Data privacy & legal information

1. DATA PRIVACY AT A GLANCE

General information

The following provides a simple overview of what happens with your personal data when you visit our website. Personal data is any data which can be used to identify you personally. Please refer to our data privacy statement below this text for detailed information on the topic of data privacy.

Data collection on our website

Who is responsible for data collection on this website?  
Data processing on this website is provided by the website operator. Please obtain their contact details from the Legal Information on this website.

How do we collect your data? 
On the one hand, your data will be collected by you providing us with this information. This can be, for instance, data that you enter into a contact form.

Other data will be automatically collected through our IT systems when you visit the website. These are primarily technical data (e.g., Internet browser, operating system or time of page visit). This data is automatically collected when you access our website.

For which purposes do we use your data? 
Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyse your user behaviour.

Which rights do you have regarding your data? 
At any time, you have the right to obtain information about the origin, recipient and purpose of your stored personal data free of charge. You also have a right to request rectification, disabling or erasure of these data. Please do not hesitate to contact us in this regard and other questions concerning the topic of data privacy at the address given under Legal Information. You also have the right to appeal to the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your surfing behaviour can be evaluated statistically. This takes place in particular using cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent this by not using specific tools. The following data privacy statement will provide detailed information in this regard.

You can object to this analysis. We will inform you in this data privacy statement about your means of objection.

2. GENERAL INFORMATION AND MANDATORY INFORMATION

Data privacy

The operators of this websites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this data privacy statement.

Various personal data will be collected when you access this website. Personal data is any data which can be used to identify you personally. This data privacy statement explains which data we collect and for which purpose we use them. It also explains how and for which purpose this happens.

We point out explicitly that data transfer over the Internet (such as communication by e-mail) can be subject to security vulnerabilities. It is not possible to protect such data completely against access by third parties.

Note regarding the controller 

The controller responsible for data processing on this website is:

Schuster Maschinenbau GmbH, Wernher-von-Braun-Str. 7, 86920 Denklingen
Represented by: Andreas Strobl, Christian Steidle

Telephone: +49 (0)8243 / 9680-0, e-mail: info@schuster-maschinenbau.de

The controller is the natural or legal person who, alone or together with others, decides about the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke a previously granted consent at any time. You can do this by simply sending an informal e-mail to us. The legality of data processing until the revocation remains unaffected by the revocation.

Right to appeal to the competent supervisory authority 

In case of breaches of data protection law, data subjects have the right to appeal to the competent supervisory authority. The Bavarian Data Protection Authority is responsible for our company in principle.

Right to data portability 

You have the right to obtain data that we process in an automated manner on the basis of your consent or in the performance of a contract yourself or have them transferred to a third party in a common, machine-readable format. If you require the direct transfer of data to another controller, this will only be done in so far as this is technically feasible.

SSL and TLS encryption 

We use SSL/TLS encryption for security reasons and to protect the transmission of confidential contents, e.g., orders or inquiries you send to us as the website operator. An encrypted connection is indicated by the browser's address bar changing from "http://" to "https://" and, if applicable, the lock icon in your browser bar.

When SSL/TLS encryption is enabled, the data you transmit to us cannot be viewed by third parties.

Access, disabling, erasure 

Within the context of the valid legal regulations, you have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing at any time and, if required, the right to rectification, disabling or erasure of these data. Please do not hesitate to contact us in this regard and other questions concerning the topic of data privacy at the address given under Legal Information.

Objection to advertising e-mails 

We hereby object to the use of contact data which has been published in accordance with legal notice requirements for the transmission of not expressly solicited advertising and information material. The site operators explicitly reserve the right to take legal action in the case of unrequested sending of promotional information, for example, spam e-mails, etc.

Transfers to third countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this takes place in the context of the use of services by third parties or disclosure or transfer of data to third parties, this will only happen in order to fulfil our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will process the data or have them processed in a third country only in the presence of the special requirements of Art. 44 et seq. GDPR. In other words, processing is done, for example, on the basis of special safeguards such as the officially recognised ascertainment of an appropriate level of data protection similar to that in the EU (for example, the Privacy Shield for the United States) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Contacting

  1. When contacting us (via contact form or e-mail), the information of the user are processed to handle the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) GDPR.
  2. The information provided by the user may be stored in our customer relationship management system and marketing automation platform (“CRM & marketing system”) or similar enquiry management systems.
  3. 3. We use the CRM, registration and marketing automation system “HubSpot” by the provider HubSpot Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA) with subsidiaries in Ireland (One Dockland Central, Dublin 1, Ireland) and Germany (Unter den Linden 26, 10117 Berlin, Germany) on the basis of our legitimate interests (efficient and quick processing of user requests, applications and optimisation of our online offer). For this purpose, we have concluded a contract with HubSpot with so-called standard contractual clauses, in which HubSpot undertakes to process user data only in accordance with our instructions and to comply with the EU level of data protection. HubSpot is also certified under the Privacy Shield Agreement and thus provides an additional safeguard to comply with European data protection law (https://www.privacyshield.gov/list). Learn more about HubSpot’s data privacy statement here: https://legal.hubspot.com/de/privacy-policy
  4. Our registration service allows visitors of our website to learn more about our company, download content and provide their contact information as well as other demographic information. This information is stored on servers of our software partner HubSpot. They can be used by us to get in contact with visitors to our website and to learn which services of our company are of interest to them. All information collected by us are subject to this data privacy statement. We use all collected information exclusively to optimise our marketing processes.
  5. We will delete the requests if they are no longer required. We will check the requirement every two years; enquiries by customers who have a customer account will be stored permanently. Regarding a deletion, we refer to the information on the customer account. In the case of the legal archiving obligations, the deletion will be take place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).

Comments and contributions

Users can write comments and contributions only after prior registration. This requires the consent to the storage and use of data as well as the acceptance of our data privacy statement.

Online presences in social media

  1. We have online presences in social networks and platforms to communicate with the customers, prospects and users active there and to be able to inform them there about our services. When you access the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
  2. Unless otherwise specified in our data privacy statement, we will process the data of users if they communicate with us within social networks and platforms, e.g., make posts in our online presences or send us messages.

Integration of third-party services and content

  1. Within our online offer, we use content or service offerings by third parties to integrate their content and services, e.g., videos or fonts (hereinafter uniformly referred to as “content”), on the basis of our legitimate interests (i.e., interest in the analysis, optimisation and efficient operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR). This always assumes that the third party providing this content view the IP address of the users as they could not transmit the content to their browsers without the IP address. The IP address is hence required for the presentation of that content. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers can also use so-called web beacons (invisible graphics, also known as web bugs) for statistical and marketing purposes. The web beacons allow information, e.g., visitor traffic on the pages of this website, to be evaluated. The pseudonymised information may also be stored in cookies on the device of the user and, among other things, may be associated with technical information about the browser and operating system used, referring websites, visit time and contain information about the use of our online offer as well as with such information from other sources.
  2. The following provides an overview of third-party providers and their content, along with links to their respective data privacy statements, more information on data processing and, in some cases already mentioned here, means of objection (so-called opt-out):
    1. External fonts by Google, LLC., https://www.google.com/fonts (“Google fonts”). The integration of the Google fonts is done by a server call with Google (usually in the USA). Data privacy statement: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
    2. Maps of the “Google Maps” service by the third-party provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data privacy statement: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
    3. Videos of the platform “YouTube” by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data privacy statement: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
    4. The functions of the Google+ service are integrated into our online offer. These functions are provided by the third-party service provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you are logged in to your Google+ account, you can click on the Google+ button to link the contents of our websites with your Google+ profile. This allows Google to associate your visit of our website with your user account. We would like to point out that we as providers of the websites have no knowledge about the content of the transmitted data and their use by Google+. Data privacy statement: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated.
    5. The functions of the Instagram service are integrated into our online offer. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can click on the Instagram button to link the contents of our websites with your Instagram profile. This allows Instagram to associate your visit of our website with your account. We would like to point out that we as providers of the websites have no knowledge about the contents of the transmitted data and their use by Instagram. Data privacy statement: http://instagram.com/about/legal/privacy/.
    6. We use the marketing functions (so-called “LinkedIn Insight Tag”) of the LinkedIn network within our online offer. This service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When accessing one of our websites including LinkedIn functions, a connection with LinkedIn’s servers will be established. LinkedIn will be informed that you have visited our websites with your IP address. Using the LinkedIn Insight Tag, we can analyse in particular the success of our campaigns within LinkedIn or determine target groups for these on the basis of user interaction with our online offer. If you are registered with LinkedIn, LinkedIn has the possibility to associate your interaction with our online offer with your user account. When you click on the “Recommend” button while being logged in to your LinkedIn account, LinkedIn can associate your access to our website with you and your user account. LinkedIn is certified under the Privacy Shield Agreement and thus provides a safeguard to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Data privacy statement: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
    7. Features of the Twitter service/platform (hereinafter referred to as “Twitter”) may be integrated within our online offer. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The features include the display of our posts with Twitter within our online offer, the link to our profile on Twitter as well as the opportunity to interact with the posts and functions of Twitter, and also measure whether or not users are referred to our online offer from our advertisements with Twitter (so-called conversion measurement). Twitter is certified under the Privacy Shield Agreement and thus provides a safeguard to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Data privacy statement: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization.
    8. We use functions of the XING network, operated by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. When accessing one of our websites including Xing functions, a connection with Xing’s servers will be established. As far as we know, Xing does not currently store any personal data. In particular, Xing does not store any IP addresses or analyse use behaviour. Data privacy statement https://www.xing.com/app/share?op=data_protection.
    9. Web analysis and optimisation using the Hotjar service by the third-party provider Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Using Hotjar, movements on the websites where Hotjar is being used can be traced (so-called heat maps). For example, it can be seen how far users scroll down and what buttons the users click how often. In addition, technical data such as language, system, screen resolution and browser type are collected. This may, at least temporarily during your visit to our website, lead to the creation of user profiles. In addition, using Hotjar also allows obtaining feedback directly from the users of the website. In this way, we gain valuable information in order to make our websites faster and more customer-friendly. Data privacy statement: https://www.hotjar.com/privacy. Opt-out: https://www.hotjar.com/opt-out.
    10. External code of the JavaScript framework “jQuery” provided by the third-party provider jQuery Foundation, https://jquery.org.

3. DATA PROTECTION OFFICER

We have appointed a data protection officer for our company. You can contact him/her as follows:

Schuster Maschinenbau GmbH, z.H. Datenschutzbeauftragten, Wernher-von-Braun-Str. 7, 86920 Denklingen
E-mail: beauftragter@ds-information.de

E-mails are sent transport encrypted. If you want to encrypt the e-mail contents as well, feel free to do so. Our data protection officer recommends the PGP procedure for this purpose. The public PGP key can be downloaded from the website http://ds-information.de.

4. DATA COLLECTION ON OUR WEBSITE

Cookies 

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and by your browser.
Most of the cookies we use are so-called “session cookies”. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser upon your next visit.
You can adjust your browser settings such that you are informed about the use of cookies and allow cookies only on a case-by-case basis, accept cookies for certain cases or exclude this generally as well as automatically delete cookies when you close the browser. Disabling cookies may restrict the functionality of this website.
Cookies required for the implementation of the electronic communication process or for the provision of certain functions you desire (e.g., shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. As far as other cookies (e.g., to analyse your surfing behaviour) are stored, these will be dealt with separately in this data privacy statement.

Server logfiles

The provider of the websites automatically collects and stores information in so-called server logfiles which your browser automatically transmits to us. These are: 

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

These data are not complied with other data sources.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR which permits the processing of data for the fulfilment of a contract or contractual measures.

Contact form

If you contact us using the contact form, we will store your data from this form including your contact information specified there for the purpose of processing your request and for the case of follow-up requests. We do not share this data without your permission.

Processing of the data specified in this contact form therefore takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. You can do this by simply sending an informal e-mail to us. The legality of data processing until the revocation remains unaffected by the revocation.

The data you send to us in the contact form remain with us until you request erasure, revoke your consent for the storage or the purpose for the data storage lapses (e.g., after processing your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only insofar as they are required for the establishment, content design or modification of the legal relationship (stock data). The basis for this is Art. 6 Para. 1 lit. b GDPR which permits processing of data for the fulfilment of a contract or contractual measures. We collect, process and use personal data about the use of our websites (usage data) only insofar as this is required to allow the user the use of the service or for invoicing.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods shall remain unaffected.

Data transmission upon conclusion of a contract for services and digital content 

We transmit personal data to third parties only if this is necessary in the context of execution of a contract such as payment processing with the responsible financial institution.

Additional transmission of data will only take place if you have expressly agreed to the transmission. There will be no transfer of your data to third parties without your express consent, for example, for advertising purposes.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR which permits the processing of data for the fulfilment of a contract or contractual measures.

5. ANALYSE TOOLS

Google Analytics

This website uses features of the Google Analytics web analytics service. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which are used to analyse your website usage. The information generated by the cookies regarding your website usage is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both their advertising offer as well as their advertising.

IP anonymisation

We have enabled the IP anonymisation function on this website. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states to the agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your website usage, to compile reports on the website activities and to render other services in connection with the website and internet usage for the website operator. The IP address transferred from your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin 

You can prevent the storage of cookies by disabling the corresponding setting in your browser software. However, we would like to point out that if you disable cookies, you might not be able to use all functions of this website in their entirety. In addition, you can prevent the data generated by the cookie and related to your use of the website (incl. your IP address) from being sent to and processed by Google. To do this, download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent your data from being collected by Google Analytics by clicking the following link. This sets an opt-out cookie that prevents your data from being collected when you visit this website in the future: Disable Google Analytics.

For more information about how Google Analytics handles user data, refer to Google's data privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have entered a contract with Google for order data processing and fully comply with the strict requirements of the German Data Protection Authorities in the use of Google Analytics. 

Demographics in Google Analytics 

This website uses Google Analytics’ “Demographics” function. This allows creating reports containing information about age, gender and interests of site visitors. These data come from interest-based advertising from Google as well as from visitor data from third parties. These data cannot be associated with any particular person. You can disable this function at any time via the ad settings in your Google account or generally object to the collection of data through Google Analytics as described in Section “Objection to data collection”.

6. PLUG-INS and TOOLS

YouTube

Our website uses plug-ins of the YouTube website which is operated by Google. The operator of the websites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our websites with a YouTube plug-in, a connection to the servers of YouTube is established. This informs the YouTube server which of our websites you have visited.

When you are logged in to your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. To avoid this, log out of your YouTube account.

Using YouTube allows us to present our online offerings in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

For more information about how YouTube handles user data, refer to YouTube’s data privacy statement: https://www.google.de/intl/de/policies/privacy.

Google Maps

This website uses the Google Maps map service via an API. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If you want to use the features of Google Maps, it will be necessary to store your IP address. This information is usually transmitted to and stored by Google on a server in the USA. The provider of this website has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and intended to facilitate finding the locations specified by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

For more information about how Google handles user data, refer to Google’s data privacy statement: https://www.google.de/intl/de/policies/privacy/.