Privacy Policy

Krause Automation GmbH

An overview of data protection

General information

The following information provides an easy-to-understand overview of what happens to your personal data when you visit this website. Personal data comprises all data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to the following sections of this Privacy Policy.

Who is responsible for data collection on this website?

The controller for data processing on this website, hereinafter also referred to as “we”, is:

Krause Automation GmbH 
represented by the Managing Director Zhengxun Jin 
Richard-Taylor-Strasse 89 
28777 Bremen 
Phone: +49 421 68880 
E-mail: germany@~@krause-automation.com

Data protection officer

We have appointed a data protection officer:

Markus Meurer 
Compliance Beratung + Service Rechtsanwaltsgesellschaft mbH 
Maximilianstraße 24 
80539 Munich

Phone: +49 89 21 52 74 45 
E-mail: datenschutz@~@compliancerechtsanwaelte.de

www.compliancerechtsanwaelte.de

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data you enter into a contact form or send to us by e-mail. Information on the processing of personal data in the context of application procedures can be found in our separate privacy policy for applicants.

Other data is collected automatically by our IT systems or after your consent when you visit the website. This mainly includes technical data, such as your internet browser, operating system, referrer, time of access or similar usage and device data. This data is collected automatically as soon as you access this website or if you have consented to optional services.

What do we use your data for?

Some of the data is collected to ensure the error-free, secure and high-performance provision of the website. Other data may, subject to your consent, be used to analyze your user behavior, measure reach, optimize our online offering or for marketing purposes. If contracts can be initiated or inquiries submitted via the website, we also process your data for handling inquiries, initiating contracts and communicating with you.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given your consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority.

Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following providers:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. 
Privacy policy Hetzner: https://www.hetzner.com/de/legal/privacy-policy/.

The use of Hetzner is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable, secure and high-performance presentation of our website. To the extent that information is stored or accessed on the user’s device and this is strictly necessary for the technical provision, this is also carried out on the basis of § 25(2) TDDDG.

We have concluded a data processing agreement with Hetzner. This ensures that Hetzner processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Cloudflare

The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. 
Privacy policy Cloudflare: https://www.cloudflare.com/privacypolicy/

Cloudflare provides a globally distributed content delivery network with DNS, security and performance functions. Data transfer between your browser and our website is technically routed via Cloudflare’s network. Cloudflare may process, in particular, IP addresses, technical connection data, DNS requests, request metadata as well as security and performance-related information. The use is for protection against attacks, stable delivery of the website and improvement of availability and loading times.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website. Where technically necessary storage or access operations take place on the end device, this is additionally based on § 25(2) TDDDG.

Transfers to third countries may take place on the basis of Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

The storage period at Cloudflare depends on the specific function used and Cloudflare’s policies. Where Cloudflare processes log, security and performance data for the protection and operation of the website, storage is limited to what is necessary for security, performance and abuse prevention purposes. A data processing agreement is in place.

Storage duration

Unless a more specific storage period is specified within this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storage, such as tax or commercial retention obligations. In the latter case, deletion will take place after these reasons cease to apply.

Recipients of personal data

As part of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these parties. We only disclose personal data to external parties if this is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest in the disclosure or if another legal basis permits the transfer. When using processors, we only disclose personal data on the basis of a valid data processing agreement.

 

Your rights as a data subject

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You may revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected.

You can adjust or withdraw your consent settings at any time via the consent banner implemented on our website by Usercentrics. The consent banner can be accessed via the “Privacy settings” link in the footer of our website. You may also notify us of your withdrawal by e-mail at datenschutz@krause-automation.com.

Right to object pursuant to Art. 21 GDPR

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. This right is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, or to have it transferred to a third party.

Information, rectification and deletion

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin, recipients and the purpose of the data processing, and, where applicable, a right to rectification or deletion of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. This right exists in particular if you contest the accuracy of your data, if the processing is unlawful and you request restriction instead of deletion, if we no longer need your data but you require it for the establishment, exercise or defense of legal claims, or if you have objected pursuant to Art. 21(1) GDPR and it has not yet been determined whose interests prevail.

Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place that produces legal effects concerning you or similarly significantly affects you.

Obligation to provide personal data

In the context of using our website and our contact options, the provision of personal data may be required by law or contract or necessary for the conclusion of a contract. Where the provision of certain data is required, we will inform you accordingly. Failure to provide such data may result in a contract not being concluded or a request not being processed. For the mere use of our website, the provision of personal data beyond the automatically collected technical data is generally not required.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

 

Data collection on this website

Cookies

Our website uses cookies and similar technologies. Cookies are small data packages and do not cause any damage to your device. They are either stored temporarily for the duration of a session or permanently.

Technically necessary cookies and similar technologies are used on the basis of Art. 6(1)(f) GDPR in conjunction with § 25(2) TDDDG. The website operator has a legitimate interest in the technically error-free, secure and user-friendly provision of its services.

All other cookies and similar technologies, in particular those for analysis, reach measurement, marketing or convenience purposes, are used exclusively on the basis of your prior consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. This consent can be revoked at any time.

You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases or exclude them in general. Disabling cookies may limit the functionality of this website.

 

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain, manage and document your consent to the storage of certain cookies or the use of specific technologies in a data protection compliant manner. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

When you visit our website, in particular your consent status, the time of your selection, a pseudonymous consent ID, your IP address, browser and device information as well as, where applicable, geolocation data are transmitted to Usercentrics. Usercentrics stores a technically necessary record of your consent decision in order to document granted consents and withdrawals.

Legal basis: Art. 6(1)(c) GDPR insofar as the documentation of consent is required to fulfill legal obligations, and additionally Art. 6(1)(f) GDPR for the technical management and traceability of consent settings. Where cookies or similar technologies are required, this is based on § 25(2) TDDDG.

We have concluded a data processing agreement with Usercentrics.

Consent records are stored by Usercentrics for as long as necessary to fulfill legal documentation obligations, generally for three years. Data processing by Usercentrics takes place on servers within the European Union. According to the provider, no transfer to third countries takes place. Further information can be found at https://usercentrics.com/privacy-policy/.

 

Server log files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include, in particular, browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address.

This data is not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation, stability, IT security and optimization of the website.

Server log files are automatically deleted after 14 days, unless longer storage is required to investigate specific security incidents or to assert or defend legal claims.

 

Contact form

If you send us inquiries via a contact form, your details from the form, including the contact data provided, will be stored for the purpose of processing the inquiry and for follow-up questions.

Your data may be shared internally with responsible departments and with processors, for example in the areas of hosting or CRM. No further disclosure to third parties takes place unless we are legally obliged to do so or another legal basis applies.

The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR. If consent has been obtained in individual cases, the legal basis is Art. 6(1)(a) GDPR.

The data will remain with us until the purpose ceases to apply, you request deletion or statutory retention obligations prevent deletion.

 

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request including all resulting personal data will be stored and processed for the purpose of handling your request.

The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The storage period corresponds to that of the contact form.

 

Analysis tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to technically manage tracking, statistics and marketing tags. Google Tag Manager itself does not create user profiles. We use it in consent mode, meaning that analysis and marketing tags are only loaded after your consent has been given. The technical provision of the Tag Manager as a container tool is based on Art. 6(1)(f) GDPR. Where analysis or marketing tags are loaded, this is exclusively based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

A transfer of personal data to the USA may take place. Such transfers are based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, the EU-US Data Privacy Framework pursuant to Art. 45 GDPR. Further information can be found at https://policies.google.com/privacy.

 

Google Analytics

This website uses Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze the behavior of website visitors. We receive various usage data, such as page views, duration of visits, operating systems used, approximate location data, origin of users and interactions on the website. As part of enhanced measurement, events such as page views, scrolls, clicks on external links, site searches, video interactions, file downloads and form interactions may be recorded. Google Analytics 4 uses cookies and similar technologies as well as modeling and machine learning approaches. According to current information from Google, no individual IP addresses are stored for access from the EU.

The legal basis is exclusively your prior consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. This consent can be revoked at any time.

The standard storage period for user-related data is up to 14 months, depending on configuration. After this period, the data is automatically deleted.

A transfer of personal data to the USA may take place. This is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, the EU-US Data Privacy Framework pursuant to Art. 45 GDPR.

You may also prevent the collection of data by Google Analytics by installing the browser add-on available at https://tools.google.com/dlpage/gaoptout. Further information can be found at https://policies.google.com/privacy.

 

Google Signals

We use the “Google Signals” function within Google Analytics. If you have a Google account and have enabled personalized advertising, Google Analytics may provide cross-device information, demographic data and interest-based evaluations. This function is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. No automated decision-making within the meaning of Art. 22 GDPR takes place.

 

Google Analytics E-Commerce Measurement

If we use the “E-Commerce measurement” function in Google Analytics, information such as transactions, order values, time until completion of a purchase or similar e-commerce-related events may be recorded and analyzed. The legal basis corresponds to that stated above for Google Analytics.

 

Google Ads

We use Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites and to measure their success. If conversion tracking, remarketing or similar functions are enabled, cookies, advertising IDs, information on ad interactions and conversion events, browser and device data as well as technical connection data may be processed.

The legal basis is exclusively your prior consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. This consent can be revoked at any time.

Conversion data is stored for 90 days, depending on the account configuration.

A transfer of personal data to the USA may take place. This is based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, the EU-US Data Privacy Framework pursuant to Art. 45 GDPR. Further information can be found at https://policies.google.com/privacy.

 

Plugins and tools

YouTube with enhanced privacy mode

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode prevents the playback of embedded videos from influencing the user’s browsing behavior on YouTube; however, this does not replace any required consent under data protection law. Therefore, we integrate YouTube content in such a way that the YouTube player is only loaded after your prior consent. When a video is played, data may be transmitted to YouTube or Google and cookies or similar technologies may be used.

The legal basis is your prior consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. This consent can be revoked at any time.

A transfer of personal data to the USA may take place based on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Further information can be found at https://policies.google.com/privacy.

 

Google Fonts (local hosting)

This website uses Google Fonts for uniform font display. The Google Fonts are installed locally. No connection to Google servers is established.

 

Friendly Captcha

We use Friendly Captcha on this website. The provider is Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany.

Friendly Captcha is used to verify whether data input on this website is made by a human or by an automated program. According to the provider, Friendly Captcha processes connection, environment, interaction and functional data, does not store personal data, anonymizes identifying data such as IP addresses via one-way hashing, does not use HTTP cookies and does not store data in persistent browser storage.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website against misuse, automated attacks and spam. Where access to the end device occurs in individual cases, this is based on an appropriate legal basis.

We have concluded a data processing agreement with Friendly Captcha.

 

Social media presence

This Privacy Policy also applies to our social media presence on Facebook, Instagram, LinkedIn and YouTube.

Data processing by social networks

Social networks can generally analyze your user behavior extensively when you visit their websites or our social media profiles. Visiting our social media pages triggers numerous data processing operations. If you are logged into your social media account, the operator may assign your visit to your user account. Personal data may also be collected if you are not logged in or do not have an account.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in modern corporate communication, public relations and interaction with customers, applicants and interested parties.

Assertion of rights

You may assert your rights both against us and against the respective social network provider. Please note, however, that despite possible joint responsibility, we do not have full influence over the data processing operations of these providers.

Data collected directly by us via our social media presence is deleted when the purpose no longer applies, you request deletion or legal retention obligations prevent deletion. We have no influence on the storage duration of data processed by the social network providers.

 

Facebook

The provider is Meta Platforms Ireland Limited, Dublin, Ireland. Where Meta provides insights data, joint controllership pursuant to Art. 26 GDPR applies. Meta assumes primary responsibility for data processing. Further information: https://www.facebook.com/privacy/policy/.

 

Instagram

Provider is Meta Platforms Ireland Limited. The same provisions as for Facebook apply.

 

LinkedIn

Provider is LinkedIn Ireland Unlimited Company. Joint controllership applies for insights data. Further information: https://www.linkedin.com/legal/privacy-policy.

 

YouTube

Provider is Google Ireland Limited. Data processing is carried out by Google under its own responsibility. Further information: https://policies.google.com/privacy.