Privacy

Information provided in accordance with Section 5 DDG:

Out-of-court dispute resolution

Data Privacy Statement (as of 24 June 2022)

I. Controller

Heinrich Georg GmbH Maschinenfabrik
PO Box 1240
57203 Kreuztal
Langenauer Straße 12
57223 Kreuztal

Telephone: +49 2732 779-0
Telefax: +49 2732 779-340

Web:www.georg.com
Email:georgnoSpam@georg.com

II. Data Protection Officer

Data protection officer of Heinrich Georg GmbH
– Maschinenfabrik –
Langenauer Straße 12
57223 Kreuztal,
or email:datenschutzbeauftragternoSpam@georg.com

III. Purposes and Legal Grounds of the Data Processing

1.) Technical provision of the GEORGsmartfactory
For the purpose of the technical provision of the GEORGsmartfactory, it is necessary for us to process certain automatically transmitted information from you so that your browser can display our GEORGsmartfactory and you can use the GEORGsmartfactory. Every time you access our website, this information will be automatically recorded and stored in our server log files. This information relates to the computer system of the accessing computer. In this respect, the following information is collected:

• IP address
• date and time of the request
• time zone difference in relation to Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• the respective volume of data transmitted
• website from which the request came
• browser
• operating system and its interface
• language and version of the browser software

We shall process your personal data for the technical provision of the GEORGsmartfactory on the basis of the following legal grounds:

• for the performance of a contract in accordance with Art. 6 (1) b) GDPR; and
• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, in order to be able to technically make the GEORGsmartfactory available to you. Our legitimate interest is to be able to provide you with an appealing, technically functioning and user-friendly GEORGsmartfactory, as well as to take measures to protect the GEORGsmartfactory against cyber risks and to prevent the GEORGsmartfactory from posing cyber risks to third parties.
• The use of essential cookies is based on Section 25 (2), no. 2 of the Act on the Regulation of Data Protection and Privacy in Telecommunications and Telemedia [TTDSG], as these are absolutely necessary for making our website available to you.

2.) Consent Management

On our website we use the consent manager Cookiebot from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. With the aid of the consent manager, we shall obtain your consent to certain data processing activities that require consent (e.g. analysis, tracking or the like). Using the consent manager enables us to inform you of the individual cookies and tools that we use. Via the consent manager, you can choose which cookies and tools you categorically wish to allow or decline. Additionally, the consent manager offers an overview of the cookies used as well as the possibility of changing or revoking your consent. This enables you to make an informed decision about the sharing of your data and enables us to use cookies and tools in a privacy-compliant, transparent and documented manner.

The consent manager processes your personal data in order to record your decision to allow cookies and tools and to store it for a renewed visit to our GEORGsmartfactory. These data include, among other things, the corresponding cookie with your (consent) decision as well as further usage data, in particular IP address, date and time of your consent, your browser's user agent as well as the URL from which the consent was sent.

Further information as well as the consent manager's data privacy statement can be found at: www.cookiebot.com/de/privacy-policy/

We shall process your personal data for the technical provision of our GEORGsmartfactory on the basis of the following legal grounds:

• for the use of cookie management for compliance with a legal obligation to which we as the controller are subject under Art. 6 (1) c GDPR in conjunction with Section 25 TTDSG. The legal obligation lies in informing you about cookies that we use, as well as obtaining and documenting your consent to data processing; and
• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, in order to be able to technically make cookie management available to you. Our legitimate interest is to be able to provide you with an appealing, technically functioning and user-friendly cookie management, as well as to take measures to protect the cookie management against cyber risks and to prevent the cookie management posing cyber risks to third parties.

The corresponding consent cookie provided by the consent manager is used on the basis of Section 25 (2) no. 2 TTDSG.

3.) Registration and log-in

In order to be able to use the GEORGsmartfactory, you need to be registered as a user for the GEORGsmartfactory. Only users from companies with which we have entered into a contract concerning use of the GEORGsmartfactory are eligible to register.

Our contractual partner (usually your employer) will inform us of which users are to have access to the GEORGsmartfactory. To this end, we need the user's first name, surname and email address. The information is linked to the company account in order to be able to associate the user with a contractual partner. Please note that we shall not store your password as readable text at any time. We do not know your password.

Moreover, you can add the following optional details to your profile during registration. These optional details make it easier for us to communicate with you:

• preferred language
• business address
• country

After you have successfully registered, we shall use your email address and your password in order to be able to authenticate you as a GEORGsmartfactory user and enable you to log on.

We shall process your personal data on the basis of the following legal grounds:

• for the performance of a contract between our contractual partner and us in accordance with Art. 6 (1) b) GDPR; as well as
• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, in order to be able to perform the contract with our contractual partner and, in this respect, enable you to use the GEORGsmartfactory.

4.) Use of the GEORGsmartfactory

When you log on to use the GEORGsmartfactory, we shall process your data provided by you during registration, in order to enable you to use the GEORGsmartfactory. This may involve our identifying you as an authorised user and contacting you in order to send you technical or legal information, updates, security messages or other information concerning, for example, the administration of the user account.

We shall process your personal data based on the following legal grounds:

• for the performance of a contract between our contractual partner and us in accordance with Art. 6 (1) b) GDPR; as well as
• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, in order to be able to perform the contract with our contractual partner and, in this respect, enable you to use the GEORGsmartfactory.

5.) Statistical analysis of use of the GEORGsmartfactory and reach expansion

For the purpose of statistical analysis of the use of our GEORGsmartfactory, we use cookies that enable your surfing behaviour to the analysed. This enables us to improve the quality of our GEORGsmartfactory and its content. We learn how the GEORGsmartfactory is used, which enables us to continually optimise the service we offer.

You can obtain from the consent manager further information on the cookies and tools that we use, their purposes and functions, the respective data processed, the data recipients, the place of processing or the sharing with so-called third countries (outside of the EU/EEA), as well as the duration of storage. You can access the consent manager via the website at any time.

We shall process your personal data for the statistical analysis of the use of our GEORGsmartfactory on the basis of the following legal grounds:

• your consent in accordance with Section 25 (1) TTDSG in conjunction with Art. 6 (1) a), Art. 7 GDPR.

6.) Support and user requests

In order to be able to process and answer your requests made to us, e.g. via the integrated chat or to our email address, we shall process your personal data communicated by you in this context. These data will invariably include your name and email address as well as the name of the company that is our contractual partner, in order to send you a reply, as well as the other information that you send us within your request.

We shall process your personal data for answering user requests on the basis of the following legal grounds:

• for the performance of a contract between our contractual partner and us in accordance with Art. 6 (1) b) GDPR;
• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, in order to be able to perform the contract with our contractual partner and, in this respect, enable you to use the GEORGsmartfactory; and
• where the aim of the request is to assert your data subject rights, the additional legal basis is Art. 6 (1) c) GDPR, as it is necessary to process your data for compliance with legal obligations.

7.) Compliance with statutory provisions

Additionally, we shall process your personal data in order to comply with other legal obligations applicable to us in connection with the provision of the GEORGsmartfactory. This includes, in particular, adherence to retention periods under trade, commercial or tax law. In this respect, we shall process your personal data on the basis of the following legal grounds:

• for compliance with a legal obligation to which we are subject under Art. 6 (1) c GDPR in connection with trade, commercial or tax law, insofar as we are obliged to record and retain your data.

8.) Enforcement of rights

Additionally, we shall process your personal data in order to be able to assert our rights and enforce our legal claims. We shall also process your personal data in order to be able to defend ourselves against legal claims. Finally, we shall process your personal data insofar as this is necessary for averting or prosecuting criminal offences. We shall process your personal data for this purpose on the basis of the following legal grounds:

• for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR, insofar as we assert legal claims or defend ourselves in legal disputes, or we prevent or throw light on criminal offences.

9.) Advertising purposes, such as newsletter, surveys etc.

With your consent, we shall use your data for advertising purposes, e.g. for sending our newsletter, for advertising surveys or for invitations to events of interest to you. In this respect, we shall collect mandatory information such as your e-mail address, but also information that you voluntarily provide to us.

We shall use the voluntary information in order to make our products and website customer-friendly for you, to be able to address you individually in future, to analyse your preferences and to inform you about the products that best suit you, and to make the advertising more useful and interesting for you. You can unsubscribe from the notifications at any time in your user account or by clicking on the link provided in the newsletter and unsubscribing.

We also use for this existing information, e.g. email delivery and read receipts, information about your computer and Internet connection, operating system and platform, your order history, your request history, date and time of the homepage visit and the products you have viewed. We use this information exclusively in pseudonymised form. By analysing and evaluating this information, we are able to improve our website and the service we offer and to send you individual advertising.

The evaluation and analysis of these data helps us to avoid randomly sending you advertising. Instead, we shall send you email or postal advertising, such as newsletters, product recommendations or invitations, that matches your areas of interest. To this end, we shall also, for example, compare which of our marketing emails you open, in order to avoid sending you unnecessary emails. If you provided us with your email address in connection with the purchase of goods or services, this address may then be used by us to send you a newsletter. In such case, only direct advertising for our own similar goods or services will be sent via the newsletter.

We shall use your personal data for sending newsletters, surveys, etc. and personalising the addressing on the following legal basis:

• Where you have given us your consent in accordance with Art. 6 (1) a) GDPR, and as regards analysing the response to our marketing communication, where applicable in conjunction with Section 25 TTDSG;
• Where you have provided us with your email address in connection with the purchase of goods or services, or we send you personalised advertising, in order to protect our legitimate interests under Art. 6, para. 1 lit. f of the GDPR in conjunction with 6 para 1 DDG and Section 6 para. 5 DDG in conjunction with Section 7 para. 3 of the German Act on Unfair Competition (UWG); our legitimate interest is based on our economic interests in the implementation of advertising measures and target-group-oriented advertising.

Use of data for email advertising, and your right to object

If we receive your email address in connection with the conclusion of a contract and the provision of our products, and you have not opted out, we reserve the right to provide you, by email, with regular offers regarding similar products from our range. You can opt out of this use of your email address at any time by sending a message to the contact option described below or via a corresponding link in the advertising email, without incurring any costs other than the cost of transmission at the basic rates.

IV. Links

Some sections of our websites contain links to websites of third-party providers. These websites are subject to their own data privacy principles. We are not responsible for their operation, including data handling. If you send information to or via such sites of third-party providers, you should check the data privacy statements of these sites before you send them information which can be associated with you.

V. Categories of Recipients

Initially, only our employees will obtain knowledge of your personal data. We shall also share your personal data, where this is legally permitted or required, with other recipients who provide services for us in connection with our GEORGsmartfactory. We shall restrict the sharing of your personal data to what is necessary, in particular for enabling us to provide you with the service.

The categories of recipients of your personal data are listed for you below:

• IT service providers for the administration, provision of individual functions and hosting of our GEORGsmartfactory; these recipients act exclusively as data processors in accordance with Art. 28 GDPR

VI. Transfer to Third Countries

We shall not transfer your personal data to countries outside of the EU or EEA or to international organisations.

VII. Duration of Storage

Where our GEORGsmartfactory is used on a purely informative basis, we shall, as a rule, only store your personal data on our servers for the duration of your visit to our GEORGsmartfactory. If you send us a support request, we shall store your personal data for the duration of the support request and, additionally, for a period of up to three months after the end of the support request.

Cookies installed by us are usually also deleted after you have left our GEORGsmartfactory. However, this does not apply to persistent cookies. These usually remain stored for a period of 26 months. You can obtain from the consent manager further information on the duration of storage of the cookies and tools that we use. Additionally, you have the possibility of deleting installed cookies yourself at any time.

Your user data will initially remain stored for the duration of the contractual relationship.

We then additionally store your personal data until any legal claims arising from the relationship with you become statute-barred, in order to use these data as evidence where necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.

Upon commencement of limitation, we shall delete your personal data, unless there is a legal obligation to retain the data, for example under the German Commercial Code [Handelsgesetzbuch, HGB] (Sections 238, 257 (4) HGB) or under the German Fiscal Code [Abgabenordnung, AO] (Section 147 (3), (4) AO). These retention obligations can amount to two to ten years.

VIII. Your Rights as a Data Subject

Subject to the statutory prerequisites, you are entitled to the following rights as a data subject, which you can assert against us:

Right of access: Under Art. 15 GDPR, you have the right to obtain from us confirmation as to whether we process personal data concerning you, and, where that is the case, you are also entitled under Art. 15 GDPR to obtain access to these personal data as well as certain further information (including the purposes of the processing, categories of personal data, categories of recipients, the envisaged storage period, the origin of the data, the use of automated decision-making and, in the case of transfer to a third country, the appropriate safeguards) and a copy of your data.

Right to rectification: You are entitled under Art. 16 GDPR to obtain from us rectification of any inapplicable or incorrect personal data stored concerning you.

Right to erasure: Subject to the prerequisites under Art. 17 GDPR, you are entitled to obtain from us, without delay, erasure of personal data concerning you. The right to erasure does not apply where, among other things, the processing of the personal data is necessary for (i) exercising the right of freedom of expression and information, (ii) compliance with a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) the assertion, exercise or defence of legal claims.
Right to restriction of processing: Subject to the prerequisites under Art. 18 GDPR, you are entitled to obtain from us restriction of the processing of your personal data.

Right to data portability: Subject to the prerequisites under Art. 20 GDPR, you are entitled to obtain from us in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us.

Right to withdraw consent: You have the right to withdraw at any time, with effect for the future, any consent that you have given regarding the processing of personal data.

Right to object: Subject to the prerequisites under Art. 21 GDPR, you are entitled to object to the processing of your personal data, in which case we must cease processing your personal data. The right to object applies only within the limits envisaged in Art. 21 GDPR. Additionally, our interests may preclude discontinuation of the processing, such that we are entitled to process your personal data despite your objection.

Right to complain to a supervisory authority: Subject to the prerequisites under Art. 77 GDPR, you are entitled to complain to a supervisory authority, in particular in the Member State where you reside or work or where the alleged breach took place, if you are of the opinion that the processing of the personal data concerning you breaches the GDPR. The right to complain is without prejudice to any other administrative or judicial remedy.

The supervisory authority relevant to us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
Fax: 0211/38424-10
Email:poststellenoSpam@ldi.nrw.de

However, we recommend that you always first of all address any complaint to our data protection officer.

If possible, your requests to exercise your rights should be addressed in writing to the above address or directly to our data protection officer.

IX. Scope of your obligations to provide data

As a rule, you are not obliged to communicate your personal data to us. If you do not do so, however, you will not be able to use the GEORGsmartfactory. Personal data that we do not necessarily require for the aforementioned processing purposes are marked as optional details by way of "where applicable" or another sign.

X. Automated Decision-making / Profiling

We do not use automated decision-making or profiling (automated analysis of your personal circumstances).

XI. Amendments

We reserve the right to amend this Data Privacy Statement at any time. Any amendments made will be announced by publication of the amended Data Privacy Statement on our website. Unless otherwise specified, such amendments will enter into effect immediately. Therefore, please check this Data Privacy Statement regularly in order to view the respective latest version.