Services

wenglor sensoric elektronische Geräte GmbH takes the protection of your personal data very seriously. Your privacy is important to us. We process your personal data in accordance with the applicable legal data protection requirements for the purposes specified below. This data protection notice defines personal data as all data related to your person.

We explain below how we handle these data. We have divided our data protection notice into sections to provide a better overview.

The Controller and the Data Protection Officer
The controller of the data processing is:

wenglor sensoric elektronische Geräte GmbH
wenglor Strasse 3
88069 Tettnang, Germany
Tel.: +49 7542 5399 0
Fax: +49 7542 5399 988
E-mail: info(at)wenglor.com

If you have any questions or comments regarding data protection (such as requests for information or to update your personal data), you can also contact our Data Protection Officer.

Contact details for the Data Protection Officer/Coordinator:

Mr. Stefan Fischerkeller/Mr. Florian Frick
Tel.: +49 7542 5399 0
E-mail: GDPR(at)wenglor.com

2.1 Source of the Data Collection
We process personal data that we have collected directly from you.
If it is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g., credit agencies, address publishers). In addition, we process personal data that we have legitimately collected, received or acquired from publicly accessible sources (e.g., telephone directories, trade and association registers, population registers, debtor registers, land registers, press, Internet and other media) and are entitled to process.

2.2 Source and Data Categories of Data That Have Not Been Collected Directly From You
If it is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties. In addition, we process personal data that we have legitimately collected, received or acquired from publicly accessible sources (press, Internet and other media) and are entitled to process. Relevant categories of personal data may include, in particular:

• Personal data (name, date of birth, place of birth, nationality, marital status, occupation/industry and similar data)
• Contact information (address, e-mail address, telephone number and similar data)
• Confirmation of payment/cover for bank cards and credit cards
• Customer history
• Data relating to your use of the telemedia offered by us (e.g., time at which our websites, apps or newsletters were accessed, our pages/links clicked or entries and similar data)
• Video and image recordings
• Creditworthiness data

2.3 Purposes and Legal Bases of the Processed Data
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG-neu) and other applicable data protection regulations (details below). The specific data that are processed and how they are used depend largely on the services requested or agreed in each case. Further details or additional information on the purposes of the data processing can be found in the respective contractual documents, forms, declaration of consent and/or other information provided to you (e.g., in the course of use of our website or in our General Terms and Conditions).

Purposes pursuant to the fulfillment of a contract or steps prior to entering into a contract (Art. 6(1)b GDPR)
Personal data are processed in order to perform our contracts with you and to fulfill your orders as well as to take steps and measures prior to entering into a contractual relationship, e.g. with interested parties. This essentially includes: communication with you relating to the contract, the corresponding billing and associated payment transactions; the traceability of orders and other agreements as well as quality control through appropriate documentation; goodwill procedures; measures to monitor and optimize business processes and to fulfill general duties of care; control and monitoring by affiliated companies; statistical evaluations for corporate control, cost recording and controlling; reporting; internal and external communication; emergency management; accounting and tax assessment of operational services; risk management; assertion of legal claims and defense in the event of legal disputes; ensuring IT security (e.g., system or plausibility tests) and general security; securing and exercising the right of admission (e.g., through access controls); ensuring the integrity, authenticity and availability of data; prevention and investigation of criminal offenses; and monitoring by supervisory bodies or control bodies (e.g., auditors).

Purposes in the context of a legitimate interest pursued by us or a third party (Art. 6(1)f GDPR)
Beyond the actual fulfillment of a contract or the preliminary contract, we may process your data if this is necessary to protect a legitimate interest pursued by us or a third party, in particular for the purposes of:

• advertising or market and opinion research unless you have objected to the use of your data;
• testing and optimizing requirements analysis processes;
• further developing services and products as well as existing systems and processes;
• enriching our data, including by using or researching publicly accessible data;
• conducting statistical evaluations or market analyses; benchmarking;
• asserting legal claims and defending claims in legal disputes that are not directly related to the contractual relationship;
• storing data for limited purposes if deletion is not possible or is possible only with disproportionate effort due to the specific mode of storage;
• developing scoring systems or automated decision-making processes;
• preventing and investigating criminal offenses where this is not exclusively for the fulfillment of legal requirements;
• safeguarding the security of buildings and plant (e.g., through access controls) where this goes beyond the general duty of care;
• conducting internal and external investigations and security checks; possibly monitoring or recording telephone conversations for quality control and training purposes;
• obtaining or maintaining certifications of a private-law or official nature;
• securing and exercising the right of admission through appropriate measures (such as video surveillance) and securing evidence of criminal offenses and preventing such.

Purposes subject to your consent (Art. 6(1)a GDPR)
Your personal data may also be processed for certain purposes with your consent (e.g., use of your e-mail address for marketing purposes). As a rule, you can withdraw this consent at any time. This also applies to the withdrawal of declarations of consent issued to us prior to the GDPR coming into force, i.e., before May 25, 2018. You will be informed separately of the purposes and consequences of withdrawing or not granting consent in the corresponding consent text. In principle, the withdrawal of consent is only effective for the future. Processing that took place before the withdrawal is not affected by it and remains lawful.

Purposes pursuant to the fulfillment of legal requirements (Art. 6(1)c GDPR) or in the public interest (Art. 6(1)e GDPR)
Like everyone who participates in economic activities, we are also subject to a variety of legal obligations. These are primarily statutory requirements (e.g., under commercial and tax laws), but they may also be regulatory or other official requirements in some cases. The purposes of the processing may include the fulfillment of fiscal control and reporting obligations, the archiving of data for the purposes of data protection and data security as well as scrutiny by the fiscal and other authorities. In addition, the disclosure of personal data may be necessary in the context of official/judicial measures for the purposes of gathering evidence, prosecuting offenses or enforcing civil claims.

Scope of your obligations to provide us with data
You need to provide only the data that are necessary for the establishment and performance of a business relationship or for a pre-contractual relationship with us or that we are legally obliged to collect. Without these data, we will generally not be able to conclude or perform the contract. This may also apply to data required later in the course of the business relationship. If we request further data from you, you will be informed of the voluntary nature of the information separately.

Existence of automated decision-making in individual cases (including profiling)
We do not use solely automated decision-making processes as defined in Art. 22 GDPR. If we should nevertheless use such a process in individual cases in the future, we will inform you of this separately if this is prescribed by law. We may process some of your data with the objective of evaluating certain personal aspects (profiling).
To provide you with targeted information and advice on products, we may use evaluation tools. These enable needs-based product design, communication and advertising, including market and opinion research. Information on nationality and special categories of personal data pursuant to Art. 9 GDPR are not processed in this context.

2.4 Consequences of Not Providing Data
In the context of the business relationship, you must provide the personal data that are necessary for the establishment, execution and termination of the legal transaction and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without these data we will not be able to execute the legal transaction with you.

2.5 Recipients of Data Within the EU
Within our company, the internal departments or organizational units that receive your data are those that require them in order to fulfill our contractual and legal obligations or within the context of administering and implementing our legitimate interest.
Your data will be shared with external bodies only:

• in connection with the processing of the contract;
• for the purpose of fulfilling legal requirements pursuant to which we are obliged to provide information, to report or disclose data, or where the disclosure of data is in the public interest (see Section 2.4);
• if external service providers process data on our behalf as processors or function providers (e.g., data centers, support/maintenance of EDP/IT applications, archiving, document processing, call center services, compliance services, controlling, data validation or plausibility checks, data destruction, purchasing/procurement, customer administration, letter shops, marketing, media technology, research, risk controlling, billing, telephony, website management, auditing services, credit institutes, print shops or companies specializing in data disposal, courier services, logistics);
• on the basis of our legitimate interest or the legitimate interest of the third party for the purposes mentioned (e.g., authorities, credit agencies, debt collectors, lawyers, courts, expert appraisers, subsidiaries, boards, and control bodies);
• if you have given us your consent to transfer your data to third parties.

We will not share your data with third parties beyond this. If we commission service providers within the context of commissioned data processing, your data are subject to the same security standards within these commissioned service providers as they are with us. In all other cases, the recipients may use the data only for the purposes for which they were provided to them.

2.6 Recipients of Data Outside the EU
Data may be transferred to bodies outside the European Union (EU) or the European Economic Area (EEA) – so-called third countries – if this is necessary to execute an order/contract from or with you, if it is required by law (e.g., fiscal reporting obligations), if it is within our or a third party’s legitimate interest or if you have given us your consent.

Your data may also be processed in a third country in connection with the involvement of service providers in the context of commissioned data processing. If there is no decision by the European Commission regarding an appropriate level of data protection in the country concerned, we guarantee that your rights and freedoms will be adequately protected and guaranteed pursuant to EU data protection regulations by means of appropriate contracts. We will provide you with detailed information on request. Information on the appropriate or adequate safeguards and on the possibility to obtain a copy of these may be requested from the company’s Data Protection Officer.

2.7 Retention Periods
We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the performance of a contract.
In addition, we are subject to various retention and documentation obligations pursuant to the German Commercial Code (HGB) and the German Tax Code (AO), among others. The retention and documentation periods specified therein are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship to the end of the calendar year.

Furthermore, specific legal regulations may require a longer retention period, e.g., the preservation of evidence within the framework of the legal statute of limitations. Pursuant to Sections 195 et seq. of the German Civil Code (BGB), the standard limitation period is three years, but limitation periods of up to 30 years may also apply.

If the data are no longer required for the fulfillment of contractual or legal obligations and rights, they are deleted on a regular basis unless their – limited – further processing is necessary to fulfill the purposes of an overriding legitimate interest. Such an overriding legitimate interest also exists, for example, if deletion is not possible or only possible with disproportionate effort due to the specific mode of storage, and appropriate technical and organizational measures make processing for other purposes impossible.

2.8 Your Rights
Under certain conditions, you can assert your data protection rights against us.

• You have the right to receive information from us about your data stored by us pursuant to the rules of Art. 15 GDPR (where applicable with restrictions pursuant to Section 34 BDSG).
• At your request, we will correct the data stored about you pursuant to Art. 16 GDPR if they are inaccurate or incorrect.
• If you wish, we will delete your data pursuant to the principles of Art. 17 GDPR, provided that other legal regulations (e.g., legal retention obligations or the restrictions pursuant to Section 35 BDSG) or an overriding interest on our part (e.g., the defense of our rights and claims) do not conflict with this.
• You may ask us to restrict the processing of your data, taking into account the conditions of Art. 18 GDPR.
• Furthermore, you may object to the processing of your data pursuant to Art. 21 GDPR, which requires us to stop processing your data. However, this right to object applies only in the event of very special circumstances regarding your personal situation whereby our company’s rights may conflict with your right to object.
• You also have the right to receive your data in a structured, commonly used and machine-readable format subject to the conditions of Art. 20 GDPR or to transmit them to a third party.
• In addition, you have the right to withdraw the consent you granted to the processing of personal data at any time with future effect (see Section 2.3).
• You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). However, we recommend that you always address any complaint to our Data Protection Officer in the first instance.
• If possible, your applications to exercise your rights should be addressed in writing or by e-mail to the above address or directly in writing or by e-mail to our Data Protection Officer.

Special notice on your right to object pursuant to Art. 21 GDPR.
You have the right to object at any time to the processing of your data on the basis of Art. 6(1)f GDPR (data processing on the basis of a balance of interests) or Art. 6(1)e GDPR (data processing in the public interest) if there are grounds relating to your particular situation for doing so.

This also applies to profiling based on this provision as defined by Art. 4(4) GDPR. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

We may also process your personal data for direct advertising purposes. If you do not wish to receive advertising, you have the right to object to it at any time; this also applies to profiling if it is linked with such direct advertising. We will take this objection into account in the future. We will no longer process your data for direct advertising purposes if you object to processing for these purposes.

The objection can be lodged in any form. Where possible, it should be addressed to:
wenglor sensoric elektronische Geräte GmbH
wenglor Strasse 3
88069 Tettnang, Germany
E-mail: GDPR@wenglor.com

You also have the option to contact the Data Protection Officer above or a data protection supervisory authority with a complaint.

The data protection supervisory authority responsible for us is:​
​​​​​​
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart