I. Data protection

We are pleased that you are visiting our website. The protection of your privacy is important to us. Data protection and data security have the highest priority when using our website. With this privacy policy, we would like to inform you about the extent to which your data is processed when you use our website and for what purposes they are used. We also inform you about your rights in this regard.

II. Controller

DATRON AG
In den Gänsäckern 5
64367 Mühltal
Germany
Phone: +49 6151 1419-0
Fax: +49 6151 1419-29
E-mail: datenschutz@datron.de

III. Responsible data protection supervisory authority

[Details of the responsible data protection supervisory authority]

IV. Data Protection Officer

CTM-COM GmbH
Marienburgstraße 27
64297 Darmstadt
Tel.: +49 6151 3942–72
E-Mail: datenschutz@ctm-com.de

V. Rights of data subjects

You have the following rights regarding your personal data:

You also have the right to lodge a complaint with a data protection authority about the processing of your personal data.

To exercise your rights in relation to your personal data, please contact us at {INDICATE PRIVACY E-MAIL ADDRESS OF THE COMPANY}.

Please note that in the event of a request for information, we will retain both the request and the subsequent information for a period of three years as evidence that the information was properly provided.

VI. Withdrawal or objection to the processing of your data

If you have given your consent to data processing, you can Withdraw this consent at any time. Withdrawal affects the lawfulness of the processing of your personal data as soon as you have declared it to us.

If the processing of your personal data is based on a balancing of interests, you have the right to object. This is particularly relevant if the processing is not necessary for the performance of a contract with you, as set out in the

relevant functional description. If you object, we will ask you to explain the reasons why we should not process your personal data as intended. In the event of a justified objection, we will examine the situation and either discontinue or modify the data processing, or we will present you with our compelling reasons worthy of protection that justify further processing.

You can object to the use of your personal data for advertising and analysis purposes at any time.

VII. General information and notes

We hereby inform you about the collection of your personal data when you visit our website. Personal data includes all information that can be directly linked to your person, such as your name, IP address, address, e-mail addresses and user behavior.

When you contact us, we store the data you provide (your e-mail address, possibly your name and telephone number) in order to be able to process your inquiries. As soon as storage is no longer required, this data will be deleted or its processing restricted if statutory retention periods apply.

The processing of this data is based on Art. 6 para. 1 sentence 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR), as we have a legitimate interest in the efficient processing of the requests made to us.

If we use service providers for certain functions of our offer or wish to use your data for advertising purposes, we will inform you here in detail about the corresponding processes. The defined criteria for the storage period are also stated.

SSL or TLS encryption
For security reasons and to protect the transmission of sensitive content, such as orders or inquiries that you
send to us as the site operator, we use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and to the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be
viewed by third parties.

Objection to advertising e-mails
We hereby object to the use of contact data published in the context of the imprint obligation to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

VIII. Use of the website

General

When you use our website purely for information purposes, i.e. without registering or transmitting information on your part, we only collect the personal data that your browser sends to our server. In order to display our website to you and to ensure its stability and security, we collect the technically necessary data. This is done on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

The following data is collected:

Our website not only serves to provide information, but also offers various services that you can make use of. In order to use these services, it is necessary for you to provide additional personal data, which we use to provide the services and to which the aforementioned data protection principles apply.

Data transfer to service providers & partners

We sometimes use external service providers to process your data. These have been carefully selected and  commissioned by us, follow our instructions and are subject to regular review.

It is also possible that we may forward your personal data to third parties if participation in promotions,
competitions, contracts or similar services are carried out in cooperation with partners. You will receive detailed information on this when you provide your personal data or in the description of the offer.
If our service providers or partners are based outside the European Economic Area (EEA), you will be informed of this in the description of the offer.

Data transfers to the USA

There is a current adequacy decision between the EU Commission and the USA called the Data Privacy Framework. This adequacy decision ensures that data can generally be transferred to the USA. However, companies must be certified by the Data Privacy Framework in order to be able to invoke this adequacy decision with regard to a possible data transfer to the USA.

Please also note the additional information on the tools and services we use in our privacy policy regarding the transfer of data to the USA.

Numerous online services and tools use so-called ‘cookies’, which are often associated with the transfer of data to US providers such as Google, Facebook, YouTube, LinkedIn and others. In order to avoid such data transfer to the USA, you should ensure that you do not give the consent requested when you access the website.

IX. Cookies ("Cookie Policy")

What are cookies?

Our website uses so-called cookies to store user-specific data. Cookies are small text files that are stored on your computer by our website and contain certain information about you, such as your language selection or personal page settings. When you visit our site again, your browser sends this user-specific information back to us. This enables our website to recognise you and display your preferred settings. Each cookie contains a name and a value.

Consent to the use of cookies

When you first visit our website, a cookie banner or cookie consent tool will ask you which cookies you wish to allow. Non-essential cookies that are not required for the provision of the website's services are only used after you have given your consent. However, your decision will be stored in a cookie for verification and implementation purposes.

The processing of your personal data by cookies is partly based on our legitimate interest, which is legitimised by Article 6(1) sentence 1(f) of the GDPR. In the case of non-essential cookies, your data will only be processed with your consent in accordance with Article 6(1) sentence 1(a) of the GDPR. The rights to which you are entitled can be viewed at any time in Section V.

By consenting to the use of the respective cookies by US providers such as Google, Facebook, YouTube, etc., you also consent to your data being processed in the USA in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR.

Our information on the tools, plug-ins and services used explains in detail whether cookies are set and what data is stored in them and under what circumstances.

First-party and third-party cookies

There are both first-party cookies and third-party cookies. First-party cookies are set directly by our website, while third-party cookies are created by partner sites or their tools, plug-ins and services, such as Google Analytics. Each cookie must be considered individually as it stores different data. The lifespan of a cookie can range from a few minutes to several years. Cookies are not software programmes and do not contain viruses, Trojans or other malware. Furthermore, cookies cannot access information on your PC.

What types of cookies are there?

These cookies are necessary to ensure the basic functions of the website. For example, when a user places a product in the shopping basket, continues browsing on other pages and only later goes to the checkout. Thanks to these cookies, the shopping basket is retained even if the user closes their browser window.

Although these cookies are not absolutely necessary, they help to improve the functionality of the website. This includes, for example, information such as user names, language selection, previously entered form data, font size and similar.

These cookies, which are also provided by external advertising companies, are used to collect information about the websites visited by the user, for example to generate targeted advertising.

Other cookies collect information about user behaviour on the website, including any error messages, in order to improve the content and structure of the website. They also measure the loading times and behaviour of the website in different browsers.

Browser-side deactivation or deletion of cookies

You have the option of configuring your web browser so that the storage of cookies on your device is generally prevented or that you are asked for permission each time before a cookie is set. Cookies that have already been saved can be removed at any time. You can find the relevant instructions in the help section of your web browser.

The general deactivation of cookies may lead to restrictions in the functionality of this website.

CCM19/Papoo Software & Media GmbH

We use the Cookie Consent Manager CCM19 to manage the consent of visitors to our website to the processing of cookies in accordance with legal requirements. This tool helps us to offer you a transparent and data protection-compliant way to manage your cookie settings and obtain your consent.

Responsible body

The Cookie Consent Manager CCM19 is provided by Papoo Software & Media GmbH, Auguststr. 4 53229 Bonn. Further information about the provider and its privacy policy can be found in the provider's privacy policy.

Purpose of the data processing

CCM19 records and stores the consent or rejection of cookies by the user. This includes:

Processed data

The following data is collected and stored

Legal basis

Your data is processed on the basis of Art. 6 para. 1 lit. c GDPR to fulfil legal obligations and Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in the data protection-compliant and documented management of cookie consents.

Storage duration

The data collected will be stored for the duration of your consent or until you change your settings. The data will be deleted after expiry of the legal obligations to provide evidence.

X. Application procedure

Purpose and legal basis of processing

Your personal data will be processed to establish an employment relationship in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR in conjunction with Art. 88 GDPR. The sole purpose of processing is to assess your suitability, qualifications and professional performance for the position for which you are applying.

We also process your personal data for specific purposes, such as extended storage, provided that you have given us your consent to data processing in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 GDPR.

We may be obliged to process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR. This may be necessary due to various legal obligations, such as the provisions of the German Commercial Code, the German Fiscal Code, the retention obligations for tax-relevant data, the German Social Security Code, the General Equal Treatment Act or other relevant regulations.

Type of data categories processed

As part of the application process, we process personal data that we receive from you, for example through letters of application, CVs, references, correspondence and telephone or personal details.

The following categories of personal data may be affected

Recipients or categories of recipients of the data

Your data is primarily accessed by our HR and accounting department and the specialist department to which you have applied. Our administrators and service providers may access IT-processed data for technical reasons, but are strictly bound by our instructions and may not use the data for their own purposes. In certain situations, it is necessary to pass on your personal data to third parties, for example to our bank for a refund or to the post office when we send you a letter.

It is also possible that third parties may receive data for certain reasons if this is required by law, such as reporting to the Federal Employment Agency as part of a job application.

Duration of data storage

We store your personal data for as long as is necessary to fulfil our contractual obligations and legal requirements during the application process. If your application is successful, your data will be transferred to your personnel file and used for the processing and termination of the employment relationship.

If we are currently unable to offer you employment, we will store your data for up to six months after sending the rejection letter on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in order to protect ourselves against possible legal claims.

As soon as data is no longer required for the fulfilment of contractual or legal obligations, it will be deleted. Exceptions are cases in which statutory retention periods prescribe storage, such as the ten-year periods under commercial and tax law.

We would like to point out that emails are not a secure means of communication. As e-mails are not encrypted, all transmitted information can potentially be intercepted and altered by third parties. If in doubt, please use our applicant portal or protect your data in another way.

onlyfy one (by Xing)

As part of our application process, we use the platform onlyfy one (by XING), a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. There is joint responsibility between us and New Work SE in accordance with Art. 26 GDPR. In the following, we inform you about the processing of your personal data and the main agreements on joint responsibility.

Your personal data is processed via onlyfy one in order to make the application process efficient and to be able to process your application properly. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR (fulfilment of a contract or pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the effective administration and implementation of the application process.

Joint responsibility with New Work SE

In the context of the use of onlyfy one (by XING), there is a joint responsibility between us and New Work SE. This includes the joint use of the platform and the processing of data in the application process.

Essential contents of the agreement in accordance with Art. 26 GDPR:

  1. Responsibilities:
  2. Rights of the data subjects:
  3. Contact point:

Disclosure and order processing

As part of the provision of onlyfy one, New Work SE also acts as a processor in accordance with Art. 28 GDPR. An order processing contract has been concluded with New Work SE.

Your data will only be passed on to third parties beyond this if there is a legal obligation to do so or if you have expressly consented to this.

Your personal data will be stored for the duration of the application process. In the event of a rejection, we will store your data for up to 6 months in accordance with the legal requirements, unless consent has been given for longer storage (e.g. inclusion in a talent pool).

Information on data protection can be found here.

XI. Newsletter

If you subscribe to our newsletter, we will use the necessary data or the information you provide separately to inform you regularly by e-mail about interesting news or special offers.

The legal basis for this is your given consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. We use the data collected exclusively for sending the newsletter.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact address given in the privacy policy or via a link provided for this purpose in the newsletter.

After you unsubscribe, we will delete your e-mail address. This regulation does not apply if you have expressly consented to further use of your data or if we reserve the right to use data beyond what is permitted by law, as explained here.

XII. Analysis tools

Google Analytics

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. For users in the EU, the EEA and Switzerland, the controller is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).

Scope of the processing

Google Analytics uses cookies to analyse your use of our websites. The information collected by cookies about your use of the website is usually sent to a Google server in the USA and stored there.

In Google Analytics 4, the anonymisation of IP addresses is active by default. This means that your IP address will be truncated by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. Google states that the IP address transmitted as part of Google Analytics will not be merged with other Google data.

When you visit our website, the following information is processed in relation to your usage behaviour

Also recorded:

Purposes of the processing

Google will use this information on behalf of the website operator to anonymously analyse your use of the website and to compile reports on website activity. The reports provided by Google Analytics help to analyse the performance of our website.

Recipients

Recipients of the data are/may be

Third country transfer

If data is processed outside the EU/EEA and the level of data protection does not meet the European standard, we have concluded EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is located in California, USA. Therefore, data transfer to the USA and access by US authorities to data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective, where you do not have the same rights as in the EU/EEA. It is possible that you have no legal means of preventing access by the authorities.

Storage period

The data we send that is linked to cookies is automatically deleted after two months. Once the specified retention period has expired, the data is automatically deleted on a monthly basis.

Legal basis

The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 sentence 1 letter a of the GDPR.

Revocation

You have the option to revoke your consent at any time for the future by visiting the cookie settings and adjusting your preferences (see section ‘Cookies’). This does not affect the lawfulness of processing based on consent up to the time of withdrawal.

You have the option of preventing the storage of cookies from the outset by configuring your browser software accordingly. Please note, however, that a complete rejection of cookies can lead to functional restrictions on this and other websites. In addition, you can prevent Google from collecting and processing the data generated by cookies relating to your use of the website (including your IP address) by

Data protection of the provider

You can find Google's privacy policy here. The terms of use for Google Analytics can be found here.

It is possible that data processing by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, takes place. Please note our information on data transfer to the USA.

Google reCAPTCHA

We use the ‘Google reCAPTCHA’ service (hereinafter referred to as ‘reCAPTCHA’) on this website. The provider of this service is Google Ireland Limited (‘Google’), based at Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether the data input on a website, such as in a contact form, is made by a human or an automated programme. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically when the visitor enters the website. reCAPTCHA evaluates various information for the analysis, such as the IP address, the time the visitor spends on the website or the user's mouse movements. The collected data is sent to Google for analysis. The reCAPTCHA analyses take place entirely in the background and visitors are not made aware that an analysis is being carried out.

The processing of data is based on Art. 6 para. 1 lit. f of the GDPR. It is in the legitimate interest of the operator of a website to protect its online services from abusive automated spying and SPAM.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use.

XIII. Marketing tools

Google Ads Conversion Tracking

We use Google Ads as an online marketing strategy to promote our products and services. Our aim is to generate more attention on the Internet for the high quality of our offers and to customise our advertising to your interests and needs. We use Google Ads for conversion tracking on our website. In Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.

Google Ads, formerly known as Google AdWords, is the proprietary online advertising programme of Google Inc. We firmly believe in the quality of our offering and want as many people as possible to discover our website. At the same time, it is important to us to carry out a precise cost-benefit analysis of our advertising measures. That is why we use the Google Ads conversion tracking tool.

A conversion occurs when an interested website visitor takes an action. This happens when the visitor clicks on an advert and then performs an action, such as visiting our website. Google's conversion tracking tool tracks the activities that take place after clicking on our Google Ads advert. This makes it possible to determine whether purchases are made, services used or newsletter subscriptions concluded.

We also use Google Ads to advertise our offers on other websites. Our aim is to ensure that our advertising campaigns reach the people who are interested in our offer. The conversion tracking tool enables us to recognise which keywords, ads, ad groups and campaigns lead to the desired customer actions. It shows us how many customers interact with our adverts and subsequently make a conversion. This data helps us to calculate our return on investment, evaluate the success of our advertising campaigns and refine our online marketing strategies. In addition, this information enables us to make our website even more appealing and to tailor our advertising offers even better to your needs.

If you carry out an action on our website, Google records this as a conversion via a cookie. As long as you remain on our site and the cookie is active, both we and Google know that you came to us via a Google Ads advert. The cookie is then read and the conversion data is sent back to Google Ads. Other cookies can also be used to record conversions. Google Analytics can be used to further optimise Google Ads conversion tracking.

We would like to point out that we have no influence on the further use of the data collected by Google. Google states that the data is encrypted and stored on secure servers. Conversion cookies usually expire after 30 days and do not contain any personal information. The cookies named ‘Conversion’ and ‘_gac’ used in conjunction with Google Analytics have a lifespan of three months.

You can choose not to participate in Google Ads conversion tracking. If you deactivate the conversion tracking cookie in your browser, tracking will be prevented. You will then not be recorded in the statistics of the tracking tool. You can adjust the cookie settings in your browser at any time, whereby the procedure varies depending on the browser.

The legal basis for the processing of your data is the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can find more information on this in the ‘Cookies’ section.

Data protection of the provider:

Google's privacy policy can be found here.

It cannot be ruled out that data may be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

Remarketing

We use the ‘Google Remarketing’ application to keep in touch with you. This technology enables our adverts to be presented to you while you are browsing the internet after you have visited our website. This is realised by cookies that are stored in your browser and that track your surfing behaviour on various websites, which are then evaluated by Google.

Google is able to identify your previous visit to our website. However, according to Google, the data collected for remarketing is not merged with any personal data that Google may store. Google relies on pseudonymisation, especially for remarketing campaigns.

Facebook Custom Audiences

Our website uses the remarketing function ‘Custom Audiences’ from Facebook Inc (‘Facebook’) to offer visitors on Facebook or other websites that support this function targeted advertising (‘Facebook Ads’). Our aim is to present you with adverts that are relevant to you and thus improve your online experience.

By using certain marketing tools, your browser automatically establishes a connection to the Facebook server. We cannot control the extent of the data that Facebook collects or how it is further used. Therefore, we inform you based on our knowledge: With the integration of Facebook Custom Audiences, Facebook learns that you have visited our website or clicked on one of our adverts. If you are logged in to a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or logged in, the provider can still collect and store your IP address and other identification features.

You can deactivate the ‘Facebook Custom Audiences’ function here.

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f of the GDPR.

Further information on data processing by Facebook can be found here.

XIV. Other tools

Google Tag Manager

Google Tag Manager integrates so-called tags - relevant information such as code snippets or pixels for other tools - into a website. This is done by embedding a container with a unique container ID on the website. All relevant information of the tools used is stored within this container.

Additional tools are implemented via the Tag Manager user interface. The Tag Manager serves as a central interface to activate or deactivate all tools. The Google Tag Manager triggers other tools by collecting relevant information and forwarding it to the integrated tools. However, the collected data is not processed by the Tag Manager itself; it is only sent to the relevant tool. Once deactivated at domain or cookie level, this applies to all tracking tags implemented with the Google Tag Manager.

The use of the Tag Manager is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which enables efficient management of the various tools on the website.

Data protection of the provider:

You can find Google's privacy policy for this tool here

You can find Google's privacy policy here

There is a possibility that data processing may be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfer to the USA.

Google Web Fonts (local hosting)

This website uses so-called web fonts provided by Google for the consistent display of fonts. The Google fonts are stored locally so that no connection to Google servers is established.

Further information on Google Web Fonts can be found here and in Google's privacy policy.

XV. Integration of map services

Google Maps

On this website we use Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This enables us to present you with interactive maps directly on the website and makes it easier for you to use the map function.

In order to be able to offer Google Maps in full, the company collects and stores certain data from you. This includes your search queries, IP address and geographical coordinates. This data is stored on the Google Maps servers. We can only inform you about this, but cannot influence it. By integrating Google Maps on our website, Google places a cookie (name: NID) in your browser that stores information about your use. Google uses this information mainly to optimise its services and to offer you personalised advertising.

The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a of the GDPR. Further information on this can be found in the ‘Cookies’ section above.

It cannot be ruled out that data will be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's terms of use here and in the terms and conditions for Google Maps.

There you will also find further information on your rights in this regard and setting options to protect your privacy.

XVI. Integration of video services

YouTube

YouTube videos are integrated into our online offering, which are stored on YouTube and can be played directly via our website. All of them are embedded in ‘extended data protection mode’, which means that no data about you as a user is sent to YouTube until you start the videos. The data transfer only begins when the videos are played and we have no influence on this process.

When you visit one of our websites with an embedded YouTube video, YouTube places at least one cookie that stores your IP address and the URL of our site. If you are logged in to your YouTube account, YouTube can often assign your interactions on our site to your account via cookies. This includes data such as time spent on the site, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Additional data may include contact information, ratings, sharing content on social media or adding to your YouTube favourites. To prevent this, you should log out of YouTube before visiting our website or adjust the relevant settings in your YouTube account.

If you are not logged into a Google or YouTube account, Google will still store data with a unique identifier that is assigned to your device, browser or app. This makes it possible to maintain your preferred language setting. However, the storage of a lot of interaction data is limited as fewer cookies are used.

The legal basis for the processing of your data is the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can find more information on this in the ‘Cookies’ section above.

YouTube permanently stores cookies in your Internet browser on your end device for functionality and analysis of user behaviour. If you do not agree to this processing, you can prevent the storage of cookies by making the appropriate settings in your Internet browser.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy.

It cannot be ruled out that data will be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

Vimeo

We use videos from Vimeo on our website. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. A plug-in enables us to provide you with exciting video material directly on our website. Please note, however, that personal data may be transmitted to Vimeo.

When you visit a website that contains a Vimeo video, your browser establishes a connection to the Vimeo servers, which leads to a data transfer. Vimeo collects, stores and processes this data on its servers. Vimeo collects data from you, regardless of whether you have an account or not. This includes your IP address, technical information about your browser, your operating system and basic device information. Vimeo also stores information about which website you use the Vimeo service on and what actions you perform there, such as the duration of your session or which buttons you click on the website. Vimeo can track and store these actions using cookies and similar technologies.

If you are logged in to Vimeo as a registered member, it is possible that more data will be collected, as several cookies may already be present in your browser. In addition, your activities on our website will be directly linked to your Vimeo account. To avoid this, you should log out of Vimeo while visiting our website.

Our aim is to provide you with the best possible content in the easiest possible way. We are only satisfied when we have achieved this goal. Vimeo allows us to offer high quality content directly on our website. Instead of just sending you a link to an interesting video, we allow you to view the video directly on our site. This enhances our service and simplifies your access to exciting content. In this way, we supplement our texts and images with high-quality video content.

The legal basis for the processing of personal data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can find more information on this in the ‘Cookies’ section.

Further information on the purpose and scope of data collection and its processing by Vimeo can be found in Vimeo's privacy policy and here regarding cookies.

Please note our information on data transfers to the USA.

XVII. Use of Social Media

General information

We operate publicly visible profiles on various social networks. A list of the networks we use can be found below.

Social networks are able to comprehensively analyse your user behaviour as soon as you visit a website with integrated social media elements such as like buttons or advertising banners. Visiting a social media profile can trigger numerous processes relevant to data protection.

Personal data

If you are logged into your social media account and visit our profile, the operator of the portal can assign the visit to your account. Even if you are not logged in or do not have an account, your personal data may be collected, for example through cookies on your device or the collection of your IP address.

The operators of social media platforms can use the collected data to create user profiles that contain your preferences and interests. This makes it possible to present you with adverts that are tailored to your interests, both within and outside your social media profile. If you have an account with the relevant social network, adverts tailored to your interests may appear on all devices you are or have been logged into.

Please note that we cannot track all processing operations of the social media portals. Depending on the provider, additional processing operations may be carried out by the operators of the portals. For details, please refer to the terms of use and privacy policies of the relevant social media portals.

Reference to risks

Please note that user data may be processed by the respective providers outside the territory of the European Union. This may entail risks for users as, for example, it may be more difficult to enforce their rights. In the case of US providers who guarantee a secure level of data protection through EU standard contractual clauses, it is pointed out that they undertake to comply with the data protection standards of the EU.

Please note our information on data transfers to the USA.

Purpose of processing/legal basis

The processing of personal data on our social media platforms is based on our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Our aim is to provide information about our services, to make posts more appealing, to determine the best time to publish them and to communicate with active customers, interested parties and users. However, we have no influence on any further processing by the platform operators.

The legal basis for setting the aforementioned cookies is the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can find more information on this in the ‘Cookies’ section or under ‘Social media plugins’.

Shared responsibility

If you visit one of our social media profiles, such as on Facebook, we are jointly responsible with the platform operator for the data processing operations that take place during your visit.

Please be aware that, despite sharing responsibility with the operators of the social media portals, we do not have complete control over the data processing operations of these portals. Our options for action are largely dependent on the corporate policy of the respective provider.

Exercising rights

In principle, you can assert your rights both against us and against the operator of the respective social media portal.

However, we would like to point out that concerns can be most effectively raised directly with the operators. They are the only ones who have access to the user data and can therefore take immediate action and provide information. If you still require support, we are of course at your disposal.

Storage period

The data that we collect directly via your social media profile will be deleted from our systems as soon as the purpose of storage no longer exists, you request deletion, withdraw your consent to storage or the purpose of storage no longer applies. Cookies stored on your end device are retained until you delete them. Binding legal regulations, in particular retention periods, remain unaffected by this.

We have no influence on the duration of the storage of your data, which is retained by the operators of social networks for their own purposes. For further details, please enquire directly with the operators of the social networks (e.g. in their privacy policy, see below).

Data protection of the providers

For a detailed description of the various processing methods and the options to object (opt-out), please refer to the privacy policies and information provided by the operators of the respective social networks, over which we have no control and which, when using the social networks, are subject to data protection regulations.

XVIII. Existing social media profiles

Facebook

Own profile: https://www.facebook.com/people/DATRON-AG/100063359790328/

Service provider: Facebook Ireland Ltd, also Facebook Inc, 1601 Willow Road, Menlo Park, California 94025, USA;

Website of Facebook

Privacy policy of Facebook

‘Insights data’

When you use our Facebook fan page, we receive statistical data of various categories, known as ‘Insights data’. We can retrieve and analyse this data. Page Insights are aggregated data that give us insights into how users interact with our page. They include the total number of page views, ‘likes’, activities on the page, interactions with posts, video views, the reach of posts, comments, shared content, replies, the distribution of men and women, information on origin by country and city, language, views and clicks in the shop, clicks on the route planner and telephone numbers.

Further information on ‘Insights data’, including how to exercise your rights, can be found here.

Joint responsibility

According to Art. 26 GDPR, the fan page operator and Facebook are jointly responsible.

A corresponding agreement has been concluded with the fan page operators (available here)

Facebook bears the primary responsibility under the GDPR for the processing of Insights data and fulfils all obligations under the GDPR with regard to the processing of this data (including Art. 12 and 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR).

You can contact Facebook's data protection officer via Facebook's general contact form.

Instagram

Own profile: https://www.instagram.com/datron.ag/

Service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA;

Website of Instagram

Privacy policy of Instagram

LinkedIn

Own profile: https://www.linkedin.com/company/datron-ag

Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;

Website of LinkedIn

LinkedIn privacy policy

Option to object (opt-out) for LinkedIn

YouTube

Own profile: https://www.youtube.com/user/DATRONAG

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA;

Website of YouTube

YouTube privacy policy

Xing / Kununu

Own profile Xing: https://www.xing.com/pages/datronag 

Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany;

Own profile Kununu: https://www.kununu.com/de/datron

Website of Xing

Privacy policy of Xing

XIX. Notes on linking social media profiles

Linking social media profiles via graphic or text link

Our website also contains links to social media profiles of the aforementioned platforms. These are integrated as linked graphics or text links. This type of linking prevents an automatic connection being established with the platform's server when a web page containing a social media link is called up in order to display a graphic from the platform. The user is only redirected to the service of the corresponding platform when they click on the graphic.

After redirecting the user, the respective provider collects information about the user. It cannot be ruled out that the data collected will be processed in the USA.

Please note our information on data transfers to the USA.

The data initially collected includes the IP address, the date, the time and the page visited. If the user is logged into their account on the platform in question at the same time, the operator may assign the information collected from the specific visit to the user's personal account. If the user uses the platform's ‘Share’ button, this information could be stored in their personal account and possibly published. To prevent the collected data from being directly assigned to their account, they should log out before clicking on the graphic. The user can also set their account to prevent such an assignment.

XX. Webshop

Use of our webshop

In order to place an order in our webshop, it is necessary for you to provide your personal data for the conclusion of the contract, which we need to process your order. Mandatory fields that are required for contract processing are clearly labelled, all other information is optional.

Your personal data will only be passed on to third parties if this is necessary for processing the contract, for example to the companies responsible for delivering the goods or to the credit institution responsible for processing payments. The data will not be passed on beyond this unless you have expressly consented to the transfer. Your data will not be passed on to third parties for advertising purposes without your express consent.

As part of the processing of the existing purchase contract between you and us and for the delivery of the ordered goods, we will pass on your e-mail address and telephone number to the selected shipping service provider. This enables us to coordinate the delivery details directly with you.

You can object to the forwarding of your data at any time by sending a message to {insert company's data protection email address} or by contacting the shipping service provider directly using the contact details provided to revoke your consent for the future.

After your cancellation, the data provided will be deleted unless you have expressly consented to a different use or we reserve the right to further use the data as permitted or required by law, about which we will inform you in this declaration.

Cancellation means that the goods you have ordered cannot be delivered by our shipping service providers.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. After two years, however, we restrict the processing of your data so that it is only used to fulfil legal obligations.

To prevent unauthorised access by third parties to your personal data, especially your financial data, the ordering process is encrypted using TLS technology.

You have the option of creating a customer account, which allows us to store your data for future purchases. The data entered when creating an account under ‘My account’ will be stored until cancelled. You can delete all data, including your user account, at any time in the customer area.

Furthermore, we are able to use the data you provide to inform you about new products from our range or to send you technical information by e-mail.

Shopware eCommerce software

Our online shop uses the Shopware eCommerce platform, which places cookies in your browser to ensure essential shop functions. These cookies are essential for the shopping basket, login status and CSRF protection. Without these cookies activated, Shopware cannot operate. Only IDs are stored, the assignment to the respective information takes place at the application level.

The Shopware session cookie plays a central role by determining whether there is an active shopping basket and whether the user is logged in. It serves as a unique identifier between the user's browser and the server, whereby it only stores the session ID. The management of these session cookies is realised on the server side by PHP and is therefore independent of Shopware.

Shopware also generates an individual CSRF cookie as soon as you enter the shop to enable you to use the various shop areas.

An SLT cookie is also set up to recognise you when you log in to our online shop again, even if the session has already expired. This cookie can be deactivated in your browser settings.

When you add a product to the notepad, a cookie called ‘sUniqueID’ is created to store the contents of the notepad, which are stored in the database table s_order_notes. Further details can be found in the ‘Cookies’ section of our privacy policy.

Information about the ‘last viewed articles’ is also stored in your browser's local storage.

XXI. Credit assessment and scoring

Information on credit checks and scoring

In the case of prepayment, for example when purchasing on account, we may consider a credit check to protect our legitimate interests. This is based on mathematical-statistical procedures and is carried out by {insert name of service provider}. For this purpose, we transmit the necessary personal data for the credit check to {insert name of service provider} and use the information on the statistical probability of a payment default to make a well-considered decision on the establishment, processing or termination of the business relationship.

The creditworthiness information may contain score values that are calculated using scientifically recognised mathematical-statistical methods and whose calculation includes address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions.