NettedAutomation Privacy Statement
This is the Privacy Statement of NettedAutomation GmbH.
1 Scope and Field of Application
This Privacy Statement provides information on the processing of personal data related to all customers, sales partners, further business partners and website visitors (You) of NettedAutomation GmbH (We).
Your privacy is important to us. So is the active sharing of expert knowledge and NettedAutomation news with You. We make such information available through our various communication channels such as:
- NettedAutomation Website (www.nettedautomation.com)
- NettedAutomation newsletters and individual e-mail-communication
For the purposes defined in this Privacy Statement, we process Your Personal Data in our role as Your reliable business partner.
We have created this statement to give You full transparency on our use of Your Personal Data.
We reserve the right to update this Privacy Statement from time to time and in compliance with applicable data protection standards. We, thus, encourage You to regularly check on updates.
2 Data Controller and Contact Details
The processing of Your Personal Data is in compliance with applicable data protection laws, including the European General Data Protection Regulation (GDPR) in addition to any other applicable local data protection laws.
Data Controller is:
NETTEDAUTOMATION GmbH Im Eichbäumle 108 76139 Karlsruhe / Germany
In case of questions regarding data protection, You can reach out to us by contacting info@nettedautomation.com.
3 Processing of Personal Data
We understand the term “Personal Data” in the sense of the European General Data Protection Regulation (GDPR), i.e. any information relating to an identified or by means of available neutral information identifiable natural person.
3.1. From where do We receive Your Personal Data?
We collect Personal Data from You directly. This means You have either forwarded or otherwise made known this data to us, e.g. by using our website, placing an order, submitting a request, completing questionnaires, or otherwise communicating with us.
Besides, we might collect Personal Data in the course of financial or compliance checks (e.g. Sanction Lists screening) as part of our legitimate interest to ensure contract fulfilment and compliance with applicable laws. Doing so, we consult publicly available data sources on relevant information.
If internal risk-oriented compliance standards foresee extensive due diligence standards given the importance of an individual case, e.g. continuous Sales Partner handling, we might require assistance from external agencies specialized in local research activities. In these cases, a Data Processor Agreement according to GDPR standards is concluded.
When You are subscribed to NettedAutomation newsletters, we collect statistical data on the type of newsletter You receive, access and which articles are of interest to You.
3.2. Why do We process Your Personal Data?
We process Your Personal Data for the following purposes:
a) Customer and business partner management (including maintenance of contact details, endorsement of active interaction and knowledge exchange, and improvement of communication) b) Order handling and contract fulfilment (including contract initiation, execution, billing and after-sales services and obligations such as warranty services) c) Provision of support services d) Compliance with legal obligations e) Enforcement of and defense against legal claims resulting out of or in connection with our business relation f) Controlling and Reporting g) Marketing and advertising activities (but only to the extent acceptable to You) h) Evaluation of usability and improvement potential of our website performance.
3.3. Why are We allowed to process Your Personal Data?
We process Your Personal Data based on the following legal reasons:
3.3.1. Data Processing necessary for the fulfilment of (pre-)contractual obligations
Data processing according to purposes 3.2.a) to 3.2.c)
The data You have provided are required for the performance of a contract or to take steps prior to entering into a contract. Without these data, we cannot fulfil the contract with You.
3.3.2. Data Processing necessary for compliance with our legal obligations
Data processing according to purpose 3.2.d)
Data processing according to this purpose is necessary for compliance with legal obligations such as documentation, disclosure, notification and export control obligations.
3.3.3. Data Processing necessary for the protection of legitimate interests
Data processing according to purposes 3.2.e), 3.2.f) and 3.2.h)
The processing of Your Personal Data for these purposes is based on our legitimate interest to
- secure enforcement of and defense against any claims in relation to the contractual performance of NETTEDAUTOMATION,
- compile our internal cost and performance calculation, controlling and internal reporting to assess past, current and future business activities,
- provide You with relevant information and news on our products, organization, services and events corresponding to Your past interactions with us (You can at anytime withdraw Your consent from this data processing via the Customer Portal or simply approaching us via info@nettedautomation.com),
- report about our events,
- enhance and secure our website in order to render our web appearance for You as attractive as possible, as well as the legitimate interest to enforce or defend legal claims which might arise in connection with the use of our website.
3.3.4. Data Processing according to Your consent
Data Processing according to Purpose 3.1.2 g)
Additional data and data processing not necessary for purposes 3.3.1 – 3.3.3
If You provide us with Personal Data not required for the aforementioned purposes, we process such data only according to Your provided consent.
We only perform general marketing and advertising activities according to Your consent.
You can withdraw this consent at any time. Withdrawal will result in Your data no longer being processed for the consented purpose from that time on. To withdraw Your consent, please contact us via the contact details mentioned in Section 2 of this Privacy Statement.
3.4. To whom do We forward Your Personal Data?
We may forward Your Personal Data if and to the extent necessary for the purposes stated in this Privacy Statement, thereby considering the need-to-know principle.
Besides, we may forward Your Personal Data to public authorities (including tax authorities, export and foreign trade agents) and competent courts, and to all legal, and tax consultants of NettedAutomation.
We do not submit any Personal Data outside the European Union without Your prior written confirmation (which You can withdraw at any time) except – if required to fulfil a legitimate purpose according to Section 3 of this Privacy Statement to affiliated companies of NettedAutomation or Sales
Partners all of which ensure appropriate or suitable safeguards which are comparable to European data protection rules.
Content provided via the various communication channels may include hyperlinks to other websites and other online-offerings. Access to such websites is in Your sole responsibility and exclusively according to the privacy policy of the provider. We have no active control over those linked websites and no influence on which data is collected by the provider. We therefore disclaim any responsibility for the contents contained therein or data processing. In case we become aware of any unlawful content on any linked websites, we will remove such hyperlinks without undue delay. Detailed information on Personal Data processing can be found in the privacy policy of the provider.
3.5. How long do We store Your Personal Data?
We do not store Your Personal Data longer than reasonably necessary to fulfil the purposes indicated in this Privacy Statement or allowed by applicable law. In any case, we store Your Personal Data based on the statutory storage obligations and periods or for periods where potential claims have not become statute-barred. We may store Your Personal Data longer than the retention period if and as long as this is needed for the enforcement against and defense of specific legal claims.
3.6. Do I need to provide Personal Data?
You are not obliged to share Your Personal Data with us. However, in the absence of certain Personal Data we might not be able to fulfil our contractual obligations, provide You with the requested services or grant You access to digital services such as our website.
4 Cookies and other third-party website services
For the purposes described in this Privacy Statement, we use the following Cookies and other thirdparty services.
Whereas some Cookies are technically mandatory to facilitate Your access to our website, some Cookies help us to understand Your use of our website and thereby enable us to further improve and adapt both our website performance in general and our online offerings to Your needs and preferences, as part of our legitimate interest.
You can block the use of Cookies any time by adjusting the settings in Your internet browser. Please be aware that You may not be able to take full advantage of the functions and comfort of our website when cookies are disabled (e.g. some videos might not work).
With Your consent, cookies are analyzed with Google Analytics (a web analysis service of Google Inc., hence- forth “Google”). The information contained in the Cookie about Your use of the website (including Your IP address) is transmitted to and consequently stored at a Google server in the USA. Google will in no case connect Your IP address to other data saved by Google. Google anonymizes Your IP address immediately after processing and before storage.
You can prohibit the saving and collection of data via Google Analytics with a plugin for Your browser.
5 Data Security
We make all commercially reasonable efforts to protect collected data against loss and unauthorized access. To this end, we employ state-of-the-art information security techniques and measures. Access to customer information is limited to those NettedAutomation employees who have a legitimate business need to know the information. Our website and its supporting systems use SSL (secure socket layer), and access control procedures to appropriately protect information from unauthorized access.
6 Your Rights
You have the right to access, rectification, erasure, restriction, data portability and to object to the processing of Your Personal Data.
If we process Your Personal Data on the basis of our own legitimate interests, You have a right to object to this processing of Personal Data on grounds relating to Your particular situation.
In case we process the data for direct advertising, You can at any time object to this processing (i) with the “Unsubscribe” button in the respective newsletter email, (ii) via Your Customer Portal, or (iii) by contacting us at the details provided in Section 2 of this Privacy Statement.
In case data processing takes place based on Your consent, You can revoke any consent provided for the future.
Additionally, if You believe that the processing of Your data contravenes data protection law or Your legal claim to protection of Your Personal Data has been violated in some other way, You have the right to raise a complaint with the competent supervisory authority in charge.