Data Privacy Statement
The protection of personal data is a particular concern to us. We therefore process personal data in accordance with the requirements of the European General Data Protection Regulation (GDPR) and other statutory requirements. With the following information in our privacy policy, we would like to provide you with detailed information regarding the handling of your personal data and your rights in this context.
1. Purposes of the processing according to Art. 6 GDPR
Personal data, such as a person’s name, address or email address, are only collected by us in the context of providing a service, when downloading provided materials, with an online application, or with the use of the contact form. For this purpose, we only use information provided voluntarily by you for the purpose for which you provided it to us. The processing of personal data takes place exclusively in accordance with the principles of Art. 5 GDPR.
1.1. Processing of usage data when accessing our homepage
For statistical and system-related purposes, our web servers store every case of access in a log file in the event of visits to and the retrieval of the provided content. The logging includes the following information:
- IP address, time stamp (date and time of access) of the accessing computer
- Accessed web pages/file names
- Web browser and operating system of the accessing computer
- Transmitted data volume and notification of successful access
For security reasons, to prevent attacks on our web servers for example, this data is stored. The stored IP address will only be evaluated in the event of an attack on our systems (part (f) of Art. 6 (1) GDPR). The assignment of a natural person to this stored usage data does not take place. The logged data is stored for a period of 28 days. It is then erased from the system.
1.2. Use of the contact form
If you have any questions about our products, please use the contact form provided on our website or contact us by email. When using the contact form, we process the information you provide in order to process your inquiry or any queries (part (b), sentence 2 of Art. 6 (1) GDPR).
1.3. Online application
We offer applicants the possibility to apply online for our advertised job vacancies. When using the application form, we process the information you provide in the scope of our applicant selection procedure (Art. 26 (1) BDSG [German Federal Data Protection Act]). After the completion of the application selection procedure, your applicant data will be erased within six months in the event of a negative decision. For further details, please refer to the privacy policy when making an online application.
1.4. Registration for seminars
We offer various training programs and seminars on our website, for which you are able to register online. We will use your data to inform you about the contents of the seminar and the schedule, or for the possible processing of invoices. (part (b) of Art. 6 (1) GDPR)
1.5. Webinar registration
We use the GoToMeeting training platform for the realization of webinars. By registering, you agree that your data required for the registration and implementation of the webinar will be transmitted to Herrmann Ultraschall or to the GoToMeeting training platform.
1.6. Data download
On our website, it is possible to access various information materials. It is necessary to register to use this download option. We will use your personal data to provide you with information and offers according to your precise requirements and to contact you regarding your interests. (part (a) of Art. 6 (1) GDPR)
1.7. Supplier self-assessment
Persons and companies who are interested in becoming suppliers of goods and services on our behalf can be registered in our supplier database and will be asked to submit an offer if necessary. To register in the database, you will be asked to provide information about your company and about specific contact persons. The data will be used to take them into account in the selection of suppliers and to obtain offers from you if necessary. (part (f) of Art. 6 (1) GDPR)
1.8. Service, immediate support
Via the service and emergency assistance area, you can request technicians, inquire about spare parts, order repairs, or get help on other topics and products of Herrmann Ultrasound. For the completion of these orders, the contact, delivery and order information you provide will be processed. (part (b) and (f) of Art. 6 (1) GDPR)
1.9. Use of data for our purposes
If you have provided us with your personal data in connection with an advertising campaign, an event, a (mobile) application, etc., we may send you emails or other messages that relate to the service you inquired about.
If you have provided your personal data during the purchase of a product or service, we will inform you about similar products and services by email. You can revoke this type of information at any time and free of charge. You just need to click on the link provided in the email or message or the contact addresses provided. (part (f) of Art. 6 (1) GDPR)
2. Integration of third party services and content
2.1. Cookies
We use “cookies” on our website. Cookies are small text files that are placed on your computer and stored by your browser. The purpose of the use of cookies is to make our offer more user-friendly, effective and secure (part (a) of Art. 6 (1) GDPR). If you do not wish to use cookies, you can configure your browser settings so that you can decline the storage of cookies, or so that they are deactivated via the Consent Manager. You can also obtain further information about the cookies via the Consent Manager.
Our website uses cookies that are required for use; this relates to the following cookies:
Name: TYPO3
Purpose: Smooth and fault-free operation of the website
Storage period: Up to 1 year
Cookies that are not required for the use of the website and can be activated/deactivated via the Consent Manager:
Name: Google Analytics (statistics)
Purpose: Generation of statistics about website use
Storage period: Up to 2 years
Provider: Google Ireland Limited
Cookie: _ga, _gid, _gat, dc_gtm_<propertyid, _gac_<propertyid, AMP_TOKEN
Name: YouTube (external media)
Purpose: Play videos
Storage period: Up to 2 years
Provider: Google Ireland Limited
Cookie: CONSENT, LOGIN_INFO, VISITOR_INFO1_LIVE, YSC, PREF, _Secure-3PSIDCC, __Secure-3PAPISID, SAPISID, __Secure-3PSID, APISID, SSID, HSID
Further information about the individual cookies of the providers and their functions is available under the following link: cookies
2.2. Google Tag Manager
With your consent, this website uses Google Tag Manager (part (a) of Art. 6 (1) GDPR). Tag Manager is a code management system, and supports the web developers and the design of the website, in which recurring code snippets are reloaded by Tag Manager. For this purpose, the code content, for the integration of Google Analytics or DoubleClick, for example, is loaded directly from Google by your browser.
Please note that the service is hosted in the USA and that your IP address will be transmitted to the USA. The USA is not considered a secure third country. We cannot exclude the possibility that your data will be used for other purposes without your knowledge and that it will not be possible for you to exercise your rights. This possibility cannot be excluded, particularly by the law enforcement and intelligence authorities.
You can deactivate the Google Tag Manager at any time again via the Consent Manager
2.3. Google Consent Mode
Our website uses Google Consent Mode v2 in the configuration version “basic” to manage the collection of data through Google services based on the consent of our users. Consent Mode v2 enables us to collect and process the personal data only if you, the user, have given your explicit consent for this.
What data do we collect?
Depending on your consent, the following data may be collected:
Analytical data for improving our website service
Marketing data for personalizing advertisements and marketing measures
Conversion data for measuring the effectiveness of advertising campaigns
Purpose of data collection
The data collected is used for the following purposes:
Improving the service and user friendliness of our website
Displaying relevant and personalized advertisements
Measuring the effectiveness of our marketing campaigns
Legal bases of data processing
Your data is processed on the basis on your consent in accordance with point (a) of Art. 6(1) of the GDPR. You can withdraw or change your consent at any time.
Disclosure to third parties
The data collected may be passed to third parties, such as Google, to meet the purposes specified above. Google processes the data in accordance with the applicable data protection provisions.
Storage period and erasure of data
Your data will be stored only for as long as is necessary for the specified purposes or for as long as is legally prescribed. Your data will be erased once the storage period has elapsed.
2.4. Google Analytics
If you have given your consent to this, Google Analytics 4, a web analysis service of Google LLC, is used on this website. Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google”) is the data controller for users in the EU/EEA and Switzerland.
Nature and purpose of processing
Google Analytics uses cookies that enable an analysis of how you are using our websites. The information about your usage of this website collected by means of the cookies is generally transmitted to a Google server in the USA and stored there.
In Google Analytics 4, anonymization of IP addresses is enabled by default. Due to the IP anonymization, your IP address will be shortened by Google in the member states of the European Union or in contracting member states of the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and shortened there. According to Google, the IP address transmitted by your browser through Google Analytics will not be associated with other data from Google.
During your visit to the website, your user behavior is recorded in the form of "events." Events may include:
- Page views
- First-time visit to the website
- Start of session
- Visited webpages
- Your "click path," interaction with the website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- Internal searches
- Interaction with videos
- File downloads
- Viewed/clicked ads
- Language setting
The following is also recorded:
- Your approximate location (region)
- Date and time of the visit
- Your IP address (in shortened form)
- Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
- Your ISP
- The referrer URL (from which website/media you came to this website)
Purposes of processing
On behalf of the operator of this website, Google will use this information to analyze your use of the website and to compile reports on the website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.
Recipient
The recipients of the data are/can be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to art. 28 GDPR)
- Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Third-country transfer
The European Commission adopted its adequacy decision for the USA on July 10, 2023. Google LLC is certified according to the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely excluded, we also concluded the EU standard contractual clauses with the provider.
Storage period
The data sent by us and linked to cookies will be erased automatically after 2 months. The maximum lifetime of Google Analytics cookies is 2 years. Data whose retention period is over will be erased automatically once a month.
Legal basis
The legal basis for this data processing is your consent in accordance with point (a) of Art. 6 (1) sentence 1 of the GDPR and Art. 25 (1) sentence 1 of the TDDDG (Telecommunications Digital Services Data Protection Act).
Withdrawal
You may revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection. This does not affect the lawfulness of the processing carried out on the basis of the consent until such revocation.
You may also prevent the storage of cookies from the outset by choosing the corresponding settings in your browser software. However, if you configure your browser to reject all cookies, functionality on this and other websites may be restricted. Moreover, it is possible for you to prevent the recording of the data generated by the cookie about your website usage (incl. your IP address) by Google and the processing of data by Google by
a. not giving your consent to cookies being set, or
b. downloading and installing the browser add-on for deactivating Google Analytics HERE.
For more information on Google Analytics Terms of Use and Google's Privacy Policy, please visit
https://marketingplatform.google.com/about/analytics/terms/de/ and
2.5. Google Marketing Platform - Google Ads
We use Google Ads on our website, an online advertising service provided by Google LLC ("Google"). Google Ads enables us to place ads in Google search results and on websites in the Google advertising network in order to draw attention to our offers. As part of these advertising measures, we collect certain data, which we explain below. When you click on one of our Google ads, a cookie is placed on your device. This cookie contains a pseudonymized ID and collects information about your use of our website (e.g. pages viewed, interactions, length of stay on the website). This information is transferred to Google and stored on servers in the USA. The service provider of Google Ads is Google Ireland Limited. However, personal data may also be transferred to the parent company Google LLC. Google is also certified in accordance with the EU-US Data Protection Agreement (Data Privacy Framework).
Data processing is carried out for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports and to prevent you from seeing the same ads more than once. The legal basis for the processing is the declaration of consent given by you when you access this website as part of our cookie banner (Art. 6 para. 1 a, 7 GDPR). You can revoke your consent at any time with effect for the future by adjusting the cookie settings on our website.
Further information about Google Ads and Google's privacy policy can be found at: https://policies.google.com/privacy.
2.6. YouTube
For the integration of videos, we use a YouTube plugin which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. The parent company is Google LLC, 1600 Amphitheater Parkway, Mountain Vide, CA 94043, USA. The videos are saved on www.YouTube.com and can be played directly from our website. All videos have been integrated in the “enhanced data protection mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only if you play the videos will the data referred to in the next paragraph be transmitted. We have no control over such a transmission of data. When you activate the video, YouTube uses cookies to collect information for the purposes of analysis and to improve the user-friendliness. According to YouTube, the data is processed on a pseudonymized basis. If you are logged in to your Google or YouTube account, however, the data may be linked directly to your YouTube account.
When you visit our website, YouTube receives the information that you have accessed the relevant sub-page of our website. The data specified in this privacy policy is also transmitted. This happens regardless of whether YouTube provides a user account into which you are logged in or no user account exists. If you are logged into Google, your data will be associated directly with your account. If you do not want the data to be associated with your YouTube profile, you must log out before activation of the button. YouTube will store your data as user profiles and use it for the purposes of advertising, market research and/or the user-oriented configuration of its website. In particular, an evaluation of this kind takes place (including for users who are not logged in) to provide custom advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact YouTube.
Further information on the purpose and scope of the data collection and its processing by YouTube is provided in their privacy policy. There, you will also find further information about your rights and settings options for the protection of your private sphere: https://policies.google.com/privacy. Google also processes your personal data in the insecure third country, the USA.
You can deactivate YouTube at any time again via the Consent Manager
2.7. LinkedIn
With your consent, on our website we use plugins of the LinkedIn network which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you visit a page on our website that contains such a plugin, the content of this plugin is transmitted directly to your browser and integrated into the website accordingly. Through the embedding of the plugin, LinkedIn receives the information that you have accessed our website with your IP address. Please note that an exchange of this information takes place when you visit our website, regardless of whether you interact with the plugins or not. If you interact with the plugins, by pressing the “Recommend” button for example, your device will transfer this information directly to LinkedIn, where it will then be stored. If you are logged in to LinkedIn, LinkedIn can assign the visit to your LinkedIn user account.
To find out how to change your privacy settings on LinkedIn, visit https://www.linkedin.com/legal/privacy-policy.
You can find information about the cookies from LinkedIn at https://de.linkedin.com/legal/l/cookie-table. You can manage the use of LinkedIn's cookies on our website via the Cookie Manager at the bottom of our website.
2.8. Friendly Captcha (bot/spam protection)
This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. Friendly Captcha is an innovative, data protection-friendly protection solution to make it more difficult for automated programs and scripts (so-called “bots”) to use our website.
For this purpose, we have integrated a program code from Friendly Captcha into our website, for example for contact forms, so that the visitor's end device can establish a connection to the Friendly Captcha servers in order to receive a calculation task from Friendly Captcha. The visitor's end device solves the calculation task, which requires certain system resources, and sends the calculation result to our web server. This contacts the Friendly Captcha server via an interface and receives a response as to whether the puzzle has been solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and, for example, process or reject them.
- The data is used exclusively to protect against spam and bots as described above.
- Friendly Captcha does not set or read any cookies on the visitor's end device.
- IP addresses are only stored in hashed, i.e. one-way encrypted form and do not allow us or Friendly Captcha to draw any conclusions about an individual person.
- If personal data is stored, this data is deleted within 30 days.
The legal basis for the processing is our legitimate interests in protecting our website from abusive access by bots, i.e. spam protection and protection against attacks such as mass requests) in accordance with Article 6 (1) sentence 1 lit. f GDPR.
Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/.
3. Further processing of prospect/customer data from the USA
Our affiliated company in the USA, (Herrmann Ultrasonics, Inc, 1261 Hardt Circle, Bartlett, IL 60103), collects and processes personal data from interested parties in the United States. After obtaining your consent, this data is forwarded to us (Herrmann Ultraschalltechnik GmbH & Co. KG, Descostr. 3-11, 76307 Karlsbad) in Germany in order to provide you with information about our products and services.
3.1. Purpose and legal basis of data processing
The purpose of this data processing is to answer your request and to provide relevant information about our products and services on the website of our affiliated company in the USA. There you have given your consent to the transfer of data to us by confirming your consent in the consent management tool. The legal basis for the processing is therefore your express consent in accordance with Art. 6 para. 1 lit. a GDPR and, if applicable, US data protection laws.
3.2. Type of data collected
The data we process may include the following:
- Names and contact details (e.g. email address, telephone number),
- professional information such as position and company affiliation,
- requested products or services.
This data is processed and stored exclusively for the stated purposes.
3.3. Data transfer to third countries
As this involves the transfer of personal data from the USA to the European Union, this data is subject to additional protective measures. The protection of your data is guaranteed by compliance with the data protection requirements in accordance with Chapter 5 of the GDPR.
3.4. Storage period
We will only retain your personal data for as long as is necessary to fulfill the purposes of your request. If you revoke your consent or request the deletion of your data, we will delete your data, provided there are no statutory retention obligations.
3.5. Your rights
You have the right to information, rectification, erasure, restriction of processing and the right to data portability of your personal data. You can also withdraw your consent at any time with effect for the future.
4. Further obligations to provide information pursuant to Art. 13 GDPR
4.1. Name and contact details of the controller (part (a) of Art. 13 (1) GDPR)
Herrmann Ultraschalltechnik GmbH & Co. KG
Descostr. 3-11
76307 Karlsbad
Tel.: +49 7248 79-0
Fax: +49 7248 79-1039
Email: info@herrmannultraschall.com
4.2. Name and contact details for the Data Protection Officer (part (b) of Art. 13 (1) GDPR)
ENSECUR GmbH
Kaiserstr. 86
76133 Karlsruhe
Personally responsible: Mr. Thorsten Jordan
Email: dsb-herrmannultraschall@ensecur.de
4.3. Recipients or categories of recipients of personal data (part (e) of Art. 13 (1) GDPR)
- Hosting providers
- Analysis services
- Web designers/administrators
4.4. Storage period pursuant to the statutory retention periods (part (a) of Art. 13 (2) GDPR)
In accordance with the principles of data avoidance and data economy, we only store personal data for as long as this is necessary or required by law (statutory storage period). As a rule, personal data will be erased within ten years of the end of the contractual relationship and/or earlier if a prospective customer does not become a customer. After the respective purpose has ceased, the corresponding personal data will be erased in accordance with the statutory requirements.
4.5. Right of access, rectification, erasure, restriction of processing, data portability and objection (part (b) of Art. 13 (2) GDPR)
As a data subject, you have the right to
- Request access to your data stored with us and its processing,
- Complete the rectification of incorrect personal data,
- Request the erasure of your data stored with us,
- Request the restriction of the data processing if we are not yet allowed to erase your data due to the statutory obligations,
- Submit an objection to the processing of your data with us,
- Data portability, provided that you have consented to the data processing or have concluded a contract with us,
- Withdraw your consent at any time, with effect for the future.
To exercise these rights, please contact the controller using the contact details provided.
4.6. Security
To protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons, we use appropriate technical and organizational security measures. These security measures are continuously improved in accordance with the technological developments.
4.7. Children
We do not collect any personal information from minors. Should the case arise that we unwittingly collect personal data from children, we will erase it immediately.
4.8. Right to lodge a complaint (part (d) of Art. 13 (2) GDPR)
As a data subject, you can contact the responsible supervisory authority at any time. The following supervisory authority is responsible for us as responsible persons:
The State Officer for Data Protection and Freedom of Information of Baden-Württemberg
Postfach 102932
70025 Stuttgart Germany
Phone: +49 (0) 711/615541-0
Email: poststelle@lfdi.bwl.de
4.9. Requirement to provide personal data (part (e) of Art. 13 (2) GDPR)
Some of the data collected is necessary for visiting the website. To be able to respond to inquiries, the processing of specific data from inquiring persons is a necessity. The failure to provide such personal data may mean that the use of the website is restricted and/or that contact inquiries cannot be answered.
4.10. The amendment of our privacy policy
To ensure that our privacy policy always complies with the current legal requirements, we reserve the right to amend it at any time. This also applies if the privacy policy has to be amended due to new or revised services, such as new services. The new privacy policy will then take effect on your next visit to our offering.
Last updated: 27.11.2024