Data protection Version: May/2018
Thank you for visiting our website. As the protection of your privacy is extremely important to us at SARTORIUS Werkzeuge, our responsibilities include safeguarding the information and data that has been entrusted to us. In order to ensure that you feel secure when visiting our website, we strictly comply with all the statutory provisions when processing your personal data and we would like to provide you with detailed information about how we handle your data here.
1. Who is responsible for processing my data?
1.1. When visiting the website
The data controller (party responsible) for processing your data when you visit this website is SARTORIUS Werkzeuge GmbH & Co. KG, Harkortstraße 54, 40880 Ratingen, Germany. You can contact the Data Protection Officer of SARTORIUS Werkzeuge GmbH & Co. KG by post at the above address, F.A.O. Rolf Poschmann or by email at: firstname.lastname@example.org
Individual services and offers that are presented to you on the website are offered by SARTORIUS Werkzeuge GmbH & Co. KG itself (e.g. placement of an order, delivery of services, customer support). This applies in particular to orders and services in relation to business customers of SARTORIUS Werkzeuge GmbH & Co. KG. The information in the relevant order and contract documents is definitive in the case of orders.
2. When does SARTORIUS Werkzeuge collect data about you?
2.1. When accessing our website
We collect data to a limited extent to accept and process your orders or to make you offers that meet your needs. You may visit our website without providing any information about your identity.
We collect personal data on the website
• in connection with your order in the web shop
• when you register for individual customer access
• when you subscribe to our newsletter
• through the contact and service request form
• in the case of contact by email
• via the Google Maps service
• when accessing YouTube videos
The data that is collected in each case can be seen on the respective input forms. We use the data you provide to process contracts, deliver services and respond to your enquiries.
2.2. Newsletter subscription
You have the option to subscribe to our newsletter, in which we provide you with regular information about special offers. In order to subscribe to our newsletter, you must complete the form provided for this purpose or click the ‘Subscribe to newsletter’ box during the order process, i.e. we will only send the newsletter to you by email if you have expressly given your consent for us to do so. Once you have given your consent, we save your email address, the time at which you register and the IP address you use to register until you cancel your subscription to the newsletter. The information is saved solely for the purpose of sending you the newsletter and being able to prove that you have registered for it. You can cancel your subscription to the newsletter at any time. A corresponding cancellation link can be found in every newsletter. A message sent to the contact details provided above or in the newsletter (e.g. by email) is sufficient for this. The legal basis for processing is your consent in accordance with Art. 6 (1) point (a) GDPR.
2.3. Making contact
You have various options for making contact with us. These include using the contact form and sending us an email. In this connection, we process data only for the purpose of communicating with you. The legal basis is Art. 6 (1) point (b) GDPR. The data collected by us when the contact form is used are erased automatically when we have finished processing your enquiry unless we still need your enquiry to meet contractual or statutory obligations.
2.4. Google Maps
Our website uses the Google Maps map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). In order for the Google map materials used by us to be integrated and displayed in your web browser, your web browser must establish a connection with a Google server, which may be located in the USA, when you access the contact page. For cases where personal data are transferred to the USA, Google has signed up to the EU-US Privacy Shield. By this means, Google receives a notification that the contact page of our website has been accessed from the IP address of your device. The legal basis is Art. 6 (1) sentence 1, point (f) GDPR, arising from our legitimate interest in integrating a map service into our contact information.
3. What are the data used for at SARTORIUS Werkzeuge?
3.1. To fulfil contractual obligations (Art. 6 (1) point (b) GDPR)
SARTORIUS Werkzeuge uses your data with the aim of offering you the best possible shopping and service experience. In doing so, we handle your data responsibly. SARTORIUS Werkzeuge GmbH & Co. KG specifically uses your data to
• process your order
•process your service requests
• distribute the email newsletter, if you have subscribed to it
3.2. In the context of legitimate interests (Art. 6 (1) point (f) GDPR)
We may also use your data to pursue our legitimate, usually economic interests or those of third parties, in which case we process pseudonymised or anonymised data wherever possible. This happens for the following purposes:
• Monitoring and improving the efficiency and legal reliability of business processes
• Credit checks
• Monitoring, optimising and developing services and products
• Marketing (e.g. advertising by post), market and opinion research
• Pursuing legal claims and providing a defence in the event of legal disputes
• Detecting, preventing and investigating offences
• Guaranteeing the security and functionality of our IT systems
3.3. On the basis of your consent (Art. 6 (1) point (a) GDPR)
If you have given us your consent to process your data, that consent is the legal basis for the processing covered by the consent. This applies, in particular, to any consent you may have given to marketing contact by telephone or email. You may withdraw your consent at any time with effect for the future. Cancellation of the newsletter is possible at any time and can be arranged either by sending a message using the contact details above or via the link provided for this purpose in each newsletter.
3.4. To fulfil legal obligations (Art. 6 (1) point (c) GDPR)
We are subject to various legal obligations, for example, statutory retention obligations in relation to business documents and export legislation.
4. Passing on your data
Insofar as external service providers are used to operate this website or to provide services through SARTORIUS Werkzeuge GmbH & Co. KG (hosting providers, shipping service providers, etc.), the companies concerned are given access to your data only to the extent required to fulfil their respective tasks and functions.If these service providers process your data outside the European Union, this can lead to your data being transmitted to a country in which the data protection standards of the European Union are not maintained. In this case, we ensure that the respective recipients of your data guarantee a level of data protection equivalent to that of the European Union by contract or in another way.
5. How does SARTORIUS Werkzeuge use your data for postal marketing?
SARTORIUS Werkzeuge GmbH & Co. KG reserves the right to process your data for direct postal marketing within the framework of the statutory provisions, even without your consent. This also includes an evaluation of your data (e.g. master data, order data, access data) in order to determine your potential interest in our products and services. This evaluation is carried out by means of statistical processes using current customer data and generally accessible information about our customers. The results are used to address you in a targeted way in accordance with your needs and to provide you with relevant offers. You have the right to object to processing of your data for the purposes of marketing of this sort. This also applies to profiling, insofar as it is related to such direct marketing. You can send your objection to the contact address above.
6. When does SARTORIUS Werkzeuge carry out a credit check and scoring?
Provided that you gave us your express consent to it, we reserve the right to obtain information about your identity and creditworthiness using the services of specialised service provider. To this end, we will transfer your personal data needed for the credit assessment to the following company:
Ingenico Payment Services GmbH
In this process, we will apply appropriate measures to respect your rights, freedoms and legitimate interests. You can contact us via the contact option specified below to present your standpoint and contest the decision. You may revoke your consent at any time by sending a message using the contact data below. The consequence may be that we will no longer be able to offer you certain payment options.
7.1. Optimisation of website
7.2. Storage of cookies
You can prevent the storage of cookies by selecting ‘Block cookies’ in your browser settings. However, this may mean that some of the functions of our website are restricted. We recommend leaving the cookie functions fully turned on, as only with cookies can we continue adapting our website to your needs. Our cookies do not store any sensitive data such as passwords, credit card details, etc. They do not damage your end device and do not contain any viruses.
8. Which web analysis and marketing services does SARTORIUS Werkzeuge use and why?
8.1. Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service of Google Inc. (www.google.de). Google (Universal) Analytics employs methods that allow an analysis of the use of the website, such as so-called ‘cookies’, text files that are stored on your computer. The information generated about your use of this website is generally transferred to a Google server in the USA and stored there. As a result of activation of IP anonymisation on this website, your IP address will be truncated before transmission within the Member States of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. Only in exceptional circumstances will your full IP address be sent to a Google server in the USA and truncated there. The IP address shared by your browser for Google Analytics purposes is not combined with any other data by Google. You can prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and processing of that data by Google by downloading and installing the browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in, you can click this link to prevent data from being collected on this website by Google Analytics in the future. An opt-out cookie will then be stored on your end device. If you delete your cookies, you will have to click on the link again.Google Analytics cookies are saved on the basis of Art. 6 (1) point (f) GDPR. SARTORIUS Werkzeuge has a legitimate interest in the analysis of user behaviour so that we can optimise both our website and our advertising.
9. For what purposes does SARTORIUS Werkzeuge use social media?
9.1 Social media plug-ins
We have integrated the social media buttons of the following companies into our website: Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA) Google Plus/Google Inc. (1600 Amphitheatre Parkway – Mountain View – CA 94043 – USA) IndustryArena (IndustryArena GmbH, Katzbergstraße 3, 40764 Langenfeld, Germany) LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA) Xing (XING SE, Dammtorstraße 30, 20354 Hamburg, Germany)
We have integrated videos into our website that are stored by YouTube and can be played on our pages directly from there. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (‘YouTube’), a company of the Google LLC Group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). For cases where personal data are transferred to the USA, Google and its group company YouTube have signed up to the EU-US Privacy Shield. The legal basis is Art. 6 (1) sentence 1, point (f) GDPR, arising from our legitimate interest in including video and image materials. When you visit our website, YouTube and Google receive notification that you have accessed the corresponding page of our website. This happens irrespective of whether you are logged in to YouTube or Google or not. YouTube and Google use these data for marketing, market research and the customised design of their websites. If you access YouTube on our website while you are logged in to YouTube or your Google profile, YouTube and Google may also link this event with your profiles. If you do not wish this information to be associated with your profile, you must log out of Google before you access our website. As described above, you can configure your browser in such a way that it rejects cookies, or you can prevent the data generated by the cookie and related to your use of the website being sent to Google and processing of that data by Google by deactivating the ‘Personalized advertising on the web’ button in the Google advertising settings. In this case, Google will display only advertising that is not customised.
10. When is your data erased?
Following complete processing of the contract or erasure of your customer account, your data are blocked for further use and they are erased on expiry of the retention periods stipulated by tax and commercial law, unless you have expressly agreed to a further use of your data or we have reserved the right to make further use of the data in a way that is permitted by law and about which this data protection policy provides information. Your customer account may be erased at any time. This can be arranged either by sending a message without specific form to the contact address above or by means of the function provided for this purpose in the customer account.
11. What data protection rights do you have?
Under the relevant statutory provisions, you have a right in respect of SARTORIUS Werkzeuge GmbH & Co. KG to information (Art. 15 GDPR), to rectification (Art.16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). If you have given your consent to SARTORIUS Werkzeuge GmbH & Co. KG, you can withdraw it at any time with effect from that point forward by e-mail, fax or letter.
If SARTORIUS Werkzeuge GmbH & Co. KG processes data on the basis of balancing of legitimate interests, you can object to such processing. If you object, your data will no longer be processed unless the data controller can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or processing serves to establish, exercise or defend against legal claims.