6. Google reCAPTCHA

We use the Google service reCAPTCHA v3 to determine whether a human or a computer is entering information into our contact or newsletter form. The legal basis for the use of Google reCAPTCHA is Article 6(1)(f) of the General Data Protection Regulation (GDPR). We have a legitimate interest in ensuring the security of our website and protecting ourselves against automated attacks.

To the best of our knowledge, Google uses the following data to verify whether you are a human or a computer: the IP address of the device you are using, the page on our site that you are visiting and on which the reCAPTCHA is embedded, the date and duration of your visit, the identification data of the browser and operating system types you are using, Google Account (if you are signed in to Google), mouse movements on the reCAPTCHA fields, as well as tasks requiring you to identify images, referrer URL (the address of the page from which the visitor came), cookies, keyboard behavior, language settings, JavaScript objects, and screen resolution.

When using Google reCAPTCHA, personal data may also be transferred to Google LLC’s Server(s) in the United States.

For more information about Google reCAPTCHA and Google’s Privacy Policy, please visit the following links: 
https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/about/.

To delete data stored through the use of reCAPTCHA, you must contact Google Support (https://support.google.com/?hl=de&tid=331611825143).

VIII. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and are entitled to the following rights vis-à-vis the controller:

1. Right of Access

You may request confirmation from the data controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you may request the following information from the data controller:

(1) the purposes for which the personal data is being processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific details cannot be provided, the criteria used to determine the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restrict processing by the controller, or a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information regarding the source of the data, if the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) of the GDPR and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended consequences of such processing for the data subject.

You have the right to request information regarding whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
 

2. Right to Rectification

You have the right to request that the controller rectify and/or complete your personal data if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without delay.

3. Right to Restriction of Processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require it to assert, exercise, or defend legal claims, or
(4) if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.
If the processing of your personal data has been restricted, such data—apart from its storage—may only be processed with your consent or for the purpose of asserting, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.
If the restriction on processing has been imposed in accordance with the above conditions, you will be notified by the controller before the restriction is lifted.

4. Right to Erasure

a) Obligation to Erase

You may request that the controller erase your personal data without delay, and the controller is obligated to erase such data without delay if any of the following grounds apply:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in connection with information society services offered pursuant to Art. 8(1) of the GDPR.
 

b) Disclosure to Third Parties

If the controller has made the personal data concerning you public and is obligated to erase it pursuant to Article 17(1) of the GDPR, it shall, taking into account the available technology and the cost of implementation, take appropriate measures, including technical measures, to inform controllers that are processing the personal data that you, as the data subject, have requested the erasure of all links to such personal data or of copies or replicas of such personal data.

c) Exceptions

The right to erasure does not apply if the processing is necessary

(1) for the exercise of the right to freedom of expression and information;
(2) to comply with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, to the extent that the right referred to in subsection (a) is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
(5) to assert, exercise, or defend legal claims.

5. Right to Information

If you have exercised your right to rectification, erasure, or restriction of processing with respect to the controller, the controller is obligated to notify all recipients to whom the personal data concerning you has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about these recipients.

6. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Art. 6(1)(b) of the GDPR, and
(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, to the extent that this is technically feasible. This must not adversely affect the freedoms and rights of others.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services—notwithstanding Directive 2002/58/EC—you have the option to exercise your right to object through automated procedures that use technical specifications.

8. Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to withdrawal.

9. Automated Decision-Making in Individual Cases, Including Profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is authorized by Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights, freedoms, and legitimate interests.

With regard to the cases mentioned in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which shall include, at a minimum, the right to request human intervention by the controller, to present your point of view, and to contest the decision.
 

10. Right to File a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place where the alleged infringement occurred, if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

IX. Marketing & Performance Tools

1. Google Analytics

When you visit our websites, the IP address of your Internet service provider is stored in anonymized form, along with the website from which you are visiting us, the pages you visit on our site, and the date and duration of your visit. It is not possible to identify you personally from this information, and we use the data solely for statistical analysis.

We use Google Analytics to collect this data, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. On our websites, the Google Analytics code has been extended to include ,gat._anonymizeIp();'. This ensures that IP addresses are collected anonymously (so-called IP masking).

The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to Google’s Privacy Policy: 
https://support.google.com/analytics/answer/6004245?hl=de.

2. Analysis by Leadinfo

This website uses a service provided by Leadinfo B.V., based in Rotterdam. This service displays publicly available company data—such as company names and addresses—based on IP addresses. Company identification is based solely on IP addresses. IP addresses are not stored after use.
In addition to this identification via IP addresses, two first-party cookies are used to provide us with information about how visitors use the website (analytics). These cookies are not linked to any other information, and no data is shared with third parties.
Objection to Data Collection:
If you wish to disable data collection (tracking), please click the corresponding button at: https://www.leadinfo.com/de/opt-out/
Data Processing on Behalf of a Client:
We have entered into a contract with Leadinfo for commissioned data processing and comply with data protection regulations.

Contact Leadinfo:
Leadinfo B.V.
Rivium Quadrant 141
2909 LC Capelle aan den IJssel
The Netherlands
hallo(at)leadinfo.com
+49 322 2109 6861

3. Messaging Software Lime Connect (formerly Userlike)

This website uses the messaging software Lime Connect (formerly Userlike), which allows you to communicate with us. Lime Connect must store some cookies on your device. However, your data is secure and will not be used to identify you personally.

4. Usercentrics

1. Service description
This is a consent management service. Usercentrics GmbH is used on the website as a data processor for the purpose of consent management.

2. Company Processing the Data
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany
datenschutz@usercentrics.com

3. Data Protection Officer
Below is the email address of the data protection officer of the data processorUnternehmens.datenschutz(at)usercentrics.com

4. Purposes of Data Processing
This list outlines the purposes of data collection and processing.

• Compliance with Legal Obligations
• Consent Storage

5. Technologies Used
This list includes all technologies used by this service to collect data. Typical technologies include cookies and pixels placed in the browser.

• Local Storage

6. Data Collected
This list contains all (personal) data collected by or through the use of this service.

• Opt-in and Opt-out Data
• Referrer URL
• User Agent
• User Settings
• Consent ID
• Time of consent
• Consent Type
• Template Version
• Banner Language

7. Legal Basis
The required legal basis for data processing is specified below

• Art. 6(1)(c) of the GDPR

8. Location of Processing
This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately.
European Union (consent database is located in Belgium)

9. Data Retention Period
Theretention period is the length of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer needed for the specified processing purposes. Consent data (consent and withdrawal of consent) are stored for three years. The data are then deleted immediately.

10. Data Recipients
The recipients of the collected data are listed below.

• Usercentrics GmbH
• Wachendorff Prozesstechnik GmbH & Co. KG

11. Click here to read the data processor’s privacy policy
https://usercentrics.com/privacy-policy/

5. 3DVieweronline

View and download 3D files with 3dvieweronline.

To enable our customers and prospective customers to view and download 3D files, we have integrated the 3D viewer provided by 3DVieweronline LTD (mailing address: Alpha Works Alpha Tower, Suffolk Street, Birmingham, B1 1TT, UK).

The integrated pages from 3DVieweronline/3DViewer do not store or process any personal data and do not use tracking cookies.
For statistical purposes, the 3DVieweronline/3DViewer pages may track anonymized data; however, this data cannot be linked to any identified or identifiable natural person.