Privacy Policy

3.1. Principles

Personal data is any information relating to an identified or identifiable natural person, i.e. for example names, addresses, telephone numbers, e-mail addresses, contractual, booking and accounting data which define a person’s identity.

We process personal data (including IP addresses) only if there is a legal basis or if you granted us your consent in this regard, for example in the course of a registration.

3.2. Categories of data processed

The following data categories are processed:

• Communication data (e.g. name, telephone, e-mail, address, IP address)
• Key contract data (contractual relationship, product or contractual interest)
• Customer history
• Contract billing and payments data
• Planning and control data
• Variable data
• Disclosed information (from third parties, e.g. credit reference agencies or from public directories) 

3.3. Purposes of processing and legal bases

We, our sister companies and service providers engaged by us process your personal data for the following processing purposes and subject to the following legal principles:

3.3.1. Contractual basis (preparation, performance, termination):

• Answering enquiries
• Handling of your orders
• Preparation, negotiation and fulfilment of a contract with you
• Granting access to certain information and offers
• Preparation and implementation of face-to-face meetings and virtual events

3.3.2. Legal obligation

• Official or judicial order
• Tax and commercial legislation

3.3.3. Legitimate interest of SYSKRON

• Direct marketing
• Pseudonymised webtracking
• Improvement of products and services
• Online surveys (note: if we involve a market research institute for survey, it will only become active on our behalf and subject to our instructions.)
• Establishment or protection of legal claims or defence of court actions
• Image and sound recordings of the events we organise for press and public relations
• Prevention of abuse or other unlawful activities
• Guarantee of data security

3.3.4. Consent

• Product or customer surveys by e-mail and/or telephone
• Sending newsletters

3.4. Log files

During each use of our website, your internet browser automatically transmits certain information to us which we store in so-called log files (e.g. internet browser used and operating system; domain name of the website you previously visited number of visits; average dwell time, pages accessed). This information is not associated with a specific person

We, our worldwide sister companies and our service providers store the log files for the detection of faults and for security reasons (e.g. for the clarification of attempted attacks) for a short time and then erase them. Log files the continued retention of which is required for evidentiary purposes will not be erased until final clarification of the respective incident and can be forwarded to investigating authorities on an individual basis.

Log files are also used for analysis purposes (without or without the complete IP address); please refer to “Web analysis”.

6.1. Forwarding of data to other controllers

In general, we transfer your personal data to third parties only if this is required for contract performance or if the third party has a legitimate interest in the data disclosure of if you provided your consent thereto. Krones AG and its subsidiaries may also be third parties. To the extent data is transferred to third parties based upon a legitimate interest, this is explained in this Privacy Notice.

Furthermore, data can be transferred to other controllers to the extent we are obliged to do so due to statutory provisions or enforceable official or judicial orders.

6.2. Service providers

We engage external service providers to perform tasks such as sales and marketing services, contract management, payment processing, programming, data hosting, hotline services and implementation of virtual events. We have chosen these service providers carefully and monitor them on a regular basis, in particular their careful treatment and protection of the data stored with them. We oblige all service providers to maintain confidentiality and to comply with the statutory regulations.

10.1. Google Analytics

Google Analytics is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics also uses “cookies, i.e. files that are stored on your computer and that enable Google to analyse how you use our offer. The information about your use of our websites (including your IP address) that is collected by the cookie is generally transferred to a Google server in the USA and stored there. We point out that Google Analytics was extended to the code “gat._anonymizeIp();” on our websites to ensure anonymised collection of IP addresses (so-called IP masking). Therefore, your IP address will be collected by Google in a shortened form only in accordance with our instructions which ensures anonymisation and prevents conclusions about your identity. In the event of activation of IP anonymisation on our websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google further complies with the data protection provisions of the EU-US Privacy Shield and is registered and listed with the US Department of Commerce accordingly. Google will use the information used to analyse your use of our website, to compile reports about the website activity for us and to provide further services to us related to the use of websites and internet services. IP addresses which Google Analytics transmits from your browser will not be combined with other data from Google. Google transmits such data to third parties only based upon statutory provisions or as part of processing on behalf. Under no circumstances will Google combine your data with other data collected by Google.

By using these websites, you agree to the processing of the collected data by Google and to the manner of data processing as well as to the purposes of described above.

By changing your browser settings accordingly, you may prevent cookies from being stored; however, we point out that you may not have full access to all the functions of our websites if this is the case. In addition, you may prevent any data created by the cookie and relating to website usage on your part (including your IP address) from being transmitted to and being processed by Google by downloading and installing the browser plug-in available at the link below.

Further information about Google Analytics and data protection can be found at
http://tools.google.com/dlpage/gaoptout?hl=de.

Furthermore, data collection and storage by Google Analytics can be objected to at any time by setting an opt-out cookie, with effect for the future. For this, please click on the following link. I do not want to be tracked by Google Analytics! By confirming the link, what is known as an opt-out cookie is set on your data storage medium. This cookie has a lifetime of 5 years. Please note that, if you delete all cookies from your computer, such opt-out cookie will also be deleted, i.e., if you wish to continue to object to anonymised data collection by Webtrekk, you have to set the opt-out cookie again. The opt-out cookie is set per browser and computer. If you visit our websites from your home and workplace or using different browsers, you have to activate the opt-out cookie for the different browsers or for the different computers.

10.2. Google reCAPTCHA

We use the Google reCAPTCHA service, which protects our website from spam and abuse. reCAPTCHA prevents automated software (known as bots) from engaging in abusive activities on the website. It does so by checking whether the inputs being made are actually being made by a human. To enable this process, the following details are collected and processed:

• Referrer (the address of the page on which the captcha is used)
• IP address of the user
• Google account (if the user is registered with Google, this is detected and assigned)
• The input behaviour of the user (e.g. answering the reCAPTCHA question, the speed of entry in the form fields, the order in which the input fields are selected by the user) is analysed in order to improve pattern detection at Google.  Browser, browser size and resolution, browser plug-ins, date, language setting
• Cascading style sheets (CSS) and scripts (Javascript) of the web page
• Mouse and touch-pad events within the page

Google also reads the cookies of other Google services such as Gmail, Search and Analytics. All the above details are sent to Google in encrypted form. Google’s subsequent analyses determines the form in which the captcha is displayed on the page - either in a checkbox or as a text input. Personal details from the input fields of the relevant form are not exported or stored.

Further information on Google’s data protection policy can be found at http://www.google.com/policies/privacy/.

12.1. Processing of your location data

Our offer also includes so-called location based services by means of which we provide you with specific offers which are customised for your individual location. In order to be able to provide you with these functions of the app, we collect the respective last three GPS locations transmitted by the mobile end device and your IP address if you consent thereto. We do not create movement profiles in the course thereof. You can deactivate or reactivate or temporarily deactivate in the pause mode this function in the settings of the respective app or the operating system of your mobile end device without impairing the basic functionality of the app.

12.2. App analysis

We need statistical information on the use of our Online Offer in order to make it more user-friendly, to perform range measurements and to carry out market research activities. To that end, we use the app analysis tools described in this Section.

The use profiles generated by these tools will not be combined with personal data. The tools either do not use IP addresses of the users at all or shorten them immediately after collection.

The providers of the tools process data as processors only subject to our instructions and not for their own purposes.

For each tool you will find information about the respective provider and about how you can object to the collection and processing of data by the tool.

12.3. Data processing by operators of app stores

The transfer of data such as user name, e-mail address and individual device identification number to an app store (e.g. Google Play by Google, App Store of Apply, Galaxy App Store of Samsung) in the course of downloading the respective application shall not represent data collection by us and is outside our scope of responsibility. We do not have any influence on such data collection and further processing by the app store as data controller.

17.1 Rights of access, correction, erasure and restriction

You are entitled to obtain from us information on the processing of your data. For this purpose, you can assert a right of access regarding your personal information we process. In addition, you can require us to rectify incorrect data and - to the extent the statutory provisions are met - complete or erase your data. However, this does not apply to data required for billing and accounting purposes or subject to the statutory retention obligation. To the extent access to such data is not required, processing thereof will be restricted. In addition, you can - to the extent the statutory provisions are met - require us to restrict the processing of your data.

17.2 Objection to data processing:

Moreover, you are entitled to object to data processing by us at any time. We will then cease processing your data, unless we can - in accordance with the statutory provisions - demonstrate compelling legitimate grounds for the further processing which override your interests.

17.3 Objection to direct marketing:

Apart from that, you can object to the processing of your personal data for marketing purposes at any time (“objection to marketing”). Please note that for organisational reasons, your withdrawal and the use of your data in the course of a campaign which has already commenced may overlap.

17.4 Objection to data processing on the legal grounds of a "legitimate interest":

In addition, you are entitled to object to data processing by us at any time to the extent such processing is based upon the legal basis of a legitimate interest. We will then cease processing your data, unless we can - in accordance with the statutory provisions - demonstrate compelling legitimate grounds for the further processing which override your interests.

17.5 Withdrawal of consent:

If you have given us your consent to the processing of your data, you can withdraw it at any time with effect for the future. A withdrawal shall not affect the lawfulness of the data up until the time of the withdrawal.

17.6. Data portability

Furthermore, you are entitled to receive data which you provided to us in a structured, common and machine-readable format or - to the extent technically feasible - to request transfer of such data to a third party.

17.7. Right to lodge a complaint with the supervisory authority:

You are entitled to lodge a complaint with a supervisory authority. For this, you can contact the data protection authority which is competent for your place of residence or your state or the data protection authority competent for us. This is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach

Telephone: +49 981 53 1300
Fax: +49 981 53 98 1300

E-mail: poststelle(at)lda.bayern.de