Data privacy statement

Edition July 2022

We would hereby like to inform you about the processing of personal data carried out by Leuze electronic (hereinafter referred to as "Leuze") in accordance with the EU General Data Protection Regulation. Leuze electronic is part of the Leuze Group. As we have outsourced certain services within our group, data may also be transferred to other Leuze companies in individual cases. This of course only takes place if there is a legal basis for this.

We have ensured through internal agreements that the processing of your data complies with the regulations of the applicable data privacy laws. If you have any questions or comments about this Data Privacy Statement, you can send them at any time to the e-mail address stated under Section 2.

1. Overview
2. Name and contact details of the Controller and the Data Protection Officer
3. Data processing on the website
4. Applicants
5. Customers
6. Use of the webshop
- 6.1. Placing an order
- 6.2. Customer account
7. Social media
8. Surveys
9. Data transmission
10. Rights of data subjects
11. Data security
12. Status of Data Privacy Statement

1. Overview

The following Data Privacy Notices inform you about the type, scope and purpose of the collection and use of data as well as the use of cookies by the companies of the Leuze Group as the controller within the meaning of data privacy law (hereinafter referred to as "Leuze", "we" or "us").

2. Name and contact details of the Controller and the Data Protection Officer

Responsible body within the meaning of GDPR Art. 4 No. 7 is

Leuze electronic GmbH & Co. KG
In der Braike 1
73277 Owen
Germany

You can reach our Data Protection Officer at the address above with attention to "Data privacy" or at datenschutz@leuze.com

3. Data processing on the website

3.1. Use of the website for information purposes

During use of our website for purely information purposes, the browser used on your terminal device automatically sends information to our website's server and temporarily stores it in what is known as a log file. The following information is also collected without your involvement and stored until it is deleted automatically:

the IP address of the requesting Internet-enabled device,
the date and time of access,
the name and URL of the file accessed,
the website from which the access was made (referrer URL),
the browser you use and, if applicable, the operating system of your Internet-enabled computer as well as the name of your access provider.

The legal basis for the processing of the IP address is Article 6 (1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed below.
The IP address of your terminal device and the other data listed above are used by us for the following purposes:

To ensure a smooth connection set-up;
To ensure user-friendly use of our website/application;
To evaluate system security and stability.

The data are stored for a period of 90 days and then automatically deleted. In addition, we use cookies, analysis tools and targeting methods for our website, as explained in more detail below in Section 3.2.

3.2. Online presence and website optimization

3.2.1. Cookies – General information

In order to make visiting our websites more attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognize your browser on your next visit (these are called persistent cookies). Cookies cannot be used to access other files on your computer or to determine your e-mail address.

Insofar as we use cookies that are absolutely necessary for the provision of our websites, the legal basis for the processing of personal data using these cookies is Article 6 (1)(f) GDPR.

Personal data are processed via functional cookies or cookies for marketing purposes only if you have given us your consent to do this. The legal basis for this is Article 6 (1)(a) GDPR.

An overview of the cookies used can be found in our Cookie Information. Here you can revoke your consent at any time without giving reasons by adjusting your settings accordingly.
Cookies are stored on your terminal device and you have full control over their use. By changing the settings of your Internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, you may no longer be able to use all the functions of the websites to their full extent.

3.2.2. Google Analytics

This service is used on the following website versions: International, Australia, Belgium, Brazil, Denmark, France, Germany, India, Italy, Japan, Mexico, Netherlands, Poland, Singapore, South Korea, Spain, Sweden, Switzerland, Turkey, United States of America, United Kingdom.

Provided you have given your consent to this, we use Google Analytics, a web analytics service provided by Google LLC, on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics uses cookies that enable analysis of your use of our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

For Google Analytics, the anonymization of IP addresses is activated as the default setting. Based on the IP anonymization, your IP address is truncated by Google within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data.
Your user behavior will be recorded during your visit to the website.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Article 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities will access the data stored by Google.

Insofar as data are processed outside the EU/EEA and there is no level of data privacy corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, has its headquarters in California, USA. Transmission of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. From a data privacy perspective, the USA is at present considered a third country. You do not have the same rights there as within the EU/EEA. You may not have any legal remedies against access by authorities.

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

The legal basis for this data processing is your consent according to Article 6 (1)(a) GDPR.

You can revoke your consent at any time with effect for the future by adjusting your settings in the consent management tool. Withdrawal of consent does not affect the legality of the processing which took place on the basis of your consent prior to its withdrawal.

3.2.3. Google Ads remarketing and conversion tracking

We use the Google Ads service. Google Ads is an online advertising program from Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

This means that we place Google Ads and also use Google remarketing and conversion tracking within the framework of this. The ads are displayed according to search queries on websites of the Google advertising network. In addition, we use ads remarketing lists for search ads. This allows us to customize search ad campaigns for users who have visited our website before. Through the services, we have the ability to combine our ads with specific search terms or to display ads for previous visitors which, for example, advertise services that visitors have viewed on our website. This means that we are able to display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google ad" within the framework of a Google Search or on other websites).

An analysis of online user behavior is necessary for interest-based offers. Google uses cookies to carry out this analysis. When the user clicks on an ad or visits our website, Google sets a cookie on the user's computer. These cookies have a lifetime of 90 days. The information collected through the respective cookie is used to target the visitor in a subsequent search query. Further information on the cookie technology used can also be found in Google's information on website statistics and in the privacy policy. With the help of this technology, Google and we as a customer receive information that a user has clicked on an ad and been redirected to our web pages. The information obtained in this way is used exclusively for a statistical evaluation to optimize ads. We do not receive any information that personally identifies visitors. Your IP address is transmitted to Google, but because we use Google Analytics on this website, your IP address is anonymized. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page of our website that is tagged with a conversion tag. Based on these statistics, we can track which search terms were clicked on particularly often and which ads lead to the user contacting us via the contact form.

Insofar as data are processed outside the EEA, where there is no level of data privacy corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data privacy.

You can find more information on data privacy in the context of Google Ads at: https://policies.google.com/technologies/ads?hl=en

The collection and storage of data only takes place after explicit consent according to Article 6 (1)(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

3.2.4. Trusted Shops Trustbadge

This service is used on the following website versions: Belgium, Denmark, France, Germany, Italy, Netherlands, Poland, Spain, Sweden, Switzerland, United Kingdom.

We have integrated the Trusted Shops Trustbadge into this website in order to show our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to shoppers after they make an order.

This serves to protect our legitimate interest, which takes precedence in the event of a balancing of interests, in optimally marketing our offering. The Trustbadge and the services it advertises are an offering from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops").

When calling up the Trustbadge, the web server automatically stores a server log file containing e.g. your IP address, the date and time of the request, the quantity of data transmitted and the requesting provider (access data) and documents the request. This access data is not evaluated and is automatically overwritten seven days at the latest after your site visit comes to an end.

Further personal data will only be transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In such a case, the contractual agreement made between you and Trusted Shops will apply. The legal basis for the processing of personal data using the Trusted Shop Trustbadge is our legitimate interest in the appealing presentation of our website according to Article 6 (1)(f) GDPR.

3.2.5. Instana

On our website, we use the Instana analysis tool from supplier: Instana at the IBM Company, 71 S Wacker Drive, 7th Floor, Chicago, IL 60606, USA. This allows us to track your user experience on our platform to improve its functionality, usability and stability. In particular, Instana enables us to detect problems with your user experience and identify the reasons for them. End-to-end monitoring also enables us to improve the response times of our website in a targeted manner.

The data processed for this purpose is processed exclusively on servers within the EU. The legal basis is your consent according to Article 6 (1)(a) GDPR. You can revoke this consent at any time with effect for the future by adjusting the consent management tool.

3.2.6. LinkedIn Ads

This service is used on the following website versions: International, Brazil, Denmark, France, Germany, Mexico, Sweden.

Provided you have given your consent, the advertising service LinkedIn Ads is used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This is used for the purposes of conversion tracking, advertising and after remarketing, using cookies, pixels and ad tags.

This list contains all (personal) data collected by or through the use of this service.

IP address
User agent data
Device ID
Search terms
Articles viewed
Pages visited
Adverts viewed
Appendices
Connections
Videos watched
Information in the profile
Advertising codes
Information about the operating system
Device information

The legal basis for this data processing is your consent, Article 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by accessing the cookie settings in our consent management platform and changing your selection there.

The data are deleted as soon as they are no longer required for processing.

The data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Inc. USA.

This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data are transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you potentially having any legal recourse. Below is a list of countries to which the data will be transferred. This may be for various purposes, such as storage or processing.

Click here to read the data processor's privacy policy
https://www.linkedin.com/legal/privacy-policy

Click here to object on all domains of the processing company
https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en

Click here to read the cookie policy of the data processor
https://www.linkedin.com/legal/cookie_policy

3.2.7. Google Maps

This service is used on the following website versions: Germany.

To assist you in traveling to our locations, each of our locations is provided with a corresponding link to Google Maps. As soon as you click on this link, you are immediately directed to Google Maps. No data is collected by us during this process.

As soon as you leave our website and access Google Maps, Google is solely responsible for the collection of your personal data. You can find further information on the data processing performed by Google in Google's data privacy notice, which is available at www.google.com/privacypolicy.html.

3.2.8. FACT-Finder

In order to optimize our search function and carry out A/B tests, we use on our website the "FACT-Finder" service of the provider Omikron Data Quality GmbH, Habermehlstrasse 17, 75172 Pforzheim (Germany). The tool enables us to narrow down the results of conducted searches as precisely as possible to the products you are looking for. In addition, we carry out A/B tests where necessary to further improve our web offering. When you perform a search on our website, your IP address is transmitted to Omikron. No other personal data is processed, in particular no permanent profile of your search entries is created.

The legal basis for this is our legitimate interest in the customer-friendly provision of a search function and the optimization of our product portfolio according to Article 6 (1)(f) GDPR.

3.2.9. HubSpot

This website uses HubSpot for online marketing activities. HubSpot is a software company from the USA with a branch office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

The software in question is an integrated software solution that covers various aspects of online marketing. These aspects include e-mail marketing, social media publishing and reporting, contact management, landing pages and contact forms. In conjunction with this, cookies are stored on the end device used by you.

Our login service enables visitors to our website to find out more about our company, download content and provide their contact information as well as other demographic information.

This information and the content of our website are stored on servers belonging to our software partner, HubSpot. They can be used by us to contact visitors to our website and to determine which of the services offered by our company they are interested in. All information recorded by us is subject to this privacy policy.

We use all recorded information exclusively to optimize our marketing measures. You can find HubSpot's privacy policy at: https://legal.hubspot.com/privacy-policy.

Insofar as data are processed outside the EEA, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data privacy.

You can find further information from HubSpot regarding the EU data protection regulations at: https://legal.hubspot.com/data-privacy. You can find more information on the cookies used by HubSpot at: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser and https://knowledge.hubspot.com/privacy-and-consent/hubspot-cookie-security-and-privacy

The collection and storage of data only takes place after explicit consent according to Article 6 (1)(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

Via HubSpot, you can unsubscribe from the sending of e-mails using a link in the respective e-mail.

3.3. Newsletter

This service is used on the following website versions: International, Australia, Belgium, Denmark, France, Germany, India, Italy, Japan, Mexico, Netherlands, Poland, Singapore, South Korea, Spain, Sweden, Switzerland, Turkey, United States of America, United Kingdom.

Our website gives you the option of subscribing to free newsletters. When you register, the data from the input mask are transmitted to us.

The only mandatory field is your e-mail address. You also have the option of entering your title, surname and first name as well as the company you work for.

To ensure that no mistakes are made when entering your e-mail address, we use what is known as the double opt-in procedure: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our distribution list. The processing of your electronic contact data at this point is based solely on your consent (Article 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future. To do so, simply send a short note by e-mail to the e-mail address given under Section 2 or click on the "unsubscribe" button at the end of each newsletter.

If you have provided optional information when registering for our newsletter, we process this data on the basis of our legitimate interest (Article 6 (1)(f) GDPR) in the appealing presentation of our newsletter and exclusively for the purpose of addressing you personally within the newsletter.

The newsletter will also be sent out on the basis of sale of goods or services:

If you provide your e-mail address when purchasing goods or services, we may then use it to send you a newsletter. In such a case we will only send direct marketing via the newsletter for similar goods or services. The legal basis for sending the newsletter following sale of goods or services is Section 7(3) UWG (German Federal Unfair Competition Act).

You can object to the sending of the newsletter on the basis of an existing customer relationship at any time without incurring any costs other than the transmission costs according to the basic rates.

We will not disclose data to third parties in connection with data processing for the sending of newsletters. The data will only be used to send the newsletter.

Marketing emails will be sent with the professional mailing software Mailingwork, server location Germany. The emails contain a so-called tracking pixel. This is a miniature graphic integrated into HTML mailings in order to facilitate recording and analysis of log files. Leuze can use the embedded tracking pixel to identify whether and when an e-mail was opened. We use link tracking – technically worked out by forwarding via the email dispatch server – to evaluate which links are called up when. We use this to create a personal user profile.

The personal data collected via newsletter tracking is stored by the party responsible for the processing and evaluated to optimize dispatch of email and to adapt the content of future mailings even better to data subjects' interests. The personal data collected is not passed on to third parties. Data subjects are entitled to withdraw the declaration of consent given for this purpose – via the double opt-in procedure – at any time.

Following withdrawal, the controller responsible for the processing will delete the personal data and assign the record a no-profiling label for future mailings. If you unsubscribe from the newsletter, Leuze automatically interprets this as withdrawal.

3.4. Contact

You have the option of contacting us via our e-mail address or the contact form. Of course, we only use the personal data you transmit to us in this way for the purpose for which you provided them.

If we request details via our contact form which are not necessary for establishing contact, we always mark these as optional. These details help us to specify your request and to better deal with your concerns. Any communication of this information is expressly on a voluntary basis and with your consent pursuant to Article 6 (1)(a) GDPR. If these details relate to communication channels (for example e-mail address, telephone number), you also consent to us contacting you via this communication channel in order to answer your concerns.

You can, of course, withdraw this consent with effect for the future at any time. Please use the above contact address for this purpose.

3.5. Information material

You have the option of requesting information material from us about our products. To do this you, must complete the corresponding form. Of course, we only use the personal data you transmit to us in this way for the purpose for which you provided them.

If we request details on our information form that are not necessary for sending the information material, we always mark these as optional. These details help us to specify your request and to better deal with your concerns. Provision of these details is strictly voluntary and requires your consent. If these details relate to communication channels (for example e-mail address, telephone number), you also consent to us contacting you via this communication channel in order to answer your concerns.

You can, of course, withdraw this consent with effect for the future at any time. Please use the above contact address for this purpose.

3.6. Contact via live chat

This service is used on the following website versions: Germany.

You can contact us via a live chat and chat directly with our service staff. For this purpose, we use the cloud-based live chat from Userlike (Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany).

The live chat requires the use of cookies. They transfer the following information to us and to Userlike: transmitted data volume, browser type, browser version, chat history, device information, e-mail address, first name, IP address, last name, number of page views, information about the operating system, referrer URL, time zone, URL, date and time of request, status information.

The data is processed primarily inside the EU. As part of data processing by Userlike, data may be transferred to a third country outside the EU. The maximum storage period of the cookies is one year.

Data is transferred to us and to Userlike within the framework of this chat only if you have given your consent (Article 6 (1)(a) GDPR). All data is collected in order to make the live chat available. The data recipients are Leuze and Userlike UG. The latter can be contacted under privacy@userlike.com. Further information on data privacy at Userlike can be found here: https://www.userlike.com/en/terms#privacy-policy.

If within the framework of the live chat you provide us with details regarding other communication channels (e.g. e-mail address, phone number), then you also consent to our contacting you using one of these other channels, if necessary, in order to respond to your request.

You can end the chat at any time and withdraw your consent to subsequent processing of your data by sending us an appropriate message. To do so, please use the contact address given above under point 2.

4. Applicants

You can apply to Leuze online via our application portal. Your online application will be directly forwarded to the HR department via an encrypted connection, and will of course be treated confidentially. Your details will, of course, only be used to process your application and will not be forwarded to third parties outside the Leuze group of companies. The processing is carried out on the basis of Article 6 (1)(1)(a) and (b) GDPR as well as Article 26 (1) BDSG (German Federal Data Protection Act).

You can find further information on data processing during the application process in the data privacy declaration of our application portal. If you have applied for a particular position and it has already been filled or we think that you are just as or even more suitable for another position, we would gladly forward your application within the company. Please inform us if you do not wish to consent to forwarding. Your personal data will be deleted immediately after the application process has been completed, or after a maximum of six months, unless you have given us your explicit consent to your data being stored for longer.

Please bear in mind that we only offer the application portal for applications. If you nonetheless apply by email, we would like to explicitly point out that email attachments are not encrypted.

5. Customers

Due diligence and transparency is the basis for a trusting cooperation with our customers. We therefore inform you about how we process your data and how you can exercise the rights to which you are entitled under the General Data Protection Regulation. Which personal data we process and for what purpose depends on the respective contractual relationship.

You can find information on the controller and, if applicable, our data protection officer in this Data Privacy Declaration under Sections 2.1 and 2.2.

5.1. What data do we use?

If you make an inquiry, have us prepare a quotation or conclude a contract with us, we process your personal data. In addition, we also process your personal data, inter alia, to comply with legal obligations, to protect a legitimate interest or on the basis of your consent.

Depending on the legal basis, these are the following categories of personal data:

First name, surname
Communication data (telephone, e-mail address)
Department
Account information, especially registration and logins

5.2 What sources do the data come from?

We process personal data that we receive from our customers, service providers and suppliers or from other companies of the Leuze Group.

We may also obtain personal data from other sources such as: Credit agencies, publicly accessible sources: Commercial or association registers, debtors' registers, land registers

5.3. What purposes are your data used for?

We process your personal data specifically in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as well as all other applicable laws.

5.3.1. Based on your consent (Article 6 (1)(a) GDPR)

If you have given us your voluntary consent to the collection, processing or transmission of certain personal data, then this consent forms the legal basis for the processing of this data.

In the following cases, we process your personal data on the basis of consent given by you:

Sending an e-mail newsletter
Personalized newsletter tracking
Market research (e.g. customer satisfaction surveys)
Marketing and advertising - creation of customer profiles
Publication of a customer reference (name and picture)

5.3.2. For the performance of a contract (Article 6 (1)(b) GDPR)

We process your data insofar as this is necessary to maintain contractual relations, to service current contracts and to contact our customers.

Implementation of contractual relations
Contact
Processing an order in the repair service
Processing a return

5.3.3. For the fulfillment of legal obligations (Article 6 (1)(c) GDPR)

As a company, we are subject to various legal obligations. The processing of personal data may be necessary to fulfill these obligations.

Control and reporting obligations
Credit checks, age and identity checks
Prevention/defense against criminal acts

5.3.4. Based on our legitimate interest (Article 6 (1)(f) GDPR)

In certain cases, we process your data to protect a legitimate interest of ours or third parties.

Direct advertising or market and opinion research
Central customer data management in the Leuze Group
Measures for building and plant security
Video surveillance to uphold domiciliary rights
Ensuring IT security and IT operation
Creating and sending event photos

5.4. Who are your data shared with?

In order to fulfill our contractual and legal obligations, your personal data will be shared with various public or internal bodies, as well as external service providers.

To the extent it is necessary for the fulfillment of our contractual obligations, data may be passed on to other companies of the Leuze Group. You can find a constantly updated list of our companies under Section 2.1.

External service providers:

IT service providers (e.g. maintenance service providers, hosting service providers)
Service providers for file and data destruction
Printing services
Telecommunications
Payment service providers
Advice and consulting
Service providers for marketing or sales
Credit agencies
Authorized dealers
Service provider for telephone support (call center)
Web hosting service provider
Lettershops
Auditors

If we provide services in advance, e.g. for purchase on account, we may protect our legitimate interests by obtaining a credit check on the basis of mathematical-statistical procedures from Creditreform Stuttgart Strahler KG, Theodor-Heuss-Straße 2, 70174 Stuttgart, Germany. For this purpose we transmit the data required for a credit check to Creditreform Stuttgart Strahler KG, Theodor-Heuss-Straße 2, 70174 Stuttgart, Germany and use the information we receive on the statistical probability of a payment default to make a balanced decision on the justification, execution or termination of the contractual relationship. The credit check may include probability values (score values) calculated on the basis of recognized mathematical-statistical procedures using address data, among other things. Your protection-worthy interests will be taken into account according to the legal provisions.

Public authorities:
In addition, we may be required to disclose your personal data to other recipients, such as public authorities, to comply with legal notification requirements.

Financial authorities
Customs authorities
Social security institutions

If you have any further questions about the individual recipients, please contact us at the above address.

5.5. Will your data be transferred to countries outside the European Union (known as third countries)?

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently to countries within the European Union. We also use service providers located in third countries outside the European Union to process your data. For some of these third countries, the EU Commission has not yet determined whether they generally provide an adequate level of protection.

We have therefore taken special measures to ensure that your data are processed in third countries as securely as within the European Union. With service providers in third countries as well as within our group of companies, we agree the standard data protection clauses provided by the Commission of the European Union. These clauses provide appropriate safeguards for the protection of your data by third country service providers.

5.6. How long are your data stored for?

We store your personal data as long as it is necessary for the fulfillment of our legal and contractual obligations.

If the storage of the data is no longer necessary for the fulfillment of contractual or legal obligations, your data will be deleted, unless the further processing thereof is necessary to comply with legal retention obligations or to retain data until the expiry of existing limitation periods.

5.7. What rights do you have in relation to the processing of your data?

For details on your rights, please refer to Section 8 of this Data Privacy Statement.

6. Use of the webshop

6.1. Placing an order

You can use our webshop to purchase products from us without a customer login. To do so, we require your payment- and processing-relevant data. Mandatory information is indicated as such.

The following data in particular are collected:

First name, surname
Communication data (e-mail address, telephone number, fax number)
Billing address

As soon as you send your data, it is transmitted to our server via an SSL-encrypted connection. Payment processing is handled by an external service provider who is contractual obligated to us to ensure data protection and data security.

Your data are processed for the purpose of handling your order on the basis of Article 6(1)(b) GDPR. Our legitimate interest lies in the proper and legally compliant processing of orders and contact with a contact person that may be necessary in the process.

6.2. Customer account

When you place an order in our webshop, you have the possibility afterwards to save your data for future orders by setting up a customer account. In this case, we save the above-mentioned data for the duration of the customer relationship. However, you can at any time, also before termination of the customer relationship, request deletion of your data under the specified contact information.

The legal basis in this case is Article 6(1)(b) GDPR.

7. Social media

We operate channels on various social platforms to communicate directly with you and to inform you about interesting news from our company.

In doing so, we process the data of visitors to our channels, in particular information about user interactions (e.g. likes, comments, retweets), demographic and statistical data, as well as the data transmitted to us in the context of messages and comments.

We would like to point out that when using these social networks, the respective providers also gain access to your data. This data may be used by them for market research and advertising purposes. We have no further knowledge of the data processing by the providers of the social platforms concerned. We would like to point out that the links on our site to the respective platforms are purely links. Data processing by the platforms only takes place when you visit them.

The processing of personal data of visitors to our online presences is based on our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is to ensure communication with our customers, informing them about news related to our products.

Please note that the data processed when using social platforms and networks may be processed outside the European Economic Area.

For detailed information on the respective data processing and opt-out options, please refer to the following pages of the providers:

• YouTube / Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
Data privacy declaration: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated

• Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)
Data privacy declaration: https://privacy.xing.com/en/privacy-policy
Opt-out: https://privacy.xing.com/en/privacy-policy

• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
Data privacy declaration: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

• Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Data privacy declaration: https://help.instagram.com/519522125107875
Opt-out: https://help.instagram.com/contact/1845713985721890

• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Data privacy declaration: https://twitter.com/en/privacy
Opt-out: https://twitter.com/personalization

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Data privacy declaration: https://www.facebook.com/privacy/explanation
Opt-out: https://www.facebook.com/help/contact/367438723733209

• Whatsapp (WhatsApp Ireland Limited, Attn: Privacy Policy, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Data privacy declaration: https://www.whatsapp.com/legal/?eea=1#privacy-policy
Opt-out: https://www.whatsapp.com/legal/?eea=1#privacy-policy-managing-and-deleting-your-information

8. Surveys

Where appropriate, we may ask you to assist us by taking part in a short survey as part of an existing contact or after a service has been provided.

We usually use survey tools provided by third parties for this purpose. We always take care to design survey content to be anonymous and also to enable participation in a survey as far as possible without the collection and transmission of personal data. We always inform you which service provider we have selected to conduct a survey. Please note that certain surveys are conducted on the web interface of the respective service provider, meaning that data processing by the service provider is also possible. We have no influence on this processing.

9. Data transmission

9.1. Transmission to companies within Leuze group

We will generally not transmit your data to third parties outside of Leuze Group unless we are legally obliged to do so, or disclosure of data is required in order to pursue the contractual relationship or you have previously given explicit consent to the disclosure of your data. External service providers and partner companies will only receive your data if this is required in order to process your request. In these cases, however, we restrict the extent of the data we transmit to the minimum required. Where our service providers come into contact with your personal data, we ensure that they likewise comply with the requirements of data protection law. Please also observe the providers' respective data protection notices. Responsibility for the content of outside services lies with the relevant service provider, whereby we check the services for compliance with legal requirements as far as we reasonably can.

9.2. Transmission to external service providers

Your data will be forwarded to service partners where they act on our behalf and support Leuze in providing your services.
Contracted providers will process your personal data within the framework of order processing according to Article 28 GDPR. The aforementioned service providers only receive access to personal information which is required for the fulfillment of their respective duties. Service providers are prohibited from forwarding your personal data or using it for other purposes, in particular for their own advertising purposes.
Where external service providers come into contact with your personal data we have taken legal, technical and organizational measures and carried out regular controls to ensure that these service providers also comply with the applicable data protection regulations. Your personal data is not forwarded to other companies for commercial purposes.

10. Rights of data subjects

If your personal data are processed, you are a data subject in the sense of the GDPR and you have the following rights in relation to the controller:

• Right to information

You may demand confirmation from us as to whether we are processing your personal data. If we have processed your data, you have further rights to information defined in Article 15 GDPR.

• Right to correction

If your data collected by us is incorrect or incomplete, you may demand that we correct it without undue delay according to Article 16 GDPR.

• Right to restriction of processing

Under the conditions given in Article 18 GDPR, you may also be able to demand that the processing of your personal data be restricted.

Following restriction, your data may only be processed with your consent or to assert, exercise or defend against legal claims, or to protect the right of another natural or legal person, or for reasons of substantial public interest on the part of the European Union or a Member State. We will inform you before the restriction is lifted.

• Right to deletion

If one of the reasons in Article 17(1) GDPR applies, you can demand that we immediately delete your personal data, unless there is an exception to the deletion obligation according to Article 17(3) GDPR.

• Right to information

If you have exercised your right to correction, deletion or restriction of processing in relation to us, we are obliged according to Article 19 GDPR to inform all recipients of your personal data, unless this is impossible or entails disproportionate expense. You also have the right to be informed of the recipients. You have the right to be informed of these recipients by the controller.

• Right to data portability

Article 20 GDPR also gives you the right to receive the personal data relating to you from us in a machine-readable format and to transmit the data to another controller without hindrance provided that the requirements of Article 20(1)(a) GDPR are met, or to have us transmit your personal data directly to another controller, if this is technically feasible and does not impinge on the freedoms and rights of other persons. This right does not apply to processing of personal data which is necessary for the completion of a duty in the public interest, or for the exercise of official authority.

• Right to object

You have the right to lodge an objection with Leuze against the processing of your personal data according to Article 6(1)(f) GDPR.

If you have lodged a complaint, we will cease to process your personal data unless protection-worthy reasons for the processing outweigh your interests, rights and freedoms or the processing is for the purpose of asserting, exercising or defending against legal claims.

• Right to Withdraw Declaration of Consent under Data Protection Law

You have the right to withdraw your declaration of consent under data protection law at any time in relation to Leuze. Withdrawal of consent does not affect the legality of the processing which took place on the basis of your consent prior to the withdrawal.

• Right to complain to the supervisory authority

Regardless of any other administrative or judicial legal remedy, you have the right to complain at any time to a supervisory authority, especially in the Member State of your residence, your workplace or the location of the supposed breach, if you believe that the processing of your personal data breaches this Regulation.

11. Data security

Leuze uses technical and organizational security measures to protect the data we manage against intentional or unintentional manipulation, loss, destruction, and unauthorized access. Our security measures are continually improved in line with technological developments.

12. Status of Data Privacy Statement

This established Data Privacy Declaration will be updated on an ongoing basis as the Internet or our offering develops. We will announce changes on this site in due time. You should regularly visit this site in order to stay informed on the current state of our data privacy information.