Privacy Policy UVEX ARBEITSSCHUTZ GmbH

Welcome to our website and thank you for your interest in our company. We – that’s UVEX WINTER HOLDING GmbH & Co. KG and its subsidiaries (hereinafter referred to collectively as the ‘uvex group’) – take the protection of your personal data seriously. We process your data in accordance with the applicable laws regarding the protection of personal data, especially the EU Data Protection Regulation (EU GDPR) and the country-specific implementation laws relevant to us. This privacy policy provides you with comprehensive information on the processing of your personal data by the uvex group and your rights.

Personal data means information that can be used to identify a natural person. This especially includes your name, date of birth, address, telephone number, email address and IP address.

Anonymous data are data that do not allow any relationships to the user’s identity to be established.

1. Responsible party

UVEX WINTER HOLDING GmbH & Co. KG
Würzburger Straße 181
90766 Fürth
Germany
Phone: + 49(0)911-9736-0
Email: datenschutz@uvex.de
Website: www.uvex.de

2. Data protection contact

The contact data of the data protection officer for all companies in the uvex group with headquarters in Germany are as follows:

UVEX WINTER HOLDING GmbH & Co. KG
Würzburger Straße 181
90766 Fürth
Germany
Phone: + 49(0)911-9736-0
Email: datenschutz@uvex.de
Website: www.uvex.de

3. Your rights as the data subject

We would first like to inform you of your rights as the data subject. These rights are standardised in Articles 15–22 of the EU GDPR. They cover the following:

right to access (Article 15 of the EU GDPR)
right to erasure (Article 17 of the EU GDPR)
right to rectification (Article 16 of the EU GDPR)
right to data portability (Article 20 of the EU GDPR)
right to restriction of data processing (Article 18 of the EU GDPR)
right to object to data processing (Article 21 of the EU GDPR).

To assert these rights, please contact datenschutz@uvex.de.

The same applies if you have any questions about data processing in our company or if you want to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

4. Right to object

In connection with the right to object, please note the following:

When we process your personal data for the purpose of direct advertising, you have the right to object to this data processing at any time without stating any reasons. This also applies to profiling if it is connected to direct advertising.

If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes. You can object free of charge in a formless message, preferably sent to datenschutz@uvex.de.

For the case that we process your data for safeguarding legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling protection-worthy grounds for processing that override your interests, rights and freedoms or the processing serves towards establishing, exercising or defending of legal claims.

5. Purposes of and legal basis for data processing

In the processing of your personal data, the provisions of the EU GDPR and all other applicable data protection provisions are complied with.

The legal basis for data processing is especially yielded from Article 6 of the EU GDPR.

We use your data for generating business leads, for fulfilling contractual and legal obligations, for performance of the contract, for offering products and services and for strengthening customer relationships, which can also include analysis for marketing purposes and direct advertising.

Your consent to data processing can also constitute a permissibility requirement under data protection law. Before you grant consent, we will inform you of the purpose of the data processing and your right to withdraw your consent.

If the consent also relates to processing of special categories of personal data, we will explicitly point this out to you in the consent statement. Processing of special categories of personal data in accordance with Article 9 of the EU GDPR will only occur if it is required by law and there is no reason to believe that your protection-worthy interest in exclusion of processing overrides it.

In certain cases we also base the processing of your data on a legitimate interest in accordance with Article 6(1)(f) of the EU GDPR. Here data processing only takes place if it serves to safeguard our own legitimate interests or the legitimate interests of third parties and a balancing of interests has not resulted in your interests, fundamental rights and fundamental freedoms overriding it.

6. Transfer to third parties

We will only pass on your data to third parties within the scope of the legal provisions or with the corresponding consent. Otherwise, we will not pass on your data to third parties unless we are under a legal obligation to do so (e.g. disclosure to external bodies such as supervisory authorities or law enforcement authorities).

7. Data recipients / Categories of data recipients

Within our company we ensure that only those people who require your data to fulfil contractual and legal obligations receive your data.

In individual cases it may be necessary for us to also pass on your data to group companies, e.g. if you apply for a position advertised by a group company via our central applicant portal.

In certain cases service providers assist our departments in the fulfilment of their tasks. The contracts required in accordance with data protection laws have been concluded with all service providers.

8. Transfer to third countries / Intent to transfer to third countries

Transfer of data to third countries (outside the European Union and the European Economic Area) only takes place if this is required for performance of the contract or is prescribed by law or if you have granted us consent for this.

We transfer your personal data to service providers and to group companies outside the European Economic Area, namely to Switzerland and the US.

The contracts required in accordance with data protection laws have been concluded with all service providers.

9. Data retention duration

We store your data as long as they are required for the respective processing purpose. Please note that numerous retention requirements result in or necessitate further storage of data. This especially applies to retention obligations according to commercial or tax law (e.g. commercial code, tax code etc.). As long as no further retention obligations exist, the data are routinely deleted after the purpose has been fulfilled.

We may also store data if you have granted permission to us to do so or if legal disputes arise and we use evidence within the statutory limitation period, which can be up to 30 years; the normal limitation period is three years.

10. Secure transmission of your data

We take the appropriate technical and organisational security measures for optimally protecting the data saved by us from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed and adapted to new security standards in collaboration with security experts.

Data exchange from and to our website is performed using encryption. For our website we offer the HTTPS transfer protocol using the respectively latest encryption protocols.

In addition, we offer our users content encryption for contact forms and job applications.

It is also possible to use alternative communication channels (e.g. conventional postal services).

11. Obligation to supply data

Various personal data are necessary for the establishment, performance and ending of the contract and the fulfilment of the associated contractual and legal obligations. This also applies to the use of our website and the various features it makes available.

In certain cases data must be collected or made available pursuant to legal provisions. Please note that it is not possible to process your request or achieve performance of the underlying contract if these data are not supplied.

12. Categories, sources and origin of data

The respective context determines which data we process: This depends on, e.g., whether you are completing an order online or entering a query in our contact form, submitting a job application to us or filing a complaint.

Please note that we may also supply information separately at suitable places for special processing situations, e.g. uploading of application documents or submission of a query via the contact form.

a) When you visit our website, we collect and process the following data:

name of the internet service provider
information on the web page from which you visited us (so-called referrer)
web browser and operating system used
IP address assigned by your internet service provider
requested files, volume of data transmitted, downloads/file export
information (including date and time) about the pages retrieved by you on our website
For reasons of technical security (especially protection from hacking attempts on our web server), these data are stored in accordance with Article 6(1)(f) of the EU GDPR.

b) When we are contacted with an enquiry, we collect and process the following data:

On our website there is a contact form that can be used for electronic contact purposes. If you write us via the contact form, we will process the data given by you in the contact form in order to contact you and respond to your questions and requests.

Via the contact form we collect the following data:

nature of the enquiry
content of the enquiry
company and possibly number of employees
title
last name, first name
contact data.

The principle of data minimisation and data avoidance is followed here in that you only have to provide the data that we absolutely need for contacting you (required information). These are the nature of the enquiry, the content of the enquiry, your last name and first name, and your email address. This required information is marked with an asterisk (*).

Moreover, your IP address is processed for technical reasons and for legal protection purposes. All remaining data fields are voluntary and can be optionally completed (e.g. for a more individual response to your queries).

We take suitable security measures to protect the security and confidentiality of your data as well as possible. Your enquiry is transmitted to us in encrypted form.

If you contact us by email, we will process the personal data you communicate to us in the email solely for the purpose of processing your enquiry. If you do not use the offered forms for contacting us, no further data collection will take place.

c) Within the scope of the registration process, we process the following data:

On our website we offer users the possibility of registering and in the process giving personal data.

We thereby collect the following data:

title
last name, first name
date of birth
shipping address
billing address
customer number
VAT ID
number of industrial employees
contact partner details
email address.

The registration is thus necessary or possible either for fulfilment of a contract (via our online shop) with you or for carrying out pre-contractual measures if guest access is also provided.

The principle of data minimisation and data avoidance is followed here because only the data needed for the registration are marked as required fields with an asterisk (*). These are, e.g., the email address and the password including password repetition.

For ordering in our online shop, we additionally require details of the billing address (title, first name, last name and address) for delivery. If the shipping address differs from the billing address, the above details must also be given for the shipping address.

Through registration on our website, the IP address of the user, the date and the time of registration (technical background data) are additionally stored. By clicking the button ‘Register now’, you give consent to the processing of your data.

Please note: The password assigned by you is stored by us in encrypted form. Employees of our company cannot read this password. For that reason they cannot give you any information if you have forgotten your password.

In this case use the function ‘Forgot password’, with which an automatically generated new password is sent to you by email. No employee is authorised to request your password by phone or in writing. Please therefore never state your password if you receive such requests.

With the completion of the registration process, your data are stored with us for use of the protected customer area. As soon as you log in to our website with email address as username and password, these data are made available for actions carried out by you on our website (e.g. for orders in our online shop). Orders made can be traced in the order history. You can specify changes to the billing or shipping address here.

Registered persons are free to carry out changes/corrections to the billing or shipping address in the order history themselves. Our customer service will also be happy to make changes/corrections if you contact them. You can also of course have the registration or your customer account terminated or deleted. Please contact our customer service for this.

d) Registration via Facebook Connect

Instead of directly registering on our website, you can register with Facebook Connect. Provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you decide to register with Facebook Connect and click on the ‘Login with Facebook’ / ‘Connect with Facebook’ button, you will be automatically directed to the Facebook platform. There you can log in with your user data. Through this your Facebook profile is linked to our website and our services. Through this linking we receive access to your data stored by Facebook. Above all, these are:

technical identifier (Facebook ID)
cover photo
full name
age range
link to profile
sex
time zone
language used
profile picture
timestamp indicating when profile was last updated
verification status
email address.

Source: https://developers.facebook.com/docs/facebook-login/permissions

Of this information, we use the following data to set up, provide and personalise your account:

first name
last name
email address
technical identifier (Facebook ID).

You can find further information in the Facebook Terms of Service and the Facebook Data Policy. You can find them at https://www.facebook.com/about/privacy and https://www.facebook.com/legal/terms/.
The contract required in accordance with data protection laws has been concluded with the provider.

e) For online applications we collect and process the following data:

Thank you for your interest in working for the uvex group. We know how important your data is and process the personal data you give us in the application form only for the purpose of effectively and correctly completing the application process and for contact purposes within the scope of the application process. The data are not passed on to third parties without your consent.

You are asked to specify personal data in the application form. The following data are thereby collected:

title
academic/professional/occupational title
last name, first name
address
contact data
date of birth
desired position or activity
application video (if desired)
desired salary
availability
details of how you found out about the uvex group
documents which you upload via the portal (e.g. covering letter, CV)
Moreover, we use data which we have permissibly gained from publicly accessible directories (e.g. professional networks).

We respect the principle of data minimisation and data avoidance here in that you only need to provide data that we need for completely reviewing your application documents (required information). These are title, first name and last name, contact data, desired position or activity, details of how you found out about the uvex group, and covering letter and CV. This required information is marked with an asterisk (*). Your IP address is also processed for technical reasons and for legal protection purposes.

Without these data we unfortunately cannot review your application documents and our application system hence will not permit uploading of application documents. You of course have the possibility of providing voluntary information in the application form.

We take suitable security measures to protect the security and confidentiality of your data as well as possible. Your application documents are transmitted to us in encrypted form by our application system.

We store your data for the above-mentioned purposes until the application process has been completed and the associated time periods have elapsed – at most, for six months following the receipt of a decision. However, you have the option of us saving your application documents for a longer period and checking them against other vacant positions that match your profile.

For this we require your consent, which you can give us by clicking the checkbox before uploading your application documents. In this case we will save your documents for 12 months. You can of course withdraw your consent for the future at any time without stating any reasons by calling us on +49 (0)911/9736 1573, sending an email to recruiting@uvex.de or mailing a letter to UVEX WINTER HOLDING GmbH & Co. KG, Personalmanagement, Würzburger Str. 181, 90766 Fürth, Germany.

f) For online applications via Xing, we also process the following data:

Alternatively to using our online application portal or transferring your application directly by email or postal services, you have the possibility of applying to us via the social network Xing using the profile stored there.

If you use this option, the data specified in Clause 12.5 above will be processed:

We would like to point out that further data may be processed by the social network Xing based on Xing’s own interest. To find out about the purpose and extent of data collection and the further processing and use of the data by Xing as well as your associated rights and setting options for protecting your private sphere, please see Xing’s Privacy Policy, which you can access via the following link:

https://privacy.xing.com/en/privacy-policy.

g) For newsletters we collect and process the following data:

You can subscribe to a free newsletter on our website.

Within the scope of the newsletter registration, the following data are collected:

last name, first name
‘Registration as private person, business customer, dealer’ selection
email address  IP address assigned by your internet service provider
analysis data of the embedded tracking pixel (time of opening of the newsletter, accessed links).

The email address given in the newsletter registration and your name are used for sending of the personalised newsletter.

The principle of data minimisation and data avoidance is followed here because only the email address is marked as a required field. Your IP address will also be processed for technical reasons and for legal protection purposes when you order the newsletter.

For sending newsletters by email, we use the so-called double opt-in process. This means that you only receive advertising via email if you have expressly confirmed beforehand that we should activate the newsletter service. We do this by sending you a notification email and asking you to confirm that you would like to receive our newsletter at this email address by clicking on a link contained in this email.

You can of course end the subscription and thus withdraw your consent at any time via the unsubscribe option provided in the newsletter. Moreover, you can also directly unsubscribe from the newsletter dispatch at any time via our website.

A so-called tracking pixel is also embedded in our newsletter. This is a small graphic that is integrated directly into the newsletter. With the help of the tracking pixel, we can statistically record the reach and the success of a newsletter. For this evaluation to be carried out, the following data are collected through the tracking pixel:

time of opening of the newsletter
links accessed in the newsletter.

The purpose of using the tracking pixel is to optimise the newsletter dispatch and adapt the content of the newsletter as well as possible to the interests of the users.

If you agree to receive the newsletter, your consent also applies to the use of the tracking pixel. If you end the newsletter dispatch via the unsubscribe link or our website, your data collected by the tracking pixel are also deleted.

h) In the online blog we collect and process the following data:

On our website we offer registered users the possibility of leaving comments on our blog entries as well as responding to already existing comments. The following data are thereby collected:

user’s comment
time of comment
selected username or name
email address
IP address assigned by your internet service provider.

In this connection we would like to point out that comments in our blog are displayed in each case with the username (alias) selected by the user as well as the time of the entry.

The storage of the IP address thereby serves the purpose of legal protection of the uvex group in the event that a comment infringes upon the rights of third parties or illegal content is posted.

We will not pass on personal data collected within the framework of the blog to third parties unless this is necessary due to legal requirements or for asserting or defending legal claims by the uvex group.

i) We collect and process the following data from users of the uvex size advisor app:

We provide the uvex size advisor app, which measures your feet and recommends suitable shoes, via the Apple App Store and the Google Play Store.
The app suggests shoes in an appropriate model, size and width using anonymised measurement data only.
The app includes the product portfolio that was available at the time of installation. This can be updated by updating the app.

We collect and process the following data from users of our app:

Location
Foot length and width measurements
Date and time of the foot size measurement

We need to collect this data to ensure the basic function of the app. This data is not linked with other data or with the products you have viewed. An individual ID is generated for each measurement – it is not possible for us to link this with an app user.

When the app is downloaded, the information required to do this is sent to the app store operator. We have no influence over and assume no responsibility for the collection of this data. We process the data that the app store operator makes available to us as part of our contractual relationship for the purposes of further developing our apps and services.

To ensure that the app works on your device, the app must be authorised to access various device functions. We have outlined the primary functions of this authorisation – the actual terms used to describe the authorisation may vary depending on the operating system:

Location:
We require your location in order to load the country-specific catalogue and adapt the selection of measurement methods.
Camera:
We require access to your camera so that we can measure your foot size.
Network connection / mobile data:
Your foot and shoe sizes are calculated on the central uvex servers. An Internet connection is therefore required to enable this function.

13. Payment systems (Articles 6(1)(a) and 6(1)(b) of the EU GDPR), credit check (Article 6(1)(f) of the EU GDPR)

In our online shop you can pay by invoice, credit card, PayPal or direct debit (SEPA direct debit process). For this the respective payment-relevant data are collected so that your order and payment processing can be carried out. Moreover, your IP address is processed for technical reasons and for legal protection purposes.

The principle of data minimisation and data avoidance is followed in that you only have to provide the data that we absolutely need for carrying out the payment processing and thus winding up the contract or that we are legally obligated to collect.

Without these data we unfortunately will have to reject the conclusion of the contract with you because we will then not be able to execute it.

The payment system deployed by us uses SSL encryption for the protected transmission of your data.

Note on invoice payment: If you select the payment method ‘Invoice’ in our online shop, we perform a credit check. For this the creditworthiness-relevant data will be obtained from the Schutzgemeinschaft für allgemeine Kreditsicherung, credit bureaus or credit insurance companies for determination of creditworthiness or default risks.

Note on credit card payment: As is usual with credit card payments, the credit card information will be checked.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à.r.l. et Cie, S.C.A. 22–24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects ‘PayPal’ as the payment option during the ordering process in our online shop, data of the data subject will automatically be transferred to PayPal.

With the selection of this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transferred to PayPal usually involve the first name, last name, address, email address, IP address, telephone number, mobile number or other data needed for payment processing.

Such personal data that are connected with the respective order are also necessary for the winding up of the purchase contract. Details on data protection at PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE (for the legal situation as of 25.05.2018).

Note on direct debit process: As is usual with direct debits, your account data will be collected so that the corresponding amount can be debited from your account.

14. Automated individual decision making

We do not use purely automated processing processes to bring about a decision.

15. Cookies (Article 6(1)(f) of the EU GDPR)

Our website uses so-called cookies in several places. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and saved by your browser (locally on your hard drive).

Based on our legitimate interest (Article 6(1)(f) of the EU GDPR), we use technically necessary cookies that are needed for the operation of the website and the securing of its functionality. Moreover, also based on our legitimate interest, we use cookies by means of which we have our website displayed in the language anticipated to be suitable for you using the standard language of your web browser and your IP address.

Depending on the purpose, these cookies remain permanently stored (so-called persistent cookies, e.g. opt-out) – even after the session has ended – or are deleted when the browser is closed (so-called session cookies – these are only valid for a browser session).

Beyond that, we also set other cookies with your consent. Using these cookies, we can analyse how users use our websites. This allows us to design the website content according to visitors’ needs. Moreover, through the cookies we have the possibility of measuring the effectiveness of a specific ad and have it placed, for example, according to the thematic interests of users. The legal basis for this is formed by your consent (Article 6(1)(a) of the EU GDPR).

If you have given your consent here, you can of course withdraw it at any time without stating any reasons via the opt-out function according to Clause 23.2.

For controlling the various cookies and tools integrated into this website, we use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The Google Tag Manager enables website tags to be managed and triggered via an interface. The Google Tag Manager thereby implements only the tags used on the website and does not collect any personal data itself. Also, no cookies are placed on the devices by the Google Tag Manager itself. However, the Google Tag Manager has no influence over whether the tags managed by it set cookies themselves. If a deactivation is carried out on the domain or cookie level, this remains in effect for all tracking tags that are implemented via the Google Tag Manager.

Most web browsers accept cookies automatically. Of course, you can also manually disable, restrict or delete cookies on your device via your browser settings or with the help of software.

Please note: if you deactivate the setting of cookies, not all of the features of our website may be able to be used to their full extents under certain circumstances.

16. Creation of user profiles or use of not purely functional cookies (Article 6(1)(a) of the EU GDPR)

We use the tools and services described below on our website. The legal basis for the use is your consent, which you declare via the consent banner displayed when you first visit our website. You can find details on the tools and services used in the following paragraphs.
You can of course withdraw your granted consent at any time by deleting the stored opt-in cookie in your web browser either manually or via appropriate software and then reloading our web page or clicking on one of the following opt-out links given with the descriptions of the individual tools.

a) Use of Facebook Custom Audiences (‘visitor action pixel’)

This website uses the ‘Facebook pixel’ from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data processing rests on the legal basis of your consent in accordance with Article 6(1)(a) of the GDPR.
With the help of the Facebook pixel, Facebook can, on the one hand, determine the visitors to our on-line offering as a target group for the display of ads (‘Facebook ads’). We accordingly use the Facebook pixel to display the Facebook ads placed through us only to those Facebook or Instagram users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interest in certain topics or products determined by means of the websites visited), whom we transfer to Facebook (‘Custom Audiences’).
The Facebook pixel is directly integrated by Facebook when our web pages are called up and can store a so-called cookie on your device. If you are already logged in to Facebook when you call up our website or log in afterwards, the visit to our online offering is noted in your profile. This information can be assigned to your person with the help of other information that Facebook has saved about you, e.g. due to the owning of an account on the social network ‘Facebook’.
With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were forwarded to our website after clicking on a Facebook ad (‘Conversion’).
The information collected via the pixel or cookie can additionally be aggregated by Facebook and the aggregated information can be used by Facebook for its own advertising purposes as well as for the advertising purposes of third parties. Thus, Facebook can, e.g., conclude that you have certain interests based on your surfing behaviour on this website and also use this information to advertise offerings from third parties. Facebook can also combine the information collected via the pixel or cookie with further information that Facebook has collected about you through other websites and/or in connection with the use of the social network ‘Facebook’ so that a profile about you can be saved at Facebook Ireland Limited. This profile may be used for advertising purposes.
Moreover, with the help of the Facebook pixel, your behaviour across multiple pages can be tracked after you have viewed or clicked on a Facebook ad. This procedure is used for evaluating the effectiveness of Facebook ads for statistical and market research purposes and can contribute to the optimisation of future advertising measures.
Furthermore, when we use the Facebook pixel, we use the additional function ‘extended comparison’ in which data are transferred in encrypted form to Facebook for formation of target groups (‘Custom Audiences’ or ‘Lookalike Audiences’).

The processing of the data by Facebook takes place within the framework of the Facebook Data Policy: https://www.facebook.com/policy. You can find specific information about the Facebook pixel and the way it works here: https://www.facebook.com/business/help/651294705016616.
We would like to point out that your personal data may be transmitted to the US. The contract required in accordance with data protection laws has been concluded with the provider.

b) Use of Google Analytics

This website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Google Analytics uses cookies, which enable analysis of your use of the website. The information on the use of this website generated by the cookie is usually transmitted to and saved on a Google server in the US.

However, through the activation of IP anonymisation on this website, your IP address is first truncated by Google within Member States of the European Union or in other Contracting Parties to the Agreement on the European Economic Area. The complete IP address is only transmitted to and truncated on a Google server in the US in exceptional cases.

Google uses this information on behalf of the operator of this website to evaluate the use of the website, to compile reports about the website activities and to provide additional services related to use of the website and the internet to the website operator. The IP address transferred by your browser within the scope of Google Analytics is not merged with other data held by Google.

The contract required in accordance with data protection laws has been concluded with the provider.

The legal basis for the use of Google Analytics is your informed consent in accordance with Article 6(1)(a) of the EU GDPR.

The personal data of the users are deleted or anonymised after 38 months.

You can find further information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.

You can prevent the storage of cookies by making the appropriate setting in the browser software; however, we would like to point out that in this case it may not be possible to use all features of this website to their full extents.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) for Google as well as the processing of these data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively to the browser add-on or in browsers on mobile devices, please click on the following link to prevent the collection by Google Analytics in this website in the future:

Google Analytics Opt-Out

An opt-out cookie is placed on your device for this. If you delete your cookies, you must click this link again.

We would like to point out that on this website, Google Analytics has been extended through the code ‘gat._anonymizeIp()’ to guarantee anonymised collection of IP addresses (so-called IP masking).

c) Use of Google Ads and Remarketing

We use the advertising service Google Ads (formerly Google AdWords) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Via the Display Network, Shopping and Search types that are active with us, your interactions with advertisements placed on Google are measured. For this purpose when you click on one of our web ads placed by Google, a cookie is saved in your browser. Your further activity on the product advertised in the ad is tracked (conversion tracking) through this. With the help of this data, we can measure the effectiveness of our advertising campaigns.

The following data are thereby collected from you: a unique ID, the number/frequency of ads delivered to you (ad impressions) and the actions/clicks carried out by you.

Moreover, we use the Remarketing function within the Google Ads service. With the Remarketing function we can present ads to users of our website based on their interests on other websites within the Google advertising network (in the Google search or on YouTube, so-called Google Ads or on other websites). For this purpose the user interactions on our website, e.g. which offers the user was interested in, is analysed so that users can be shown targeted advertising on other pages even after the visit to our website. For this Google saves a number in the browsers of users who visit certain Google services or websites in the Google Display Network. The visits of these users are recorded via this number, known as a ‘cookie’. This number serves towards the unique identification of a web browser on a specific device and not the identification of a person.

The Google Tag Manager serves towards the administration and control of diverse tags. A cookie is placed in your browser for this. The Tag Manager only administers other tags and does not collect any data itself.

Use of the Google tools takes place on the basis of your consent in accordance with Article 6(1)(a) of the EU GDPR. You can withdraw your consent at any time by clicking on the link https://adssettings.google.com. The withdrawal applies only to the device and the web browser on which it was set. Please repeat the process on all devices if necessary. If you delete the opt-out cookie, you will be prompted again for your consent for the data transfer.

In addition, you can configure your browser accordingly to block third-party ads. You can also permanently block Google Tracking by downloading and installing a corresponding plugin for common web browsers, which can be found here: https://support.google.com/ads/answer/7395996.

Your data are transferred to Google for the evaluation. If you have an account with Google, Google can also merge the data obtained from tracking.

The information on the use of this website generated by the cookie is usually transmitted to and saved on a Google server in the US. The contract required in accordance with data protection laws has been concluded with the provider.

The data obtained via this process are deleted as soon as they are no longer needed for our purposes. In our case this is after 12 months.

Further information on Google and Google’s privacy policy can be found at www.google.com/privacy/ads/

d) Use of Google AdSense

The online service Google AdSense from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’) is used on our website.

Via this service conveyance of advertising content to third-party sites is made possible in that ads displayed on third-party sites are served according to the content of the respective third-party sites. Moreover, interest-based targeting of the website user is enabled through this by means of generation of individual user profiles.

Through the use of Google AdSense, it is hence possible for us to display precisely fitting ads on our website.

Cookies are used for running Google AdSense. They are stored on the user’s device and enable Google to analyse the use of our website by the site visitors. With each visit to our website or its sub-pages on which Google AdSense is integrated, the web browser of the user is caused to transfer personal data, e.g. the IP address, to Google. Through this Google is, amongst other things, put in a position to determine the origin of the visitors and prepare commission statements based on this.

Google AdSense also uses so-called tracking pixels, i.e. miniature graphics integrated into the website, in order to carry out analyses on the log files through this for the purposes of statistical evaluations. Based on these evaluations, Google can, e.g., determine whether, when and how long a website was opened by a user or which links the user clicked on. With this the visitor flow on our website can also be traced.

If the Google AdSense cookie is stored on your device, personal data about you, e.g. your IP address and other data needed for recording of and billing for the displayed advertising content, are transmitted to Google servers, which are mainly located in the US. Moreover, these data may also be transferred by Google to third parties. The contract required in accordance with data protection laws has been concluded with the provider. If you have an account with Google, Google can also merge the data obtained from tracking.

You can find further information on data processing by Google via the following link: https://www.google.com/adsense/start/. You can view Google’s Privacy Policy at www.google.com/privacy/ads/.

17. Social plugins from social networks

Various plugins from social networks are integrated on this website. Examples of this are the ‘Like’ button from Facebook or the ‘Share’ buttons from various networks.

If you use one of the embedded social media components, a direct connection to the respective social network will be established through it. The plugin content is then transferred by the respective social network directly to your browser, which integrates it into the website.

The integration of these plugins takes place on our website in each case using the so-called Shariff solution, which was developed by the computer magazine c’t. This means:

The usual social media components transmit user data each time a page is called up and in this way give the social networks precise information about your surfing behaviour (user tracking). For this you neither need to be logged in nor need to be a member of the network.

The social media components from Shariff establish the direct contact between the social network and the website visitor only when the latter actively clicks on the button. Further information regarding this can be found at www.heise.de.

By activating the respective button, you declare your consent to data collection and transfer to the respective social network. You can withdraw the consent at any time via the website of the respective social network.

Through the activation of the plugin, the respective social network receives the information that you have called up the corresponding page of our web presence. If you are logged in to the social network, it can assign the visit to your user account from this moment on, even if you do not confirm the button a second time. When you interact with the plugins, for example by pressing the ‘Like’ button another time or leaving a comment, the corresponding information is transferred from your browser directly to the respective social network and stored there.

Even if you do not have an account, the respective network can collect data about you, e.g. the IP address.

If you do not want a social network to collect data about you via our website, you must log out of the network before visiting our website. You can also install the corresponding blockers for your browser through add-ons.

We would like to point out that with the use of the social media components, data transmission to the US or other countries outside the EU usually takes place. The contract required in accordance with data protection laws has been concluded with each respective provider.

a) Integration of components of the Twitter network

Our website uses components (here: ‘Twitter button’) from the social network Twitter, which is operated by Twitter International Company, The Academy, 42 Pearse Street, Dublin 2, Ireland (‘Twitter’). When you call up a page on our website that contains such a button, your browser can establish a direct connection to Twitter’s servers if the button is active. The content of the button is transferred by Twitter directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Twitter collects with the button, but assume that your IP address is also recorded. To find out about the purpose and extent of data collection and the further processing and use of the data by Twitter as well as your associated rights and setting options for protecting your private sphere, please see Twitter’s Privacy Policy, which you can access via the following link: https://twitter.com/en/privacy.

b) Integration of components of the Instagram network

Our website uses components (here: ‘Insta button’) from the social network Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Facebook’s servers if the button is active. The content of the button is transferred by Facebook directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Facebook collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Facebook as well as your associated rights and setting options for protecting your private sphere, please see Facebook’s Privacy Policy, which you can access via the following link: https://help.instagram.com/519522125107875.

c) Integration of components of the LinkedIn network

Our website uses components (here: ‘LinkedIn plugin’) from the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to LinkedIn’s servers if the button is active. The content of the button is transferred by LinkedIn directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that LinkedIn collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by LinkedIn as well as your associated rights and setting options for protecting your private sphere, please see LinkedIn’s Privacy Policy, which you can access via the following link: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

Via the link https://www.linkedin.com/psettings/guest-controls, you can unsubscribe to the use of your data for advertising purposes and other LinkedIn services.

d) Integration of components of the Pinterest network

Our website uses components (here: ‘Pinterest plugin’) from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (‘Pinterest’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Pinterest’s servers if the button is active. The content of the button is transferred by Pinterest directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Pinterest collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Pinterest as well as your associated rights and setting options for protecting your private sphere, please see Pinterest’s Privacy Policy, which you can access via the following link: https://policy.pinterest.com/en/privacy-policy.

e) Integration of components of the Xing network

Our website uses components (here: ‘Xing plugin’) from the social network Xing, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (‘Xing’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Xing’s servers if the button is active. The content of the button is transferred by Xing directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Xing collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Xing as well as your associated rights and setting options for protecting your private sphere, please see Xing’s Privacy Policy, which you can access via the following link: https://privacy.xing.com/en/privacy-policy.

f) Integration of components of the YouTube video portal

Our website uses components (here: ‘YouTube plugin’) from the video portal YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

When you call up a page on our website that contains such a plugin, your browser can establish a direct connection to Google’s servers if the plugin is active. The called-up video is transferred by Google directly to your browser, which integrates it into the website. Moreover, the YouTube server is informed of which of our pages you visited.

To find out about the purpose and extent of data collection and the further processing and use of the data by Google as well as your associated rights and setting options for protecting your private sphere, please see Google’s Privacy Policy, which you can access via the following link: https://policies.google.com/privacy?hl=en&gl=en.

Youtube Opt-Out

g) Integration of components of the Vimeo video portal

Our website uses components (here: ‘Vimeo plugin’) from the video portal Vimeo, which is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (‘Vimeo’).

When you call up a page on our website that contains such a plugin, your browser can establish a direct connection to Vimeo’s servers if the plugin is active. The called-up video is transferred by Vimeo directly to your browser, which integrates it into the website. Moreover, the Vimeo server is informed of which of our pages you visited.

To find out about the purpose and extent of data collection and the further processing and use of the data by Vimeo, please see Vimeo’s Privacy Policy at https://vimeo.com/privacy. You can make setting options for protecting your private sphere via the following link: https://vimeo.com/cookie_policy.

Vimeo Opt-Out

18. Embedded images

Our website includes images from Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.

The Getty Images content is thereby embedded in such a way that a so-called embed code (HTML code) is integrated into our web page. This embed code ensures that when the web page is loaded, the desired third-party content is simultaneously loaded from an external server and shown to the user on the visited web page. This third-party content is thus also immediately loaded when our web page is called up.

For the external server to deliver the requested content to the user, it must have the IP address of the respective user transferred to it so that the operator of the external server can record it and, if necessary, use it for its own purposes. In addition, Getty Images may collect other data, such as, e.g., the page from which the request came, the browser type used or the browser language.

We would like to point out that the uvex group has no influence over which data besides the IP address Getty Images collects and for which purposes it uses these data.

You can find detailed information on embedding of images via Getty Images on the website https://www.gettyimages.com/resources/embed?language=en-US; for information about the data collected by Getty Images and their use, please see the Getty Images Privacy Policy, which you can access via the following link: https://www.gettyimages.com/company/privacy-policy.

19. Web fonts

For the purpose of uniformly displaying fonts, our website uses so-called web fonts, i.e. fonts that are loaded by the browser from an external source when the page is called up and temporarily stored in the browser cache. This ensures that our website is displayed uniformly and legibly on all devices, regardless of the browser used.

The provider of the web fonts used here is Monotype GmbH, Werner-Reimers-Straße 2–4, 61352 Bad Homburg (Monotype), as operator of the site www.fonts.com.

In order to load and display the web fonts, the respective browser must establish a connection to the servers of fonts.com. Through this the provider receives the information that our website has been called up via the IP address of your browser.

The legal basis for use of the web fonts is Article 6(1)(f) of the EU GDPR (legitimate interest).

If your browser does not support the display of web fonts, your device’s standard fonts will be used instead; this may lead to a degradation of the display quality.

Monotype has published further information on data processing by fonts.com on its website:

www.fonts.com/info/legal and www.fonts.com/info/legal/privacy

We would like to point out that we have no influence over whether or how fonts.com uses your data for its own purposes.

20. Social media links

Our website contains links to the social media services of Facebook, Twitter, YouTube, Pinterest and Instagram. You can recognise links to the websites of the social media services by the respective company logos. If you follow these links, you will reach the company presence of the uvex group on the respective social media services. When you click on a link to a social media service, a connection to the servers of the social media service is established. Through this the fact that you visited our website will be transferred to the servers of the social media service. In addition, further data are transmitted to the providers of the social media service. These are, for example:

address of the web page on which the activated link is located
date and time of calling up of the web page or activation of the link
information about the browser and operating system used
IP address.

If you are already logged in to the corresponding social media service at the time of activation of the link, the provider of the social media service can be in a position to determine your username and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can rule out this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the US and other countries outside the European Union. The data can hence also be processed in countries outside the European Union by the provider of the social media service. Please note that companies in these countries are subject to a data protection law that generally does not protect personal data to the same extent as is the case in the Member States of the European Union.

Please note that we have no influence over the extent, nature and purpose of data processing by the provider of the social media service. You can find further information on use of your data by social media services integrated on our website in the privacy policies of the respective social media services.

21. Links to other providers

Our website also contains – clearly recognizable – links to websites of other companies. If links to websites of other providers exist, we have no influence over the content. Hence, we also cannot accept any responsibility or liability for this content. The respective site providers or operators are always responsible for the content of these sites.

At the time of linking, the linked sites were examined for possible violations and identifiable breaches. No illegal content was found at the time of linking. However, without concrete grounds for suspecting a violation of the law, it is not possible to monitor the content of the linked sites on a permanent basis. If we become aware of violations, we will immediately remove the associated links.

22. Online offerings and children

Persons under the age of 16 may not transfer any personal data to us or submit a declaration of consent without the consent of their legal guardians. We would like to ask parents and legal guardians to participate actively in the online activities and interests of their children.

23. Privacy policy / Information on data protection in social media

The uvex group maintains a presence in the ‘social media’, in this case on Facebook, Instagram, YouTube, Xing, Pinterest and LinkedIn. If we have the control over the processing of your data, we ensure that the applicable data protection provisions are complied with.

In the following you will find the most important information on data protection law in relation to our presence.

a) Name and address of person responsible for operation

Parties responsible for the company presence within the meaning of the EU Data Protection Regulation (EU GDPR) as well as other data protection provisions are, apart from the uvex group, the following:

Facebook:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Instagram:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

YouTube:

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Xing:

New York SE, Dammtorstraße 30, 20354 Hamburg, Germany

Pinterest:

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

LinkedIn:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

However, you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. comment, share, react).

We would like to point out that your data may thereby be processed outside the area of the European Union. The contracts required in accordance with data protection laws have been concluded with all providers.

b) Purpose and legal basis

We maintain the fan pages ourselves to communicate with the visitors to these pages and inform them in this way of our offerings.

Moreover, we collect data for statistical purposes in order to improve and optimise the content and make our offering more attractive. The data required for this (e.g. total number of page views, page activities and data provided by the visitors, interactions) are processed on the part of the social networks and made available to us. We have no influence over the generation and representation.

Moreover, your personal data are processed for market research and advertising purposes by the providers of the social media, but also by the uvex group. It is therefore possible that, e.g., usage profiles are created based on your usage behaviour and the interests yielded from it. Through this, among other things, ads matching your interests can be placed inside and outside the platforms. Cookies are usually saved on your computer for this. Independently of that, data that are not directly collected on your devices may be saved in your usage profiles. The storage and analysis also takes place across devices; this applies in particular, but not solely, if you are registered as a member and logged in to the respective platforms.

Beyond that, we do not collect and process any personal data.

The processing of your personal data by the uvex group takes place based on our legitimate interest in effective provision of information and communication in accordance with Article 6(1)(f) of the EU GDPR.

If you are asked to consent to the data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Article 6(1)(a) and Article (7) of the EU GDPR.

c) Your rights / Objection possibility

If you are a member of a social network and do not want the network to collect data about you and link it with your saved member data on the respective network via our presence, you must

log out of the respective network before visiting our fan page,
delete the cookies that are on your device and
quit and restart your browser.

After logging in again, however, you can again be recognised by the network as a specific user. For a detailed description of the respective processing and the objection possibilities (opt-out), we refer to the information linked below:

Facebook:

Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Instagram:

Privacy policy: https://help.instagram.com/519522125107875
Opt-out: https://thenai.org/opt-out and http://www.youronlinechoices.com

YouTube:

Privacy policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de and http://www.youronlinechoices.com

Xing:

Pinterest:

Privacy policy: https://policy.pinterest.com/de/privacy-policy
Opt-out: https://help.pinterest.com/en/article/personalization-and-data

LinkedIn:

Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

Overall, you have the following rights regarding the processing of your personal data:

right to access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability and right to lodge a complaint of illegal processing of your personal data with the responsible data protection authority.

However, because the uvex group does not have complete access to your personal data, you should contact the social media providers directly when making a claim because they each have access to the personal data of their users and can take appropriate measures and provide information.

d)

Should you nevertheless require help, we will of course try to support you.

Please contact the data protection officer as given above. Notes on copyright and artistic works copyright law

If you would like to publish images, texts, diagrams, videos, music etc. on our presence, you should know that you possibly thereby assign all rights of use to the network, which ultimately could have legal consequences for you if you are not the creator or rights holder yourself.

Change data protection settings