Privacy Policy
for the website
heidelbergengineering.com
of Heidelberg Engineering GmbH

6th September 2021

Table of contents

  1. General
  2. Contact
  3. Collection of personal data when visiting our website
  4. Cookies
  5. Convenience functions
  6. Social Media
  7. Newsletter
  8. Webinars
  9. Usability studies recruiting questionnaire
  10. Pardot
  11. Google Analytics
  12. Google Tag Manager
  13. Integration of Google Maps
  14. Integration of YouTube-Videos
  15. Integration of Survicate
  16. Virtual Booth
  17. Use of Usercentrics
  18. Your rights
  19. Right to object
  20. Withdrawal of consent
  21. Information in the Publisher section
  22. Changes of this Privacy Policy

1 General

We appreciate your interest in our website and our company.

Below we inform you about personal data collected when you visit this website. Personal data is factual or personal information about a specific or specifically identifiable person, for example name, address, email address and user behavior.

Controller in accordance with Article 4 no. 7 EU General Data Protection Regulation (GDPR):

Heidelberg Engineering GmbH
Max-Jarecki-Strasse 8
69115 Heidelberg
Germany
Email: info[at]HeidelbergEngineering.com

For further contact information please refer to the Publisher section.

You can reach our Data Protection Officer at:

CL Compliance und Datenschutz GmbH & Co KG
Douglasstraße 11 – 15
76133 Karlsruhe
Germany
Phone: +49 721 91250880
Email: HeidelbergEngineering[at]compliance-datenschutz.de

2 Contact

You can send us your inquiry to the email addresses we provide or use our general contact form. The personal data that you provide to us as part of your inquiry will solely be stored and used by us to respond to your inquiry. We delete this personal data after the storage is no longer necessary or restrict the processing if there are statutory storage obligations.
The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR, when using the contact form also Article 6 paragraph 1 s. 1 lit. a GDPR. If you contact us in connection with an existing contract or a contract you wish to enter into with us, additional legal basis is Article 6 paragraph 1 s. 1 lit. b GDPR.

 

3 Collection of personal data when visiting our website

When using our website for informational purposes only, without registering or transmitting information to us, we only collect the personal data that your browser transmits to our server. Upon accessing our website, we collect the following data:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of request (concrete page)
  • Access status/http status code
  • Amount of data transferred with each request
  • The requesting domain
  • Browser
  • Operating system and its surface
  • Language and version of browser software

This data is technically necessary for us to display the website to you and to ensure stability and security. The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

4 Cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your terminal device, assigned to the browser you are using, and through which certain information flows to the site that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies
Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies
Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

Here you will find information about the cookie logoff of the most common browsers:

Depending on their function and purpose, cookies can be divided into the following categories:

Essential cookies
Essential cookies are required to be able to use the navigation and basic functions of the website.

Marketing cookies
Marketing cookies are used for the targeted, user-relevant presentation of content. This allows individual advertising to be controlled.

When you access our website, you will be informed about the use of cookies and your consent to the processing of personal data used in this context will be obtained (see the section “Use of Usercentrics” of this Privacy Policy). This also includes a reference to this Privacy Policy.

The legal basis for the processing of personal data using essential cookies is Article 6 paragraph 1 s. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies that are not required is, if the user has consented to the use, Article 6 paragraph 1 s. 1 lit. a GDPR.

The cookie settings can be adjusted at any time under the following link and consent already granted can be withdrawn: Privacy settings.

 

5 Convenience functions

For an optimal presentation of our website (e.g. adaptation to different screen sizes, fade-in menu, input control of the contact form) we use techniques such as Javascript and CSS (cascading style sheets). You can disable the use of these techniques by making the appropriate settings in your browser. Please be aware that some areas of our website may not function properly then.

6 Social Media

This website contains links to our appearances on various social media platforms. You can recognize these by the logo of the respective social media provider. When you use our website, no personal data is initially passed on to the providers of the social media platforms. Only when clicking on these links, you will be forwarded to the platform of the respective social media provider and then personal data will be transmitted to the provider. By doing so, you leave our website and we have no influence on the then collected data and data processing procedures, nor are we aware of the full scope of the data collection, the purposes and the storage periods.

If you click on such a link, the social media provider receives the information about the subpage of our website accessed by you. In addition, the data listed in the section “Collection of personal data when visiting our website” of this Privacy Policy will be transmitted. This occurs regardless of whether you have an account on this social media platform and are logged in there. If you are logged in, the data collected by the social media provider will be directly assigned to your account.

The social media provider stores the personal data as user profiles and uses them for purposes of advertising, market research and/or demand-driven design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of demand-driven advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective social media provider to exercise this right.

For more information on the purpose and scope of data collection and processing by the social media provider, please refer to the privacy policies of these providers, which are provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the providers including URLs of their privacy policy:



a) LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA; in the European Economic Area (EEA) and Switzerland: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; http://www.linkedin.com/legal/privacy-policy.



b) YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; in the European Economic Area (EEA) and Switzerland: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=en

7 Newsletter

With your consent to the collection, processing and use of your data, you can subscribe to our newsletters on various topics, with which we inform you regularly about products, training offers, learning materials, events and news. To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm your newsletter subscription. In order to prove your registration and, if necessary, to be able to clarify a possible misuse of your personal data, we log the subscription to the newsletter. We save the sending of the confirmation mail and the receipt of your hereby requested response as well as the data of the registration and confirmation. The data will be used solely by Heidelberg Engineering and will not be passed on to third parties. If you do not confirm your registration within two weeks, your information will be deleted.

The only mandatory data for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and will be used to address you personally. The legal basis is Article 6 paragraph 1 s. 1 lit. a GDPR.

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time. To do so, click on the link provided in each newsletter, send an email to Newsletter@HeidelbergEngineering.com  or send a message to the contact details of the controller as stated in this privacy policy.

Please note that we analyze your user behavior when sending the newsletter. For this analysis, the emails sent contain tracking pixels, so-called one-pixel image files, and personalized tracking links. We use this data to find out which topics are of interest to you and to improve the content provided. We record whether and when the newsletters we send to you are opened and which links are clicked on. The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

Tracking based on the one-pixel image files is prevented if you have deactivated the display of images in your email program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place. Clicks on personalized tracking links are always logged.

To provide our newsletter service, we use the marketing automation solution Pardot, which we explain in the “Pardot” section of this Privacy Policy.

8 Webinars

On this website we offer webinars using the GoToWebinar service provided by LogMeIn USA, Inc. 320 Summer Street, Boston, MA 02210, USA. In the European Economic Area (EEA) and Switzerland, the service is provided by LogMeIn Ireland Limited, The Reflector, 10 Hanover Quay, Dublin 2, D02R573, Ireland (“LogMeIn”).

The registration button takes you directly to the appropriate GoToWebinar registration page created by us. If you register for the webinar there, you will receive confirmation, reminder and follow-up emails via the GoToWebinar service. LogMeIn will process your personal data collected in connection with the registration for the webinar and the conduct of the webinar solely for the purpose of providing and operating the GoToWebinar Service. The legal basis is Article 6 paragraph 1 s. 1 lit. a GDPR.

Upon registration for one of our webinars, your data will be transferred to Pardot (see the “Pardot” section of this Privacy Policy). The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

For more Information on LogMeIn, please visit: https://www.logmeininc.com/legal

9 Usability studies recruiting questionnaire

On this website we offer a recruiting questionnaire for usability studies using the service “Forms” provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. In the European Economic Area (EEA), the United Kingdom, and Switzerland, the service is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”).

This questionnaire serves for the recruiting of participants for our usability studies. If you want to help in improving the usability and user experience of Heidelberg Engineering devices, please fill out the questionnaire.

The data you enter will be used by us solely in connection with the development of our products. The legal basis is Article 6 paragraph 1 s. 1 lit. a GDPR.

Microsoft Privacy Policy: https://privacy.microsoft.com/en-US/privacystatement

10 Pardot

We use Pardot, the marketing automation solution of Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA, which is linked to our Salesforce CRM system. In addition to the Salesforce infrastructure, Pardot uses Amazon Web Services, Inc. as a hosting provider (third-party hosting provider). The data processing is carried out on our behalf on the basis of a contract data processing agreement that we have concluded with Salesforce.

We use the Pardot software in online marketing for:

  • systematically recording, analyzing and optimizing our website
  • provision of personalized content and product recommendations
  • implementation of (automated) marketing campaigns and advertising activities
  • measuring the success of marketing campaigns
  • implementation of our email newsletter service
  • provision of landing pages and forms

The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

To register for our email newsletter service, we provide you with a Pardot form embedded in our website or – if your browser does not display the form – directly with a link to the form created in Pardot. When you click on the subscribe button in this Pardot form, a session cookie called “Pardot” is set in your browser by Pardot. We have no influence on the setting of the cookie and its content.

For more information on Salesforce/Pardot, please visit:

 

11 Google Analytics

This website uses Google Analytics, a web analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In the European Economic Area (EEA) and Switzerland, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”, which are text files saved on your computer, to help the website to analyze how you use the site. The legal basis is Article 6 paragraph 1 s. 1 lit. a GDPR.

The information generated by the cookies and regarding your behavior when using the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. If the IP anonymization is activated, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area before transferring data. Only in exceptional cases, the full IP address is sent to Google servers in the USA and then shortened.

On behalf of the website provider, Google will use this information for the purpose of analyzing your behavior when you are using the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider. Google will not link your IP address transmitted by your browser as part of Google Analytics to any other data stored by Google.

You may disable cookies by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can object to forwarding the data collected with cookies when you visit this website (including the IP address) to Google and prevent Google from processing of data by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en-GB.

You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when you visit this website: Disable Google Analytics

Please be aware that if you choose to disable all cookies, also opt-out cookies will be disabled as well.

This website uses Google Analytics with the extension „_anonymizeIp()“. With this extension, all IP addresses will be shortened what makes it impossible to link data to a particular individual. If for some reason data can be linked to a specific individual this link will be directly excluded and personal data will be deleted.

Google Analytics Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
Google Privacy Policy: https://policies.google.com/privacy?hl=en

12 Google Tag Manager

We additionally use the Google Tag Manager provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In the European Economic Area (EEA) and Switzerland, the Service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With this service, website tags can be managed. The Google Tag Manager only sets up tags. Tags are code that is used to measure traffic and visitor behavior. The tags are provided by other services – in our case Google Analytics. The Google Tag Manager only manages these tags, does not set cookies and does not collect any personal data. If tracking is deactivated, this also applies to all tracking tags managed by the Google Tag Manager. The legal basis for the use of Google Tag Manager is Article 6 paragraph 1 s. 1 lit. f GDPR.

For more information about Google Tag Manager, please visit: https://www.google.com/analytics/terms/tag-manager

13 Integration of Google Maps

On this website we use the offer of Google Maps, a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In the European Economic Area (EEA) and Switzerland, the Service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably. The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

By visiting a subpage of our website that uses the Google Maps funktion, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Collection of personal data when visiting our website” of this Privacy Policy will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores the data as user profiles and uses them for purposes of advertising, market research and/or demand-driven design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of demand-driven advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy: https://policies.google.com/privacy?hl=en.

14 Integration of YouTube videos

We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and are directly playable from our website. The YouTube website is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In the European Economic Area (EEA) and Switzerland, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These videos are all integrated in the “extended privacy mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data listed below will be transferred. We have no influence on this data transfer. The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Collection of personal data when visiting our website” of this Privacy Policy will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to YouTube, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores the data as user profiles and uses them for purposes of advertising, market research and/or demand-driven design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of demand-driven advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy: https://policies.google.com/privacy?hl=en

15 Integration of Survicate

On this website we use the survey tool from Survicate Sp. z o. o., Zamiany 8 LU2, Warsaw, mazowieckie 02-786, Poland (“Survicate”). This allows us to display interactive surveys directly on the website and enables you to participate.

Your entries in the surveys are forwarded to Survicate for evaluation purposes without any personal reference. Also the cookies that Survicate sets and processes to recognize whether a user has already participated in the survey do not contain any personal data.

For more information on Survicate, please visit: http://help.survicate.com/en/articles/3943207-terms-of-service-privacy-policy-gdpr-and-dpa

16 Virtual Booth

On this website we provide you with a virtual booth. For this purpose we use SeekBeak, a software as a service provided by SeekBeak.com, 152 Schooner Close NW, Calgary, AB T3Z 1L1, Canada.

When visiting this virtual booth, no personal data is collected. Only cookies for general analysis purposes are set without any personal reference.

For more information on SeekBeak.com, please visit: https://seekbeak.com/privacy/.

17 Use of Usercentrics

On this website we use the Consent Management Tool Usercentrics of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (“Usercentrics”). The tool enables you to give consent to data processing via the website, in particular to set cookies, as well as to exercise your right to withdraw consent already given.. The data processing serves the purpose of obtaining and documenting required consents to data processing and thus to comply with legal obligations. Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Usercentrics: Date and time of the page view, information about the browser and the device you are using, opt-in and opt-out data. This data is not passed on to other third parties. The data processing is carried out to fulfill a legal obligation on the basis of Article 6 paragraph 1 s. 1 lit. c GDPR.

For more information on data protection at Usercentrics, please visit: https://usercentrics.com/privacy-policy/.

18 Your rights

You have the following rights concerning your personal data:

  • Right of access regarding the personal data concerning you that we process as controller (Article 15 GDPR)
  • Right to rectification of the personal data concerning you if they are stored incorrectly or incompletely (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to request the restriction of the processing of personal data concerning you (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to the processing of personal data concerning you (Article 21 GDPR).

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR).

Pursuant to Article 22 GDPR, you principally have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, we do not use such automated decision-making processes.

19 Right to object

If we process your personal data as part of a weighing of interests based on our overriding legitimate interests (legal basis Article 6 paragraph 1 s. 1 lit. f GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation.
If you exercise your right to object, we will no longer process this personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

If you have given consent to the processing of your personal data, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

21 Information in the Publisher section

We expressly object to the use of contact data published within the scope of the obligation to provide publisher information by third parties for sending advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.

22 Changes of this Privacy Policy

We reserve the right to amend this Privacy Policy in accordance with legal data protection regulations. The currently valid version can be viewed at any time in the Privacy Policy area of our website.