1. General

1.1 Person responsible, data protection officer

Information regarding the company responsible for processing your data and, if applicable, the data protection officer as well as the competent supervisory authority can be found at the bottom of this website or at the top of this website under the tab "Data protection notice", unless otherwise stated in this privacy policy.

1.2 Type of data processed

We do not collect any personal data via our websites without your consent. You alone decide whether you want to disclose this data to us or not, for example in the context of a registration or a download. We need your personal data to process your enquiry or to provide you with access to special information or offers. These data are, among others:

• Inventory data/CRM data (e.g. names, addresses, customer history, customer statistics)
• Contact details (e.g. email, telephone numbers)
• Account data (login, PW)
• Usage data (e.g. websites visited, interest in content, access times)
• Meta/communication data (e.g. device information, IP addresses)

You will find out which data we process in individual cases, for what purpose and on what legal basis in the course of this privacy policy.  

1.3 Category of persons affected

Our website is aimed at visitors and users of the same as well as the online offers, including e-commerce functionalities for our customers, where applicable. Accordingly, we process data from the following groups of persons:

• Visitors and users of the website and its online offerings
• Customers, interested parties and business partners
• Newsletter subscribers
• Other communication partners

1.4 Your rights

If the processing of your personal data is covered by the GDPR, you have the following rights, otherwise the legal provisions applicable to the processing apply.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the data controller. If you would like to assert your rights or would like more detailed information, please contact us or our data protection officer:                                                                                               

a) Rights according to Art. 15 ff. GDPR

You as a data subject have the right to obtain confirmation from the controller as to whether personal data concerning you are being processed; if this is the case, you have a right of access to such personal data and to the information specified in Article 15 of the GDPR. Under certain legal conditions, you have the right to rectification under Article 16 GDPR, the right to restriction of processing under Article 18 GDPR and the right to erasure ("right to be forgotten") under Article 17 GDPR. In addition, you have the right to receive the data you have provided in a structured, common and machine-readable format (right to data portability) in accordance with Article 20 of the GDPR, insofar as the processing is carried out with the help of automated procedures and is based on consent in accordance with Article 6 (1a) or Article 9 (2a) or on a contract in accordance with Article 6 (1b) of the GDPR.

b) Withdrawal of consent pursuant to Art. 7 (3) GDPR

If the processing is based on consent, you can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

c) Right of appeal

You have the option of contacting us or a data protection supervisory authority with a complaint (Article 77 GDPR). Information regarding the company responsible for processing your data and, if applicable, the data protection officer as well as the competent supervisory authority can be found on this website.

d) Right to object pursuant to Article 21 of the GDPR

In addition to the above rights, you have the right to object as follows:

e) Right to object on a case-by-case basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1e) GDPR (data processing in the public interest) and Article 6 (1f) GDPR (data processing on the basis of a balancing of interests); this also applies to a profiling based on this provision within the meaning of Article 4 no. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

f) Right to object to the processing of data for advertising purposes

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for the purposes of such marketing; this includes profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

1.5 General information on the transfer of data to third parties

(1) Apart from the cases described in this privacy policy and unless otherwise regulated in additional privacy policies, your personal data will not be passed on to third parties or otherwise disseminated without your express consent.

(2) Within the responsible IST AG company, access to your data is granted to those offices that need it to fulfil our contractual and legal obligations or to protect legitimate interests. Furthermore, affiliated companies of the IST AG Group as well as service providers and vicarious agents employed by us and authorities or third parties may receive data for these purposes. Service providers, vicarious agents, etc. commissioned by us will be contractually obliged to comply with the applicable data protection laws.

(3) As part of the hosting of our website, your data processed by us is processed by the B-works Technologies GmbH. acting on our behalf on the basis of a processing agreement.

(5) In order to be able to provide you with targeted information and advice on products, we or service providers may use web analysis tools, in particular tracking technology, on our behalf. These enable communication based on needs and advertising. Further information can be found below.

1.6 Transfer to third countries

(1) Data is only transferred abroad within the scope of the applicable data protection regulations. In particular, as far as this is necessary for the execution of your orders, is required by law (e.g. reporting obligations under tax law), in case you have given us your consent or within the scope of a processing agreement. Furthermore, we transmit data to affiliated companies for the protection of legitimate interests. In case of transfer of personal data to third countries, we ensure an appropriate level of data protection.

(2) Within the scope of the EU General Data Protection Regulation (GDPR), the following shall apply additionally:

Data transfer to countries outside the EU or the EEA (so-called third countries) only takes place within the framework of the applicable data protection regulations. In the event of the transfer of personal data to third countries, we ensure an appropriate level of data protection, e.g. through special guarantees, such as the adequacy decision by the EU commission that the levels of data protection are essentially equivalent to the EU (e.g. for Switzerland) or compliance with recognized special contractual obligations (so-called "EU standard contractual clauses").

1.7 Security

(1) We have taken technical and organizational security measures (for the EU according to Art. 24, 32 GDPR) to protect your personal data from loss, destruction, manipulation and unauthorized access. All our employees and all third parties involved in data processing are obliged to comply with the applicable data protection laws and to handle personal data confidentially.

(2) For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

1.8 Links to other websites

Our websites may contain links to websites of other providers; these websites are not subject to this privacy policy. We carefully check the content of other websites before linking to them. In doing so, we ensure that we only link to websites that adhere to the same high standards of data protection as Endress+Hauser. We are not responsible for the privacy practices or the content of such other websites. If we become aware of any infringements by third party content, we will remove the content or link immediately.

1.9 Changes to our privacy policy

We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments or legal changes. In these cases, we will also adapt our privacy policy accordingly. Please therefore note the current version of our privacy policy.

2. Visiting our website

In the following, we would like to inform you about which personal data we process for which purpose and on the basis of which legal basis when you visit our websites.

2.1 Purpose of the processing

We use your personal data for the following purposes:

• For the provision of the website and the online offer, its functions and contents.
• For the creation and management of your personal customer account.
• To identify you as a contracting party.
• For processing your online purchases with us. This includes your orders and returns of purchases made through our website, processing of payment, notifications of delivery status and any problems with delivery. Your personal data may also be processed for the handling of complaints or in the event of warranty rights.
• For responding to contact requests and communicating with users.
• For the assertion, enforcement, exercise or defense of and against legal claim(s) and legal dispute(s), and for the detection, investigation and prevention of crime.
• For security measures.
• For reach measurement.
• For the purpose of direct marketing, e.g. in the form of a promotional email or postal advertising.

2.2 Registration for IST Innuscreen’s webshop

Registration on our website is required in order to use create a customer account. In the course of registration, we process the following personal data: Email address as well as a password generated by you. The deletion of your customer account is possible at any time and can be initiated, for example, by sending a message to the contact option described above or by email. The legal basis for the processing of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).

As a registered customer, you can access your profile and view your orders.

2.3 Use of the e-commerce functionalities

2.3.1 Ordering goods

When ordering goods via our website, we collect and process your personal data required for the processing of the order. Mandatory data required for the processing of contracts (name and address) are marked separately, other data are voluntary. The legal basis for the processing of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).

2.3.2 Electronic ordering and payment processes

(1) After you have decided to make a purchase as a customer or guest, we collect the following data to carry out the order: first name and surname, company name, communication data, address, delivery address if applicable. Payments are made by credit card or Paypal. Data entered to payment providers Adyen for credit cards or Paypal are not accessible to IST Innuscreen GmbH.  Adyen’s privacy policy can be viewed here:https://www.adyen.com/policies-and-disclaimer/privacy-policy

The legal basis for processing your order and payment data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).

(2) Your address, payment and order data will be stored for the duration of the tax and commercial law retention obligations of ten years after completion of the contract and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims. The legal basis for processing personal data for the purpose of fulfilling legal archiving and retention obligations is the fulfilment of legal obligations (for the EU Art. 6 para. 1 lit. c) GDPR).

2.3.3 Data transfer within the framework of the order

We process the data you provide for the purpose of processing your order. For the fulfilment of the contract, we pass on your data to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. The legal basis for the transfer of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR). Our service providers may only process or use your data for the purpose for which they were transmitted to them. Insofar as data is passed on to external service providers, we have taken technical and organizational measures to ensure that the data protection regulations are observed.

2.4 Contact forms 

(1) At various points on our website, you have the opportunity to enter your personal data in order to contact us or to leave us your feedback. We have marked the respective mandatory information as such. Without these, we cannot provide you with the requested service. At the time of entry, we store this information as well as your IP address and the time (date and time) of submission.

(2) For the processing of data, reference is made to this privacy policy during the submission process. Alternatively, it is possible to contact us via the email addresses provided. In this case, the user's personal data transmitted with the email will be stored. The data will be used exclusively for processing the enquiry.

(3) The legal basis for the processing of data transmitted in the context of the use of the contact form or in the course of sending an email is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR) or the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR) if the email contact is aimed at the conclusion of a contract.

(4) The processing of the personal data from the contact form serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

(5) The data shall be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

2.5 Provision of the website and log files

(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis in the EU is Art. 6 para. 1 lit. f) GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access Status/HTTP Status Code
• Data volume transferred in each case
• Website from which the request comes
• Browser as well as language and version of the browser software
• Operating system and its interface

(2) The IP addresses of the users are deleted or anonymized after termination of use. In the case of anonymization, the IP addresses are changed in such a way that the individual data on personal or factual circumstances can no longer be assigned to a specific or identifiable natural person or can only be assigned with a disproportionately large effort.

2.6 Cookies

In addition to the log file data mentioned above, cookies are stored on your computer when you use our website. You can find a detailed overview of the cookies used and their storage duration here (download).

3. Promotional email communication and web analytics services
3.1 Promotional email communication

3.1.1 Registration to receive email

(1) You have the option to sign up for our promotional email communications, with which we will seasonally inform you about news such as regarding our products.

(2) Our promotional email communications will only be sent to you on the basis of your active consent (opt-in) and, if required, after additional confirmation of your email address (double opt-in). If you do not confirm your registration within 14 days, your registration will not be considered complete, and you will not receive any promotional email communication from us. In addition, we store your IP addresses used for registration and confirmation and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. After your confirmation, we store your email address for the purpose of sending you promotional email communication.

(3) The legal basis for the above-mentioned processing operations in the context of promotional email communication is your consent (for the EU Art. 6 para 1 lit. a) GDPR).

(4) If you no longer wish to receive promotional email communications from us, you can unsubscribe at any time, e.g. by clicking on the link provided in each email.

3.1.2 Promotional email communication after product purchase

(1) If you have purchased products, software or services through our website, we may send you our promotional email communications to the email address you provided at the time of purchase, even if you have not previously signed up to receive emails. This applies to promotional email communications advertising similar products to those you have purchased through our website.

(2) For this purpose, this email address is stored in our database. To prove the legitimacy of the sending of the promotional email communication, we also store your IP address used for the purchase and the time of the purchase.

(3) The legal basis for the above processing operations is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing is the direct advertising of our products to our customers as well as your interest in offers and promotions.

(4) If you no longer wish to receive promotional email communications from us, you can unsubscribe at any time, e.g. by clicking on the link provided in each email.

3.1.3 Service Provider for Promotional Email Sending

(1) We use Newsletter2Go (Brevo)  for optimal communication with our customers. The servers are located in the EU. Within the scope of support and administration services, it cannot be ruled out in individual cases that individual employees of the service provider outside the EU may also have access to user data within the scope of their contractual service provision, whereby an appropriate level of data protection is always ensured.

(2) Further information on data protection in connection with the use of Newsletter2Go can be found here: https://www.brevo.com/de/datenschutz-uebersicht/, their AGBs are here:  https://www.brevo.com/legal/termsofuse/ ,

3.1.4 Evaluation of promotional emails

(1) We would like to point out that we evaluate the user behavior of the recipients of our promotional email communication, provided that you have given a corresponding declaration of consent. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files. For the evaluations, we link the collected data or parts thereof and the web beacons with your email address and an individual ID. Links received in promotional email communications also contain this ID. With the data obtained in this way, we create a user profile in order to better tailor the promotional email communication to your interests. In doing so, we record if you open our emails, which links you click on in them and infer your personal interests from this. We may link this data to actions you have taken on our website.

(2) The legal basis for the evaluation described above is your consent (for the EU Art. 6 para. 1 lit. a) GDPR), which you can give us voluntarily as part of the registration for promotional email communication.

(3) In the case of sending a promotional email communication after a purchase without a separate registration for email communication and declared consent, the legal basis for the tracking described above is the legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR). Our legitimate interest in data processing in the context of tracking is our need to better tailor our promotional email communications to the interests of our customers.

(4) You can object to the tracking described above at any time by unsubscribing from promotional email communications.

4. Web Analytics and Advertising

This website uses the web statistics tool google analytics and baidu analytics)", to collect statistical data on the use of this website and to optimize the offer accordingly. Google Analytics records the usage anonymously or pseudonymously. The IP address is anonymized immediately after processing and before storage. The legal basis for data processing is our legitimate interest (in the EU Art. 6 para. 1 lit. f) GDPR).

 4.1 Google Ads and Google Conversion Tracking

(1) This website uses Google Ads, an online advertising program of Google Inc. based in the USA. Within the scope of Google Ads, we use the so-called conversion tracking. The information obtained with the help of the conversion cookie is used to create conversion statistics. We thereby learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which we could identify you personally. The legal basis for the data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR). You have the option to prevent this in the future by setting an opt-out cookie: https://www.google.com/settings/ads/onweb#display_optout

(3) More information on Google Ads and Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy

4.2 Google Tag Manager

(1) This website uses Google Tag Manager as part of Google Ads and Google Conversion Tracking. Tags are small pieces of code on our website that are used to, among other things, measure traffic and visitor behavior, track the impact of online advertising and social channels, use remarketing and targeting, and test and optimize their website. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. The legal basis for data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).

(2) Further information on Google Tag Manger can be found in Google's privacy policy: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

4.3 Google Dynamic Remarketing

(1) We also use the Google Remarketing application. This enables us to display interest-based advertisements when you continue to use the internet, based on websites and offers that you have visited or used on our website. Google uses cookies to recognize your browser when you visit other websites and to target you with interest-based advertisements.

(2) According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing. The legal basis for data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).

(3) Further information on Google Dynamic Remarketing can be found in Google's privacy policy: https://policies.google.com/privacy

4.4. Full list of external Services implemented on our website

Links to                                                   Service

googletagmanager.com                      Google Tag Manager

Youtube.com                                      Film hosting

Fonts.gstatic.com                               Google Fonts

Static.doubleclick.net                          Google Ads

Maps.google                                       Google Earth Engine

checkoutshopper-live.ayden.com        Adyen Payment Service

tag.aumago.com                                 Aumago

More Information
Here you can find more information about our privacy policy in accordance with the General Data Protection Regulation (GDPR).
 

Data Protection Officer
We have appointed a data protection officer.
Dr. Elmara Graser
Robert-Rössle-Str.10
13125 Berlin