Privacy

Please read these statements regarding the use of this site carefully. By using the website you are accepting these conditions.

1. Definitions

Our data privacy statement makes use of terms defined in the EU General Data Protection Regulations (GDPR). We have explained these terms below in order to ensure legibility and comprehension of our data privacy statement:

1. Personal data

According to the GDPR, personal data are all information referring to an identified or identifiable natural person. This refers to information such as your name, your date of birth, your address, your e-mail address, your IP address or your telephone number, as well as your user behaviour. On the other hand, information not directly related to your real identity – such as websites generally preferred by all users or the number of users of a website – is not regarded as personal data.

2. Person concerned

The person concerned is any identified or identifiable natural person whose personal data are used by the party responsible for processing.

3. Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4. Restriction on processing

Restriction on processing involves the marking of stored personal data with the aim of restricting their future processing.

5. Controller or controller responsible for processing

The controller or controller responsible for processing is the natural or legal person, authority, institution or other centre that takes decisions about the purposes and means of processing personal data, either alone or jointly with others. If the purposes and means of such processing are specified by EU law or the laws of the member states, the controller or the criteria to be used in appointing such a person may be specified in accordance with EU law or the laws of the member states.

6. Processor

The processor is a natural or legal person, authority, institution or other centre that processes personal data on behalf of the responsible party.

7. Receiver

The receiver is a natural or legal person, authority, institution or other centre to whom or which personal data are disclosed, irrespective of whether they are third parties or not. Authorities which may receive personal data as part of a specific investigation commission in accordance with EU law or the laws of the member states are, however, not regarded as receivers.

8. Third party

A third party is a natural or legal person, authority, institution or other centre, with the exception of the person concerned, the controller, the processor and the persons authorised to process personal data at the direct responsibility of the responsible party or the commissioned processor.

9. Consent

Consent is any unambiguous expression of will voluntarily provided by the person concerned in the case in question, based on prior information and in the form of a statement or other clearly confirming action, with which the person concerned expresses that he/she agrees to the processing of his/her personal data.

II. Name and address of controller [Art. 4 Par. 7 of the GDPR]

The controller under the terms of the General Data Protection Regulation, other national data protection legislation of the member states and other provisions under data protection legislation is:

Pilz GmbH & Co. KG
Felix-Wankel-Straße 2
73760 Ostfildern
Germany

Tel.: +49 711 3409-0
E-mail: info@pilz.de
Website: www.pilz.com

III. Data protection officer

You can reach our data protection officer at: dataprotection@pilz.com

IV. General information on data processing

1. Extent of personal data processing

As a basic principle, we collect and use our users’ personal data only if doing so is necessary for providing a functional website as well as our contents and services. Our users’ personal data are collected and used regularly, and only after said users have given their consent to this effect. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and where data processing is permitted by law.

2. Legal basis for personal data processing

he data transmitted by you or collected from you will only be collected, used, processed, stored and where applicable – where this is legally prescribed, contractually necessary or permitted within the framework of current legislation – forwarded to third parties within the framework of current data protection laws (GDPR, German Federal Data Protection Act and Broadcast Media Act).

Art. 6 of the GDPR is the respective legal basis for processing your personal data to which this data privacy statement refers:

Insofar as we obtain the data subject’s consent to process their personal data, Art. 6, Par. 1, lit. a of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis for personal data processing.

In the event of personal data which is necessary to fulfilling a contract, the contracting party for which is the data subject, being processed, Art. 6, Par. 1, lit. b of the GDPR shall apply as the legal basis. This also applies to processing which is required to carry out pre-contractual measures.

If personal data needs to be processed to fulfil a legal obligation to which our company is subject, Art. 6, Par. 1, lit. c of the GDPR shall apply as the legal basis.

In cases where the vital interests of the data subject or another natural person necessitate processing of personal data, Art. 6, Par. 1, lit. d of the GDPR shall apply as the legal basis.

If processing is necessary to protecting a legitimate interest on the part of our company or a third party, and if the data subject’s interests, fundamental rights and fundamental freedoms do not take precedence over the former interest, Art. 6, Par. 1, lit. f of the GDPR shall apply as the legal basis for processing.

3. Deletion of data and duration of storage

The data subject’s personal data shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage can also take place if this was stipulated by the European or national legislator in Union regulations, legislation or other specifications to which the controller is subject. Blocking or deletion of the data also takes place if a storage period stipulated by the aforementioned standards elapses, unless the data must be stored for longer to conclude or fulfil a contract.

V. Providing the website and creating log files

The extent and manner of collection and use of your data differs, depending on whether you only visit our website to download information or whether you are making use of our offers and the option of e-mail contact as set out in the contact form or by e-mail address (VII):

1. Description and extent of data processing

Each time our website is accessed, our system automatically records data and information from the accessing computer’s computer system. The following data are collected in this regard:

  1. Information about the browser type and the version used
  2. The user’s operating system
  3. The user’s IP address
  4. Date and time of access
  5. Websites from which the user’s system accessed our website
  6. Websites which are accessed by the user’s system via our website

The data are also stored in our system’s log files. These data are not stored together with other personal data belonging to the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and the log files is Art. 6, Par. 1, lit. f of the GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose.

Storage in log files is carried out to guarantee the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. Evaluation of data for marketing purposes does not take place in this regard.

In these purposes, we also have a legitimate interest in data processing according to Art. 6, Par. 1, lit. f of the GDPR.

4. Duration of storage

The data shall be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data being recorded to provide the website, this is done when the respective session is ended.

If data are stored in log files, this is done 7 days afterwards at the latest. Extended storage is possible. In this case, users’ IP addresses are deleted or modified so that they can no longer be allocated to the accessing user.

5. Opportunity to object and remove

Data must be recorded under all circumstances to provide the website and store the data in log files for the purpose of operating the website. As a result, the user has no opportunity to object.

VI. Use of cookies

Our website uses cookies. Cookies are text files which are stored in the user’s Internet browser or on the user’s computer system by the Internet browser. If a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic character string which enables unique identification of the browser the next time the website is called up.

A. Own cookies

1. Description and extent of data processing

We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to also be identifiable after a page change.

When our website is accessed, users are informed by means of an information banner about the use of cookies, referred to this data privacy statement and their consent to processing of their personal data used in this respect is obtained.

The following data are stored and transferred in the cookies:

Content management system cookie

  1. is_mobile – information whether you are using a mobile device
  2. is_new – information whether you are a first-time visitor to the website
  3. region_select
  4. user_language – selected language
  5. user_locale
  6. user_region – region in which the user is located
  7. true (if consent has been given in relation to the privacy policy)
  8. The user’s time zone

2. Legal basis for data processing

The legal basis for personal data processing using technically necessary cookies is Art. 6, Par. 1, lit. f of the GDPR. The legal basis for personal data processing using cookies, provided that the user has given their consent to this effect, is Art. 6, Par. 1, lit. a of the GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify use of the websites for users. Some functions of our website cannot be offered without the use of cookies. To this end, the browser must be recognised even after a page change.

We need cookies for the following applications:

  1. Application of language settings
  2. Country settings

The user data collected by technically necessary cookies is not used to create user profiles. In these purposes, we also have a legitimate interest in personal data processing according to Art. 6, Par. 1, lit. f of the GDPR.

4. Duration of storage and opportunity to object and remove

Cookies are stored on the user’s computer and are transferred to it by us. You as a user therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transfer of cookies. You can delete cookies that have already been stored at any time. This can be done automatically. If cookies are deactivated for our website, it may not be possible to use all of the website’s functions in full.

B. Cookies used by third parties - etracker

On our website, data are collected for marketing and optimisation purposes using the technologies developed by etracker GmbH (http://www.etracker.com). These data are not personal. IP addresses and domain addresses are truncated before saving. As a result it is impossible to identify individuals.

1. Description and extent of data processing

When our website is accessed, users are informed by means of an information banner about the use of cookies for analysis purposes, referred to this data privacy statement and their consent to processing of their personal data used in this respect is obtained.

A user profile can be generated from the data collected under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are locally stored in the buffer memory of the website user's internet browser. The cookies allow the recognition of the internet browser. The data retrieved is not used to identify website visitors personally. We use this information exclusively to find out how attractive our website is and to work to improve it.

For example, the data retrieved includes details on the browser and operating system used, which website a person arrives from, the average time spent on the website and which pages are called up.

etracker cookie:

  1. etracker Analytics visitor ID
  2. etracker Analytics cookie ID
  3. ID of returning visitors
  4. Detects whether the scroll depth of the visitor is being measured.
  5. Stores the status of the Visitor Motion record.

Only used if Visitor Motion is used.

  1. Stores the status of the Visitor Motion session.

Visitor Motion is used to record user behaviour in order to draw conclusions for improvements to be made to the website.

2. Legal basis for data processing

The legal basis for personal data processing using cookies for analysis purposes, provided that the user has given their consent to this effect, is Art. 6, Par. 1, lit. a of the GDPR. The legal basis for the use of the etracker without such consent is Art. 6 Par. 1 S. 1 lit. f of the GDPR.

3. Purpose of data processing

The analysis cookies are used for the purpose of improving the quality of our website and its contents. The analysis cookies allow us to find out how the website is used and therefore allow us to continuously optimise it. The statistics acquired allow us to improve our offer and to design it in a way that is more interesting to you as a user. This is our vested interest.

4. Duration of storage and opportunity to object and remove

The collected data are permanently stored and analysed following pseudonymisation. You may revoke your consent to data about you being collected and stored at any time with effect for the future.

Please exclude me from the etracker count.

5. Further information

Third-party service provider information:

etracker GmbH
Erste Brunnenstraße 1
20459 Hamburg

https://www.etracker.com/de/datenschutz.html.

VII. Contact form and email contact

1. Description and extent of data processing

You can contact us on the email address provided. In this case, the user’s personal data which is transferred with the email is stored.

Your data shall not be disclosed to third parties in this regard. The data are only used for processing the conversation.

2. Legal basis for data processing

The legal basis for data processing, provided that the user has given their consent to this effect, is Art. 6, Par. 1, lit. a of the GDPR.

The legal basis for processing data transferred in the course of sending an email is Art. 6, Par. 1, lit. f of the GDPR. If you have contacted us by email with the aim of concluding a contract, Art. 6, Par. 1, lit. b of the GDPR forms an additional legal basis.

3. Purpose of data processing

Processing of personal data from the input screen serves the sole purpose of us processing the contact request. If the user makes contact by email, there is also a required legitimate interest in data processing.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Duration of storage

The data shall be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form’s input screen and the data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the situation concerned has been conclusively clarified.

The personal data also collected during the sending process are deleted after a period of seven days at the latest.

5. Opportunity to object and remove

The user has the opportunity to revoke their consent to the processing of their personal data at any time

If the user contacts us by email, he/she can object to the storage of their personal data at any time. The conversation cannot be continued in a case such as this.

ll personal data stored during the course of contact is deleted in this case.

VIII. Rights of the data subject

If personal data about you is processed, you are the data subject under the terms of the GDPR, and you are entitled to the following rights vis-à-vis the controller:

1. Right of access

You can request confirmation of whether personal data concerning you is processed by us from the controller.

If such processing does take place, you can request information on the following from the controller:

  1. The purposes for which the personal data are being processed;
  2. The categories of personal data which are processed;
  3. The recipients or categories of recipients to whom the personal data concerning you was or shall be disclosed;
  4. The planned duration of storage of the personal data concerning you or, if specific information cannot be provided on this matter, criteria for defining the duration of storage;
  5. The existence of a right to correct or delete the personal data concerning you, a right to restrict processing by the controller, and a right to object to such processing;
  6. The existence of a right to lodge a complaint with a supervisory authority;
  7. All of the available information about the origin of the data, if the personal data was not collected from the data subject;
  8. The existence of automated decision-making, including profiling according to Art. 22, Paras. 1 and 4 of the GDPR, and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You are entitled to the right to request information about whether the personal data concerning you is transferred to a third country or an international organisation. In this context, you can request to be informed of the appropriate safeguards according to Art. 46 of the GDPR in connection with such transfer.

2. Right to correction

You have a right to correction and/or completion vis-à-vis the controller, provided that the processed personal data concerning you is incorrect or incomplete. The controller must correct the data without delay.

3. Right to restriction of processing

You can request that processing of the personal data concerning you be restricted under the following conditions:

  1. If you dispute the accuracy of the personal data concerning you for a duration that enables the controller to check the accuracy of the personal data;
  2. If processing is unlawful and you refuse deletion of the personal data and instead request restriction of your personal data’s use;
  3. The controller no longer needs the personal data for the purposes of processing, but you require the same to establish, exercise or defend legal claims; or
  4. If you have objected to processing according to Art. 21, Par. 1 of the GDPR and it has not yet been determined whether the controller’s legitimate grounds take precedence over your grounds.

If processing of the personal data concerning you is restricted, such data may – with the exception of storage – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of rights of another natural or legal person, or for reasons of important public interest of the Union or of a member state.

If restriction of processing was not carried out according to the aforementioned conditions, you shall be informed by the controller before the restriction is removed.

4. Right to deletion

Duty to delete

You can make a request to the controller that the personal data concerning you be deleted immediately, and the controller is obligated to delete this data immediately where one of the following grounds apply:

  1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You revoke your consent on which processing according to Art. 6, Par. 1, lit. a or Art. 9, par. 2, lit. a of the GDPR was based, and there are no other legal grounds for processing.
  3. You object to processing according to Art. 21, Par. 1 of the GDPR and there are no other overriding legitimate grounds for processing, or you object to processing according to Art. 21, par. 2 of the GDPR.
  4. The personal data concerning you was processed unlawfully.
  5. Deletion of the personal data concerning you is required to fulfil a legal obligation under Union law or the law of the member states to which the controller is subject.
  6. The personal data concerning you was collected in relation to the offer of information society services according to Art. 8, Par. 1 of the GDPR.

Information to third parties

If the controller has made the personal data concerning you public and is obligated to delete the same according to Art. 17, Par. 1 of the GDPR, taking account of the available technology and the associated implementation costs the controller shall take appropriate measures, including those of a technical nature, to inform other controllers processing the personal data that you as the data subject have requested the deletion of all links to this personal data or to copies or replications of the same.

Exceptions

The right to deletion does not exist insofar as processing is required

  1. to exercise the right to freedom of expression and information;
  2. to fulfil a legal obligation which requires processing according to Union or member state law to which the controller is subject, to perform a task carried out in the public interest, or to exercise official authority vested in the controller;
  3. for reasons of public interest in the area of public health according to Art. 9, Par. 2, lit. h and i, as well as Art. 9, par. 3 of the GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes according to Art. 89, Par. 1 of the GDPR, insofar as the right mentioned under a) is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
  5. for the establishment, exercise or defence of legal claims.

5. Right to information

If you have asserted your right to correction, deletion or restriction of processing vis-à-vis the controller, the controller is obligated to inform all the recipients to whom the personal data concerning you was disclosed of this correction or deletion of data or of the restriction of processing, unless doing so proves to be impossible or would involve a disproportionate effort.

You are entitled to receive information about these recipients from the controller.

6. Right to data portability

You have the right to receive the respective personal data which you provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, insofar as

  1. processing is based on consent according to Art. 6, par. 1, lit. a of the GDPR or Art. 9, Par. 2, lit. a of the GDPR or on a contract according to Art. 6, par. 1, lit. b of the GDPR; and
  2. processing is carried out by automated means.

In exercising this right, you further have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected by the exercising of this right.

The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

You have the right, on grounds relating to your particular situation, to object at any time to processing of the personal data concerning you based on Art. 6, Par. 1, lit. e or f of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless they can demonstrate compelling and legitimate grounds for processing which outweigh your interests, rights and freedoms, or if processing serves to establish, exercise or defend legal claims.

If the personal data concerning you is processed for the purpose of carrying out direct advertising, you have the right at any time to object to processing of the personal data concerning you for the purposes of such advertising; this also applies to profiling if it is in conjunction with such direct advertising.

If you object to processing for the purposes of direct advertising, the personal data concerning you shall no longer be processed for these purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you can exercise your right of objection by automated means where technical specifications are used.

8. Right to revocation of your declaration of consent under data protection legislation

You have the right to revoke your declaration of consent under data protection legislation at any time. Revocation of consent does not affect the lawfulness of processing carried out based on consent up until the same is revoked.

9. Right to lodge complaints with a supervisory authority

Regardless of another administrative or judicial legal remedy, you have the right to lodge complaints with a supervisory authority, particularly in the member state where your place of residence, your workplace or the place of the suspected violation is located if you believe that the processing of the personal data concerning you is in violation of the GDPR.

The supervisory authority with whom the complaint was lodged informs the complainant of the status and results of the complaint, including the possibility to appeal according to Art. 78 of the GDPR.

IX. Right of amendment

We reserve the right to amend this data privacy statement in order to adapt it to current regulations; the same applies to the product offers on our website.

Date: May 2018