top of page

Privacy policy

​

I. Company Name and Details of the Responsible Party

​

The company responsible under the meaning of the General Data Protection Regulation and other national data protection laws of member states as well as other data protection provisions is:

​

ZSM Metrology GmbH

Leipziger Straße 2

63628 Bad Soden-Salmünster

Germany

Tel.: 06056 98 31 50 0

E-Mail: info@zsm-group.com

Website: www.zsm-group.com

 

II. General Information on Data Processing

 

1. Scope of Personal Data Processing

 

In principle, we process the personal data of our users only insofar as is necessary to provide a functioning website, content and services. The processing of the personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases, in which a prior request for consent is not possible for actual reasons and only then if the processing of the data is permitted by legal regulations.

 

2. Legal Basis for the Processing of Personal Data

 

If we obtain the consent to process the personal data of the persons concerned it is on the legal basis of Art. 6 para. 1 lit. of the EU General Data Protection Regulation (GDPR).

 

The processing of personal data necessary for the undertakings of a contract of the persons concerned is done on the legal basis of Art. 6 para. 1 lit. b of the GDPR. This also applies to processing operation that are necessary to carry out pre-contractual measures.

 

If processing the personal data of persons concerned is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c  of the GDPR serves as the legal basis.

 

In the event that the vital interests of the data subject or any other natural persons require the processing of personal data, Art. 6 para. 1 d of the GDPR serves as the legal basis.

 

If data processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f of the GDPR serves as the legal basis.

 

3. Deletion and Storage Duration of Data

 

The personal data of persons concerned will be deleted or blocked as soon as the purpose for which it was stored is accomplished. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. Data will also be suspended or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data, such as for the conclusion or fulfilment of a contract.

 

III. Website Provisions and Log File Creation

 

1. Description and Scope of Data Processing

 

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

​

  1. Information about the browser type and version used

  2. Operating system of the user

  3. Internet service provider of the user

  4. IP address of the user

  5. Date and time of access

  6. Websites from which the system of the user reaches our website

  7. Websites accessed by the user’s system through our website

 

The data may also be stored in the log files of our system. This data is not stored together with other personal data of the user.

 

2. Legal Basis for Data Processing

 

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f of the GDPR.

 

3. Purpose of Data Processing

 

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

 

The storage of log files is done to ensure the functionality of the website. In addition, this data is used to optimize the website and to safeguard the security of our information technology systems. This data is not evaluated for marketing purposes.

 

Our legitimate interest in the processing of data, for these purposes, are legally according to Art. 6 para. 1 lit. f of the GDPR.

 

4. Storage Duration

 

The processed data will be deleted as soon as it is no longer necessary for the purpose it was collected for. In the case of data collection for the functionality of the website, the data will be deleted after the browsing session had ended. The saved data from log files are stored for no more than seven days. However further storage is possible. In this case, the user’s IP address is deleted or alienated, thus ensuring that backtracking the used client is no longer possible.

 

5. Possibility of Objection and Removal

 

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.

 

IV. Use of Cookies

 

1. Description and Scope of Data Processing

 

Our website uses cookies. Cookies are text files that are stored in the internet browser on the user’s computer system. Therefore when a user visits a website, a cookie may be stored on the user’s operating system. The cookie contains a character string that allows the browser to be uniquely identified when the website is reopened.

 

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. We also use cookies on our website which enable an analysis of the user’s browsing behavior. In doing so the following data can be transmitted:

 

  1. Identification

  2. Frequency of page views

  3. Use of website functions

 

The data of all users collected in this way are pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data will not be stored together with other personal data of the users.

 

When visiting our website, an information banner informs users about our use of cookies for analytical purposes and refers them to this data protection statement while obtaining user consent to the processing of personal data used in this context. There is also a note on how the storage of cookies can be prevented in the browser settings.

 

2. Legal Basis for Data Processing

​

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f of the GDPR.

The legal basis for the processing of personal data using coolies for analytical purposes is Art. 6 para. 1 lit. a of the GDPR.

3. Purpose of Data Processing

 

The purpose of using technically necessary cookies is to simplify the use of our website for the user. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications:

​

  1. Web forms

  2. Acceptance of language settings

​

The user data collected by technically necessary cookie are not used to create user profiles.

 

The analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimize it for the user. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f of the GDPR.

 

4. Storage Duration, Possibility of Objection and Removal

 

Cookies are stored on the user’s computer and are then transmitted to our site. Therefore, the user also has full control over the use of cookies. The user can deactivate or restrict the transmission of cookies by changing the settings in one’s internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, it may no longer be possible to use all functions on our website.

 

V. Contact Form and E-Mail Contact

 

1. Description and Scope of Data Processing

 

There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in this form will be sent to us and stored. The data stored is as follows:

 

  1. Name

  2. Company name

  3. E-mail address

  4. Information regarding interest for a specific product group as indicated by user

  5. Any other message entered by the user

​

When a message is sent the following data is also stored:

​

  1. Date and time of submission

​

The user’s consent is obtained for the processing of data before form submission and is referred to our privacy policy.

Alternatively, the user may also choose to contact us via the provided e-mail address.

However, in this case the user’s personal data sent by e-mail will be stored. The stored data is not disclosed to third parties and is used exclusively to process the conversation.

 

2. Legal Basis for Data Processing

​

The legal basis for the data processing once user consent is achieved is Art. 6 para. 1  lit. a of the GDPR.

The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f of the GDPR. If the e-mail contact aims to conclude a contract, then the additional legal basis for this processing is Art. 6 para. 1 lit. b of the GDPR.

​

3. Purpose of Data Processing

 

The processing of the personal data from the input mask only serves the purpose of establishing contact. Contact by e-mail also constitutes the necessary legitimate interest in order to process the data received. Any other personal data processed during the sending process only serves to prevent the misuse of the contact form and to ensure the security of our information technology systems.

 

4. Storage Duration

 

The data stored in the aforementioned paragraphs will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In regards to the personal data collected from the contact form and e-mail, the corresponding data will be deleted when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

 

The additional personal data collected during the sending process will be deleted after a period of no more than seven days.

 

5. Possibility of Objection and Removal

 

The user has the possibility to revoke his/her consent to the processing of personal data at any time. To object to the storage of personal data send an e-mail to datenschutz@zsm-group.com. In case a user withdraws his/her consent, the conversation cannot be continued. Therefore, all personal data stored previously during the course of contact will be deleted.

 

VI. Your Rights

 

If any of your personal data is stored or processed by us, your rights under the GDPR are as follows:

 

1. Right to information

 

You may ask the person in charge to confirm whether personal data concerning you is processed by us.

 

If such data processing has taken place, you can request the following information from the person responsible:

​

  1. Purpose for which the personal data are processed

  2. Categories of personal data being processed

  3. Recipients or the categories of recipients to whom the personal data concerning you has been or will be disclosed

  4. Planned storage duration of personal data concerning you. When specific information is not possible, criteria for determining the storage period

  5. Existence of a right to rectification or deletion of personal data concerning you, a right to the restriction of processing or the right to object to such processing

  6. Existence of a right of appeal to a supervisory authority

  7. All information available on the source of the data if the personal data is not collected from the data subject

​

You have the right to request information as to whether the personal data concerning you has been transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 of the GDPR in connection with the transfer.

 

2. Right to Rectification

 

You have a right of rectification and/or completion vis-á-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

 

3. Right to the Restriction of Data Processing

 

You may request the restriction of the processing of your personal data under the following conditions:

 

  1. If you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to verify the accuracy of the persona data in question

  2. The processing is unlawful and you refuse to delete the personal data and instead demand the restriction of the use of personal data

  3. The person responsible for the personal data no longer needs the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or

  4. If you objected to the processing according to Art. 21 para. 1 of the GDPR and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.

​

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored – with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the union or a member state.

​

If the processing restriction has been limited according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

​

4. Right to Deletion

​

    A. Deletion obligation

 

You may request the person responsible for the processing to delete the personal data relating to you without delay. The person responsible is therefore obligated to delete this data without postponement, if one of the following reasons applies:

 

  1. Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed

  2. You revoke your consent according to Art. 6 para. 1 lit a or Art 9 para. 2 lit. of the GDPR and there is no other legal basis for processing your personal data

  3. You file an objection against the processing pursuant to Art. 21 para. 1 of the GDPR and there are no overriding legitimate reasons for data processing, or you file an objection against data processing according to Art. 21 para. 2 of the GDPR

  4. Your personal data has been processed unlawfully

  5. The deletion of personal data concerning you is necessary to fulfil a legal obligation under union law or the law of the member states wot which the person responsible is subject.

  6. The personal data concerning you have been collected in relation to information society services offered according to Art. 8 para. 2 of the GDPR

 

   B. Information of Third Parties

​

If the person responsible has made your personal data public and is obliged to delete it according to Art. 17 para. 1 of the GDPR, he/she shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors in charge of processing personal data, that you have requested the deletion of all links to your personal data or of replications of this personal data.

​

   C. Exceptions

​

The right to deletion does not exist as far as the data processing is necessary

​

  1. To exercise the right to freedom of expression and information

  2. To fulfill a legal obligation required by union law or of the member states to which the person responsible is subject, or to carry out a task of public interest or in the exercise of public authority delegated to the person responsible

  3. For reasons of public interest in the field of public health in accordance to Art. 9 para. 2 lit. h, Art. 9 para. 2 lit. i, and Art. 9 para. 3 of the GDPR

  4. For archival purposes of public interest, scientific or historical research or for statistical purposes according to Art. 89 para. 1 of the GDPR, as long as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing or

  5. To assert, exercise or defend legal claims

​

5. Right to Information

​

If you have the right of rectification, deletion, or restriction of data processing of your personal data, the person responsible is obliged to notify all recipients to whom your personal data have been disclosed of this correction, deletion or restriction unless this proves to be impossible or involves a disproportionate effort.

​

The person responsible shall have the right to be informed of such recipients.

​

6. Right to Data Transferability

​

You have the right to receive your personal data that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another without obstruction by the previous person responsible, from whom the personal data was provided, if

​

  1. Based on the processing of consent according to Art. 6 para. 1 lit. of the GDPR or contract according to Art. 6 para. 1 lit. b of the GDPR and

  2. Processing is carried out using automated methods

  3. ​

In exercising this right, you also have the right to request that your personal data be transferred from one person to another, as long as it is technically feasible. However the freedom and rights of other persons must not be affected.

​

The right to data transferability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the person responsible.

​

7. Right of Objection

​

Under Art. 6 para. 1 e or f of the GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data; this also applies to profiling based on these provisions.

​

The person who was responsible for your personal data will no longer process this data unless compelling legitimate grounds for processing are demonstrated which outweigh your interests, rights and freedom or the processing is for the purpose of enforcing, exercising or defending legal claims.

​

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of said data; this also applies to profiling as long as it is associated with direct marketing.

​

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility to exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications, regardless of guideline 2002/58/EC.

​

8. Right to Revoke the Declaration of Consent of Data Protection

​

You have the right to revoke your consent declaration regarding data protection at any time. The withdrawal of consent does not affect the legality of the processing carried out until consent is revoked.

​

9. Automated Decision in Individual Cases Including Profiling

​

You have the right not to be subject to a decision based exclusively on automated processing- including profiling- that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision:

​

  1. Is necessary for the conclusion or performance of a contract between you and the person responsible,

  2. Is admissible by law of the union or of the member states to which the person responsible is subject and that law contains appropriate measures to safeguard your rights, freedom and legitimate interests, or

  3. Is with your express consent

​

However, these decisions must not be based on special categories of personal data under Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 lit. a or g of the GDPR applies and reasonable measures have been taken to protect your rights and freedom as well as your legitimate interests.

With regard to the cases referred to in 1) and 3) above, the person responsible shall take appropriate measures to uphold your rights, freedom and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and the challenge the decision.

​

10. Right of Appeal to a Supervisory Authority

​

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, particularly in the member state where you reside, work or suspect infringement, if you believe that the processing of your personal data is contrary to the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results, including the possibility of a judicial remedy under Art. 78 of the GDPR.

​

bottom of page