Privacy Policy

1. Introduction

With this policy, we would like to provide you, as the 'data subject', with an overview of how we process your personal data and your rights under data protection laws. In principle, our website can be used without providing any personal data. However, if you wish to use special services provided by our company via our website, processing personal data may become necessary. In cases where such processing is required and no legal basis applies, we will generally seek your consent.

The processing of personal data, such as your name, address or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable at the ‘administrative level’. Through this privacy policy, we wish to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, for example by phone or by mail.

You too can take simple and easy-to-implement measures to protect yourself against unauthorised access to your data by third parties. Therefore, at this point, we would like to provide you with some tips on how to handle your data securely:

Protect your account (login, user or customer account) and your IT system (computer, laptop, tablet or mobile device) with secure passwords.
Only you should have access to your passwords.
Ensure that you only ever use your passwords for a single account (login, user or customer account).
Do not use the same password for different websites, applications or online services.
The following applies in particular when using IT systems that are accessible to the public or shared with other people: You should always make sure to log out after every session on a website, application, or online service.

Passwords should consist of at least 12 characters and be chosen in such a way that they cannot be easily guessed. Therefore, passwords should not contain common everyday words, your own name, or the names of relatives, but should instead include uppercase and lowercase letters, numbers, and special characters.

2. Data Controller

The data controller responsible for data processing on this website within the meaning of the GDPR is

Becker Additive Manufacturing Solutions GmbH

Benzstraße 20

82178 Puchheim

E-Mail: info@becker-ams.com

Representatives of the data controller: Managing Directors Sven Pawliczek and Sebastian Tobias Lehmann

3. Data Protection Officer

We have appointed a Data Protection Officer for our company. You can contact the Data Protection Officer as follows:

Becker Additive Manufacturing Solutions GmbH

Benzstraße 20

82178 Puchheim

E-Mail: info@becker-ams.com

4. Terminology

This privacy policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used beforehand.

In this privacy policy, we use the following terms, among others:

1. Personal data

Personal data is any information relating to an identified or identifiable natural person. A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller (our company).

3. Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of disclosure, as well as the comparison or linking, the restriction, erasure or destruction of personal data.

4. Restriction of processing

Restricting processing means flagging stored personal data so that its future use or processing is limited.

5. Profiling

Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

6. Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

7. Data processor

A data processor is a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the data controller.

8. Recipient

A recipient is a natural or legal person, public authority, agency or any other body to whom personal data is disclosed, irrespective of whether they are a third party or not. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients.

9. Third party

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

10. Consent

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

5. Legal basis for processing data

Article 6 para. 1 point a) of the GDPR (in conjunction with Section 25 para. 1 of the TDDDG (Telecommunications Digital Services Data Protection Act) (formerly TTDSG)) serves as the legal basis for our company for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations required for the delivery of goods or the provision of any other service or consideration, the processing is based on Article 6 para. 1 point b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, for example in cases of enquiries regarding our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Article 6 para. 1 point c) of the GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and their name, age, health insurance details or other vital information subsequently had to be disclosed to a doctor, a hospital or other third parties. Then the processing would be based on Article 6 para. 1 point d) of the GDPR.

Ultimately, processing operations could be based on Article 6 para. 1 point f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override those interests. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, second sentence of the GDPR).

Our services are generally intended for adults. Persons under the age of 16 may not provide us with any personal data without the consent of their parents or legal guardians. We do not request, collect or pass on any personal data from children and minors to third parties.

6. Transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

You have given us your explicit consent in accordance with Article 6 para. 1 point a) of the GDPR,
The disclosure is permissible pursuant to Article 6 para. 1 point f) of the GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
There is a legal obligation to disclose the data pursuant to Article 6 para. 1 point c) of the GDPR, and
This is legally permissible and necessary pursuant to Article 6 para. 1 point b) of the GDPR for managing contractual relationships with you.

In order to protect your data and, if applicable, to enable the transfer of data to third countries (outside the EU/EEA), we have entered into data processing agreements based on the Standard Contractual Clauses of the European Commission. Insofar as the Standard Contractual Clauses are insufficient to establish an adequate level of data protection, your consent may serve as the legal basis for the transfer to third countries pursuant to Article 49 para. 1 point a) of the GDPR. This does not always apply to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR.

7. Technology

7.1 SSL/TLS encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login details or contact enquiries, which you send to us as the operator. You can identify an encrypted connection because the browser's address bar displays 'https://' instead of 'http://', and a lock icon appears in the browser bar.

We use this technology to protect the data that you send us.

7.2 Data collection during website visits

In the case of merely informational use of our website, if you do not register or otherwise transmit information to us, or do not give consent to processing operations that require consent, we only collect such data that is technically strictly necessary for the provision of the service. This is typically data that your browser transmits to our server (in so-called server log files). Each time a page is accessed by you or an automated system, our website collects a series of general data and information. This general data and information is stored in the server’s log files. The following information may be collected:

browser types and versions used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (known as a ‘referrer’),
the subpages accessed on our website via an accessing system,
the date and time of access to the website,
a truncated Internet Protocol address (anonymised IP address), and
the internet service provider of the accessing system.

We do not draw any conclusions about your identity when using this general data and information. Rather, this information is required in order to

deliver the content of our website correctly,
optimise the content of our website and the advertising on it,
ensure the continued functionality of our IT systems and the technology supporting our website, and
provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyber-attack.

We analyse this collected data and information both for statistical purposes and to enhance data protection and security within our company. Ultimately, our goal is to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6 para. 1 point f) of the GDPR. Our legitimate interest arises from the purposes of data collection listed above.

7.3 Cloudflare (Content Delivery Network)

Our website uses Cloudflare features. These services are provided by Cloudflare, Inc., 665 3rd St. #200, San Francisco, CA 94107, USA.

Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via Cloudflare’s network. Cloudflare is therefore able to analyse the data traffic between users and our websites, for example to detect and ward off attacks on our services. In addition, Cloudflare may store cookies on your computer or digital device for optimisation and analysis purposes.

You can adjust settings in your browser in such a way that you are informed when Cookies are set and you can allow Cookies in individual cases, you can block Cookies for certain cases or even in general, and activate the automatic deletion of Cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.

We have entered into a corresponding agreement with Cloudflare regarding data processing on behalf of the controller in accordance with the GDPR or under the EU Standard Contractual Clauses. Cloudflare collects statistical data on visits to this website. Access data includes: the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, confirmation of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider. Cloudflare uses the log data for statistical analysis for the purposes of operating, securing and optimising the service.

If you have consented to the use of Cloudflare, the legal basis for the processing of personal data is Article 6 para. 1 point a) of the GDPR. Furthermore, we have a legitimate interest in using Cloudflare to optimise our online service and make it more secure. The corresponding legal basis for this is Article 6 para. 1 point f) of the GDPR. Personal data is retained for as long as it is necessary to fulfil the purpose of processing. The data is deleted as soon as it is no longer required to achieve that purpose.

This US company is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, permitting the transfer of personal data without the need for additional safeguards or measures.

For further information on Cloudflare, please visit: https://www.cloudflare.com/privacypolicy/.

7.4 Hosting by Host Europe

We host our website with Host Europe GmbH, Hansestraße 111, 51149 Cologne (hereinafter referred to as ‘Host Europe’).

When you visit our website, your personal data (e.g. IP addresses in log files) is processed on Host Europe’s servers.

The use of Host Europe is based on Article 6 para. 1 point f) of the GDPR. We have a legitimate interest in ensuring that our website is presented, made available, and secured as reliably as possible.

We have entered into a data processing agreement (DPA) with Host Europe in accordance with Article 28 of the GDPR. This is a contract required under data protection law, which ensures that Host Europe processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Further information on Host Europe’s privacy policy is available at: https://www.hosteurope.de/AGB/Datenschutzerklaerung/

8. Cookies

8.1 General information on cookies

Cookies are small files that your browser creates automatically and which are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

The cookie stores information relating to the specific device you are using. However, this does not mean that we directly know your identity.

We use cookies to make your experience of our website more enjoyable. For example, we use so-called session cookies to recognise that you have already visited some pages of our website. These session cookies are automatically deleted after you leave our website.

Furthermore, for optimising the user-friendliness of our website, we use temporary Cookies that are saved for a particular fixed period on your end device. If you visit our website again to use our services, the system will automatically recognise that you have visited us before and remember the details and settings you have entered, so that you do not have to enter them again.

In addition, we use cookies to collect statistical data on the use of our website and to analyse our website to optimise it for you. These cookies enable us to automatically recognise that you have previously visited our website when you visit it again. The cookies set in this way are automatically deleted after a specified period of time. The retention period for each cookie can be found in the settings of the consent tool used.

8.2 Legal basis for the use of cookies

The data processed by the cookies, which are required for the proper functioning of the website, is therefore necessary to safeguard our legitimate interests as well as those of third parties pursuant to Article 6 para. 1 point f) of the GDPR.

As for all other cookies, you have given your consent via our opt-in cookie banner pursuant to Article 6 para. 1 point a) of the GDPR.

8.3 FreePrivacyPolicy.com (Consent Management Tool)

We use the consent management tool FreePrivacyPolicy.com to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in accordance with data protection regulations. This tool is provided by FreePrivacyPolicy.

This service enables us to obtain and manage website users’ consent to data processing.

When you visit our website, a connection is established with our servers to obtain your consents and other declarations regarding the use of cookies. We then store a cookie in your browser so that we can link the consents you have given or any withdrawal of consents to your account. The data collected in this way will be stored until you ask us to delete it, delete the cookie yourself, or the purpose for which the data was stored no longer applies. Any mandatory statutory retention obligations remain unaffected.

FreePrivacyPolicy.com is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 para. 1 point c of the GDPR.

The website cannot function properly without this processing. Users cannot object to data processing while a legal obligation to obtain their consent remains in effect for certain data processing operations pursuant to Article 7 para. 1 and Article 6 para. 1, first sentence, point c) of the GDPR.

The data collected is neither forwarded to FreePrivacyPolicy nor does FreePrivacyPolicy have access to it.

For further information, please see: https://www.freeprivacypolicy.com/.

9. Content on our website

Contacting us/Contact form

Personal data is collected when you contact us (e.g. via the contact form or by email). The data collected when using a contact form is apparent from the respective contact form itself. This data is stored and used solely for the purpose of responding to your enquiry or for establishing contact and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Article 6 para. 1 point f) of the GDPR. If your enquiry is aimed at entering into a contract, an additional legal basis for the processing is Article 6 para. 1 point b) of the GDPR. Your data will be deleted once your enquiry has been fully processed. This applies when circumstances indicate that the matter at hand has been definitively resolved and there are no legal retention obligations that prevent erasure of the data.

10. Newsletter distribution

10.1 Newsletter

Our website offers you the option to subscribe to our company newsletter. The personal data provided to us when subscribing to the newsletter is specified in the form used for this purpose.

We keep our customers and business partners informed about our offers at regular intervals via a newsletter. In principle, you can only receive our company’s newsletter if

You have a valid email address and
You have registered to receive the newsletter.

For legal reasons, a confirmation email will be sent to the email address you provided when you first subscribed to the newsletter, as part of the double opt-in process. This confirmation email is intended to verify that you, as the owner of this email address, have authorised receipt of the newsletter.

When you subscribe to the newsletter, we also store the IP address assigned by your internet service provider (ISP) to the IT system you were using at the time of subscription, as well as the date and time of your subscription. The collection of this data is necessary to enable us to investigate any (potential) misuse of your email address at a later date and therefore serves to protect us legally.

The personal data collected when you subscribe to the newsletter will be used solely for the purpose of sending out our newsletter. Furthermore, newsletter subscribers may be informed by email if this is necessary for the operation of the newsletter service or a related registration, for instance, in the event of modifications to the newsletter service or to the technical conditions. Personal data collected as part of the newsletter service will not be disclosed to third parties. You can unsubscribe from our newsletter at any time. You may withdraw your consent to the storage of personal data that you have provided to us for the purpose of sending the newsletter at any time. Each newsletter contains a link allowing you to withdraw your consent. You can also unsubscribe from the newsletter at any time directly via our website or notify us in another way.

The legal basis for data processing for the purpose of sending the newsletter is Article 6 para. 1 point a) of the GDPR.

10.2 Sending newsletters via Salesforce CRM

We send out our newsletter via Salesforce CRM, a service provided by salesforce.com Inc. (“salesforce”), One Market Street, Suite 300, San Francisco, CA 94105, USA (Salesforce).

Salesforce CRM is a service that can be used, amongst other things, to organise and analyse the distribution of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on Salesforce’s servers in the USA.

For further information on Salesforce, please visit: https://www.salesforce.com/de/company/privacy/.

11. Our social media presence

To be able to communicate with you on social networks and inform you about our services, we maintain our own pages on these platforms. If you visit one of our social media pages, we are jointly responsible with the provider of the relevant social media platform for the processing operations initiated as a result, within the meaning of Article 26 of the GDPR.

We are not the original providers of these pages, but merely use them within the scope of the options offered to us by the respective providers.

Consequently, please be advised that your data may also be processed outside the European Union or the European Economic Area. Using these services may therefore entail data protection risks for you, as it may be more difficult for you to exercise your rights, such as the right to access, erase, object, etc., and because the processing carried out on social media platforms is often done directly by the providers for advertising purposes or to analyse user behaviour, over which we have no control. If the provider creates usage profiles, cookies are often used for this purpose, or your usage behaviour is linked to the member profile you have created on social media platforms.

The described processing operations of personal data are carried out pursuant to Article 6 para. 1 point f) of the GDPR on the basis of our legitimate interest and that of the respective provider to be able to communicate with you in a contemporary way or to inform you about our services. If you grant consent for data processing to the respective provider as a user, the legal basis for this is Article 6 para. 1 point a) of the GDPR in conjunction with Article 7 of the GDPR.

As we do not have access to the providers’ databases, we would like to point out that the best way to exercise your rights (e.g. the right to access, rectify, erase, etc.) is to contact the relevant provider directly. Further information on the processing of your data in social networks is listed below under the respective social network provider used by us:

11.1 LinkedIn

(Joint) Data Controller in Europe:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland

11.2 YouTube

(Joint) Data Controller in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

12. Web analytics

12.1 Google Analytics 4 (GA4)

On our website, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymised user profiles are created and cookies are used (see the section on ‘Cookies’). The information generated by the cookie regarding your use of this website may include, amongst other things:

a temporary recording of the IP address without permanent storage
location data
browser type/version
operating system used
referrer URL (previously visited page)
time of the server request

The pseudonymised data may be transferred by Google to a server in the USA and stored there.

The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website and internet usage for the purposes of market research and needs-based design of these web pages. This information may also be transferred to third parties where required by law or where third parties process this data on our behalf.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

Google’s default data retention period is 14 months. Furthermore, personal data will be retained for as long as is necessary to fulfil the purpose of the processing. The data is deleted as soon as it is no longer required to achieve that purpose.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, permitting the transfer of personal data without the need for additional safeguards or measures.

Further information on data protection when using GA4 is available at: https://support.google.com/analytics/answer/12017362?hl=de.

12.1 Lead Forensics

We use the Lead Forensics service provided by Lead Forensics Ltd, Communication House, 26 York Street, London W1U 6PZ, United Kingdom (‘Lead Forensics’) on our website.

Lead Forensics detects anonymous visits to our website by businesses and displays publicly available information about them, such as company names or addresses. Lead Forensics also tracks your activity on this website, including all the pages you have visited and viewed, and the length of time you have spent on this website. IP addresses are neither displayed nor stored in the process. Lead Forensics uses cookies and other browser technologies to analyse user behaviour and recognise users. Lead Forensics collects and processes data about companies, such as company name, telephone number, address, website address, industry, company profile, turnover and key personnel.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR. Your data will be stored until the purpose has been fulfilled or until you withdraw your consent.

We have no influence over the specific retention period for the processed data; this is determined by Lead Forensics Ltd. For further information on Lead Forensics’ privacy policy, please visit: https://www.leadinfo.com/de/rechtliches/datenschutz/.

13. Advertising

13.1 Google Ads (AdWords) Remarketing/Retargeting

We have integrated Google Ads into this website. The operator of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use it to advertise this website in Google search results and on third-party websites. To this end, Google places a cookie in your device’s browser, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited.

Any further data processing takes place only if you have given Google your consent to link your internet and app browsing history to your Google Account and to use information from your Google Account to personalise the adverts you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To this end, your personal data is temporarily linked by Google to Google Analytics data in order to create target groups.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

You can view the Google Ads privacy policy and further information at: https://www.google.com/policies/technologies/ads/

13.2 Google Ads with conversion tracking

We have integrated Google Ads into this website. The operator of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an online advertising service that allows advertisers to place adverts both in Google’s search engine results and on the Google Display Network. Google Ads enables advertisers to specify certain keywords in advance, so that an advert is displayed in Google’s search results only when a user enters a search query containing one of those keywords. On the Google Display Network, adverts are distributed across topic-relevant websites using an automated algorithm and based on pre-defined keywords.

The purpose of Google Ads is to promote our website by displaying adverts relevant to users’ interests on third-party websites and in Google’s search results, and by displaying third-party adverts on our website.

If you access our website via a Google advert, Google will place a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. Provided the conversion cookie has not yet expired, it is used to track whether certain sub-pages, such as the shopping basket in an online shop system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who arrived at our website via an AdWords advert generated a sale – that is, whether they completed or abandoned a purchase.

The data and information collected through the use of the conversion cookie are used by Google to compile visitor statistics for our website. We, in turn, use these visitor statistics to determine the total number of users who were referred to us via adverts, i.e. to assess the success or failure of each advert and to optimise our adverts for the future. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the web pages you have visited. Each time you visit our website, personal data, including the IP address of the internet connection you are using, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data, collected via technical means, to third parties.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

You can view Google AdSense’s privacy policy and further information at: https://www.google.de/intl/de/policies/privacy/.

13.3 Google Ads with enhanced conversions

We have integrated Google Ads into this website. The operator of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads is an online advertising service that allows advertisers to place adverts both in Google’s search engine results and on the Google Display Network. The purpose of Google Ads is to promote our website by displaying adverts relevant to users’ interests on third-party websites and in Google’s search results, and by displaying third-party adverts on our website.

If you access our website via a Google advert, Google will place a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. Provided the conversion cookie has not yet expired, it is used to track whether certain sub-pages, such as the shopping basket in an online shop system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who arrived at our website via a Google Ads advert generated a sale – that is, whether they completed or abandoned a purchase.

We make use of Google Ads’ enhanced conversions feature. To this end, we transmit personal data that we have collected ourselves, such as telephone numbers or email addresses, to Google. This data is cross-referenced with event data from Google Ads in order to track more conversions.

Each time you visit our website, personal data, including the IP address of the internet connection you are using, is therefore transmitted to Google in the United States of America. Google may pass on this personal data, collected via technical means, to third parties.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

You can view the Google Ads privacy policy and get further information at: https://www.google.de/intl/de/policies/privacy/ or https://support.google.com/adspolicy/answer/9755941?hl=de&ref_topic=7012636&sjid=9061832235671554201-EU.

13.4 Google Ads - Further information on Consent Mode, simple implementation

Under the Digital Markets Act, Google is obliged to obtain users’ consent before processing user data for the purposes of personalised advertising. Google meets this requirement with its ‘Consent Mode’. Users are obliged to implement this and thereby demonstrate that they have obtained the consent of website visitors.

Google offers two implementation modes: simple implementation and advanced implementation.

We use the simple implementation method for Google Consent Mode. A connection to Google will only be established, a Google script executed, and the processing operations described above carried out if you give your consent to the use of Google Ads (see above). If you do not give your consent, Google will simply be informed that consent has not been given. The Google code is not executed and no Google Ads cookies are set.

14. Plugins and other services

14.1 Adobe Typekit

We use Adobe Typekit for the visual design of our website. Typekit is operated by Adobe Systems Software Ireland Ltd., 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. By using Typekit, we are granted access to a font library hosted on Adobe’s servers (headquartered in the USA). To display the fonts we use, your browser establishes a connection to an Adobe server in the USA in order to dynamically download the font required for our website. As a result, Adobe receives the information that our website has been accessed from your IP address.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

The parent company, Adobe Inc., is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, permitting the transfer of personal data without the need for additional safeguards or measures.

You can view Typekit’s privacy policy at: https://www.adobe.com/privacy/policies/adobe-fonts.html.

14.2 Google Tag Manager

We use the Google Tag Manager service on this website. Google Tag Manager is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, which has its headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool allows ‘website tags’ (i.e. keywords embedded in HTML elements) to be implemented and managed via a user interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on, and can then identify which content on our website is of particular interest to you.

The tool also triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If you have disabled tracking at domain or cookie level, this setting will apply to all tracking tags implemented using Google Tag Manager.

These processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

Further information on Google Tag Manager and Google’s privacy policy is available at: https://www.google.com/intl/de/policies/privacy/.

The described processing operations are carried out only where explicit consent has been given in accordance with Article 6 para. 1 point a) of the GDPR.

14.3 Salesforce CRM system

We use the CRM system provided by salesforce.com Inc. (“salesforce”), One Market Street, Suite 300, San Francisco, CA 94105, USA.

Salesforce is a cloud-based CRM solution for managing customer relationships. All departments (including, for example, marketing, sales, customer service, and online and brick-and-mortar retail) operate on a shared CRM platform. Among other things, this serves to ensure the structured processing of contracts and to document the contract initiation process. In doing so, Salesforce is granted full access to the customer data we process, which is stored in the cloud. This may include names, addresses, email addresses and telephone numbers.

Where consent has been sought, processing takes place exclusively on the basis of Article 6 para. 1 point a) of the GDPR. The legal basis for the use of “Salesforce” in the context of contractual relationships is Article 6 para. 1 point b) of the GDPR. In all other cases, the legal basis for the processing of your personal data is Article 6 para. 1 point f) of the GDPR. Our focus here is on the effective coordination of internal and external communication and the management of customer relationships.

For further information on Salesforce, please visit: https://www.salesforce.com/de/company/privacy/.

14.4 YouTube videos in privacy- enhanced mode (YouTube NoCookies)

Some subpages on our website contain links to YouTube. As a general rule, we are not responsible for the content of websites to which links are provided. However, should you follow a link on YouTube, please note that YouTube stores its users’ data (e.g. personal information, IP address) in accordance with its own data usage policy and uses it for commercial purposes.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

We also embed videos stored on YouTube directly on some of the subpages of our website. With this integration, content from the YouTube website is displayed in specific sections of a browser window. When you visit a page or subpage on our website that contains embedded YouTube videos, a connection is established with the YouTube servers and the content is displayed on the website by being sent to your browser.

YouTube content is embedded only in ‘enhanced privacy mode’. YouTube provides this mode itself and thereby ensures that it does not initially store any cookies on your device. However, when you visit the relevant pages, your IP address and, where applicable, other data are transmitted, thereby indicating, in particular, which of our web pages you have visited. This information cannot, however, be linked to you unless you have logged in to YouTube or another Google service before visiting the page, or are permanently logged in. As soon as you start playing an embedded video by clicking on it, YouTube will, via the enhanced privacy mode, only store cookies on your device that do not contain any personally identifiable data, unless you are already logged in to a Google service. These cookies can be blocked by adjusting your browser settings or using browser extensions.

By requesting the video, you are also giving your consent to the placement of the relevant cookie (Article 6 para. 1, first sentence, point a) of the GDPR).

You can view YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy/.

15. Your rights as a data subject

15.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

15.2 Right of access – Article 15 of the GDPR

You have the right to receive, at any time and free of charge, information from us regarding the personal data we hold about you, as well as a copy of this data, in accordance with the relevant legal provisions.

15.3 Right to rectification – Article 16 of the GDPR

You have the right to request the rectification of any inaccurate personal data relating to you. Furthermore, you have the right to request that incomplete personal data be completed, taking into account the purposes of processing.

15.4 Erasure – Article 17 of the GDPR

You have the right to request that we erase your personal data without delay, provided that one of the grounds laid down by law applies and insofar as the processing or storage is not necessary.

15.5 Restriction of processing – Article 18 of the GDPR

You have the right to request that we restrict the processing of your personal data if any of the legal conditions are met.

15.6 Data portability – Article 20 of the GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller, to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Article 6 para 1 point a) of the GDPR or Article 9 para. 2 point a) of the GDPR or on a contract pursuant to Article 6 para. 1 point b) of the GDPR, and the processing is carried out by automated means, unless processing is necessary for the performance of a task carried out in public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability under Article 20 para. 1 of the GDPR, you have the right to have your personal data transmitted directly from one controller to another, provided that this is technically feasible and does not adversely affect the rights and freedoms of others.

15.7 Right to object under Article 21 of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 para. 1 point e) (data processing in public interest) or point f) (data processing based on balancing of interests) of the GDPR.

This also applies to profiling within the meaning of Article 4 no. 4 of the GDPR that is based on these provisions.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

In certain cases, we process personal data for the purpose of direct marketing. You may object at any time to the processing of your personal data for the purposes of such advertising. This also applies to profiling, insofar as it is linked to such direct marketing. If you object to us processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

Furthermore, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 para. 1 of the GDPR, unless such processing is necessary for the performance of a task carried out in public interest.

You are free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object through automated procedures using technical specifications.

15.8 Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time, with effect for the future.

15.9 Lodging a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of personal data.

16. Routine storage, erasure and blocking of personal data

We process and store your personal data only for the period necessary to fulfil the purpose for which it is stored, or where required by the legislation to which our company is subject.

If the purpose for which the data is stored no longer applies, or if a statutory retention period expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the relevant legal provisions.

17. Duration of storage of personal data

The criterion for the duration of storing personal data is the relevant statutory retention period. Once this period has expired, the relevant data is routinely deleted, provided it is no longer required for the performance of a contract or for entering into a contract.

18. Validity and amendments to the privacy policy

It may become necessary to amend this privacy policy as a result of further developments to our website and services, or due to changes in legal or regulatory requirements. You can view and print the latest privacy policy at any time on the website at https://www.becker-ams.com/en/data-privacy.

This privacy policy was created with the help of the following data protection software: GoldbergUllrich Data Protection Manager