Data protection information

SEW USOCOME respects your privacy and undertakes to ensure that your personal data is collected and processed in compliance with the General Data Protection Regulation (GDPR) and with the French Data Protection and Civil Liberties Law.

This privacy policy explains how SEW USOCOME uses your personal data when you visit our website and/or interact with us. It is important for you to read this document in order to fully understand why and how we use your data.

You will also find a description of your right to protect your privacy and of how the law protects you.

If you have any questions, or if you would like to exercise your right to protect your personal data, please contact the data protection officer at SEW USOCOME:

SEW USOCOME
DPO
B. P. 20185
48-54 route de Soufflenheim
67506 Haguenau Cedex
France
dpo@usocome.com

SEW USOCOME, 48-54 Route de Soufflenheim, 67506 Haguenau Cedex, France, registered with the Trade and Companies Register of Strasbourg under number 421 863 259, telephone number +33 3 88 73 67 00, is the designated Data Controller in accordance with Article 4, Paragraph 7 of the GDPR.

I. Definition of personal data

II. Information relating to personal data protection on the website www.usocome.com

III. Information relating to the personal data protection of SEW USOCOME prospects and customers

IV. Information relating to the personal data protection of SEW USOCOME job applicants

V. Your rights as a data subject

VI. Data security and storage time

I. Definition of personal data

Personal data is defined as all information that relates to an identified natural person or to a natural person who can be directly or indirectly identified by reference to an identification number or one or more pieces of information specifically pertaining to that person. This includes, for example, your name, your business contact details, your phone number or e-mail address and relationship to a company, and your activities with us.

We collect a variety of information concerning our employees, customers and visitors to the website www.usocome.com. This personal data is divided into different categories:

• Identity Data includes the title, first name, last name, company and job position.
• Contact Information includes the e-mail address and phone numbers.
• Technical Data includes your IP address, connection data, browser type and version, time zone setting, location, browser plug-in types and versions, operating system and platform and other technologies on the devices you use to access this website.
• Usage Data includes information about how you use our website and services.
• Tracking Data includes information that we collect or that any other person collects about you, using cookies and similar tracking technologies, such as web beacons or mobile identification transmitters.

II. Information relating to personal data protection on the website www.usocome.com

1. Data processing – Offers on our website

When you visit our website, information of a general nature is collected automatically. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and your IP address. This information is required in order to correctly provide you with the requested website pages. The log file data is immediately anonymized or deleted by us.

If you use any services offered on our website, we may collect further personal data in order to provide those services. We process this data to the extent necessary for each service.

Your data will be kept confidential and deleted in accordance with applicable legal requirements (see VI “Data security and storage time” below).

If you send us an inquiry by e-mail, we collect the personal data you provide for processing your inquiry and fulfill your requests, if applicable.

Without your prior consent, there will be no further processing of your data by us or any other company, with the exception of the use as described below, unless otherwise required by law.

2. Use of cookies

Our website uses cookies. Cookies are small text files that are stored on your end device and that are saved by your browser. We use temporary (session) cookies, which are automatically deleted once you close your browser, as well as persistent (permanent) cookies.

Cookies are used to:

• make our offerings more user-friendly, effective and secure
• display the website
• continuously improve our website for optimal use.

The information collected with cookies is mainly used for statistical purposes (for more details, see sections 3 and 4 below).

You may accept or reject the use of cookies. Change your browser settings to do so. You have the choice to select whether you accept all cookies, disable all cookies or whether you will be informed when cookies are stored. If you disable all cookies, you may not be able to use all website functions.

3. Creating usage statistics via etracker and session recording and heat mapping with Microsoft Clarity

Creating usage statistics via etracker and session recording and heat mapping with Microsoft Clarity Services provided by etracker GmbH from Hamburg, Germany (www.etracker.com/en) are used to analyze usage data on this website. Cookies are generally used to enable the statistical analysis of the use of this website by visitors and to display content or advertising based on specific usage. etracker cookies do not contain any information that enables the identification of a user. In addition, we can also use etracker variants without cookies, in which we carry out the data processing described here to a lesser extent.

The data created by doing so is processed by etracker on our behalf. The data is processed exclusively in Germany in accordance with our specifications and is thus subject to strict German and European data protection legislation and standards. etracker does not carry out data processing for its own purposes. With regard to compliance with EU data protection standards, etracker has been independently audited, certified and awarded the ePrivacyseal data privacy seal.

The data is processed based on the legal provisions of Art. 6 (1) Clause 1 (f) GDPR and Section 25 (2) No. 2 TDDDG. Our interest within the meaning of the GDPR (legitimate interest) is the analysis of the use of our website and the compilation of statistics on website usage to ensure the regular optimization of our online platform and website so that the website can be made more interesting for you as a user. Since the privacy of our visitors is important to us, data that may allow a reference to an individual person, such as IP addresses, login credentials or device IDs, are pseudonymized or anonymized at the earliest possible stage. The data is not processed in any other way, combined with any other data by etracker or passed on to third parties.

To enhance the etracker usage statistics, we also use the session recording and heat mapping tool Microsoft Clarity. The following data is processed:

• Mouse movements
• Clicks
• Scroll depth
• Changes to the window size
• Selection functions
• Keystrokes
• Time spent
• Device type
• Browser
• Operating system
• Location (country)
• Origin (referrer)
• Session/user ID

For this purpose, a cookie is set on the end device of the user/visitor. SEW EURODRIVE cannot establish a link to a specific person. The cookies are deleted after 30 days, and favorites are deleted after 13 months.

You can object to the data processing described here at any time insofar as data is processed in relation to specific persons in our consent management tool.

You can find more information about data protection at etracker here.

You can find more information about data processing by Microsoft here.

4. Creation of usage statistics by Google Tag Manager

We use Google Tag Manager to manage tracking tags on our website. This tool makes it possible to deploy tags used in particular to analyze visitor behavior, personalize the content displayed and optimize our marketing campaigns.

The tags used by Google Tag Manager and the information sent back to the Google Tag Manager server do not contain any user-identifiable information.

The statistical data collected via the tags activated by Google Tag Manager helps us to improve the performance of our site, to better understand your expectations and to offer you more relevant functionalities.

To find out more about Google's data management practices, please visit the official Google Tag Manager page: Data privacy and security

5. Creation of usage statistics by SEW-EURODRIVE

We also use an internally-developed statistical tool to analyze and improve our website on an ongoing basis. This means we can improve what our website offers and adapt it to best meet your needs.

When you register on our website (create an account), you can indicate the name of the company for which you work. If your company already exists on our website, your user account is linked to your company’s customer account in the CRM system. If our website doesn’t have information about your company or an account doesn’t exist for it yet, your user account won’t be linked to any customer account.

a. User not linked to a customer account

If you are not logged in (anonymous user) or if you are logged in but not linked to a CRM customer account, your usage statistics are anonymized (truncated IP addresses) and cannot be used to identify you.

b. User linked to a customer account

If you are logged in AND you are linked to a CRM customer account, your usage statistics are collected, but they are linked to the customer account, not to you. Therefore, they cannot be used to identify you.

For processing purposes, cookies (for more information, see section 2 above) are saved on your end device. The information collected through cookies is saved exclusively on our server in Germany, at the parent company of SEW USOCOME.

To prevent tracking of the company, which generates general statistics, simply turn it off by clicking here.

6. Customer and Online Support

Your Online Support account enables you to interact with us further. By registering, you gain access to a wide range of functions and services provided by SEW­USOCOME. The personal data collected is required for the various functions offered, for example, online inquiries, order tracking, troubleshooting, etc.

7. Embedded external services

a. YouTube

Our website features embedded YouTube videos. You can play these videos directly on our website. They are embedded using YouTube’s Privacy-Enhanced Mode, which means that no data concerning you is sent to YouTube as long as you don’t play any videos. When videos are played, personal data is sent.

We have no influence over this data transfer.

If you are logged in to your YouTube account, this data is added to your account. If you don’t want this data to be added to your YouTube account, you have to log out before playing the video.

For more information on the use of your data by YouTube, please refer to the Google Privacy Policy. YouTube and Google are certified EU-US-Privacy-Shield.

b. Google Maps

This website uses Google Maps, provided by Google Inc.

To use Google Maps, your IP address must be saved. This information is sent to Google in the US. SEW USOCOME has no influence over this data transfer. If you are logged in to your Google account, this data is associated with your account. If you don’t want this data to be added to your Google account, you have to log out first.

8. Social media

SEW USOCOME has a presence on various social media platforms. To enable you to access these platforms directly, we have included links on our website. By clicking on these links, you leave the SEW USOCOME website and submit to the social media platform’s privacy policy.

Below is the list of social media platforms on which SEW USOCOME has a presence.

• Facebook : Privacy policy | Cookie policy
• X : Privacy policy | Cookie policy
• LinkedIn : Privacy policy | Cookie policy
• Instagram | Privacy policy | Cookie policy

All of these social media platforms are certified EU-US-Privacy-Shield.

9. External links

Our website contains links to the websites of other providers. SEW USOCOME cannot be held responsible for the content, products or services offered on these other sites.

III. Information relating to the personal data protection of SEW USOCOME prospects and customers

1. Scope of data processing

a. Contract performance

SEW USOCOME processes your data as part of your inquiries or existing contractual relationships. In addition to your contact details, this comprises all information that is exchanged, such as e-mails, orders, product information requests and payment details.

If you place orders with us, you must provide the personal data that is necessary for the preparation or performance of the contracts, in compliance with the legal requirements we must meet. Without this data, we cannot fulfill your contracts.

SEW USOCOME processes the data provided during order placement for use in fulfillment of the contract. If necessary, SEW USOCOME may employ specialized service providers for this purpose. Processing of the data for the purpose of contract fulfillment comprises using the data to render the service stipulated by the contract, including rendering of services defined in service agreements or handling of any warranty claims.

Data collected by SEW USOCOME regarding the purchase of our products or use of our services may also be passed on to the external auditors and/or tax consultants of SEW USOCOME for advising and auditing purposes, and/or to government agencies.

SEW USOCOME saves the data it collects in its IT system. This data is saved for as long as necessary for contract performance, warranty claims or other uses set forth in this policy. This data is then subjected to the applicable legal data retention obligations. After these retention periods, the data is deleted.

b. Verification of address and credit

When a contracting party requests a payment extension, SEW USOCOME may use the services of information and risk management companies in order to verify its customers’ address and credit rating, including data that was calculated using statistical and mathematical methods (scoring).

This data is deleted after the expiration of the legal data retention period.

c. Use of data for marketing purposes by SEW USOCOME

For marketing purposes, SEW USOCOME and authorized service providers, such as printers, direct mail advertisers, etc., may use your name and address in ongoing business relationships and prospecting operations, as well as the data which is obtained in the course of the business relationship (contact details, products purchased, services ordered, etc.).

SEW USOCOME provides further information on the products and services of the SEW-EURODRIVE Group and carries out analysis for marketing purposes. Data obtained by SEW USOCOME with your consent can also be analyzed for marketing purposes. Through this marketing process, we would like to inform you of the current development of products and services, in order to build a lasting business relationship.

SEW USOCOME uses your e-mail address for advertising purposes, provided that you have consented or you can be presumed to have consented, for example, in the course of an existing business relationship or after contact has been made for the first time. Of course, your right to erasure applies to this type of marketing. The right to erasure for marketing purposes is described separately.

To achieve the goals associated with this marketing usage, we process your data over the service lives of our products and as long as you remain a customer. Exceptions are made if you consent to a longer period of usage and/or if the data is subject to legal requirements for data retention. In the latter case, the data is deleted after the retention period has elapsed. The processing period may be shorter if you exercise your right to object, of which we inform you in Section V “Your rights as a data subject”.

d. Processing of personal data due to legal obligations

SEW USOCOME, like every other company in Europe, is subject to various legal obligations to verify the data of our customers and business partners. In such cases, we process your personal data only to the extent necessary to comply with these legal requirements. To fulfill these legal obligations, it may be necessary to process your data in a partially automated manner, in order to evaluate personal aspects (profiling). Unless you are expressly notified, automated decision-making is conducted on a case-by-case basis.

These legal requirements relate to, in particular:

• Prevention of fraud and money laundering
• Tax auditing and reporting requirements
• Evaluation and management of risks in the Group
• Sanctions lists.

2. Dissemination of data within the SEW-EURODRIVE Group

SEW USOCOME may pass on your personal identification data (company name, contact person, address and contact details such as telephone number and e-mail address) to other companies within the SEW-EURODRIVE Group and possibly update it in order to ensure that all companies within the SEW-EURODRIVE Group involved with you in a transaction, e.g. fulfilling a contract, have the same updated personal data. This data sharing procedure is intended to simplify our processes and may help you avoid having to provide your personal data again when contacting another company within the SEW-EURODRIVE Group.

In addition to this basic data, order data may be passed on to other companies within the SEW-EURODRIVE Group if necessary for your order to be processed.

If your company is based outside of France, a SEW-EURODRIVE affiliate will be responsible for assisting you and for processing your contracts or inquires. If you wish to receive business proposals or additional information about SEW-EURODRIVE and our products, your personal information (in particular, your name, contact details, company and the products in which you are interested) must be transferred to the SEW-EURODRIVE company that is responsible for your company’s headquarters. That company will use your personal data unless you object.

Therefore, your basic data may also be processed by SEW­EURODRIVE companies located outside of the European Union or the European Economic Area. With companies associated with the SEW-EURODRIVE Group located outside of the European Union, SEW USOCOME has made contractual commitments; these contractual commitments comprise the standard contractual clauses established by the European Commission. You can find an overview of the companies belonging to the Group here. Personal data processed as described above is subject to the same erasure rules as those described earlier.

Personal data processed as described above is subject to the same erasure rules as those described earlier.

3. Customer chat – with humans and AI chatbot

You can also submit your support/service inquiries via our customer chat. There, you can decide whether your inquiry should first be processed by the AI chatbot of our partner Cognigy.AI GmbH or whether you want to chat directly with a person in our Customer Service department. The following data may be processed as part of these chats.

If you are logged in as a customer, it will be:

• Family name, first name, e-mail address for login
• Your telephone number for callbacks, if applicable
• Content of the inquiry, content of the chat history
• Number, time and date of the chat message
• User ID
• Session ID
• Contact ID
• Transaction overview (purchase orders, quotations)
• Country, language
• Location (on request)

If you are not logged in as a customer, it will be:

• Family name, first name, e-mail address
• Content of the inquiry, content of the chat history
• Time and date of the chat message
• Country, language
• Location (on request)

If you contact us via the chat function, we will process your data for the purpose of responding to and completing your inquiry (customer support).

In addition, the activities of our IT administrators and the IT administrators of the implementation service provider involved, with whom we have concluded a data processing agreement, are recorded in audit logs.

We process your data to the extent and for as long as this is necessary to process your inquiry and to improve our service. Chats and audit logs are stored for 30 days by default.

Our chat provider Cognigy.AI GmbH operates the live chat and the AI chatbot in a cloud data center of Amazon Web Services in Frankfurt am Main (EU).

For the extended AI functions, chat messages are transmitted to the Microsoft Azure data center in Frankfurt am Main (EU). This data is only processed there without intermediaries, and not on a permanent basis (not persistently).

By using the chat, you consent to the processing and evaluation of the data to improve the quality of service. The legal basis is Art. 6(1)(a)(7) GDPR. In accordance with Art. 7(3) GDPR, you can revoke your consent at any time without stating the reasons for doing so. You can do this, for example, by e-mail to dpo@usocome.com

If you have inquiries about products, the initiation, implementation and/or termination of a business transaction, the legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. The processing is necessary to deal with your inquiry.

IV. Information relating to the personal data protection of SEW USOCOME job applicants

If you apply to SEW-EURODRIVE for one of the above-mentioned positions, we will process the personal information from and about you in our candidate database in Oracle Recruiting Cloud.

Data protection information for applicants: Dual study program, apprenticeship, student internship, retraining, vacation helpers

a) Scope of data processing and purpose of processing – processing data internally when reviewing your application and determining your suitability

We process the data and information that you provide in your application and related documents in order to review and evaluate your application and your suitability for the advertised position (purpose of the processing).

This normally includes the following information from and about you:

• Last name (required), first name (required)
• Title (optional)
• Gender (optional)
• Date of birth and place of birth (optional)
• Nationality, residence permit and/or work permit (optional)
• Marital status (optional)
• Residential address (street, house number, ZIP code, city, country) (optional)
• Mobile number and/or phone number (optional)
• E-mail address (required)
• Cover letter and/or curriculum vitae (optional)
• Application photo (optional)
• Diplomas and degree certificates (school, university) and/or work references (optional)
• Educational and vocational training (optional)
• Qualifications and/or language skills (optional)
• Certificates for educational and vocational training (optional)
• Contents of e-mail messages (optional)
• Phone correspondence with notes (optional)
• The information you provide and how you respond during the phone interview and/or in-person interview (optional)
• Information regarding the reimbursement of travel expenses incurred during the application process (optional)
• How you got in touch with SEW-EURODRIVE (optional)
• Health data and/or information about degree of a disability (optional)
• Trade union affiliation (optional)
• Information about your parents (if underage)
• Other information from your application documents (optional)
• Depending on the position, additional application questions may be requested by the application wizard (e.g. availabilities)

The respective trainers and our recruiting staff have access to this information.

If you apply via our (online) career page (application wizard) or if we contact you via a social network, we will process the information about you and from you in our own on-premises data center and partly in our cloud-based HR and Recruiting System provided by Oracle. Oracle's data center is in Frankfurt am Main, Germany. We have concluded a data processing agreement with Oracle.

We will forward your application internally to the relevant department.

The data will be made available both to the recruiters of the national company in which the position is advertised and to the recruiters of the national company responsible for your home address, provided that the recruiting system is used in the respective country (Italy, Netherland, Austria, Poland, Germany, France).

If you or we have appointed an HR service provider to search for vacancies / suitable applicants, we will share the above information from you and about you with this external service provider.

We will delete your application data 6 months after the application process has been completed (see 3.). If you wish to request the deletion of your application data before then, please send an email to the responsible recruiter named in the respective job advertisement. In this case, your application data will also be permanently deleted after a period of 6 months.

The legal basis for processing the above personal data according to Article 4(1) GDPR and, if applicable, special categories of data according to Article 9(1) GDPR is Article 6(1)(b), Article 9(2)(b) and (e) GDPR in conjunction with Section 26(1), (3) and (8) of the German Federal Data Protection Act (BDSG).

We also record the "profile source" / referrer URL to ensure better tracking and management of the application processes.

b) Career information (application wizard) by e-mail and, if applicable, via social media channels

If you agree to receive career information from the SEW-EURODRIVE Group by ticking the check box in the application wizard and subsequently confirm your consent by clicking on the link in the confirmation e-mail we send you, we will notify you by e-mail about career-related information (e.g., job vacancies, trade fair dates, events, etc.).

We use the e-mail and social media campaign tool integrated in our Oracle HCM Recruiting Cloud System to send these messages. The cloud data center is within the EU.

We process your name and e-mail address as well as stored applicant information (information on your CV, place of residence, any stored preferences regarding the nature of work and preferred locations).

To check if and how you use our career information and to ensure that we can continuously develop our services and adapt them to your preferences, we track the following data from our e-mails to you:

• Number of recipients who opened the e-mail
• Click-through rate, which is what percentage of recipients opened the e-mail and clicked a link in the e-mail
• Number of e-mail recipients who replied to the e-mail
• Conversion rate, which is what percentage of e-mail recipients carried out a desired action, e.g., submitted an application
• Bounce rate, which is how many e-mails could not be delivered
• Opt-in rate, which is the number of recipients who have consented to receiving career information
• Unsubscribe rate, which is how many people have unsubscribed from receiving e-mails

The legal basis for sending career information and tracking e-mail messages is Article 6(1)(a) GDPR. You can withdraw your consent to this at any time by unsubscribing from the career information in your account. The processing of data until you withdraw your consent remains lawful (withdrawal does not apply retrospectively).

c) Job alerts for new vacancies

If you consent to receiving job alerts by ticking the check box in the application wizard and subsequently confirm your consent by clicking on the link in the confirmation e-mail we send you, we will inform you by e-mail about new vacancies from the SEW-EURODRIVE Group worldwide that are suitable for you.

You will then receive e-mails with links to the new vacancies. The legal basis is Article 6(1)

a) GDPR.

If you no longer wish to receive job alerts, you can change your notification preferences (job category and location) at any time via your personal candidate logon on the career page or you can withdraw your consent at any time by unsubscribing from job alerts completely. The processing of data until you withdraw your consent remains lawful (withdrawal does not apply retrospectively).

d) Storing your application in our local candidate pool for checking against future vacancies

If we were unable to consider your application for a specific job and your profile is of interest for future vacancies, we would be delighted for you to join our Germany-wide candidate pool.

If you consent, we will add you to our Germany-wide talent pool and will match your profile with other vacancies that fit your profile and share them with you if they match. Your data will be stored for three years. After three years, your data will be erased (deleted). You will then no longer receive any information about vacancies from us, unless you inform us in advance that you still want to be in our talent pool. The legal basis for this is Article 6(1)(a), 9(2)(a) and (e) GDPR.

You can download the consent text here (PDF, 63 KB). You can withdraw your consent at any time.

The processing of data until you withdraw your consent remains lawful (withdrawal does not apply retrospectively).

e) Tracking on the career site using cookies

To improve the online experience, the following information is tracked when you visit our career site using cookies provided by eTracker and Oracle:

• IP address to determine the geographical origin of the visitor
• Browser information to understand which browsers and devices are used
• Page views, which is the number of pages visited on the career site
• Time spent on specific pages
• Clicks on specific links or buttons
• Source of origin, which is how applicants reached the career page (e.g., search engine, banner, direct access)
• Information about session duration and activity
• Interactions with forms, which means clicks and submissions of applications or registrations
• Unique visitors, which is how many people visit the career page
• Returning visitors, which is how many people visited our career page / website again within a certain period of time
• Page views, which is how many people visited our career page / website
• Bounce rate, which is how many people visit the career page / website and leave it again without further action
• Inbound links / backlinks, which is if there are other websites that link to our site

Employees in internal marketing and internal recruiting worldwide have access to the above career page information and evaluations; IT employees may have access for system maintenance. The IT administration at Oracle and eTracker also has access to the information from the cookies, e.g., for troubleshooting.

The cloud data center and the servers of the listed cookie providers are in the EU.

For a more detailed description of the type, name, purpose and storage duration of cookies, go to our cookie consent tool.

The legal basis for using technically necessary cookies is Article 6(1)(f) GDPR and Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

The legal basis for using functional cookies and cookies for analysis and to measure performance is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw your consent at any time. Tracking until you withdraw your consent remains lawful (withdrawal does not apply retrospectively).

Depending on your browser, you can delete the cookies yourself at any time and/or permanently block tracking cookies.

Below you will find detailed information on the nature, name, purpose and retention period of cookies:

2. Sanctions list check

In accordance with existing EU regulations (e.g. Art. 2(2) REGULATION (EC) No 881/2002, Art. 2(2) REGULATION (EU) No 269/2014), it is prohibited to pay money directly or indirectly to persons who are on so-called ‘sanctions lists’ (= annex to the respective regulation). It is therefore also prohibited to pay these persons application costs (e.g. for travel to and from the place of work, etc.) or remuneration.

In order to avoid violations of these regulations and severe sanctions at our expense, we (= Recruiting Department and Export Control Department) compare your surname, first name, place of residence/country of origin (if applicable) and date of birth (if applicable) with the persons and information published on the so-called ‘sanctions lists’ (= annex to the respective regulation). In this respect, our interest prevails. The legal basis is Art. 6 (1) (f) GDPR in conjunction with the respective regulation.

V. Your rights as a data subject

As a data subject, you have various rights that you can exercise by contacting the data controller using the contact details indicated in the introduction (DPO):

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

At any time and without providing a reason, you can object to the processing of your personal data for marketing purposes, including customer data analysis or dissemination to third parties for marketing purposes.

Every data subject is also entitled to a general right to object (see Article 21 of the GDPR).

VI. Data security and storage time

1. Security

Personal data is processed using appropriate technical and organizational measures (integrity and privacy) in order to guarantee adequate security, including protection against unauthorized or illicit processing and against accidental loss, destruction or damage.

Our data (including your personal data) is stored exclusively at the data center of the parent company of the SEW-EURODRIVE Group, located in Germany.

On our website, we take technical and organizational security measures to prevent access by third parties to the personal data we collect, to protect it from loss and misuse and to enable secure data transfer.

However, please be advised that, due to the structure of the internet, unauthorized data access by third parties may occur despite implementation of our security measures. Therefore, it is also your responsibility to encrypt your data and/or protect it adequately against misuse. If you have not implemented any suitable protection measures, data that is transmitted without encryption, including by e-mail, may also be read by third parties.

2. Storage

According to Article 5 of the GDPR, personal data is stored for no longer than is necessary for the purposes for which the personal data is processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for statistical purposes in accordance with Article 89 of the GDPR, subject to implementation of the appropriate technical and organizational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (storage limitation).