Privacy statement

In the following we would like to inform you about our handling of your personal data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Index

  1. 1. Person responsible
  2. 2.  General data processing in the operation of our websites
  3. 2.1. Usage data
  4. 2.2. Consent Management with Cookie First Consent Management Platform
  5. 2.3. Use of cookies and similar techniques
  6. 2.4. Google Tag Manager
  7. 2.5. Google Analytics
  8. 2.6. Google Ads Conversion Tracking and Remarketing
  9. 2.7. Google Marketing Platform (formerly Google DoubleClick)
  10. 2.8. LinkedIn Conversion Tracking and Retargeting (Insight Tag)
  11. 2.9. SalesViewer
  12. 2.10. Hotjar
  13. 2.11. Google reCAPTCHA
  14. 2.12. Google Maps
  15. 2.13. Google Web Fonts
  16. 2.14. Video platform YouTube
  17.  2.15 Google Photos
  18. 2.16 Provision of external scripts, fonts and other content from the content delivery network Gstatic
  19. 3.  Customer data management and provision of content
  20. 3.1. Download of whitepapers / registrations for webinars / webcasts / live events
  21. 3.2. Newsletter, implementation of email marketing and email tracking
  22. 3.4. Contact form
  23. 3.4. Recipients / categories of recipients
  24. 4.  Enquiries and contact by mail, telephone, fax and e-mail
  25. 5.  Postal or telephone contact by sales
  26. 6.  Further data processing
  27. 6.1. Data protection compliance documentation
  28. 6.2. Data processing for the assertion, exercise or defence of legal claims
  29. 6.3. Data processing for compliance with another legal obligation
  30. 6.4. Data transfer to autonomous third parties in case of company restructuring
  31. 7.  Recipients of your data
  32. 8.  Storage period
  33. 9.  Voluntariness of the provision of your data
  34. 10.  Your Rights
  35. 10.1. Right of access (Art. 15 GDPR)
  36. 10.2. Right of rectification (Art. 16 GDPR)
  37. 10.3. Right to erasure (Art. 17 DSGVO)
  38. 10.4. Right to restriction of processing (Art. 18 GDPR)
  39. 10.5. Right to data portability (Art. 20 GDPR)
  40. 10.6. Right to object (Art. 21 DSGVO)
  41. 10.7. Right of withdrawal (Art. 7 para. 3 p. 1 DSGVO)
  42. 10.8. Right of complaint to a supervisory authority (Art. 77 GDPR)
  43. 11.  Contact details of the data protection officer
  44. 12.  Amendment of this Privacy Policy

1. Person responsible

The person responsible for the data processing presented below is

Baumüller Nürnberg GmbH
Ostendstraße 80-90
90482 Nürnberg
Germany

Phone:  +49 (0)911 / 5432-0
Fax:  + 49 (0)911 / 5432-130

Email: datenschutzbeauftragter@baumueller.com

2.  General data processing in the operation of our websites

2.1. Usage data

Purposes and scope of data processing / legal basis:

When you visit our websites, so-called usage data is temporarily processed on our web server in order to technically enable you to call up our websites.

This data record consists of

  • the name and address of the requested content,
  • the date and time of the request,
  • the amount of data transferred,
  • the access status (content transferred, content not found),
  • the description of the web browser and operating system used, including details of the language used,
  • the referrer address, which indicates the page from which you reached ours,
  • the IP address of the requesting terminal device.

Your usage data will be stored and analysed in a log for statistical purposes and to improve the quality of our websites as well as to detect, prevent and track attacks.

If we use technically required cookies and similar techniques in the context of integrating the service, this is done in accordance with § 25 Abs. 2 TTDSG. Subsequent data processing is carried out on the basis of Art. 6 para. 1 p. 1 lit.  f DSGVO in our legitimate interests to be able to provide you with an appealing and functional website as well as to be able to guarantee the security and freedom from interference of our websites and the data processing taking place on them.

 Receivers / categories of recipients:

We transmit your data to processors who support us in the operation and administration of our websites and the associated data processing within the framework of commissioned processing pursuant to Art. 28 DSGVO and who are strictly bound by instructions and contractually obligated to us accordingly:

  • Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany
  • Baumüller Corporate Services GmbH & Co. KG, Ostendstraße 80-90, 90482 Nürnberg, Germany
  • COOLCAT creations, Obere Herrngasse 9, 74523 Schwäbisch Hall, Germany
  • Gridfactor, Allersberger Str. 90, 90461 Nuremberg, Germany

Storage duration / criteria for determining the storage duration:

The full IP address of the requesting end device is regularly stored for a period of 7 days, strictly for a specific purpose, in the interest of being able to detect, limit and eliminate attacks on our websites. In the case of attacks on our websites, the IP address is stored in individual cases beyond this, insofar as this is necessary for the purpose of criminal prosecution, assertion, exercise and defence of legal claims.

After this period has elapsed, we anonymise your IP address by shortening it so that it is no longer possible to establish a personal reference with regard to all usage data.

2.2. Consent Management with Cookie First Consent Management Platform

Purposes and scope of data processing / legal basis:

On our websites, we use the consent management platform "Cookie First" of Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, The Netherlands, with the help of which we manage your consents to the use of cookies and similar techniques.

To the extent that we use optional cookies and similar technologies in the context of the integration of the service or to the extent that data is stored in or read from your terminal device by the service, this is done in accordance with Section 25 (2) TTDSG. Subsequent data processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest are to be able to use cookies and similar technologies on our websites in a data protection compliant manner and to enable you to easily revoke your declarations of consent.

When you provide consent via our consent management platform, Digital Data Solutions BV processes the following data:

  • the IP address of the requesting computer,
  • the description of the web browser and operating system used,
  • the address of the website from which your consent was sent
  • the date and time of consent,
  • a pseudonymous and encrypted consent key (consent ID).
  • Your consent status, which serves as proof of your consent.

This data is logged on the servers of Digital Data Solutions BV. Your IP address is anonymised in such a way that it is no longer possible to establish a personal reference.

This enables our websites to check your consent status for all subsequent and future page views and, depending on your decision to use cookies and other technologies, to be able to activate or deactivate them when you return to the site.

The verification is done by comparing the consent key and consent status from the cookies "cookiefirst-id", "cookiefirst-consent" and, if applicable, from the cookie "cf-bulk-consent" with the values provided to Digital Data Solutions BV when you gave your consent to ensure that the status of your original consent has not changed.

You can change or revoke your consent at any time by accessing "Cookie First" again via the fingerprint icon at the bottom left of the web pages.

For more information about Digital Data Solutions BV's handling of personal data, please visit https://cookiefirst.com/legal/privacy-policy/.

Recipients / Categories of Recipients:

We transfer your data as part of a commissioned processing pursuant to Art. 28 DSGVO to Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH Amsterdam, The Netherlands, which is strictly bound by instructions to us and contractually obligated accordingly, and which supports us in the operation of "Cookie First" and the related processes.

Storage period / criteria for determining the storage period:

Your consent ID and consent status are also stored both in the browser of your terminal device in the cookies "cookiefirst-id", "cookiefirst-consent" and, in the case of cross-website consents, also in the cookie "cf-bulk-consent" and on the servers of Digital Data Solutions BV for a period of 3 months.

2.3. Use of cookies and similar techniques

The following is our notice and explanation of the use of cookies and similar techniques on our websites.

The content is automatically displayed as a script via our "Cookie First" consent management platform. For proper display and function, your browser must be set so that script content can be loaded. You can also access our consent management platform separately via the fingerprint icon at the bottom of the page.

Below you will find detailed information on the cookies and similar techniques we use in the categories "Necessary", "Performance", "Functional" and "Advertising/Tracking". You will find information on the name, purpose description, domain name, provider, expiry of the validity of the cookie or technique and, where applicable, information on transmission to third countries.

 
This Cookie Policy has been created and updated by CookieFirst.com.

2.4. Google Tag Manager

Purposes and scope of data processing / legal basis:

On our websites, we integrate the "Google Tag Manager" service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), Google Tag Manager is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

"Google Tag Manager" is a tag management system (TMS) that enables us to integrate and manage additional website content in Java Script or HTML code.

In particular, so-called tags can be integrated and managed on our website. Tags are small code fragments or markers (web beacons, tracking pixels or similar markers) that enable services for website analysis or user tracking to distinguish or identify users.

The analysis of website visits or user tracking is not carried out by the "Google Tag Manager", but by the services used for these purposes, such as "Google Analytics" or other third-party solutions. Rather, the "Google Tag Manager" merely serves to integrate and manage the tags on our websites that are necessary for the analysis or tracking.

Since the "Google Tag Manager" is provided by Google and is reloaded from its servers when a page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

If we use optional cookies and similar technologies in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 2 TTDSG. Subsequent data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest is to efficiently manage our website content.

Data processing in third countries:

When using the "Google Tag Manager", your data may also be processed in states outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without you being informed or being able to seek legal redress.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transmit your data within the scope of the use of the "Google Tag Manager" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating the "Google Tag Manager" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

We do not store the collected data separately.

2.5. Google Analytics

Purposes and scope of data processing / legal basis:

On our websites, we integrate the "Google Analytics" service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google Analytics" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which supports us as a processor in accordance with Art. 28 DSGVO.

"Google Analytics" creates usage profiles based on pseudonyms (recognition features from cookie and device ID and further data on the end device used or the so-called browser fingerprint) and usage data (e.g. name and address of the website content requested by your browser, referral links, description of the web browser and operating system used as well as the IP address of the requesting end device).

Demographic data, such as age, gender and interests of the users, as well as interactions, such as button clicks, scroll depth, as well as the use of filtering and search functions are also collected, analysed and merged with already existing pseudonymous data.

To this end, cookies and similar technologies, in particular JavaScript, are used to store and read data on your terminal device. Details on the cookies and similar techniques used can be found above under "Use of cookies and similar techniques".

This enables us to recognise returning visitors, count them as such and assign them to specific demographic target groups or customer segments. We subsequently use these insights to place target group-oriented online advertising measures and marketing campaigns in advertising networks, especially in Google advertising services.

With regard to the processing of your IP address, "Google Analytics" has been configured by us in such a way that it is shortened within the EU by the function "_anonymizeIp()" before being transmitted to the Google servers in the USA.

If we use optional cookies and similar technologies in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using "Google Analytics", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without informing you or allowing you to seek legal redress.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Receivers / categories of recipients:

We transmit your data within the scope of the use of "Google Analytics" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google Analytics" on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 26 months.

2.6. Google Ads Conversion Tracking and Remarketing

Purposes and scope of data processing / legal basis:

On our websites we integrate the services "Google Ads Conversion Tracking" and "Google Ads Remarketing" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google Ads Conversion Tracking" and "Google Ads Remarketing" are offered as services by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If an advertisement placed by us via "Google Ads" is displayed to you on other websites or you click on it, these other websites store a "Google Ads Conversion Tracking" cookie with a pseudonym assigned to us in your terminal device on the basis of your consent given there.

If you subsequently visit our websites within the storage period of this cookie, this cookie as well as your usage data will be read by "Google Ads Conversion Tracking" by means of a pixel and JavaScript code on our websites.

This enables Google to determine that you have been shown an advertisement placed by us or that you have clicked on it and subsequently visited our websites and, if applicable, how you have subsequently used our websites.

The conversion of an advertisement into an action by the website visitor is known as a conversion.

From this information, Google creates statistics for us, from which we can see how many users have responded to our advertisements and in what way. Based on these statistics, we can optimise the effectiveness of our advertising and control our advertising strategy.

In particular, Google enables us to create target groups for "Google Ads Remarketing" (target group-oriented advertising) on the basis of this data and to address them specifically via Google Ads advertisements.

If we use optional cookies and similar techniques in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using "Google Ads Conversion Tracking", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without you being informed or having legal recourse.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Receivers / categories of recipients:

We transmit your data within the scope of the use of "Google Ads Conversion Tracking" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google Ads Conversion Tracking" on our websites, data is transmitted to the above-mentioned recipients and stored there for a period of 90 days.

2.7. Google Marketing Platform (formerly Google DoubleClick)

Purposes and scope of data processing / legal basis:

On our websites we use the "Google Marketing Platform" (formerly Google DoubleClick) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), the "Google Marketing Platform" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland.

We use the "Google Marketing Platform" to optimise our online advertising activities.

To this end, cookies and similar technologies, in particular JavaScript, are used to store and read data on your terminal device. Details of the cookies and similar techniques used can be found above under "Use of cookies and similar techniques".

We also use data to optimise our online advertising activities.

Data that has already been collected and processed via "Google Analytics" is also processed further.

To the extent that we use optional cookies and similar techniques in the context of the integration of the service or to the extent that data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using the "Google Marketing Platform", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without informing you or allowing you to seek legal redress.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transfer your data within the scope of the use of the "Google Marketing Platform" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating the "Google Marketing Platform" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

2.8. LinkedIn Conversion Tracking and Retargeting (Insight Tag)

Purposes and scope of data processing / legal basis:

On our websites, we integrate the "LinkedIn Conversion Tracking" service of LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.

In the European Union (EU) and the European Economic Area (EEA), "LinkedIn Conversion Tracking" is offered as a service by LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2,, Ireland.

If an advertisement placed by us via LinkedIn is displayed to you on other websites or you click on it, these other websites store a "LinkedIn conversion tracking" cookie with a pseudonym assigned to us in your end device on the basis of your consent given there.

If you subsequently visit our websites within the storage period of this cookie, this cookie and your usage data will be read by "LinkedIn Conversion Tracking" by means of a pixel and JavaScript code (so-called "LinkedIn Insight Tag") on our websites. The following data is processed in the process:

  • the name and address of the requested content,
  • the date and time of the request,
  • the description of the web browser and operating system used, including details of the language used,
  • the referrer address, which indicates the websites from which you have reached ours,
  • the IP address of the requesting computer,
  • your interactions with our websites (e.g. content and events clicked on, forms completed, frequency of response).

IP addresses of website visitors are shortened by LinkedIn so that a personal reference can no longer be established.

If website visitors are also members of LinkedIn, the user ID is also processed. IP addresses of members are not shortened but hashed in order to enable cross-device tracking. In addition to the user ID, demographic data such as the member's job title, company, industry are also processed.

This enables LinkedIn to determine that you have been shown an advertisement placed by us or that you have clicked on it and subsequently visited our websites and, if applicable, how you have subsequently used our websites.

The conversion of an advertisement into an action by the website visitor is known as a conversion.

From this information, "LinkedIn Conversion Tracking" creates statistics for us, from which we can see how many users have responded to our advertisements and in what way.

On the basis of these statistics, we can optimise the effectiveness of our advertising and control our advertising strategy. In particular, LinkedIn enables us to create target groups for "LinkedIn Retargeting" (target group-oriented advertising) on the basis of this data and to address them via LinkedIn advertisements.

If we use optional cookies and similar technologies in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using "LinkedIn Conversion Tracking", your data may also be processed in states outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without you being informed or having legal recourse.

To ensure an adequate level of data protection when transferring your data to LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA, standard contractual clauses of the European Commission pursuant to Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO have been concluded and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Receivers / categories of recipients:

We transmit your data to the following recipients in the context of the use of "LinkedIn Conversion Tracking":

  • LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland,
  • LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.

We have no influence on any further data processing by the third-party provider.

For more information on LinkedIn's handling of personal data, please visit https://www.linkedin.com/legal/privacy-policy.

Storage period / criteria for determining the storage period:

By integrating "LinkedIn conversion tracking" on our websites, data is transmitted to the above-mentioned recipients and stored there.

IP addresses of website visitors are shortened by LinkedIn so that a personal reference can no longer be established. For LinkedIn members, IP addresses are not shortened, but are hashed to enable tracking across devices. Members' direct identifiers are removed within seven days to pseudonymise the data. This remaining pseudonymised data is then deleted within 90 days.

2.9. SalesViewer

Purposes and scope of data processing / legal basis:

On our websites, we integrate the "Salesviewer" service of SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany.

When using "Salesviewer", a javascript-based tracking code is integrated on our web pages, with the help of which the following company data is processed:

  • Name, origin and industry of the visiting company
  • Referrer address of the visiting company
  • Keywords
  • Your interactions with our websites (e.g. websites visited, time of visit, duration of visit)

No cookies or similar files are stored on the end devices of the website visitors.

On the contrary, only the IP address of the website visitor is encrypted by Salesviewer via a non-reversible one-way function (so-called hashing) and, after a pre-selection, via which accesses from IP addresses of private individuals are filtered out, pseudonymised and transmitted to Salesviewer. The pseudonymised data is compared with a database restricted to company-related data.

In so far as company-related accesses can be identified within the scope of this procedure, corresponding company-related data of the website visitors are made available to us by Salesviewer via a secure and encrypted login area, on which it is also possible for us to research further generally accessible data (e.g. address and contact data) about the visiting companies.

If we use optional cookies and similar technologies in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 2 TTDSG. Subsequent data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest are to conduct market research in order to identify companies as potential business partners and to use these findings to optimise our marketing measures.

You can object to the data processing by "Salesviewer" at any time with effect for the future by deactivating further data processing at https://www.salesviewer.com/opt-out in order to prevent the collection by "Salesviewer" within our website in the future. Clicking on the link will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.

Receivers / categories of recipients:

We transmit your data within the scope of commissioned processing pursuant to Art. 28 DSGVO to SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany, which is strictly bound by instructions and contractually obligated to us accordingly and supports us in the operation of "Salesviewer" and the related processes.

Storage period / criteria for determining the storage period:

Data collected through the use of "Salesviewer" on our websites will only be stored for as long as is necessary to achieve the aforementioned purpose.

2.10. Hotjar

Purposes and scope of data processing/legal basis:

On our websites we integrate the service "Hotjar" of Hotjar Ltd, Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, which supports us as a processor according to Art. 28 DSGVO.

"Hotjar" uses cookies and other technologies to collect data about the behaviour of our users and their devices. This includes a device's IP address (which is processed during your session and stored in anonymised form), device screen size, device type (unique device identifiers), browser information, geographical location (country only) and the preferred language in which our website is displayed. "Hotjar" stores this information on our behalf in a pseudonymised user profile.

To this end, cookies and similar techniques are used to store and read data on your terminal device. Details on the cookies and similar techniques used can be found above under "Use of cookies and similar techniques".

This enables us to recognise returning visitors, count them as such and assign them to specific demographic target groups or customer segments. We subsequently use these insights to place target group-oriented online advertising measures and marketing campaigns in advertising networks, in particular in Google advertising services.

If we use optional cookies and similar techniques in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using "Hotjar", your data may also be processed in states outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having any legal recourse.

To ensure an adequate level of data protection when transferring your data to the

  • Baumueller-Nuermont Corp, 1555 Oakbrook Drive Suite 120, 30093 Norcross, USA

we have agreed to these standard contractual clauses of the European Commission pursuant to Art. 46 para. 2 lit. c, para. 5 S.  2 GDPR in connection with further technical measures and will replace them in the future by standard data protection clauses of the European Commission pursuant to Art. 46 Para. 2 lit. c GDPR.

With regard to a transfer of your data to the

  • Kula Partners, 1741 Brunswick Street, Penthouse, Halifax, NS B3J 3X8, Canada

an adequate level of data protection in Canada was established by the adequacy decision of the European Commission of 20.12.2001 within the meaning of Art. 45(3) of the GDPR.

Receivers / categories of recipients:

We transmit your data within the scope of the use of "Hotjar" to the following recipients:

  • Hotjar Ltd, Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta
  • Baumueller-Nuermont Corp, 1555 Oakbrook Drive Suite 120, 30093 Norcross, USA
  • Kula Partners, 1741 Brunswick Street, Penthouse, Halifax, NS B3J 3X8, Canada

Baumueller-Nuermont, are our subsidiaries in the USA. They are supported in the data processing in "Hotjar" by the agency Kula Partners.

Storage duration / criteria for determining the storage duration:

Data collected through the use of "Hotjar" on our websites will be stored for a period of 365 days.

2.11. Google reCAPTCHA

Purposes and scope of data processing / legal basis:

On our websites, we integrate the "Google reCAPTCHA" service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google reCAPTCHA" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Through "Google reCAPTCHA", all user inputs and mouse movements that you make on our website are automatically recorded (regardless of whether you call up web pages that contain web forms or not). The data collected in this way is used to assess whether the input comes from a human or an automated programme.

Since "Google reCAPTCHA" is provided by Google and is reloaded from its servers when a page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

When "Google reCAPTCHA" is integrated, cookies and other technologies from Google may be used to store and read information on your terminal device. Details on the cookies and similar technologies used can be found above under "Use of cookies and similar technologies".

If we use optional cookies and similar techniques as part of the integration of the service, or if data is stored on your terminal device or read from it by the service, this is done in accordance with § 25 Para. 2 TTDSG. Subsequent data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest in using "Google reCAPTCHA" is to protect our web forms from automated requests.

Data processing in third countries:

When using "Google reCAPTCHA", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without you being informed or being able to seek legal redress.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transmit your data to the following recipients in the context of the use of "Google reCAPTCHA":

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google reCAPTCHA" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose. A separate storage of the collected data by us does not take place.

2.12. Google Maps

Purposes and scope of data processing / legal basis:

On our websites, we integrate the map service "Google Maps" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google Maps" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Since "Google Maps" is provided by Google and is reloaded from its servers when the page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

When "Google Maps" is integrated, cookies and other technologies from Google may be used to store and read information on your terminal device. Details of the cookies and similar technologies used can be found above under "Use of Cookies and Similar Technologies".

If we use optional cookies and similar techniques as part of the integration of the service, or if data is stored on your terminal device or read from it by the service, this is done in accordance with § 25 Para. 2 TTDSG. Subsequent data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest is to make our websites appealing.

Data processing in third countries:

When using "Google Maps", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, especially in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having any legal recourse.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transmit your data within the scope of the use of "Google Maps" to the following recipient:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google Maps" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

We do not store the collected data separately.

2.13. Google Web Fonts

Purposes and scope of data processing / legal basis:

On our websites, we embed the web fonts "Google Web Fonts" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google Web Fonts" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Since "Google Web Fonts" is provided by Google and reloaded from its servers when a page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

When integrating "Google Web Fonts", cookies and other technologies from Google may be used to store and read information on your terminal device. Details of the cookies and similar technologies used can be found above under "Use of Cookies and Similar Technologies".

If we use optional cookies and similar techniques as part of the integration of the service, or if data is stored on your terminal device or read from it by the service, this is done in accordance with § 25 Para. 2 TTDSG. Subsequent data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest is to make our websites appealing.

Data processing in third countries:

When using "Google Web Fonts", your data may also be processed in states outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having the right of appeal.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Receivers / categories of recipients:

We transmit your data within the scope of the use of "Google Web Fonts" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google Web Fonts" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

2.14. Video platform YouTube

Purposes and scope of data processing / legal basis:

We embed videos via the video platform "YouTube" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the EU and the European Economic Area (EEA), YouTube is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As embedded videos are reloaded from the servers of the video platform "YouTube" when the page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

When integrating videos via the video platform "YouTube", cookies and similar techniques may be used to store or read data on your terminal device. Details on the cookies and similar techniques used can be found above under "Use of cookies and similar techniques".

If we use optional cookies and similar techniques as part of the integration of the service or if data is stored in or read from your terminal device as a result of the service, this is done in accordance with § 25 Abs. 1 TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent via our consent management platform "Cookie First".

Your consent is voluntary and can be freely revoked at any time with future effect in accordance with Art. 7 para. 3 p. 1 DSGVO. To exercise your revocation, please use the fingerprint icon at the bottom left of the webpages.

Data Processing in Third Countries:

When using "YouTube", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having the right of appeal.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transmit your data within the scope of the use of the video platform "YouTube" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating the video platform "YouTube" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose. A separate storage of the collected data by us does not take place.

 2.15 Google Photos

On our websites we integrate the service "Google Photos" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), "Google Photos" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Photos to embed photos on our websites via powerful servers with high bandwidth. This ensures that photos on our websites can always be loaded reliably and without long waiting times, regardless of the number of simultaneous calls by many users.

Since "Google Photos" is offered on a limited basis in Dublin, Ireland, we use high-bandwidth servers to embed photos on our websites.

Since "Google Photos" is provided by Google and content provided via it is reloaded from its servers when the page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

Since "Google Photos" is provided by Google and content provided via it is reloaded from its servers when the page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

When "Google Photos" is integrated, cookies and similar techniques may be used to store or read data on your terminal device. Details on the cookies and similar techniques used can be found above under "Use of cookies and similar techniques".

If we use optional cookies and similar techniques as part of the integration of the service or if data is stored in or read from your terminal device as a result of the service, this is done in accordance with Section 25 (2) TTDSG. Subsequent data processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest are to make our websites appealing and efficient and to minimise loading times when calling up pages.

Data processing in third countries:

When using "Google Photos", your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, especially in the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without informing you or allowing you to seek redress.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transmit your data within the scope of the use of "Google Photos" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Google Photos" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

2.16 Provision of external scripts, fonts and other content from the content delivery network Gstatic

Purposes and scope of data processing / legal basis:

On our websites, we integrate the content delivery network "Gstatic" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and in the European Economic Area (EEA), "Gstatic" is offered as a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

A content delivery network is a server network on which content embedded on websites is stored and loaded from there when the page is called up. Embedding the content via these high-performance servers and networks with high bandwidth enables the content of our websites, in particular the embedded services, to be made available quickly at all times. This ensures that our websites can always be loaded reliably and without long waiting times, regardless of the number of simultaneous calls by many users.

Since "Gstatic" is provided by Google and content provided via it is reloaded from its servers when the page is called up, the usage data technically required for calling up the page is also transmitted. Google also receives your IP address, which is technically required to retrieve the content.

If we use optional cookies and similar technologies in the context of integrating the service, or if data is stored in or read from your terminal device by the service, this is done in accordance with § 25 Abs. 2 TTDSG. Subsequent data processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose and our legitimate interest are to make our websites appealing and efficient and to minimise loading times when calling up pages.

Data processing in third countries:

When using "Gstatic", your data may also be processed in states outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular the USA.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having any legal recourse.

To ensure an adequate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, standard contractual clauses have been concluded by the European Commission in accordance with Art. 46 para. 2 lit. c, para. 5 p. 2 DSGVO and further technical measures have been taken. In the future, the clauses will be replaced by standard data protection clauses of the European Commission pursuant to Art. 46 para. 2 lit. c DSGVO.

Recipients / categories of recipients:

We transfer your data within the scope of the use of "Gstatic" to the following recipients:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

We have no influence on any further data processing by the third-party provider.

Further information on the handling of personal data by Google can be found at https://policies.google.com/privacy?hl=de.

Storage period / criteria for determining the storage period:

By integrating "Gstatic" on our websites, data is transmitted to the above-mentioned recipients and stored there for as long as is necessary to achieve the aforementioned purpose.

3.  Customer data management and provision of content

On our websites, we include a marketing platform that allows us to transfer enquiries to our internal CRM system and to run email marketing campaigns and store your consent for newsletter distribution. In the CRM system, we store your official contact details as a contact person and interested party as well as your activity of the processing operations listed below.

3.1. Download of whitepapers / registrations for webinars / webcasts / live events

Purposes and scope of data processing / legal basis:

If you register on our websites to download whitepapers or documents and to participate in webinars, webcasts and live events, we process your data (e.g. company, postcode, country, email address, form of address, first name, surname and email address) to send you information about your registration and to track your participation or interest in our information. In addition, we process your data for direct advertising, in particular for contacting you by telephone. The data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO and in the interest of informing you about new or similar products and services. Each customer has his or her own right to object to this processing, the exercise of which leads to the termination of processing for the purpose of direct advertising. If data is stored exclusively for direct advertising, it will be deleted after the objection has been made. The objection must be sent by e-mail to marketing@baumueller.com.

Storage period / criteria for determining the storage period:

We process your data as long as this is necessary to achieve the aforementioned purpose, but for no longer than 6 years. Should you object to the data processing for direct advertising, your data will be deleted immediately.

3.2. Newsletter, implementation of email marketing and email tracking

Purposes and scope of data processing / legal basis:

If you register for our newsletter on our websites and in this context give us consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO to send marketing e-mails, we use your e-mail address to contact you via marketing e-mails and to inform you by way of direct advertising in an interest-oriented manner by newsletter about our products and services, current events, promotions, events and live events, white papers, webinars, webcasts and trade fair participations, as well as about offers.

If you give us your consent, you also allow us to process data on whether you receive our marketing emails and you have opened them, to what extent you have interacted with the content, in particular, which links you have clicked on and to what extent you have read or skimmed our emails (newsletter tracking).

After you have ordered the newsletter, you will receive an email from us with a link in which we ask you to confirm your email address and thus sign up to receive promotional emails.

In this way, we want to ensure that only persons authorised to access your e-mail address sign up to receive our promotional e-mails.

As part of the newsletter registration, we store the consent so that we can prove that you have ordered our newsletter. The corresponding data processing is based on Art. 6 para. 1 p. 1 lit. f DSGVO and is carried out in the interest of being able to account for the lawfulness of the newsletter dispatch. 

Your consent is voluntary and can be freely revoked at any time with effect for the future. If you do not wish to receive promotional emails in the future and if you do not wish to be tracked in the future regarding your interaction with our promotional emails, you can change your preferences at any time via the "Manage preferences" link at the bottom of our emails and thereby revoke any consent given. Alternatively, you can also exercise your revocation by emailing marketing@baumueller.com.

Storage period / criteria for determining the storage period:

We store your data as long as this is necessary to achieve the aforementioned purpose, but for no longer than 6 years. Afterwards, we delete your data unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of statutory retention obligations). If you withdraw your consent, we will delete any data that is no longer required immediately.

3.4. Contact form

Purposes and scope of data processing / legal basis:

You can send a contact request directly to the sales representative responsible for you via our website. For the contact form, in addition to the name, e-mail address and company, we also require the postcode and country, as this enables us to determine the responsible employee. Personal data that you provide to us when filling out the contact form (e.g. telephone number, data in the enquiry or in attached documents) will, of course, be treated confidentially.

We use your data to process your enquiry. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f DSGVO or Art. 6 Para. 1 S. 1 lit. b DSGVO if it is for the performance of a contract or if it is for pre-contractual measures. Our and your concurrent (legitimate) interest in this data processing results here from the aim of answering your enquiries, solving any existing problems, passing on requested information, etc. and thus maintaining and promoting your satisfaction as a (potential) customer.

Storage period / criteria for determining the storage period:

We store your data for as long as is necessary to achieve the aforementioned purpose. Afterwards, we delete your data unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

3.4. Recipients / categories of recipients

We transfer your data to processors who support us in the operation and administration of the "Pardot" prospect data and marketing platform and the associated data processing within the scope of commissioned processing pursuant to Art. 28 DSGVO and are strictly bound by instructions and contractually obligated to us accordingly:

  • salesforce.com Germany GmbH, Erika-Mann-Strasse 31-37, 80636 Munich, Germany,
  • Baumüller Corporate Services GmbH & C. KG, Ostendstraße 80-90, 90482 Nuremberg, Germany.

Finally, we may transfer your data to companies of the Baumüller Group to enable the processing and use of your data for the aforementioned purposes, insofar as corresponding legitimate interests exist. You can find the companies in the section "Recipients of your data".

The processing of your data may also take place in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection. If your data is transferred to third countries, there is a risk that authorities there may access your data for security and monitoring purposes without you being informed or having any legal recourse.

To ensure an adequate level of data protection, your data may be processed in third countries.

To ensure an adequate level of data protection when transferring your data to salesforce.com Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA, standard contractual clauses have been concluded and other technical measures have been taken.

4.  Enquiries and contact by mail, telephone, fax and e-mail

Purposes and scope of data processing / legal basis:

If you contact us directly by post, telephone, fax and e-mail, we process personal data that you provide to us as well as data associated with the use of your means of communication (e.g. name, address, e-mail address or fax or telephone number) in order to respond to your enquiry.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO or Art. 6 para. 1 p. 1 lit. b DSGVO, if it is necessary for the performance of the contract or if it is a matter of pre-contractual measures.

Our and your concurrent (legitimate) interest in this data processing results here from the aim of answering your enquiries, solving any problems that may exist, passing on requested information, etc., and thus maintaining and promoting your satisfaction as a (potential) customer.

You can decide for yourself what other voluntary information you provide or whether you also provide us with special personal data, if applicable.

The legal basis for data processing is your consent Art. 6 para. 1 p. 1 lit. a DSGVO.

Your consent is voluntary and can be revoked at any time with effect for the future. To do so, please contact us by email at mail@baumueller.com.

Recipients/Categories of Recipients:

If you contact us via our website, your request will be processed by Baumüller Nürnberg GmbH.

If you have an enquiry that concerns another company from our Baumüller Group, we will forward the enquiry to the relevant company so that your enquiry can be answered. The relevant company will then contact you using the data provided. You can find the companies in the section "Recipients of your data".

Storage period/criteria for determining the storage period:

We store your data for as long as is necessary to achieve the aforementioned purpose. We then delete your data, unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

5.  Postal or telephone contact by sales

If you are an employee of one of our client (our customer companies) or contractor (service provider, subcontractor or supplier), Baumüller also processes business contact data (surname, first name, address, telephone number) collected from you as part of our data processing for the purposes of initiating and fulfilling contracts with your employer. In doing so, we process your data on the basis of our legitimate interest in contacting you and fulfilling the contract with you as a representative of your employer. The legal basis in this case is in each case Art. 6 para. 1 p. 1 lit. f DSGVO.

Furthermore, we may use your contact data as a business partner or employee of a business partner for a promotional postal or telephone approach.

We assume that you have given your consent. We will weigh up the interests of each individual case with regard to the use of your contact data. The legal basis in this case is the legitimate interest in an advertising approach to its business partners by us according to Art. 6 para. 1 p. 1 lit. f DSGVO

Storage period/ criteria for determining the storage period:

We store your data for as long as is necessary to achieve the aforementioned purpose. We then delete your data, unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

6.  Further data processing

6.1. Data protection compliance documentation

Purposes and scope of data processing / legal basis:

If you provide us with a declaration of consent, we process your personal data on the circumstances and the time of submission (signature, e-mail address, telephone or fax number or IP address, if applicable) in order to be able to prove that you have consented to the relevant data processing within the scope of the accountability incumbent on us pursuant to Art. 5 Para. 2 DSGVO.

If you exercise your data subject rights under the GDPR towards us, we will also process your personal data in order to be able to prove, within the framework of the accountability obligation pursuant to Art. 5(2) of the GDPR, that we have complied with the GDPR in processing your request.

The processing takes place in each case on the basis of Art. 6 Para. 1 S. 1 lit. c DSGVO or Art. 6 Para. 1 S. 1 lit. f DSGVO. Our legitimate interest lies in being able to document compliance with the requirements of the GDPR within the scope of our accountability.

Receivers/categories of recipients:

In addition, we may forward your personal data in connection with your request to our company data protection officer at datenschutz süd GmbH, Wörthstraße 15, 97082 Würzburg, Germany, who will assist us in complying with the requirements of the GDPR.

Storage period/ criteria for determining the storage period:

We store your data for as long as this is necessary to achieve the aforementioned purpose. We regularly store data relating to consent given until the expiry of 3 years from the end of the year in which we last made use of it. Data that we process in connection with the implementation of data subject rights are regularly stored for a period of 3 years from the end of the year in which you exercised your data subject right.

We then delete your data, unless data processing, if necessary also in other systems, is still permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of statutory retention obligations)

6.2. Data processing for the assertion, exercise or defence of legal claims

Purposes and scope of data processing / legal basis:

In addition, we process your data in individual cases for the purpose and in the interest of asserting legal claims, for example to enforce our claims for unpaid invoices, provided that your data are relevant to a legal dispute.

In addition, we process your data in individual cases for the purpose of and in the interest of defending legal claims that are brought against us, for example when asserting claims for liability for material defects, provided that your data are relevant to a legal dispute.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f DSGVO.

Recipients / categories of recipients:

If necessary, your data will be transmitted to tax advisors, auditors, financial or investigative authorities, lawyers, experts or courts.

Storage period / criteria for determining the storage period:

We store your data in individual cases to the extent necessary for as long as this is required to achieve the aforementioned purpose. Afterwards, we delete your data unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

6.3. Data processing for compliance with another legal obligation

Purposes and scope of data processing / legal basis:

Furthermore, we process personal data insofar as this is necessary for the fulfilment of a legal obligation.

The legal basis for the processing of your data in these cases is Art. 6 para. 1 p. 1 lit. c DSGVO in conjunction with the respective legal norm that imposes such an obligation on us.

This may be, for example, norms from the German Fiscal Code (AO), e.g. § 147 AO, the German Commercial Code (HGB), e.g. § 257 HGB, or the German Code of Criminal Procedure (StPO), which oblige us to retain or process data.

Recipients / Categories of Recipients:

If necessary, your data will be transmitted to tax advisors, auditors, financial or investigative authorities, lawyers, experts or courts.

Storage period / criteria for determining the storage period:

We store your data in individual cases to the extent necessary for as long as this is required to achieve the aforementioned purpose. Afterwards, we delete your data unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

6.4. Data transfer to autonomous third parties in case of company restructuring

Purposes and scope of data processing / legal basis:

Finally, we may transfer personal customer data to purchasers for the purpose and in the interest of preparing and carrying out the sale of individual legal assets of our company or individual parts of our company in order to make a profit.

The legal basis and scope of the data processing are as follows.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO.

In so far as a transfer of your bank data would become relevant in this context, this will not take place without your express consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.

Recipients / categories of recipients:

If necessary, your data will be transmitted to acquirers, auditors, lawyers and experts.

Storage period / criteria for determining the storage period:

We store your data in individual cases to the extent necessary for as long as this is required to achieve the aforementioned purpose. Afterwards, we delete your data unless data processing, if necessary also in other systems, continues to be permissible on the basis of another legal basis or is obligatory for us (e.g. in the case of the existence of legal retention obligations).

7.  Recipients of your data

We transfer your data to processors who support us in the data processing listed above as part of a commissioned processing pursuant to Art. 28 DSGVO and are strictly bound by instructions and contractually obligated to us accordingly. This is in particular also with regard to our CRM system:

  • salesforce.com Germany GmbH, Erika-Mann-Strasse 31-37, 80636 Munich, Germany,
  • Baumüller Corporate Services GmbH & C. KG, Ostendstraße 80-90, 90482 Nuremberg, Germany.

In so far as joint responsibility exists in accordance with Art. 26 DSGVO, we transfer your data to co-responsible parties with whom we have entered into a corresponding contractual arrangement, insofar as a legal basis exists for the transfer by us.

Finally, we may transfer your data to the following companies of the Baumüller Group in order to enable the processing and use of your data for the aforementioned purposes:

  • Baumüller Anlagen und Systemtechnik GmbH & Co. KG, Ostendstr. 84, 90482 Nuremberg, Germany,
  • Baumüller Reparaturwerk GmbH & Co. KG, Andernacher Straße 19, 90411 Nuremberg Germany,
  • Nürmont Installations GmbH & Co. KG, Am Keuper 14, 90475 Nuremberg Germany,
  • Baumüller Holding GmbH & Co. KG, Ostendstraße 80-90, 90482 Nuremberg, Germany,
  • ESS Elektro Service GmbH & Co. KG, Nordstraße 57, 01917 Kamenz, Germany,
  • Baumüller Austria GmbH, Schärdinger Straße 13, 4061 Pasching, Austria,
  • Baumüller Brno s.r.o., Skalice nad Svitavou 72, 67901 Skalice nad Svitavou, Czech Republic,
  • Baumuller Ibérica S.L., Calle Italia 6, 28916 Leganés, Spain,
  • Baumuller France S.a.r.l., Agence Lyon, 6 bis, Rue Maryse Bastié, 69500 Bron, France,
  • Baumuller (UK) Ltd, Unit 2 and 3, Aurora Stockport, Beacon Way, Stockport SK3 0EF, United Kingdom,
  • Baumüller Italia S.R.L., Viale Italia 12, 20094 Corsico, Italy,
  • Baumüller Australia Pty. Ltd, 19 Baker Street, Botany NSW 2019, Sydney, Australia,
  • Baumueller Automation Equipment Trading (Shanghai) Co., Ltd, Room 1003, Floor 10 th, Building C2, Xinjinqiao Rd.1599, Pudong New Zone, 201206 Shanghai, China,
  • Baumueller Automation (Suzhou) Co., Ltd, 08/D01, No. 1801 Pangjin Road, Wujiang Economic and Technological, Development Zone, 215200 Jiangsu, China,
  • Baumuller India Pvt. Ltd, Laxmi Shantiban, Ground + 1st Floor, Sr. No. 1/5, 1/6, Beside Walnut School, Shivane, NDA Road, Taluka Haveli, Pune 411023, India,
  • Baumüller Benelux B.V., Regenbeemd 6, 4825 AT Breda, Netherlands,
  • Baumüller Swiss, Oberwiesenstrasse 75, 8500 Frauenfeld, Switzerland,
  • Baumüller Motor Kontrol Sistem San. ve Tic. Ltd. Sti., Girne Mah., Kücükyali Is Merkezi,B Blok No. 12 34852 Maltepe-Istanbul, Turkey,
  • Baumueller-Nuermont Corp, 1555 Oakbrook Drive Suite 120, 30093 Norcross (GA), USA,
  • Baumueller-Nuermont Corp, 1858 S. Elmhurst Road, 60056 Mount Prospect (IL), USA,
  • Baumueller Nuermont S.A. de C.V., Carretera Estatal 431 km 2+200, Lote 95 Módulo 11, Parque Industrial Tecnológico Innovación CP 76246, El Marqués, Querétaro, Mexico,
  • Baumüller Automação, Rua George Ohm, 206- Torre B- 10º andar- Conj. 101 sala 05, 04576-020 Cidade Monções- São Paulo- CEP, Brazil,
  • Baumüller Dravinja d.o.o., Delavska cesta 10 3210, Slovenske-Konjice, Slovenia.

The processing of your data may also take place in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries without an adequate level of data protection, in particular in the USA, China, India and Australia.

When your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without informing you or allowing you to seek redress.

To ensure an adequate level of data protection when transferring your data to the

  • salesforce.com Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA,
  • Baumueller Automation Equipment Trading (Shanghai) Co., Ltd, Room 1003, Floor 10 th, Building C2, Xinjinqiao Rd.1599, Pudong New Zone, 201206 Shanghai, China,
  • Baumueller Automation (Suzhou) Co., Ltd, 08/D01, No. 1801 Pangjin Road, Wujiang Economic and Technological, Development Zone, 215200 Jiangsu, China,
  • Baumuller India Pvt. Ltd, Laxmi Shantiban, Ground + 1st Floor, Sr. No. 1/5, 1/6, Beside Walnut School, Shivane, NDA Road, Taluka Haveli, Pune 411023, India,
  • Baumüller Australia Pty. Ltd, 19 Baker Street, Botany NSW 2019, Sydney, Australia,
  • Baumüller Motor Kontrol Sistem San. ve Tic. Ltd. Sti., Girne Mah., Kücükyali Is Merkezi,B Blok No. 12 34852 Maltepe-Istanbul, Turkey,
  • Baumueller-Nuermont Corp, 1555 Oakbrook Drive Suite 120, 30093 Norcross (GA), USA,
  • Baumueller-Nuermont Corp, 1858 S. Elmhurst Road, 60056 Mount Prospect (IL), USA,
  • Baumueller Nuermont S.A. de C.V., Carretera Estatal 431 km 2+200, Lote 95 Módulo 11, Parque Industrial Tecnológico Innovación CP 76246, El Marqués, Querétaro, Mexico,
  • Baumüller Automação, Rua George Ohm, 206- Torre B- 10º andar- Conj. 101 sala 05, 04576-020 Cidade Monções- São Paulo- CEP, Brazil,

standard contractual clauses have been concluded and other technical measures have been taken.

With regard to a transfer of your data to the

  • Baumüller (UK) Ltd, Unit 2 and 3, Aurora Stockport, Beacon Way, Stockport SK3 0EF, United Kingdom,
  • Baumüller Swiss, Oberwiesenstrasse 75, 8500 Frauenfeld, Switzerland,

adequate level of data protection in the United Kingdom was established by the European Commission adequacy decision of 28.06.2021 pursuant to Art. 45 Para. 3 of the GDPR.

8.  Storage period

In so far as a specific storage period is not separately stated for the data processing described above, we generally only process your data for as long as it is required to achieve the aforementioned purposes. Afterwards, we destroy your data or delete it from all our operational systems.

We proceed in the same way if you exercise your right of revocation in the case of processing on the basis of consent that you may have given to us in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, or in the case of processing on the basis of legitimate interests pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO, exercise your right of objection pursuant to Art. 21 DSGVO and the conditions stated therein are met. This applies in particular if there are no demonstrably compelling grounds for further processing by us which override your interests, rights and freedoms as a data subject, and also insofar as no statutory retention obligations prevent deletion or destruction.

9.  Voluntariness of the provision of your data

The provision of your personal data is neither legally nor contractually required.

However, it is required in certain cases in order for us to respond to your enquiry or for you to be able to use the services and benefits we offer.

Failure to provide personal data may result in us being unable to respond to your enquiry or you being unable to take advantage of the services and benefits we offer.

Of course, the only exceptions to this are those data processing operations that are based exclusively on your consent. These are always voluntary. Once you have given your consent, you can revoke it at any time with effect for the future.

10.  Your Rights

When processing your personal data, the GDPR grants you certain rights:

10.1. Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you are being processed; if this is the case, you have a right of access to such personal data and to the information specified in Art 15 GDPR.

10.2. Right of rectification (Art. 16 GDPR)

You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where appropriate, the completion of any incomplete personal data.

10.3. Right to erasure (Art. 17 DSGVO)

You also have the right to request that personal data concerning you be erased without undue delay, provided that one of the reasons listed in detail in Art 17 DSGVO applies, e.g. if the data are no longer needed for the purposes pursued.

10.4. Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing pursuant to Art. 21 DSGVO or for the duration of any review as to whether our legitimate interests override your interests as a data subject.

10.5. Right to data portability (Art. 20 GDPR)

In certain cases, detailed in Art. 20 GDPR, you have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of such data to a third party.

10.6. Right to object (Art. 21 DSGVO)

If data is collected on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO (data processing for the protection of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

10.7. Right of withdrawal (Art. 7 para. 3 p. 1 DSGVO)

If your personal data are processed on the basis of consent pursuant to Art. 6 Para. 1 S. 1 lit. a DSGVO, you have the right to withdraw your consent pursuant to Art. 7 Para. 3 S. 1 DSGVO. You can revoke your consent at any time with effect for the future.

10.8. Right of complaint to a supervisory authority (Art. 77 GDPR)

According to Art. 77 DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. In particular, the right to lodge a complaint may be exercised before a supervisory authority in the Member State of your residence, place of work or place of the alleged breach.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision, Postfach 1349, 91504 Ansbach.

11.  Contact details of the data protection officer

Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection. For this purpose, please contact:

Email: datenschutzbeauftragter@baumueller.com

datenschutz süd GmbH
Password: "Baumueller Nürnberg GmbH"
Wörthstraße 15
97082 Würzburg
Germany

12.  Amendment of this Privacy Policy

This privacy policy was last updated on 06/05/2022

scroll to the top