Privacy Policy

Visit our website

To implement and guarantee the functionality of the website, we process the data transmitted to us by your Internet browser. These include the date and time of your visit to the website, the IP address, country of origin of the IP address, content of the request (specific page), browser settings, the amount of data transmitted in each case, the website from which the request comes, browser, language and version of the browser software and the operating system used.

Newsletter

On our website we offer you to receive information about our offers by newsletter. For the registration process we use the so-called double opt-in procedure. After you have given us your email address, we will send you a confirmation message to this email address. Only when you click on the confirmation link contained therein will your email address be taken into account when sending the newsletter. This ensures that only the actual owner of the email address can order the newsletter. The data processing within the scope of the newsletter is based on your consent. You have the right to revoke this consent at any time with effect for the future.
Here you can unsubscribe from the newsletter and thus revoke your consent.
We use MailChimp as our platform for marketing automation. By giving your consent for the dispatch of our newsletter, you confirm that the information provided by you will be passed on to MailChimp for processing in accordance with MailChimp's data protection declaration.
You can find MailChimp's privacy policy at: mailchimp.com/legal/privacy/.

Use of our contact data

You can contact us directly via the e-mail addresses / telephone numbers provided on our Internet pages. We collect, process and use the personal data and information provided by you by e-mail / telephone exclusively for the processing of your request. This correspondence will be stored in compliance with the statutory retention periods and deleted after any retention periods have expired.

Use of cookies

We use cookies, tracking tools, targeting methods and social media plug-ins on our website. These enable us to make the visit to our websites more attractive and to enable the use of certain functions. Cookies are small text files that are sent to your browser by our web server when you visit our website and are stored by the browser on your computer for later retrieval. When you visit our website, you will be asked which data we may process.

We distinguish between the following categories of cookies.

Essential: These technologies are necessary to enable the core functionalities of the website.

Functional: These technologies allow us to provide certain features of the website, including embedded videos, maps or content from social media plugins.

Statistics and Analytics: These technologies allow us to analyze the use of the website in order to measure and improve performance.

Marketing: These technologies are used by advertisers to serve ads that are relevant to your interests.

Information about cookies, cookie settings and opt-out options can be found here.

Social-Media-Plug-ins

We currently use the following social media plug-ins: LinkedIn, Xing and YouTube.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the plugin providers. You have the possibility to communicate directly with the provider of the plug-in by clicking on the logo of the respective plug-in provider in the footer of our homepage. Only if you click on the logo and thereby activate it will the plug-in provider receive the information that you have called up the corresponding website of our online service. In addition, the data mentioned under topic Visit to our website of this declaration will be transmitted.

In the case of Xing, the IP address is anonymized immediately after collection, according to the respective provider in Germany. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings.

We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

The plug-in providers save the data collected about you as user profiles and use these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website.You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user(Legal basis as mentioned below).

The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers as notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy.

Addresses of the respective plug-in providers and URL with their data protection information:

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA;https://www.linkedin.com/legal/privacy-policy

Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; https://privacy.xing.com/de/datenschutzerklaerung

YouTube LLC, 901 Cherry Ave., San Bruno, California 94066, USA; https://policies.google.com/privacy

Legal basis

We process your personal data in accordance with

• Article 6 paragraph 1 letter a) of the GDPR, in so far as you have granted your consent. This includes sending of a newsletter as well as the consents for the use of cookies that you have given via our Consent Management Platform. When obtaining consent, we will inform you about the specific purpose of the intended processing. You can revoke any consent given to us at any time with effect for the future.
• Article 6 paragraph 1 letter c) of the GDPR for the documentation and storage of your consents given through our Consent Management Platform.
• Article 6 paragraph 1 letter f) of the GDPR, insofar as we have a justified interest in this, insofar as your interests or fundamental rights, which require the protection of your personal data, do not predominate. The use of the above mentioned cookies, the use of tools to evaluate your usage behavior on our website and the integration of social media plug-ins are examples of how we guarantee and optimize the functionality of our website.

We process your personal data only for the purposes for which we have received or collected this data. If we intend to process data for other purposes that are not founded on consent or a legal provision, we shall provide you with information about this other purpose prior to further processing in accordance with Articles 13, 14 of the GDPR.

Forwarding within Windmöller & Hölscher Group and forwarding to third parties/third countries

A transfer of your personal data for the fulfillment of the contract or implementation of pre-contractual / post-contractual measures within Windmöller & Hölscher KG may be made to the specialist department that requires it, e.g. to the HR department for job applications and, if necessary, to supporting service providers such as logistics companies, financial service providers, insurance companies, legal counsel as well as to financial authorities, law enforcement agencies insofar as there is a reporting, verification or legal obligation to do so. Service providers who process personal data on our behalf are contractually obliged to comply with the applicable data protection requirements under Article 28 DS-GVO.In addition, your personal data will be passed on the basis of a legitimate interest within Windmöller & Hölscher KG, e.g. to marketing for advertising purposes and outside Windmöller & Hölscher KG to parts of the group and to commercial agents who serve you as business partners in your area. If these companies process your data outside the European Economic Area (EEA), this will only be done if the third country has been confirmed by the EU Commission as having an adequate level of data protection, other appropriate data protection guarantees are in place or you have given us your consent.

We process personal data which we receive from you within the scope of a business relationship or when establishing a business relationship. In addition, we process data that we have obtained from public directories (e.g. press, commercial registry, Internet) in compliance with the data protection legal guidelines.

Personal data is usually contact data of the business partners such as name, title, address, position and function as well as all data relevant to the business relationship that is necessary for the initiation, conclusion, processing or termination of contracts.

Legal basis

We process your personal data in accordance with

• Article 6 paragraph 1 letter b) of the GDPR for the purpose of contract fulfillment. This includes sending information and offers in the pre-contractual stage provided that you have made inquiries with us regarding our products/services as well as in the post-contractual stage when processing complaints, spare parts deliveries and services.
• Article 6 paragraph 1 letter c) of the GDPR, for the fulfilment of legal obligations. These include, for example, obligations under trade and tax laws, EU regulations, comparisons (compliance checks) with national and international anti-terror lists.
• Article 6 paragraph 1 letter f) of the GDPR, to the extent that we have a legitimate interest therein, unless your interests or fundamental rights that require the protection of your personal data outweigh this. This includes, for example, the transmission of data within the corporate group for internal administrative purposes, guaranteeing IT security and IT operations, requests regarding satisfaction, assessment of the creditworthiness of the business partner.
• Article 6 paragraph 1 letter a) of the GDPR, in so far as you have granted your consent.

We process your personal data only for the purposes for which we have received or collected this data. If we intend to process data for other purposes that are not founded on consent or a legal provision, we shall provide you with information about this other purpose prior to further processing in accordance with Articles 13, 14 of the GDPR.

Forwarding within of Windmöller & Hölscher Group and forwarding to third parties/third countries

Your personal data will only be transferred within Windmöller & Hölscher KG if it is necessary for the above-mentioned purposes to corresponding departments within Windmöller & Hölscher KG which require it, to subsidiaries of Windmöller & Hölscher KG which will look after you as a business partner in your area and outside Windmöller & Hölscher KG to supporting service providers such as logistics companies, financial service providers, insurance companies, legal advisors as well as to financial authorities, law enforcement agencies, in case as there is a reporting, verification or legal obligation to do so.

Service providers within the scope of order processing, such as service providers for IT services, are contractually obliged to comply with the applicable data protection requirements pursuant to Article 28 GDPR.

Salesforce Sales Cloud

We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter referred to as "Salesforce").  Salesforce Sales Cloud is a CRM system and allows us, for example, to manage existing and potential customers, as well as customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze our customer-related processes.

The processing of personal data takes place mainly within the European Union (EU), as we have limited our central storage location to data centers in the EU.  We cannot exclude the possibility that data in a Salesforce product will be processed on servers outside the EU.

We have concluded EU standard contractual clauses with Salesforce Inc. to ensure an adequate level of data protection. Salesforce has Binding Corporate Rules (BCR) approved by the French Data Protection Authority. These are binding corporate rules that legitimize the company's internal data transfer to third countries outside the EU and the EEA. For details, see Salesforce's Privacy Policy:

https://www.salesforce.com/company/privacy/full_privacy/

We process personal data which we receive from you within the scope of application procedure. This includes in particular any data and information out of your curriculum vitae (full name, nationality), application letter (contact data e.g. address, telephone number, and e-mail address), certificates (e.g. qualification, grades), certificates of participation and assessments from third-parties (e.g. employer references). In addition, we process data concerning a severe disability or previous conviction which you indicated in your application.

Legal basis

We process your personal data in accordance with

• Article 6 paragraph 1 letter b) of the GDPR in connection with § 26 BDSG (new) for the purpose of contract fulfillment this means for creation or implementation of the working relationship.
• Article 6 paragraph 1 letter f) of the GDPR, to the extent that we have a legitimate interest therein, unless your interests or fundamental rights that require the protection of your personal data outweigh this. This includes, for example, the establishment, exercise or defense of legal claims.
• Article 6 paragraph 1 letter a) of the GDPR in connection with § 26 para. 2 BDSG (new), in so far as you have granted your consent. This includes, for example, the storage of your data beyond the legally required period.
• Article 6 paragraph 1 letter c) of the GDPR in connection with § 26 BDSG, to satisfy our legal obligations as employer especially in the areas of tax and social insurance law in case of employment contract.

We process your personal data only for the purposes for which we have received or collected this data. If we intend to process data for other purposes that are not founded on consent or a legal provision, we shall provide you with information about this other purpose prior to further processing in accordance with Articles 13, 14 of the GDPR.

Forwarding within of Windmöller & Hölscher Group and forwarding to third parties/third countries

As part of the application process, your data may be forwarded by e-mail to responsible employees within the Windmöller & Hölscher Group who are involved in the application process. In principle, data will not be transferred to third countries unless your application relates to jobs advertised by our group of companies in third countries or you have given us your consent. Contracts have been concluded within the Group and also with service providers involved in accordance with Article 28 of the GDPR.

Duration of data storage

We store personal data for the duration of the application process. If no employment relationship is established, we delete the data after completion of the application process (e.g. notification of the rejection decision) within the statutory time limits, unless longer storage due to litigation is required. In case that you have agreed to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent. If an employment relationship is established following the application procedure, your data will, as far as necessary and permissible, initially continue to be stored and then transferred to the personal file.

Non-availability of data

Providing of your personal data is necessary for initiation and if applicable conclusion of an employment contract. Without this data, we are not able to process your application and to conclude a contract with you.

In our webshop you will find information about spare parts and have the possibility to place quotation requests or orders for spare parts.

In order to use the online shop, it is necessary to set up a personalized and password-protected customer account. With the customer account you have access to offers, placed orders and active order processes. With your customer account you also have access to the PDE (Parts and Documentation Explorer). Your customer account can also be limited to the PDE - order and quotation functions are not available in this case.

As a registered customer account holder with administration rights, you can activate additional users, make user settings and terminate account access for users. All actions taken by you in the context of user administration are your own responsibility.

If you leave the online shop as a registered customer, you will be logged out automatically, unless you log out manually.

We as operator assume no liability for password misuse, unless this was caused by us as operator ourselves.

All data that you voluntarily enter in our registration/contact form within the scope of the mentioned purposes will be stored. This includes company/customer number, first name/last name, e-mail address, IP address, last login date, last password change, actions within the scope of the integrated user self-administration (e.g. creation and deactivation of users).

Legal basis

We process your personal data in accordance with

• Article 6 paragraph 1 letter a) of the GDPR, in so far as you have granted your consent (e.g. registration customer account, use of econda mentioned below).
• Article 6 paragraph 1 letter b) and c) of the GDPR for the purpose of contract fulfillment. his includes the processing of personal data on the occasion of pre-contractual measures (e. g. the processing of your requests communicated via contact form as well as for ordering via our webshop).
• Article 6 paragraph 1 letter f) of the GDPR, to the extent that we have a legitimate interest therein, unless your interests or fundamental rights that require the protection of your personal data outweigh this. This includes, for example, the transmission of data within the corporate group for internal administrative purposes, requests regarding satisfaction.

Transfer within of Windmöller & Hölscher Group and forwarding to third parties/third countries

Your personal data will only be transferred within Windmöller & Hölscher KG if it is necessary for the above-mentioned purposes to specialist departments within Windmöller & Hölscher KG which need it, to subsidiaries of Windmöller & Hölscher KG which will look after you as a business partner in your area and outside Windmöller & Hölscher KG to supporting service providers such as logistics companies, financial service providers, insurance companies, legal advisors as well as to financial authorities, law enforcement agencies insofar as there is a reporting, verification or legal obligation to do so.

Service providers within the scope of order processing, such as service providers for IT services, are contractually obliged to comply with the applicable data protection requirements pursuant to Article 28 of the GDPR.

Use of econda

On our webshop website we use the web analysis service econda GmbH (Zimmerstr. 6, 76137 Karlsruhe, Germany, Managing Director: Christian Hagemeyer, Commercial Register: Amtsgericht Mannheim HRB 110559) to analyze and regularly improve the usage. The statistics obtained allow us to improve our services and make them more interesting for you as a user.

Cookies are stored on your computer for this evaluation. The information collected in this way is stored exclusively on the responsible person's server in Germany.

Preventing the use of econda is possible by removing the corresponding check mark in the query after you log in to the webshop, thus deactivating the opt-out plug-in. You can decide here whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data.

You can adjust the evaluation by deleting existing cookies and preventing cookies from being stored or by clicking on this link https://www.econda.de/en/data-protection/revocation-for-data-storage/.

You can obtain information on data protection from the third party provider at: https://www.econda.de/service/datenschutz/.

Image search

Our webshop works with a technology from the company nyris GmbH for image recognition, represented by the managing directors, Dr. Anna Lukasson-Herzig and Markus Lukasson (Warschauer Str. 58a, 10243 Berlin, tel.: +49 (0)211 97 63 38 99, mail.: support@nyris.io, web.:http://www.nyris.io, registered office of the company: Berlin, registered with the registry court of the district court of Berlin (Charlottenburg) under HRB 169967), hereinafter referred to as nyris.

With the optional use of nyris, images can be transmitted to nyris by the user for visual object search. The request is anonymized in the software of the webshop page for nyris. Thus, a transmission of personal data on the technical level to nyris is excluded.

The user is responsible for ensuring that no personal data is visible on the transmitted product image when using nyris.

Our company offers people the opportunity to participate in virtual, hybrid or live events (summarized hereafter under events) where visitors attend machine demonstrations, webinars, video conferences or (digital) meetings.

Participants of our events can register for the events using the registration/contact form or they will receive an invitation from us by e-mail. In virtual events every participant receives a password-protected user account.

Registrations are considered, checked and confirmed by mail in the chronological order of their arrival. Participation is only guaranteed after the confirmation. Cancellations must be made in written form and will be then confirmed by the organizer. Changes at the registration are not possible afterwards.

All the personal data you provide in relation to the virtual events will be saved, for instance your first name/last name and e-mail address.

Reference: Virtual Event

In virtual events the user profile with your name will also be visible to other participants of the event as well as any information you have added yourself, such as your photo. You can use the question-and-answer functions anonymously. If you post using your name, this will also be visible to other participants.

The meeting metadata collected includes the title of the meeting, participant IP addresses, device/hardware information and, if applicable, the following additional data.

With recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

When dialing in by phone: Information on the incoming and outgoing number, name of the country, start and end time. If necessary, additional connection data, such as the IP address of the device, can be saved.

If we wish to record virtual events or chat events, we will transparently inform you of this in advance and - if need be - ask for your consent.

Reference: Photo-, video- and sound recordings

At events of the Windmöller & Hölscher Group (as organizer or cooperation partner) we collect personal data from you (surname, first name, e-mail address etc.) which is required for participation and for event execution. We reserve the right to create, process and distribute photo, video and audio recordings of speakers, participants and guests for public relations purposes, provided these do not contradict in individual cases. This will be indicated in a suitable manner both at the electronic event registration and at the event location. We will inform you about the photo processing and photo publication of your personal data and the data protection claims and rights to which you are entitled. The data is collected, stored and, if necessary, published by us, insofar as it is necessary to take and publish photographs during an event or a trade fair.

No automated decision-making is used, as referred to in Art. 22 General Data Protection regulation (GDPR).

Legal basis

We process your personal data in accordance with

• Article 6 paragraph 1 letter b) of the GDPR for the purpose of contract fulfillment. This includes sending information in the pre-contractual stage provided that you have made inquiries with us.
• Article 6 paragraph 1 letter f) of the GDPR, to the extent that we have a legitimate interest therein, unless your interests or fundamental rights that require the protection of your personal data outweigh this. This includes, for example, the transmission of data within the corporate group for internal administrative purposes and requests regarding visitor satisfaction. Our legitimate interest includes the documentation of corporate events and trade fairs, in particular for press and public relations work and to present the company's activities in order to increase awareness, strengthen the brand and promote participation in comparable events and activities. The implementation takes place through the production of photos, image and sound recordings of events. This will be indicated in a suitable manner both at the electronic event registration and at the event location.
• Article 6 paragraph 1 letter a) of the GDPR, in so far as you have granted your consent. This includes if you voluntarily provide information about yourself when participating, if you voluntarily use functions that are not necessary and by photos, images and sound recordings. The consent to data processing can be revoked by the data subject at any time with effect for the future.
• Article 88 GDPR in conjunction with § 26 Federal Data Protection Act (BDSG), if you participate as an employee of our company, if personal data is required for the implementation, justification of the employment relationship.

Covid-19 restrictions for Live-Events

To protect your and our health, we follow special Covid-19 restrictions when participating in W&H events. The data will only be checked, but no personal health data will be saved. The following rules applies:

a) Proof of complete vaccination status OR

b) Proof of "recovered" status (max. three months) OR

c) Proof of a negative rapid test (test center) or PCR test that is not older than 24 hours on the day of participation

In case of complete vaccination [see: a)] or status "recovered [see: b)], please prove your status at the registration desk. A previously performed antigen rapid or PCR test [see: c)] must also be shown at check-in.

IMPORTANT: We ask for your understanding that participation in W&H events cannot be granted without following the alternative ways a), b) or c) or in case of a positive test result.

If you do not feel healthy before arrival, we kindly ask you to consult a doctor or to not attend the event.

The participant is obliged to follow the instructions of the organizer and the venue. Failure to do so may result in exclusion from the event.

The organizer hereby reserves the right to change the program or cancel the event in the case of extraordinary circumstances. In special cases, the organizer is allowed to take such measures, in cases of act of nature beyond control, due to governmental regulations, in case of danger for health, life and body of the participants. In these cases, the organizer is not obligated to pay compensation and/or reimbursement of expenses to the participants. This also applies to cancellation fees incurred by third parties (e.g., hotel bookings, train or airline tickets).

Transfer of data within the Windmöller & Hölscher Group and forwarding to third parties/third countries

Personal data that is processed in connection with participation in events will not, in principle, be passed on to third parties unless it is intended for disclosure. Please note that content from “video conferences” as well as from personal meetings is often used to communicate information with business partners, prospective customers or third parties, and is therefore intended for distribution.

The virtual events organized by our company use Microsoft Enterprise and Developer products (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). To access Microsoft's Privacy Policy, visit: https://privacy.microsoft.com/en-US/

Service providers who necessarily receive knowledge of the above data are contractually obliged to comply with the applicable data protection requirements pursuant to Article 28 GDPR.

In principle, data is not processed outside the European Union (EU), as we have restricted our storage location to data centers within the European Union. However, we cannot rule out the possibility that data is routed via Internet servers located outside the EU. This can be the case in particular if participants in “online meetings” are in a third country.However, the data is encrypted during transport over the Internet and thus protected against unauthorized access by third parties.

When you access the “Microsoft Teams” website, the provider of “Microsoft Teams” is responsible for data processing. However, participants only need to visit the “Microsoft Teams” website to download the software to use “Microsoft Teams”.If you do not wish to or cannot use the “Microsoft Teams” app, you can also use “Microsoft Teams” through your browser. The service is then also provided via the “Microsoft Teams” website.

We publish the photos/videos on the following channels: websites, advertising material, advertisements in print magazines, online banner advertising, direct mailings, e-mail newsletters, third-party press reports, social media (Twitter, LinkedIn, Xing, YouTube) considering legal basis.