Privacy Policy

General

The protection of personal data and the responsible handling of information that you entrust us with are important and special concerns to us. SDA SE (SDA) processes personal data only in accordance with the legal regulations, the EU GDPR (GDPR) and the Bundesdatenschutzgesetz (BDSG, Federal Data Protection Act), in particular.

With this Privacy Policy we inform you as to how, to what extent and for which purposes we will process personal data with regard to the use of our website and the online shop.

1. Data Controller and Data Protection Officer

The Data Controller within the meaning of the data privacy laws is SDA SE Open Industry Solutions, Neue Rabenstrasse 3, 20354 Hamburg, Germany, telephone
+ 49 40 33 44 25 06, mail@sda-se.com. 
Please refer to the Legal Notice for more details.

Contact details of our Data Protection Officer:
SDA SE Open Industry Solutions

Datenschutzbeauftragte

Neue Rabenstrasse 3

20354 Hamburg

Germany
datenschutz@sda-se.com

2. Processing of your personal data

The subject matter of data protection are personal data, i.e. information which is related to an identified or identifiable person, such as name, address, email address and telephone number.

In general, the processing of personal data is not required for using this website. Data collection and data processing occurs, if you voluntarily supply us with your personal data. We will explain this to you in detail in paragraph 4.

The kind of data that we automatically collect when a user visits our website will be explained below in paragraph 3.

3. Automatic collection and processing of data when visiting the website

When you visit our website for the first time, or if required again, we will show you a “cookie banner” to notify you that we use cookies and other tracking technology to improve the user experience on our website as well as for web analysis and interest-based advertising purposes. Data processing related to such purposes will be explained in detail in this paragraph 3.

As stated in the cookie banner you agree to the use of cookies by clicking on “Accept” and when you keep using our website. You may limit your consent to the use of cookies in full or in parts by configuring your browser settings accordingly and therefore deactivating the use of cookies in full or in parts. The means available to you to do so will be explained in detail below.

3.1. Data processing to enable the use of website

When you visit our website we will collect the required data to enable you to use the site (usage data). This includes your IP address and data regarding the start, end and subject matter of your use of the website as well as, if applicable, identification data (for example, your login details when logging into your personal area). Moreover, it also includes technical data submitted by your browser, such as browser type / browser version, previously visited website (referrer URL), screen resolution, operating system and, if applicable, information regarding your device (such as the type of device), etc. We process such usage data in our legitimate interest to provide and design this website in a way that it meets the demands (Art. 6 Paragraph. 1 S. 1 lit. f GDPR).

3.2. Cookies

When you visit our website, information in the form of cookies might be placed on your computer. Cookies are small text files that are sent to your browser by a web server and are stored on the hard drive of your computer. This way the website will recognize you on your next visit and we will be able to ensure a better functionality of the website and to avoid, for example, that you have to log in repeatedly or to perform a web analysis (see paragraph 5.3).

NameZweckSpeicherdauer
_ga, _gat, _gid, test_cookieGoogle: statistics on website usageSession
_op, _os, collectGoogle AnalyticsSession
-Ou, IDEGoogle Analytics1 year

Most browsers are set in a way that they will accept cookies automatically. You can deactivate the storage of cookies in your browser and you can also delete them from your hard drive at any time. We would like to point out to you that without cookies you can use our online shop only to a limited extent. In particular, placing an order is not possible without cookies.

However, you can modify your browser settings to only block the storage of certain cookies (e.g. third-party cookies), for example if you want to disable web tracking. Further information about this can be found in the help section of your browser. More information about third-party cookies which will be stored or processed when visiting our website can be found in paragraph 3.3 and in the privacy policies of the providers listed there.

3.3. Pseudonymous user profiles for advertising and market research purposes (web tracking and web analysis)

For advertising and market research purposes and to make your user experience as comfortable as possible when using our website SDA uses web tracking systems where data related to the use of our website is stored in pseudonymous user profiles. This allows us to further develop our website and to adjust the content to your needs even better. The pseudonymous user profiles will not be merged with personal data.

You can object to the compiling of pseudonymous user profiles. To do so, you can either disable the placement of cookies in your browser (see paragraph 3.2) or you can install a browser plugin to protect your privacy which includes the option to prevent tracking - for example AdBlock, Ghostery or NoScript (please note the data privacy statements of the relevant plugin provider).

3.3.1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies (see paragraph 3.2) to help the website analyse how you use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. However, within the EU Member States or in other states that are part of the Agreement on the European Economic Area your IP address will be shortened and thus anonymized by Google prior to its transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the website operator. Google will not associate your IP address transmitted by your browser as part of Google Analytics with any other data held by Google.

You may object to the use of cookies and prevent their storage by selecting the appropriate settings in your browser (see paragraph 3.2) or by installing a privacy plugin (see paragraph 3.3).

Furthermore, you can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed on to Google and the processing of such data by Google by downloading and installing the browser plugin available here: tools.google.com/dlpage/gaoptout. Alternatively, you can prevent data collection by Google Analytics by placing a so-called “anti-tracking cookie” on your computer. To do so, please use this link: Place anti-tracking cookie.

For more information on data protection at Google Analytics please visit https://www.google.de/intl/de/policies/.

3.4. Social networks and integrated YouTube videos

Our website includes links to social networks (for example Facebook, Instagram) as well as integrated videos provided by the streaming service YouTube. These social networks are exclusively operated by third parties. When you follow those links or play the videos, information may be transmitted to those third parties, for example your IP address, about you using our website and which link you clicked.

Please read the relevant data protection statements of the applicable operators to find out about the purpose and the scope of data collection through social networks as well as their further processing and use of your data and your relevant rights and setting options to protect your privacy. You will find those statements by following the links listed below:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA

https://www.facebook.com/privacy

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA
https://www.google.de/intl/de/policies/?fg=1

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA

twitter.com/privacy/

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

https://policies.google.com/privacy?hl=de&gl=de

4. Contact form

When you contact us by using the contact form, we will store and process your details (title, first and last name, email address, reference and the text of your message and, if applicable, your telephone number) to process your enquiry. The legal basis for this data processing is - depending on the subject matter of your message - the admissibility of such processing as part of a contract initiation, a contract or our legitimate interest in providing a contact form for general enquiries (Art. 6 Paragraph. 1 lit. b or f GDPR).

5. Google Maps

The contact form page includes a plugin which show a map provided by Google Maps. Google Maps is a web service to display interactive maps for the visual representation of geographic information. By using this service our location will be displayed to make it easier for you to find us and to provide directions.

Google Maps is operated by Google LLC. (hereinafter referred to as “Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. A connection is established between your browser and the Google servers, as if you were visiting the website of the Google search engine. If you are logged into your Google account, your data will be directly associated to your account. If you do not wish this data to be associated to your Google profile, you need to log out prior to activating the button. Google is responsible for any data processing performed by Google. There will be no tracking by Google on our website.

If you do not consent to the future submission of your data to Google as part of using Google Maps, it is also possible to fully deactivate the Google Maps web service by disabling the JavaScript application in your browser. As a result, Google Maps and thus the map shown on this website cannot be used.

6. Transfer to third parties – recipients of personal data

As part of the purposes stated in this Privacy Policy, personal data will be transferred to service providers who work for us and, in particular, support us in providing our services. In addition to their legal obligation to comply with all data protection regulations, those service providers are bound to us by means of additional contractual data protection standards. On a regular basis, this includes the obligation as a processor in accordance with Article 28, Paragraph 3 GDPR.

Apart from that, we only transfer personal data to third parties if authorised by law or if you have given prior consent to such transfer. In case you have given consent, you may revoke this consent at any time, to be effective in the future. We will only transfer your data to government agencies as part of our legal obligations or based on a regulatory action or court decision and only to the extent that is permissible by data protection laws.

7. Transfer to non-EU countries

In general, the transfer of data to non-EU and non-EEA countries (third countries) is not required for the purposes stated in this Privacy Policy and therefore does not occur. Apart from that, we will only transfer data to third countries if it will be guaranteed that the recipient of the data ensures an adequate data protection level within the meaning of Chapter V GDPR and no other interests worth being protected will contradict such data transfer. We use, in particular, the model contract clauses of the EU Commission regarding the transfer of personal data to third countries to ensure an adequate protection level on the part of the data recipient.

The analysis and web service provider Google (see 3.3) is certified in compliance with the EU-U.S. Privacy Shield and thus an adequate data protection level is ensured.

8. Erasure

We will delete your personal data as soon as they are no longer required for the data processing purposes described in this Privacy Policy, unless prevented by legal obligations to preserve records. The German commercial and tax law includes, in particular, retention periods of six years (for business letters of any kind) and of ten years (accounting-relevant files).

9. Data security

We have taken the necessary technical and organisational measures to protect the personal data provided by you against loss, damage, manipulation and unauthorised access.

Our staff and all people involved in data processing are obliged to comply with the GDPR, the BDSG and other data protection laws and to treat personal data as confidential. Our staff has been trained, accordingly. Both internal and external checks will ensure compliance with all data protection processes at SDA.

To protect the personal data of our users we use a secure online transmission method, the so-called “Secure Socket Layer” (SSL) transmission. You will recognize it by the “s” that has been added to the http:// in the URL (https://) and by the green, closed lock icon displayed in the browser. By clicking on the icon you will see information about the SSL certificate used. The SSL encryption ensures the secure and complete transmission of your data.

10. Your rights

The data privacy law grants you a number of rights with regard to data related to you as an individual (the so-called “rights of the data subject”). In general, those are

  • the right to obtain information about personal data concerning you that are stored by us,
  • the right to rectify inaccurate data,
  • the right to erasure of data that may no longer be stored,
  • the right to restrict data processing in certain cases,
  • the right to object to processing of personal data if based on legitimate interests and on grounds relating to your particular situation, demonstrating compelling legitimate grounds which override the interests (Article 21, Paragraph 1 GDPR),
  • the right to object to processing for the purposes of direct marketing (Article 21, Paragraph 2 GDPR),
  • the right to data portability, meaning the right to have the personal data that you provided transmitted electronically to you or a third party, and
  • the right to revoke any given consent, to be effective in the future.

Whether and insofar as those rights apply in individual cases and which conditions apply follows from the GDPR and the BDSG. Furthermore, you have the right to file a complaint with a supervisory authority for data protection. However, if you have any questions or complaints regarding data protection at SDA or would like to exercise your rights, we recommend to contact our Data Protection Officer first (see paragraph 1).

11. No automated individual decision-making

We do not use your personal data for automated individual decision-making within the meaning of Article 22, Paragraph 1 GDPR.

12. Modification of the Privacy Policy

New legal requirements, business decisions or technical development may require modifications to our Privacy Policy. In this case, the Privacy Policy will be amended, accordingly. The latest version can always be found on our website.

Effective: May 2018