• 1. Scope of application and responsible person
• 2. Data collected
• 3. Cookies and web tracking
• 4. Social media plugins
• 5. Newsletter
• 6. Data transmission
• 7. Your rights
• 8. Data security​​​​​​​

Status 14 May 2018

This data protection policy describes the specific personal data that we collect from you and use; the purposes for which we do so and the measures we implement to protect your data.

2. Data collected

2.1 General

Every time it is accessed, the Zehnder Group Deutschland web page collects a series of general data. This general data and information are stored in the server's log files. The following data are collected:

• IP address, storage period of 60 days
• Date and time of the request, storage period of 60 days
• Time zone difference relative to GMT, storage period of 60 days
• Content requested, storage period of 60 days
• Access status/http status code, storage period of 60 days
• The specific quantity of data transferred, storage period of 60 days
• Web page from which the request originated, storage period of 60 days
• Browser (incl. language and version), storage period of 60 days
• Operating system, storage period of 60 days
• Newsletters (Clean Air Solutions)

With regard to their use, these general data are not associated with any particular person. It is necessary to collect these data for technical reasons, in order to display your web page and ensure its stability and security. We log every access to our website and every time a file stored on the website is accessed. The legal basis is the first sentence of Art. 6(1)(f) of the EU General Data Protection Regulation (GDPR).
 

2.2 Contact form

Our web page contains contact forms provided so that users can contact us. The data entered into the contact form are stored to enable the request to be processed or to contact the person who filled out the form. The data entered into the contact form are stored and processed internally in order for the request to be processed to contact the person who filled out the form, or the data are passed on to a related company (logistic partner for sending brochures, digital contact data processors and commercial representatives) for the purposes stated above. The use of the relevant data is shown in the form itself. The legal basis is the first sentence of Art. 6(1)(b) of the EU General Data Protection Regulation (GDPR).

Our websites and pages use what the industry refers to as “cookies". Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically deleted by your web browser.

In some cases, it is possible that third-party cookies are stored on your device once you enter our site (third party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g., cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of the cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyse user behaviour or to display promotional messages.

Cookies, which are required for the performance of electronic communication transactions, or for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimisation (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure a technically flawless and optimised provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic deletion of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website: usercentrics.com (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

• Your declaration(s) of consent or your revocation of your declaration(s) of consent
• Your IP address
• Information about your browser
• Information about your device
• The date and time you visited our website

 Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.

Data processing

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

4. Social media plugins 

We currently use the social media plugins shown in the following table. We use a two-click procedure in which, upon first visiting our web page, no personal data are forwarded to the providers of the various plugins. The plugin providers will not receive the information that you have accessed a specific website of our online presence unless you click on the marked plugin field and activate it. The data specified in Section 2 of this policy are additionally transmitted. The plugin providers store the data collected about you as a user profile, which they use for advertising, market research and/or to design their websites in line with users’ needs. The legal basis is the first sentence of Art. 6(1)(f) of the EU General Data Protection Regulation (GDPR).

We have no influence on the data collected by the plugin providers or on their data processing procedures. The activities of such third-party providers in this regard are subject to their own respective data protection policies. More information on the purpose and scope of data collection and processing by the plugin providers is available in the data protection policies of these providers, which are listed below.

5. Newsletter

If desired, you can subscribe to our newsletter to receive information about our current special offers. Subscription to our newsletter is subject to the double opt-in procedure. This means that after you subscribe, we send an email to the email address you provided asking you to confirm your desire to receive the newsletter. To subscribe to the newsletter, the only information required is your email address, which we keep on record after you subscribe. The legal basis is the first sentence of Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR). You can revoke your permission and unsubscribe from the newsletter at any time. You can unsubscribe by clicking the link provided in every newsletter email or by sending an email to datenschutz@zehnder-systems.de.

6. Data transmission

We may forward your personal data collected in accordance with Section 2 of this policy to other members of the Zehnder Group as well as to third parties, insofar as is necessary to execute your order. These recipients may be located in countries that do not have an equivalent level of data protection. In countries with non-equivalent data protection, we ensure data protection with our Group affiliates contractually through standard data protection clauses per Art. 46(2)(c) EU GDPR.

7. Your rights

You have the following rights vis-a-vis us regarding the personal data relating to you:

• Right to information,
• Right to correction or deletion,
• Right to restriction of processing,
• Right to revoke consent for processing,
• Right to data portability,
• Right to file a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

Whenever data processing on our web pages is based on your consent, you can revoke your consent at any time, with effect for the future, without providing reasons. The revocation should be addressed to the responsible person via the contact details in Section 1.

8. Data security

To protect your data, we encrypt data transmissions and have also implemented many other technical and organisational measures in order to ensure that the personal data processed through this web page are protected as comprehensively as possible.

9. Jentis

We use the services of JENTIS GmbH (Schönbrunner Straße 231, 1120 Vienna) to analyse the user behaviour of our customers and to optimise our website. This service provider therefore receives access to web analysis data, which is measured, stored and made available in processed form by the analysis tools used and JENTIS®.

On the one hand, data is transmitted to JENTIS GmbH for analysis purposes; on the other hand, JENTIS® independently collects data relating to the browser environment or the behaviour of the visitor on our behalf. JENTIS GmbH only processes data that cannot be traced back to a person by JENTIS GmbH. IDs set by JENTIS® are merely random products and are used for anonymous recognition. Your IP address is truncated before it is saved so that it cannot be traced back to you personally.

By using JENTIS GmbH, your personal data is anonymised before a potential transfer to a third country. Google therefore only receives information that cannot be traced back to you.