Privacy policy of MicroStep Europa GmbH

MicroStep Europa® GmbH is pleased about your visit to our website and your interest in MicroStep. We take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws. With the following information we would like to give you an overview of how your personal data is processed by us and your rights according to the data protection rights.

1   Responsible unit in terms of the EU data protection basic regulation

The unit responsible for data processing on this website is:

MicroStep Europa GmbH
Messerschmittstraße 10
86825 Bad Wörishofen
Germany

Contact details see Impressum.

The responsible unit decides alone or jointly with others on the purposes and means of processing personal data.

2   Contact details of our data protection officer

To assert your rights, report data protection incidents, suggestions and complaints regarding the processing of your personal data and to revoke your consent, we recommend that you contact our company data protection officer:

MicroStep Europa GmbH
Data protection officer
Messerschmittstraße 10
86825 Bad Wörishofen
Germany

E-mail: privacy@microstep.com

3   General information

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in those cases where prior consent cannot be obtained for factual reasons or where the processing of the data is permitted by legal regulations.

3.1   Personal data

Personal data is individual information about personal or factual circumstances of a specific or determinable natural person. This includes information such as your real name, address, e-mail address, company, telephone number and other information about you or your company. Personal information may also include information that is publicly available.

4   Which data is being processed and which sources does it come from?

We process personal data that we collect about you when you use our website or our business relationship (e.g. when you contact us).

4.1   Access to our website | server log files

When you visit our website, our web server temporarily saves the connection data of the requesting computer by default for the purpose of system security:

• IP address of the device from which the online offer is accessed
• Internet address of the website from which the online offer was accessed (so-called origin or referring URL)
• Visited pages on our domain
• Date, time and duration of the server request
• Browser type and version
• Used operating system
• Host name of the accessing computer

Additional personal information (e.g. name, address, telephone number, e-mail address) is not collected unless you provide this information voluntarily, e.g. as part of a registration or information request in the contact form.

This data is not merged with other data sources. The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

4.2   Contact form | Cutting demonstration request form

Data transmitted via the contact form or the "cutting demonstration request" form will be saved including your contact data in order to process your request or to be available for follow-up questions. At the time of sending the message, the following data will also be saved: IP address, date and time.

The data entered in the contact form will be processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing operations carried out up to revocation remains unaffected by the revocation.

If you provide an address outside the area of responsibility of MicroStep Europa GmbH (Germany, Austria and Switzerland) in the contact form, we will transfer your data – as far as this is necessary for processing – to the order processor assigned by us, MicroStep, spol. s r.o., Vajnorská 158, 831 04 Bratislava, Slovakia.

If you enter an address in a third country that is not classified as safe by the German Data Protection Regulation (GDPR) in the contact form, our aforementioned order processor may transfer your personal data to a regional MicroStep partner in your country in order to process your request. The data transfer to a third country will only take place on the basis of your consent (Article 6(1)(a) GDPR), after you have been informed about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to its storage or until there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.

4.3   Registration on this website

To use certain functions (e.g. ClientZone) you can register on our website. The transmitted data serves exclusively for the purpose of using the respective offer or service. Mandatory data requested during registration must be provided completely. Otherwise we will refuse the registration.

In case of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address that was specified during registration.

The data entered during registration will be processed on the basis of your consent (Article 6(1)(a) GDPR). A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing already carried out remains unaffected by the revocation.

We store the data collected during registration for the period of time you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.

4.4   Newsletter

To receive our newsletter, you can register on our website by using a double opt-in procedure. For this we need a valid e-mail address from you. After registration, the person concerned will receive a confirmation e-mail in which an activation link must be confirmed in order to complete the registration.

When you register for our newsletter, we save your IP address and the date of registration. This storage is only used as proof in the event that a third party misuses your e-mail address to register you for the newsletter without your knowledge or authorization. Additional data is not collected or is voluntary. The data will be used exclusively for sending the newsletter.

The data provided in the newsletter registration will be processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). A revocation of your already given consent is possible at any time. For the revocation an informal notification by e-mail is sufficient or you unsubscribe via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted in case of cancellation. If these data have been transmitted to us for other purposes and elsewhere, they will remain with us.

5   Duration of storage | retention periods

Unless otherwise stated in individual cases, we will store your data for as long as is necessary to provide our online offer and the associated services or if we have a legitimate interest in further storage. Afterwards, we delete your personal data with the exception of data that we must continue to store in order to fulfil legal obligations (e.g. we are obliged by tax and commercial law to retain documents such as contracts and invoices for a certain period of time).

6   Data security

We take all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public.

Should you wish to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted is not guaranteed. The content of your e-mail can be viewed by third parties. We therefore recommend that you send us confidential information exclusively by postal mail. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued.

For security reasons and to protect the transmission of confidential content, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

7   YouTube

For integration and display of video content our website uses plugins from YouTube. The video portal is provided by YouTube, LLC., 901 Cherry Ave., San Bruno, CA 94066, USA.

When a page with integrated YouTube plugin is accessed, a connection to the YouTube servers is established. This tells YouTube which of our pages you have called up.

YouTube can directly assign your surfing behavior to your personal profile, if you are logged in to your YouTube account. By logging out you have the possibility to prevent this.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Article 6(1)(f) GDPR.

Details on the handling of user data can be found in the YouTube privacy policy under: https://policies.google.com/privacy.

8   Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective and safer.

Some cookies are "session cookies." Such cookies are deleted automatically after the end of your browser session. On the other hand, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when you close the program. Disabling cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for electronic communication processes or the provision of certain functions desired by you (e.g. shopping basket), is based on Article 6(1)(f) GDPR. As operators of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be treated separately in this privacy policy.

8.1   Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your device and enable an analysis of website use. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.

The setting of Google Analytics cookies is based on Article 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimize our website and, where applicable, advertising.

8.1.1   IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before sending it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activities and to provide us with further services associated with the use of the website and the internet. The IP address transmitted by Google Analytics is not merged with other Google data.

8.1.2   Browser plugin

The setting of cookies by your web browser can be prevented. However, some functions of our website could be restricted as a result. You can also prevent the collection of data regarding your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

8.1.3   Demographic characteristics in Google Analytics

Our website uses the "demographic features" function of Google Analytics. It can be used to generate reports that contain information about the age, gender and interests of visitors to the site. This data is derived from interest-based advertising by Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can disable this feature at any time. You can do this through the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the "Opting out of data collection" section.

8.2   Google Search Console

We use Google Search Console on our website, a Google service that provides us with a non-personalized analysis result of website visitors. The service allows, among other things, the filtering and grouping of data about website usage, e.g. by categories such as search query, date or device.

We use the information provided by Google Search Console to evaluate the use of our website and to optimize our website. The data is not linked to other data sources or passed on to third parties. No personal data is collected, stored or displayed.

Further information about Google Search Console can be found under the following link:
https://support.google.com/webmasters/answer/9128668?hl=en&visit_id=637329051577528911-2726708456&rd=1

8.3   ClickDimensions

We use ClickDimensions for sending newsletters. Provider is ClickDimensions LLC., 5901 Peachtree Dunwoody Road, NE suite B500 Atlanta, GA 30328, USA. With this service we can organize and analyze the newsletter sending. The data you enter to receive the newsletter, such as your e-mail address, is stored on ClickDimensions' servers.

Sending the newsletter with ClickDimensions allows us to analyze the behavior of the newsletter recipient. Among other things, the analysis shows how many recipients have opened their newsletter and how often links in the newsletter were clicked. ClickDimensions supports conversion tracking to analyse whether a previously defined action, such as a product purchase, took place after a link was clicked.

The data processing is based on your consent (Article 6(1)(a) GDPR). It is possible to revoke your previously granted consent at any time. To revoke your consent, simply send us an informal message by e-mail or unsubscribe using the "unsubscribe" link in the newsletter. The legality of the data processing procedures already carried out remains unaffected by the revocation.

If you do not wish to receive an analysis by ClickDimensions, you must unsubscribe from the newsletter. To unsubscribe, simply send us an informal e-mail or use the "unsubscribe" link in the newsletter.

Data entered to set up the subscription will be deleted from our servers and the servers of ClickDimensions if you unsubscribe. Should this data have been transferred to us for other purposes and elsewhere, it will remain with us.

You can find details of ClickDimensions' data protection policy at: http://clickdimensions.com/about/privacy-policy/

9   Social plugins

On our website, we use social plugins from the social networks Facebook, Linkedin, Xing, Twitter and Instagram on the basis of Article 6(1)(f) GDPR to make our company more well-known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection compliant operation is to be guaranteed by their respective providers.

If you do not want the respective social network to be able to assign visits to our pages to your user account, please log out of your user account.

9.1   Facebook

Our pages integrate plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our page. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=en_US

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged in to your Facebook account, you can link the contents of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in the Facebook privacy policy at https://www.facebook.com/policy.php.

9.2   LinkedIn

Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each time you access one of our pages that contains LinkedIn features, a connection to LinkedIn's servers is established. LinkedIn is notified that you have visited our sites using your IP address. If you click the LinkedIn "Recommend" button and are logged in to your LinkedIn account, LinkedIn is able to track your visit to our site to you and your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.

For further information, please refer to the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

9.3   Xing

Our website uses functions of the network Xing. The provider is Xing AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

When a page with integrated Xing functions is accessed, a connection to the Xing servers is established. We have no knowledge of the content of the transmitted data or the use of this data by Xing.

Details on data protection and the XING "Share" button can be found in Xing's privacy policy at https://privacy.xing.com/en.

9.4   Twitter

Our website uses features of the Twitter service. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When using Twitter and the "Re-Tweet" function, websites you visit will be linked to your Twitter account and published in your Twitter feed. In the process, data is transmitted to Twitter. We have no knowledge of the content of the transmitted data or the use of this data by Twitter. Details can be found in the Twitter privacy policy: https://twitter.com/privacy.

You can change your privacy settings on Twitter: https://twitter.com/account/settings

9.5   Instagram

On our pages functions of the service Instagram are integrated. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our sites with your account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

For more information, please refer to Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

10   Information on legal remedies

10.1   Right of information, rectification, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data (Article 15 GDPR), the origin of the data, its recipients and the purpose of the data processing and, if applicable, a right to correction (Article 16 GDPR), blocking or deletion (Article 17 GDPR) of this data. In this regard and also for further questions on the subject of personal data, you can contact us at any time using the contact options listed below.

10.2   Right of appeal to the competent supervisory authority

As the person concerned, you have a right of appeal to the competent supervisory authority in the event of a data protection breach (Article 77 GDPR). The address of the competent supervisory authority with regard to data protection issues is:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

10.3    Right of data transferability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties (Article 20 GDPR). The data will be provided in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.

11   Revocation of a consent to data processing

If you have given your consent to the processing of your personal data, you can revoke this consent at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. An informal notification by e-mail to the address mentioned below is sufficient for the revocation. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

12   Right of objection to the processing of data for direct marketing purposes

In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purpose of such advertising, as far as it is connected with such direct advertising (Article 21 GDPR).

If you object to processing for the purposes of direct marketing, we will no longer process your personal data for these purposes.

13   Contact

Please send inquiries, suggestions or a revocation regarding the use of data in writing or by e-mail to the address below:

MicroStep Europa GmbH
Data protection officer
Messerschmittstraße 10
86825 Bad Wörishofen
Germany

E-mail: privacy@microstep.com

14   Scope and amendment of the privacy policy

This privacy policy only applies to content on our servers and does not include websites linked to our site.

We reserve the right to change our security and privacy measures if this is necessary due to technical developments. In these cases we will also adapt our information on data protection accordingly. Therefore, please note the current version of our privacy policy.