Our data protection officer can be contacted at the following address:
Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
1. Visiting our website
When you visit our website, we collect the following information, from your browser:
– the IP address of your computer
– date and time of access
– name and address of the requested file
– transferred data volume
– report whether the retrieval was successful
– identification data of the browser and operating system used
– the name of your internet service provider
This data (“access data”) is processed in order to technically facilitate the use of the website. We use access data of our users for creating aggregated statistics (so that statistics do not show data about a single user but only about the collected data of a number of users), to learn what is of interest to users in order to improve our websites and offering. We also use the access data for maintaining or restoring the security of our offer or to detect and correct technical defects and errors.
Access data that is legally considered personal data (such as the full IP address) will be stored for a period of [7 days] unless an exceptional incident requires a longer retention period (e.g. in case of a hacker attack).
Access data is processed under article 6 (1) f) European General Data Protection Regulation (GDPR). Our legitimate interest is the continued optimisation of our website.
a) Contact Forms
You can use our contact forms to send us messages and questions. According to your consent, we only use your data to respond to your contact inquiry. If your request is directed to another Rofin company, we will forward it to that company. You are not legally or contractually required to provide personal data when you contact us. However, please note that we cannot address your inquiry if the information marked as such is not provided.
To address your inquiry your data is stored until the inquiry has been completely processed, then it is deleted. You may withdraw your consent to the processing of your data at any time with effect for the future by sending a message to the contact details noted at the beginning of this privacy notice. The legal basis for our data processing is article 6 (1) a) GDPR.
b) Newsletter and Press Releases
If you have granted consent in each case, you subscribe to our newsletter or you are on our press distribution list. In our newsletters and press releases we inform you about our products and services in the area of industrial laser solutions on a regular basis.
We use the so-called double opt-in procedure to subscribe to our newsletters or our press distribution list. That means that after you have subscribed, we send an email to the address you provided asking you to confirm that you would like to receive our newsletter or our press releases. We will only send you our newsletter or our press releases if you have confirmed your registration. This ensures that we are able to prove that you registered and clarify any possible misuse of your personal data. Therefore, we will store your email address, your IP address and the time of your registration and confirmation as long as it is necessary to prove your registration and confirmation if claims, in particular civil and/or competition law claims are asserted against us. In any case, your email address, IP address and the time of your registration will be deleted when the respective claims have become time-barred. The legal basis for our data processing is article 6 (1) a) GDPR.
You may withdraw your consent to receive newsletter or the press releases and unsubscribe from the newsletter or the press releases at any time by clicking on the appropriate link provided in each newsletter or press releases email or by sending a message to the contact details noted at the beginning of this privacy notice.
3. Contractual and marketing purposes
We use personal data about business partners and customers to provide information and services to customers and business partners. We specifically use personal information to help customers and business partners to complete a transaction or order, to enable communication and collaboration, to deliver products/services, to invoice for purchased products/services, and to provide ongoing service or support.
We also use personal information for reporting purposes, such as ensuring a high level of customer service, assessing the quality of products and services, for manufacturing processes and quality control, to manage electronic signatures, to simplify internal management processes, to maintain, manage and comply with legal, regulatory, compliance and auditing obligations, policies and procedures, for operational continuity and/or disaster recovery procedures, to access sales or order portals or select services.
We may also occasionally use personal information to contact customers and business partners and to conduct surveys for marketing and quality assurance purposes. You have the right to object to this use. The legal basis for our data processing is article 6 (1) f) GDPR.
The content of a permanent cookie is limited to an identification number. Name, IP address or other information regarding your true identity are not stored, and we do not set up any individual profiles regarding your pattern of use. Permanent cookies are automatically deleted. Storage duration varies depending on the cookie. You may delete permanent cookies at any time under the security settings of your web browser.
The legal basis for the processing of personal data using cookies is article 6 (1) f) GDPR. Our legitimate interest is the continued optimisation of our website.
In your browser settings, you can deactivate the storage of cookies under “Options/Internet Options”, limit them to certain websites or set up your browser so that it informs you when a cookie is sent. You may also delete cookies whenever you wish. Please note, however, that disabling or deleting them means that you will have limited presentation of our website and limited user guidance.
5. Data Processing by Third Parties
a) Use of Social Media Plug-ins
At present, we use the following social media plug-ins: [Facebook, Twitter, LinkedIn, YouTube, Google+, etc.]. In so doing we use the so-called Shariff solution. This solution ensures that in the first instance no personal data is forwarded to the plug-in providers when you visit our website. Only when you click on one of the social plug-ins your data will be transferred to the respective plug-in provider and stored there. We have no influence either on the data collected or the data processing processes and we are not aware of the full extent of the data collection, the purpose of processing and the length of time for which the data is stored. We do not have any information about deletion of the data collected by the plug-in provider.
The data is forwarded irrespective of whether you have an account with the respective plug-in provider and are logged in there or not. However, if you are logged in with the respective plug-in provider your data collected by us will be allocated directly to your account with the respective plug-in provider.
The legal basis for the use of the plug-ins is article 6 (1) f) GDPR. By means of the plug-ins we can offer you the option to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. Our legitimate interest with those purposes is based on article 6 (1) f) GDPR.
More information on the purpose and extent of the data collected and processed by the plug-in providers can be found in the respective providers’ data protection notices. In these notices, you will also find further information on your rights in this respect and the setting options to protect your privacy. For more information on the Shariff solution please see https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
b) Google Analytics
This website uses Google Analytics, a website analysis service of Google Inc. (www.google.de). Google Analytics uses “cookies”, text data which is stored on your computer and enables your use of our website to be analysed. The information created by the cookie concerning your use of the website is regularly transmitted to a Google server in the USA and stored there. However, when the IP address is anonymised on this website your IP address is shortened by Google before transmission within the Member States of the European Union and other signatories of the Agreement on the European Economic Area. Only in exceptional circumstances is the complete IP address transmitted to a Google server in the USA and shortened there. IP anonymisation is used on this website. On behalf of us, Google will use this information to analyse your use of the website in order to compile reports on website activities and provide further services to us associated with the use of the website and internet use. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data. Your data will be automatically deleted after [duration] at the latest.
You can disable the storage of cookies by changing the settings of your browser software accordingly. Please note, however, that you may then not be able to use all of the functions of the website in full. You can also prevent the information generated by cookies regarding your use of the website (including your IP address) from being recorded and sent to Google and the processing of this data by Google by downloading and installing the browser plug-in available through the following link: http://tools.google.com/dlpage/gaoptout?hl=de
More detailed information on this is available under http://tools.google.com/dlpage/gaoptout or under http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and privacy). Please note that on our website, Google Analytics has added the code “gat._anonymizeIp();” to ensure that IP addresses are recorded in anonymous form (IP masking).
Personal data is processed by Google Analytics on the basis of article 6 (1) f) GDPR. This serves as the basis for our legitimate interest in advertising.
c) DoubleClick by Google
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and the further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called a certain part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any advertisement from third-party providers; b) by deactivating cookies for Conversion tracking, by setting your browser to block cookies of the domains “www.googleadservices.com”, https://www.google.de/settings/ads, this setting, however, will be deleted when you delete your cookies; c) by deactivating the interest-based advertisements of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, this setting, however, will be deleted when you delete your cookies; d) by permanently deactivating in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.
Personal data is processed by DoubleClick on the basis of article 6 (1) f) GDPR. This serves as the basis for our legitimate interest in advertising.
For further information about DoubleClick please visit
https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090. For information on data privacy at Google please visit: https://www.google. de/intl/de/policies/privacy. You can also visit the website of the Network Advertising Initiative (NAI) http://www.networkadvertising.org. Google is certified under the EU-US Privacy Shield, see www.privacyshield.gov/list.
6. Sharing personal data
If you wish to contact another Rofin company via our contact forms, we will forward your request to them and the receiving Rofin company will process your data for these purposes and stores them for as long as required for the provision of services or possible future business contacts.
We collaborate with providers who support us in providing our services, performances and the offer on this website. These service providers (agents) process data on our behalf and under our control and for the purposes described in this privacy notice. In addition, we may disclose personal data to suppliers and cooperation where necessary for the provision of services. In particular, your personal data may be disclosed to Coherent Inc.
We may be required by U.S. law to disclose personal information to U.S. authorities. In these cases, we limit the publication to the extent that is legally mandatory.
We may also disclose personal information to the holders of such rights, advisers and authorities to enforce our rights or to protect our rights or the rights of third parties.
7. Transmission of personal data to third countries
We intend to also transfer your personal data to recipients in third countries. Third countries are countries outside of the European Union or the European Economic Area where it is not always possible to assume that the level of data protection is comparable to that of the European Union.
Before any such data transfer we ensure that the required level of data protection is ensured in the third country concerned or at the recipient in the third country. This may take the form of an “adequacy decision” of the European Commission which ensures that an adequate level of data protection has been ascertained overall for a certain third country. Alternatively, we can also transfer data on the basis of “EU standard contractual clauses” or, for recipients in the USA that have a valid EU-US Privacy Shield certification, on the basis of compliance with the principles of the “EU-US Privacy Shield”.
We would be pleased to provide further information on the suitable and appropriate safeguards for compliance with an adequate level of data protection on request; the contact details can be found at the beginning of this privacy notice. Information on the participants of the EU-US Pri-vacy Shield can be found under www.privacyshield.gov/list.
8. Your rights when your personal data is processed
You have certain rights in accordance with applicable data protection provisions – in particular the GDPR and the relevant provisions in the applicable law of a Member State of the European Union:
• You have the right of access to your personal data.
• You have the right to demand rectification of any inaccurate personal data.
• You have the right to demand erasure or to restrict the processing of your personal data.
• You have the right to receive the personal data you have provided in a structured, com-monly-used and machine-readable format.
If you have given us your consent, you also have the right to withdraw your consent at any time with effect for the future.
You are entitled to assert the above-mentioned rights against us, e.g. by notifying us via one of the methods of contact listed at the beginning of this data protection statement.
You may also contact the competent authority if you have a complaint about how your personal data is handled.
9. Your right to object
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation on the basis of article 6 (1) e) or (1) f) GDPR, including profiling based on those provisions.
In such cases we will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
In the context of the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.