Privacy Policy

Our Handling of Your Data and Your Rights – Information acc. to Art. 13, 14 and 21 of the EU General Data Protection Regulation (GDPR)

With the following information we would like to give you an overview of our processing of your personal data and your rights resulting from it. Which data is processed in detail and how it is used depends largely on the services requested or agreed upon and the functions used in our Internet presence. Therefore, not all statements made here may apply to you.

Who is responsible for the data processing and whom can I contact?

Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Ushio Germany GmbH
Muenchener Strasse 10
85643 Steinhoering
Germany

You can reach our company data protection officer at:
datenschutz@ushio.de

Your rights as the data subject

You can exercise the following rights at any time using the contact details of our data protection officer:

Information on your data stored by us and the processing thereof (Art. 15 GDPR),
Rectification of inaccurate personal data (Art. 16 GDPR),
Deletion of your data stored by us (Art. 17 GDPR),
Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data with us (Art. 21 GDPR) and
Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us consent, you may withdraw it at any time, which will remain in effect in the future.

You can contact a supervisory authority with a complaint at any time. The supervisory authority that oversees us is the following: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Collecting general information during a visit to our website

Type and purpose of the processing:
When you access our website – i.e. if you do not register or submit information – information of a general nature will be collected automatically. This information (server log files) contains the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

It is processed in particular for the following purposes:

Ensuring an unproblematic website connection
Ensuring seamless use of our website
Analysis of system security and stability as well as
For additional administrative purposes.

We will not use your data to draw conclusions about your person. This type of information will be statistically analysed by us if necessary to optimise our website and its underlying technology.

Legal basis:
The processing occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website as well as in protecting our website as effectively as possible against cyberattacks.

Recipients:
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).
Wordfence serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the accesses made to our website and block them if necessary.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.wordfence.com/help/general-data-protection-regulation/.

Retention period:
The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, after the respective session has ended, for data that are used to make the website available.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized, so that an assignment of the accessing client is no longer possible.

Mandatory or required provision:
The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without the IP address however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited. For this reason, an objection is excluded.

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

You can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Internet Explorer / Edge: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
Opera: http://www.opera.com/help
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Type and purpose of the processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:
Shopping cart
Language settings

Legal basis:
The processing occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in a user-friendly design of our website.

Recipients:
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.

Mandatory or required provision:
The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without these data however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited.

Objection:
Please read the information about your right to object according to Art. 21 GDPR below.

Contact form

Type and purpose of the processing:
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.

Legal basis:
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).

By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.

If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).

Recipients:
Recipients of the data are our employees for replying to your inquiry.

Retention period:
The data will be deleted no later than 6 months after processing the inquiry.

Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.

Mandatory or required provision:
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.

Light planning and other contractual business relations

Type and purpose of the processing:
The data provided by you within the scope of our business relationship will be stored for the purpose of contract processing. This involves the following personal data:

Company name with legal form and address; title and name; telephone numbers; fax numbers; email addresses; field of activity or position

Legal basis:
The data is processed for the purpose of fulfilling contractual obligations (Art. 6 Para. 1 (b) GDPR), i.e. for the execution of our contract and/or ancillary contractual services (e.g. guarantee notifications or retrieval by manufacturer).

Insofar as necessary, we process the data beyond the actual performance of the contract in order to safeguard legitimate interests (Art. 6 Para. 1 (f) GDPR), e.g. to assert legal claims and defend in the event of legal disputes or for processing in the ERP or CRM system.

Recipients:
Recipients of the data are employees for contact with you and for contractual cooperation (including the fulfillment of pre-contractual measures).

Recipients of the data are, if applicable, contract processors who support us in the execution of contractual obligations. Recipients of the data may also be technical service providers who act as contract processors for the operation and maintenance of our EDP or IT applications.

Retention period:
We process and store your personal data as long as this is necessary for the fulfilment of our contractual obligations. If the data is no longer necessary for the fulfillment of contractual obligations, it will be regularly deleted, unless exceptions arise from statutory storage obligations (e.g. HGB, BGB, AO).

If the data processing is carried out in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists and no storage obligations stand in the way of deletion.

Mandatory or required provision:
Within the scope of the contractual relationship, you must provide those personal data which are necessary for the commencement, execution and termination of the contractual relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to conclude or execute the contract with you.

Applications

Type and purpose of the processing:
We will process the data you provide as part of an application solely for the purpose of assessing your professional suitability and for contacting you.

Legal basis:
The processing is carried out for the purpose of establishing an employment relationship within the scope of implementing pre-contractual measures, which are carried out upon request, § 26 BDSG.

Recipients:
Within the company, access to your data is granted to those departments that need it to fulfill contractual, legal and supervisory obligations and to safeguard legitimate interests.

Retention period:
If your application is rejected, it will be deleted six months after the decision is announced.

If an employment relationship is established, the application documents will be stored at Ushio Germany GmbH for at least the period of employment.

Mandatory or required provision:
The provision of the aforementioned personal data is neither legally nor contractually mandatory. However, without the information provided, it is not possible to process the application.

Social Plugins

Our websites use social plugins of the providers listed below. The plugins can be recognized by the fact that they are marked with the appropriate logo.

These plug-ins may be used to send and possibly use information, including personal information, to the service provider. We prevent the unconscious and unwanted collection and transmission of data to the service provider through a 2-click solution. To activate a desired social plugin, it must first be activated by clicking on the corresponding button. Only through this activation of the plugin is the detection of information and its transmission to the service provider triggered. We do not collect personally identifiable information by means of social plugins or their use.

We have no control over what data an enabled plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the services of the provider will be developed and at least the IP address and device-related information will be collected and used. It is also possible that the service providers try to save cookies on the computer used. Please refer to the privacy policy of the respective service provider to see which specific data is collected here and how it is used. Note: If you are logged in to Facebook at the same time, Facebook may identify you as a visitor to a particular page.

We have integrated the social media buttons of the following companies on our website

LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA)
YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA)
Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA)
WhatsApp (Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA)

Embedded YouTube videos

We embed YouTube videos on several of our websites. The operator of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheater Pkwy, Mountain View, CA 94043, USA (hereinafter ‘Google’). When you visit a page with the YouTube plug-in, a connection to YouTube’s servers will be created, which tells YouTube which pages you visit. When you are logged into your YouTube account, YouTube can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

You will find additional information on the purpose and scope of the data collection and its processing by YouTube in the provider’s privacy policy, as well as additional information on your rights and setting options for protecting your privacy (https://policies.google.com/privacy).

Revocation of consent:
The provider does not currently offer any possibility for a simple opt-out or blocking of data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or for all cookies and data transfers that are not technically necessary. In this case, however, you may not be able to use our website, or only to a limited extent.

Use of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can find more information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Revocation of consent:
You can prevent tracking by Google Analytics on our website by clicking on this link. This will install an opt-out cookie on your device. This prevents the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

Embedded YouTube videos

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Usage of Google Maps

On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on managing your own data in connection with Google products can be found here: https://www.dataliberation.org

By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Processing based on legal requirements (Art. 6 Para. 1 (c) GDPR)

We are subject to various legal obligations that entail data processing. This can affect all the above mentioned types of processing. These include, for example:

Tax laws and accounting regulations
meeting the requests and requirements of supervisory or law enforcement authorities
the fulfillment of fiscal control and reporting obligations

In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purpose of gathering evidence, prosecution or enforcement of civil law claims.

A transfer of data to recipients outside of our company will only take place in compliance with the applicable data protection regulations. Recipients of personal data can be, for example:

Public bodies and institutions (e.g. financial or criminal prosecution authorities) in case of a legal or official obligation
Credit and financial service providers (for the processing of payment transactions)
Tax consultants or economic, wage tax and tax auditors (if there is a statutory audit mandate)

Data security

We only handle personal data to the extent that this is possible in accordance with data protection regulations. In doing so, we also strive to take all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at all times.

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Our employees are obliged to observe the regulations of the GDPR and the BDSG when handling data.

Information on your right to object according to Art. 21 GDPR

Case-specific right to object:
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of personal data pertaining to you, which occurs pursuant to 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision in accordance with Art. 4(4) GDPR.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purpose of enforcing, carrying out or defending legal claims.

Recipient of an objection:
The objection should be addressed to the data protection officer of the Ushio Germany GmbH:
datenschutz@ushio.de

Revision of our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.

The most recent version can always be found on our webpage.

Questions for the data protection officer

If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:

datenschutz@ushio.de

Last revision: 8^th April 2021

The privacy policy was created via the activeMind AG (Version #2020-09-30).