Data Protection

Privacy policy for websites elementar.de and portal.elementar.com

Controller in sense of the GDPR is:


Elementar Analysensysteme GmbH
Elementar-Straße 1
63505 Langenselbold
Germany

Tel: +49 6184 9393 – 0
E-Mail: info@elementar.de
 

(hereinafter „we“, „us“)


Not only our analysis products provide clarity, but also we create the highest possible transparency in data protection: In following we would like to inform you whether, and if so, to what extent and for how long, we process your personal data.

Please note that use of individual services that go beyond the mere use of our websites may require prior registration and/or confirmation of further, possibly overriding, regulations.

We reserve the right to adapt the content of this data protection information to legal and actual circumstances from time to time. The privacy policy, which is published at the time when you visit our website, is the one that applies.


1. Personal data

Personal data is any information relating to an identified or identifiable natural person. This includes information such as your name, adress and e-mail adress. Information that is not directly associated with your real identity – such as pages in our website that are generally favoured by users or the number of users of a page – is not personal data.


2. Data collection on these web pages and other processing

a) If you only visit our websites

If you visit our websites, our web servers temporarily store connection data of requesting computer (e.g. IP adress), time of server request, pages you visit on our website, date and duration of visit, identification data of browser and operating system type used as well as the website from which you visit us (referrer). It is not possible for us to deduce identity of a natural person from this data.

Our interest in processing of usage data mentioned consists in particular in ensuring functionally and security of our information technology systems and in optimising our website.

Processing is necessary to protect our aforementioned legitimate interests (Art. 6 para. 1 s. 1 lit. f GDPR).


b) If you register in our customer portal

If you register on our customer portal, we process your name, title, e-mail address, name of the company you work for, company adress including zip code, city and country, telephone number, whether you wish to receive newsletter and passwort you have chosen.

If you also provide other voluntary information, sush as the region and state, VAT identification number of the company and a business sector (market) and a relevant application, we will also process this information.

We process these data exclusively in order to set up and confirm your user account. If you are already an Elementar customer, your personal data will be compared with existing data records (e.g. to transfer existing discounts) in order to individually set up your user account.

Processing is carried out to fulfil user contract concluded with you and to initiate further contracts (e.g. through online orders; Art. 6 para. 1 s. 1 lit. b GDPR).


c) If you place orders via the customer portal

If you order via customer portal (e.g. consumables, spare parts, devices or services), we process data provided during registration, any other data stored for you as well as special order data. Special order data includes, for example, which products you order, a delivery and billing adress, payment data, an order number as well as any comments you may have made.

If you pay by credit card („Visa“, „Mastercard“ or „American Express“), necessary data will be transmitted to respective payment service provider.

Processing is carried out to fulfil a contract or to implement precontractual measures (Art. 6 para 1 s. 1 lit. b GDPR).

If you order as a new customer and your order volume is over EUR 5,000.00, we will send your order details to our credit insurer EULER Hermes Deutschland, a branch of Euler Hermes SA (Hamburg). Processing is carried out to protect us against payment defaults. Euler Hermes also checks your creditworthiness when determining the insured goods credit limit. Processing is either necessary to initiate the conclusion of a contract (Art. 6 para. 1 s. 1 lit. b GDPR) and/or is necessary for the purposes of our legitimate interest in securing a transaction (Art. 6 para. 1 s. 1 lit. f GDPR).


d) If you participate in our webinars

If you participate in our webinars, we process your name, the name of the company you work for, and your e-mail address.

Processing takes place solely for the purpose of registration and participation in the webinar.

Processing is necessary to fulfil the service contract concluded with you (Art. 6 para. 1 s. 1 lit. b GDPR). To conduct our webinars, we use software from our service provider Cisco WebEx Inc. We do not transmit any personal data to Cisco WebEx Inc.


e) If you use our contact form, our Live Support or our Service Hotline

If you use our contact form, our live support or our service hotline, we process your name, the name of the company you work for, the country in which the company is located, your e-mail address and any other information you provide to us in order to process your request or provide the support you have requested.

Processing is either necessary to fulfil the contract concluded with you (Art. 6 para. 1 s. 1 lit. b GDPR) or is based on our legitimate interest in offering the respective services and increasing customer satisfaction (Art. 6 para. 1 s. 1 lit. f GDPR).

When using the live support offered by us, we use "GoToAssist", a software from LogMeIn Ireland Limited from Ireland. We do not transfer any personal data to them. Please note that remote access may result in additional personal data being visible to our support staff. We do not actively collect this information. If necessary, corresponding data protection agreements exist.


f) If you subscribe to our e-mail newsletter

If you subscribe to our e-mail newsletter, we store your IP address and the time of registration and confirmation. The legal basis for this is Art. 6 para. 1 s. 1 lit. f GDPR (legitimate interests). Our legitimate interest consists in being able to prove your registration and, if necessary, to investigate any possible misuse of your personal data.

In addition, when you register, we process your name, the name of the company you work for, your e-mail address and, if applicable, details of your title and areas of interest in order to adapt the information in the newsletter to your personal needs.  The newsletter contains information about our company, analytical systems, services and after-sales services, interesting offers, invitations to expert meetings or trade fairs as well as technical information based on your details and customized to your interests. The legal basis for these mentioned processings of personal data concerning data protection law is Art. 6 para. 1 s. 1 lit. a GDPR (consent).

In addition, we evaluate your user behaviour within the sent newsletters by combining receipt and reading confirmations as well as information about the links you have clicked on for statistical purposes.  We analyse the interests that you indicate when registering for the newsletter and your personal data as well as your reading behaviour with regard to the newsletter and - if you are a customer - merge these with your data in the customer database. The legal basis for such processing is Art. 6 para. 1 s. 1 lit. a GDPR if you have declared your consent, otherwise Art. 6 para. 1 s. 1 lit. f GDPR (legitimate interests).

You may withdraw your consent at any time with effect for the future. The processing of your data until withdrawing remains lawful. You can withdraw your consent by clicking on the link provided in every newsletter e-mail, by sending an e-mail to datenschutz@elementar.de or by sending a message to the contact details given in the imprint.


3. Storage of personal data

After complete provision of services, withdrawal of any consent given or successful objection to the processing of your personal data and after expiry of tax and commercial storage regulations, your personal data will be completely deleted unless you have expressly agreed to a further use of data or this should otherwise be legally permissible or necessary.


4. Obligation to provide personal data

As a matter of principle, you are not legally obliged to provide your data. If personal data is required for certain purposes, this information is marked with an asterisk. The special purpose cannot be achieved without this data.


5. Transfer of your personal data to third parties

Your personal data will not be transferred on or otherwise transmitted to third parties unless this is stated in this privacy policy and the transfer is necessary to achieve the stated purpose (e.g. to contracted technical service providers) or you have expressly declared your consent to this.


6. Cookies

Our websites use so-called cookies in several places. They serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer. Unless otherwise stated below, we do not collect any information that we can assign to a natural person.

Many of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit.

In addition to the cookies for Google Analytics (see section 7) and LinkedIn (see section 8), the following cookies are used:

elementar.de

Cookie Purpose Expiration
cookieconsent Stores that user has accepted cookie banner information 1 year
fe_typo_user Stores session ID, if the user logs in at the backend When exiting the browser session


portal.elementar.com

Cookie Purpose Expiration
PHPSESSID Stores session ID Approx. 1 hour
X-Magento-Vary Stores configuration settings to improve performance Approx. 1 hour
feffec2a0dcd408b518e022a4e7d33d5 Stores session ID for shop software Magento When exiting the browser session
form_key For security reasons, causes a random character string to be appended to all form submissions. This security measure serves in particular to protect against Cross-Site Request Forgery (CSRF). Approx. 1 hour
mage-cache-sessid Clears the local cache memory. 1 day
mage-cache-storage Storage of visitor information for the Magento shop software to enable shop functions. 1 day
mage-cache-storage-section-invalidation Forces the local storage of certain content areas that are to be invalidated. 1 day
mage-messages Tracks error messages and other notifications displayed to the user, such as various error messages. Approx. 1 day
mage-translation-file-version Required for the shop software Magento. Saves the version number within the dictionary option. When exiting the browser session
mage-translation-storage Required for the shop software Magento. Saves the translated contents of the user. When exiting the browser session
private_content_version Appends a random, unique number and timestamp to pages containing customer content to prevent it from being stored in server cache memory. 3 days
product_data_storage Stores already viewed or compared product information 1 day
recently-compared_product Stores already viewed or compared product information 1 day
recently-compared_product_previous Stores IDs of previously compared products for easy navigation. 1 day
recently-viewed_product Stores already viewed or compared product information 1 day
recently-viewed_product_previous Stores IDs of previously viewed products for easy navigation. 1 day
section_data_ids Stores section data, such as payment information, customer information. Required for the order process. 1 day
wallee_decive_id Stores the session ID for payment processing. 1 hour
cookiesAccepted Stores whether the cookie banner has been closed. Approx. 48 years
cookie_usp_popup Stores pop-up sessions that have already been shown. 1 month
Local memory Allows preferences when using the website to be stored and used on the computer. No expiration date


Cookies do not damage your computer and do not contain viruses. You can set your browser settings so that no cookies are stored. In this case, you may not be able to use all functions of our website. The cookies are processed exclusively on the basis of our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR). This also applies to the use of the cookies described in sections 7 and 8. Our legitimate interest consists in making it possible for you to use our website more conveniently and to improve our services.


7. Google Analytics

Our websites use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies (see also section 6 - Cookies), which are stored on your computer for up to 2 years and enable an analysis of the use of the website by you. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. If IP anonymisation is activated on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The full IP address will only in exceptional cases be transmitted to a Google server in the USA and shortened there. IP anonymization is activated.

User-level and event-level data are stored for 14 months. User-level and event-level data are data which are associated with cookies, user-identifiers (e.g., User-ID) and advertising identifiers (e.g., DoubleClick cookies, Android’s Advertising ID, Apple’s Identifier for Advertisers).

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

You can prevent the storage of cookies by setting your browser software accordingly. In this case you may not be able to use all functions of these websites.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.

As an alternative to the browser plugin, you can click on the following link to prevent Google Analytics from capturing data on the websites in the future:

An opt-out cookie is stored on your end device. If you delete your cookies, you must click the link again.

For more information about privacy at Google Analytics, please visit https://policies.google.com/privacy?hl=en


8. LinkedIn Analytics and LinkedIn Ads

On elementar.de we use LinkedIn Analytics and LinkedIn Ads of the provider LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

LinkedIn processes information about your usage behaviour on our websites and uses cookies that are stored on your computer for up to 2 years, among other things, to analyse your use of our websites. The information generated by the cookie about your use of this website is usually transmitted to a LinkedIn server. LinkedIn thus receives the information that you have visited our website with your IP address and, if you are registered and logged in at LinkedIn, can assign the visit to your user account. LinkedIn may use this information to display interest-based advertisements.

We use LinkedIn Ads for marketing and optimization purposes, including to analyze the use of our website and our advertising campaigns and to continuously improve individual features and offers and the user experience.

You can prevent the data from being processed by setting an opt-out cookie on the following page: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out?trk=microsites-frontend_legal_cookie-policy

For more information on privacy from LinkedIn, please visit the following website: https://www.linkedin.com/legal/privacy-policy


9. Security

We take all necessary technical and organizational security measures to protect your personal data from loss and misuse. We store your data in a secure operating environment that is only accessible to authorized persons. If you wish to contact us by e-mail, please bear in mind that the confidentiality of the information transmitted can never be 100% guaranteed due to the circumstances of the Internet and that the content of e-mails could possibly be viewed by unauthorised third parties.


10. Further legal information

We do not permit third parties to use the contact data such as postal addresses, telephone or fax numbers or e-mail addresses published in the imprint or comparable information to send information that has not been expressly requested. Requests to assert the rights set out in Section 11 and other requests regarding data protection are excluded from this and can be made at any time.


11. Right of acces, rectification, erasure, restriction of processing, data portability, objection, withdrawal, complaint

If you have any questions that are not answered by this data protection information or if you wish to receive more detailed information on a specific point, please contact our data protection officer: Dr. Thomas Lapp, Datenschutz dr-lapp.de GbR, Berkersheimer Bahnstraße 5, 60435 Frankfurt a.M., e-mail datenschutz@elementar.de, phone +49 69 95408864. Furthermore, you have the right

  • of access to obtatin information about your personal data processed by us in accordance with Art. 15 GDPR;
  • to obtain without undue delay the rectification of inaccurate personal or completion of incomplete personal data stored by us in accordance with Art. 16 DS-GVO;
  • to obtain the erasure of your personal data stored by us in accordance with Art. 17 GDPR;
  • to obtain restriction of the processing of your personal data in accordance with Art. 18 GDPR;
  • to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller in accordance with Art. 20 GDPR;
  • to object to the processing of your personal data pursuant to Art. 21 GDPR;
  • to withdraw your consent to us at any time in accordance with Art. 7 para. 3 GDPR. The consequence of this is that we may no longer continue the processing based on this consent in the future, but this shall not affect the lawfulness of processing based on consent before its withdrawal;
  • to lodge a complaint to a supervisory authority pursuant to Art. 77 GDPR.

Please use the contact details given above for this purpose.

 

Release: September 2019