media networks such as Facebook, Twitter, Youtube, Google+, Pinterest, Instagram or business partners on its website. In the default setting of the website plug-ins are deactivated; the user can thus choose when to activate them. Should the user do so, the social media providers are able to establish a direct connection to the user during his visit on the website, which allows the provider to be aware of the user's visit and may analyze the respective information. The subsequent processing of the personal data will be conducted in the responsibility of the provider and according to his data protection policies. The provider of the respective social media offering will not disclose any information to Schleuniger.
7. RIGHTS OF THE BUSINESS PARTNERS, VISITORS AND PARTNERS
Any affected individual, including any business partner, visitor and partner, may request information from Schleuniger as to whether data concerning them is being processed. In addition, they have the right to request the correction, destruction or restriction of personal data regarding them as well as to object to the processing of personal data. Should the processing of personal data be based on consent, the affected individual may withdraw consent at any time. In countries of the EU and EEA the affected individual may, in certain cases, have the right to obtain data generated during the use of online services in a structured, common and machine-readable format which allows for further use and transfer. Request in this respect shall be submitted to the contact person (see para. 1 supra). Schleuniger reserves the right to restrict the rights of the affected individual in accordance with applicable law and e.g. not to disclose comprehensive information or not to delete data.
Should Schleuniger make an automated decision with respect to a certain individual which may have a legal effect for the affected individual or seriously affect her in a similar way, the affected individual shall have, in accordance with applicable law, the right to communicate with a controller of Schleuniger and to request a reconsideration of the decision or to request the prior evaluation by the controller. In this case the affected individual might no longer be able to use certain automated services. The individual will be informed thereof subsequently or separately in advance.
Any affected individual may also raise a complaint with the competent data protection authority.
8. CHANGES TO THE PRIVACY STATEMENT
Schleuniger is entitled to amend this Privacy Statement at any time and without prior notice or announcement. The latest version according to the website shall be applicable.
Should the Privacy Statement form part of an agreement with business partners and partners, Schleuniger may inform them of an update or amendments by email or in another appropriate manner. The amendments shall be deemed to have been accepted unless an objection is raised within 30 days of notification. In case of objection Schleuniger shall be free to terminate the agreement exceptionally and with immediate effect.
The following provisions shall supplement the provisions of the general part for certain activities of Schleuniger. In the event there is any inconsistency, the following provisions shall prevail the provisions of the general part.
1. CUSTOMER SERVICE
Schleuniger processes personal data in order to fulfill obligations arising out of or in connection with orders, deliveries, installations, fittings, calibration, acceptance (FAT/SAT), warranty claims, service and support, care and maintenance, further enquiries or transfer of information material (newsletters, product information, manuals, events, etc.). Personal data include, but are not limited to name, address, phone number, e-mail, etc. Personal data will only be processed, to the extent necessary or reasonable. Personal data will be stored within the internal customer relationship management system and serves the purposes of product-, customer- and quality control. The transfer of personal data to third parties might be required, but only if necessary or reasonable to render the desired services. The term “third parties” includes, but is not limited to administrative and technical personnel of a distributor or a business or service partner of Schleuniger. The use or processing of personal data for other than the purposes for which the personal data are intended is only performed in compliance with the applicable mandatory provisions or with consent of the data subject.
2. NEWSLETTER AND BANNER ADVERTISEMENT
Schleuniger may send newsletters or other commercial communications in connection with its products and services to business partners. In accordance with applicable law Schleuniger reserves the right to do so without prior consent of existing customers and business partners. In other cases, Schleuniger will send such communications only upon previous request of the business partner (e.g. newsletter opt-in via a website-account). However, the respective customers and business partners may object to a further mailing of newsletters or other commercial communications at any time through their account on the respective website or through the link indicated in every mailing. However, the termination of one newsletter may not entail the termination of other newsletters, as well.
It is possible that personalized advertisement is placed during the visit on the website. Every banner advertisement displayed to the business partner contains products offered on the website which have previously been looked at by the business partner. The advertisement is generated by Schleuniger by the means of cookies (see Section I para. 6 supra).