Privacy Policy UVEX ARBEITSSCHUTZ GmbH

Welcome to our website and thank you for your interest in our company. We – that’s UVEX WINTER HOLDING GmbH & Co. KG and its subsidiaries (hereinafter referred to collectively as the ‘uvex group’) – take the protection of your personal data seriously. We process your data in accordance with the applicable laws regarding the protection of personal data, especially the EU Data Protection Regulation (EU GDPR) and the country-specific implementation laws relevant to us. This privacy policy provides you with comprehensive information on the processing of your personal data by the uvex group and your rights.

Personal data means information that can be used to identify a natural person. This especially includes your name, date of birth, address, telephone number, email address and IP address.

Anonymous data are data that do not allow any relationships to the user’s identity to be established.

UVEX WINTER HOLDING GmbH & Co. KG
Würzburger Straße 181
90766 Fürth
Germany
Phone: + 49(0)911-9736-0
Email: datenschutz@uvex.de
Website: www.uvex.de

The contact data of the data protection officer for all companies in the uvex group with headquarters in Germany are as follows:

UVEX WINTER HOLDING GmbH & Co. KG
Würzburger Straße 181
90766 Fürth
Germany
Phone: + 49(0)911-9736-0
Email: datenschutz@uvex.de
Website: www.uvex.de

We would first like to inform you of your rights as the data subject. These rights are standardised in Articles 15–22 of the EU GDPR. They cover the following:

• right to access (Article 15 of the EU GDPR)
• right to erasure (Article 17 of the EU GDPR) 
• right to rectification (Article 16 of the EU GDPR)
• right to data portability (Article 20 of the EU GDPR)
• right to restriction of data processing (Article 18 of the EU GDPR)
• right to object to data processing (Article 21 of the EU GDPR).

To assert these rights, please contact datenschutz@uvex.de.

The same applies if you have any questions about data processing in our company or if you want to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Please note the following in connection with rights of objection:

If we process your personal data for the purpose of direct marketing, you have the right to object to such data processing at any time, without giving reasons. This also applies to profiling insofar as it relates to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Lodging an objection is free of charge and can be made without any requirement as to form, addressed to: datenschutz@uvex.de.

In the event that we process your data to safeguard legitimate interests, you may object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions.

We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with.

The legal basis for data processing arises in particular from Art. 6 EU GDPR.

We use your data to establish business relationships, to fulfil contractual and legal obligations, to carry out contracts, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct marketing.

Your consent to data processing may also constitute a permission requirement under the terms of data protection law. Before you give your consent, we will inform you of the purpose of data processing and your right of withdrawal.

If consent also relates to the processing of special categories of personal data, we will expressly draw your attention to this in the consent. Special categories of personal data as defined in Art. 9 EU GDPR are only processed if this is required by law and there is no reason to assume that your legitimate interest in exclusion of the processing is overriding.

In certain cases, we also base the processing of your data on a legitimate interest in accordance with Art. 6 (1) (f) EU GDPR. In these circumstances, data is only processed if this serves to safeguard our own legitimate interests or the legitimate interests of third parties, and a weighing up of interests has not shown that your interests, fundamental rights and freedoms are overriding.

We will only pass on your data to third parties within the scope of statutory provisions or with the appropriate consent. Otherwise, data will not be passed on to third parties unless we are obliged to do so by mandatory legal provisions (e.g. passing on data to external parties such as supervisory authorities or law enforcement agencies).

Within our company we ensure that only those persons receive your data who need it to fulfil contractual and legal obligations. This concerns the following companies within the UVEX Group:

• UVEX WINTER HOLDING GmbH & Co. KG
• UVEX SPORTS GmbH & Co. KG
• UVEX ARBEITSSCHUTZ GmbH
• FILTRAL GmbH & Co. Vertriebs KG
• HIPLOCK GmbH
• ALPINA SPORTS GmbH

The transfer of data may be necessary, for example, if you apply for a job advertised by an affiliated company via our central recruitment portal. Data is passed on to UVEX WINTER HOLDING GmbH & Co. KG for the purpose of analysing our internal processes and providing technical support. In addition, marketing analysis data is passed on to the above-mentioned companies. It is possible that personal data will also be sent in the process.

In certain cases, other service providers support our departments in carrying out their work. The necessary data protection agreements have been concluded with all service providers.

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for performance of the contractual obligations or is required by law, or if you have given us your consent.

We transfer your personal data to service providers and group companies outside the European Economic Area, including to the US. You can find a list of the tools / service providers together with the processing location under point 16 "Tools used".

The contracts required in accordance with data protection laws have been concluded with all service providers.

We store your data as long as it is needed for the specific processing purpose. Please note that many retention time limits require that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code (Handelsgesetzbuch), German Fiscal Code (Abgabenordnung), etc.).

Provided that there are no further retention obligations, data is routinely deleted after the purpose has been achieved.

In addition, we may retain data if you have given us permission to do so, or if there is a legal dispute and we use evidence under statutory limitation periods, which can be up to thirty years; the normal limitation period is three years.

We take the appropriate technical and organisational security measures for optimally protecting the data saved by us from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed and adapted to new security standards in collaboration with security experts.

Data exchange from and to our website is performed using encryption. For our website we offer the HTTPS transfer protocol using the respectively latest encryption protocols.

Alternative communication channels (e.g. post) may also be used. 

Various items of personal data are necessary for establishing, implementing and terminating the contractual obligation and for fulfilling the associated contractual and legal requirements. The same applies to use of our website and the various functions it provides.

In some cases, data must also be collected or made available due to legal requirements. Please note that it is not possible to process your enquiry or carry out the underlying contractual obligation if this data is not provided.

The data that we process is determined by the particular context: this depends on whether, for example, you place an order online or enter an enquiry on our contact form, or whether you send us a job application or lodge a complaint.

Please note that we may also provide information separately in a suitable location for special processing situations, e.g. when job application documents are uploaded or when a contact enquiry is made.

• Name of the internet service provider
• Information on the web page from which you visited us ("referrer")
• Web browser and operating system used
• The IP address assigned by your internet service provider
• Requested files, volume of data transmitted, downloads/file export
• Information about the web pages that you access on our site, including date and time

This data processing is technically necessary so that the contents of our website can be delivered to your device. Accordingly, it is also necessary for your IP address to be collected and stored for the duration of the session. The same applies to other data, the processing of which is necessary for correct display of our website. The storage of data in log files also serves to further optimise the website, to ensure its functionality, to guarantee the security of our applications and for legal protection (e.g. detection of and defence against attacks on our website).

The legal basis for such data processing and temporary data storage is our legitimate interest as a website operator (Art. 6 (1) (f) EU GDPR).

The storage period for data is limited and the data is deleted as soon as it is no longer needed for processing purposes. In the case of data collection for correct display of our website, this occurs after the session has ended. When data is stored in log files, it is deleted or anonymised after 31 days.

On our website there is a contact form that can be used for electronic contact purposes. If you write us via the contact form, we will process the data given by you in the contact form in order to contact you and respond to your questions and requests.

Via the contact form we collect the following data:

• Nature of the enquiry
• Last name, first name 
• Company and possibly number of employees
• Title
• Email address
• Telephone number
• Content of the enquiry

In doing so, the principle of data economy and data reduction is observed: you only have to provide the data that we definitely need from you for the purpose of contacting you (mandatory information). This is your name, your email address and your request itself. This mandatory information is marked with an asterisk (*).

In addition, your IP address is processed due to technical requirements and for legal protection. All other data is voluntary and may be provided optionally (e.g. to answer your questions more specifically).

We implement appropriate security measures to protect the security and confidentiality of your data in the best possible way. Your request will be transferred to us in encrypted form.

If you contact us by email, we will process the personal data provided in the email solely for the purpose of processing your enquiry. If you do not use the forms offered for contacting us, no further data will be collected.

Our website provides users with the option of registering by entering personal data.

We thereby collect the following data:

• Title
• Last name, first name
• Date of birth
• Shipping address
• Billing address
• Customer number 
• VAT ID
• Number of industrial employees
• Contact partner details
• Email address

The registration is thus necessary or possible either for fulfilment of a contract (via our online shop) with you or for carrying out pre-contractual measures if guest access is also provided.

The principle of data minimisation and data avoidance is followed here because only the data needed for the registration are marked as required fields with an asterisk (*). These are, e.g., the email address and the password including password repetition.

For ordering in our online shop, we additionally require details of the billing address (title, first name, last name and address) for delivery. If the shipping address differs from the billing address, the above details must also be given for the shipping address.

Through registration on our website, the IP address of the user, the date and the time of registration (technical background data) are additionally stored. By clicking the button ‘Register now’, you give consent to the processing of your data.

Please note: The password assigned by you is stored by us in encrypted form. Employees of our company cannot read this password. For that reason they cannot give you any information if you have forgotten your password.

In this case use the function ‘Forgot password’, with which an automatically generated new password is sent to you by email. No employee is authorized to request your password by phone or in writing. Please therefore never state your password if you receive such requests.

With the completion of the registration process, your data are stored with us for use of the protected customer area. As soon as you log in to our website with email address as username and password, these data are made available for actions carried out by you on our website (e.g. for orders in our online shop). Orders made can be traced in the order history. You can specify changes to the billing or shipping address here.

Registered persons are free to carry out changes/corrections to the billing or shipping address in the order history themselves. Our customer service will also be happy to make changes/corrections if you contact them. You can also of course have the registration or your customer account terminated or deleted. Please contact our customer service for this.

You can subscribe to a free newsletter on our website.

Within the scope of the newsletter registration, the following data are collected:

• Last name, first name 
• ‘Registration as private person, business customer, dealer’ selection 
• Email address
• IP address assigned by your internet service provider
• Analysis data of the embedded tracking pixel (time of opening of the newsletter, accessed links).

The email address given in the newsletter registration and your name are used for sending of the personalised newsletter.

The principle of data minimisation and data avoidance is followed here because only the email address is marked as a required field. Your IP address will also be processed for technical reasons and for legal protection purposes when you order the newsletter.

For sending newsletters by email, we use the so-called double opt-in process. This means that you only receive advertising via email if you have expressly confirmed beforehand that we should activate the newsletter service. We do this by sending you a notification email and asking you to confirm that you would like to receive our newsletter at this email address by clicking on a link contained in this email.

You can of course end the subscription and thus withdraw your consent at any time via the unsubscribe option provided in the newsletter. Moreover, you can also directly unsubscribe from the newsletter dispatch at any time via our website.

A so-called tracking pixel is also embedded in our newsletter. This is a small graphic that is integrated directly into the newsletter. With the help of the tracking pixel, we can statistically record the reach and the success of a newsletter. For this evaluation to be carried out, the following data are collected through the tracking pixel:

• time of opening of the newsletter
• links accessed in the newsletter.

The purpose of using the tracking pixel is to optimise the newsletter dispatch and adapt the content of the newsletter as well as possible to the interests of the users.

If you agree to receive the newsletter, your consent also applies to the use of the tracking pixel. If you end the newsletter dispatch via the unsubscribe link or our website, your data collected by the tracking pixel are also deleted.

On our website we offer registered users the possibility of leaving comments on our blog entries as well as responding to already existing comments. The following data are thereby collected:

• user’s comment
• time of comment
• selected username or name
• email address 
• IP address assigned by your internet service provider.

In this connection we would like to point out that comments in our blog are displayed in each case with the username (alias) selected by the user as well as the time of the entry.

The storage of the IP address thereby serves the purpose of legal protection of the uvex group in the event that a comment infringes upon the rights of third parties or illegal content is posted.

We will not pass on personal data collected within the framework of the blog to third parties unless this is necessary due to legal requirements or for asserting or defending legal claims by the uvex group.

We provide the uvex size advisor app, which measures your feet and recommends suitable shoes, via the Apple App Store and the Google Play Store. The app suggests shoes in an appropriate model, size and width using anonymised measurement data only. The app includes the product portfolio that was available at the time of installation. This can be updated by updating the app.

We collect and process the following data from users of our app:

• Location

• Foot measurements (foot length and width, navicular bulge, arch height as well as dorsum of the foot)

• Date and time of the foot size measurement

• Photos of users' feet

• Device operating system

• Used version of the app

We need to collect this data to ensure the basic function of the app. This data is not linked with other data or with the products you have viewed. An individual ID is generated for each measurement – it is not possible for us to link this with an app user. Anonymized measurement data is retained for evaluation and further development of the app.

When the app is downloaded, the information required to do this is sent to the app store operator. We have no influence over and assume no responsibility for the collection of this data. We process the data that the app store operator makes available to us as part of our contractual relationship for the purposes of further developing our apps and services.

We will only pass on your measurement data to third parties within the framework of the legal provisions, for the performance of the contract (Art. 6 Abs.1 lit. b EU-DSGVO) or with the corresponding consent. Otherwise, data will not be disclosed to third parties unless we are obliged to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies). 

To ensure that the app works on your device, the app must be authorised to access various device functions. We have outlined the primary functions of this authorisation – the actual terms used to describe the authorisation may vary depending on the operating system:

• Location:
  We require your location in order to load the country-specific catalogue and adapt the selection of measurement methods.
   

• Camera:
  We require access to your camera so that we can measure your foot size.
   

• Network connection / mobile data:
  Your foot and shoe sizes are calculated on the central uvex servers. An Internet connection is therefore required to enable this function. The calculation of the specific foot or shoe size takes place on the servers of OneFID GmbH (Matthias-Brüggen-Str. 4 | 50827 Köln | info@onefid.com). An internet connection is therefore required to enable this function.

• Microphone:
  We need access to your microphone to allow you to trigger a photo by voice command.

For the storage of the data we use the services of OneFID GmbH. OneFID GmbH takes the appropriate technical and organisational security measures to protect the data in the best possible way against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed and adapted to new security standards in cooperation with security experts. The necessary contractual framework under data protection law has been concluded with OneFID.

You can register for the Glove Expert tool on our website. This web-based programme includes a chemicals database that provides information on the duration for which uvex gloves will offer protection against a wide range of chemical substances.

We collect the following data when you register in the app:

• Your email address
• Your first name and surname

The principle of data minimisation/data avoidance is observed here as only the data required for registration is marked as a mandatory field with an asterisk (*). This data includes your email address and name, for example.
The password you create is encrypted before being saved. Our company employees cannot see this password and therefore cannot help you if you have forgotten it.
When you register on the Tool web page, your IP address and the date and time of registration are also saved (technical background data). By clicking the ‘Register now’ button, you consent to the processing of your data.

On our website, you can book appointments with us via the online appointment scheduling tool eTermin, which is provided by eTermin GmbH, Mättivor 3, 6430 Schwyz, Switzerland. We have concluded a commissioned data processing contract with eTermin GmbH.

We transmit your personal data, to the extent required to fulfil the contract, to Switzerland. Compliance with the appropriate level of data protection is guaranteed by an adequacy decision of the EU Commission.

Personal data is collected and processed on behalf of eTermin GmbH only to the extent necessary for this online appointment booking process. Only the fields marked with an asterisk are mandatory; the information within these fields is required to use the service and to initiate the conclusion of a contract. The legal basis for the processing of the data is Art. 6 paragraph 1 page 1 point b GDPR. The provision of further data may be useful but is not compulsory. Information provided voluntarily is processed in accordance with Art. 6 paragraph 1 page 1 point a GDPR on the basis of the consent you have given.

We process and save your personal data for as long as this is necessary for the fulfilment of our contractual and legal obligations. If personal data no longer needs to be saved to fulfil these obligations, it will be deleted unless there is a legal obligation to retain it.

If you have given us consent to process and save your data, you may withdraw it at any time with future effect by emailing datenschutz@uvex.de.

For more information on how eTermin handles your data, please see https://www.etermin.net/datenschutz

In our online shop you can pay by invoice, credit card, PayPal or direct debit (SEPA direct debit process). For this the respective payment-relevant data are collected so that your order and payment processing can be carried out. Moreover, your IP address is processed for technical reasons and for legal protection purposes.

The principle of data minimisation and data avoidance is followed in that you only have to provide the data that we absolutely need for carrying out the payment processing and thus winding up the contract or that we are legally obligated to collect.

Without these data we unfortunately will have to reject the conclusion of the contract with you because we will then not be able to execute it.

The payment system deployed by us uses SSL encryption for the protected transmission of your data.

Note on invoice payment: If you select the payment method ‘Invoice’ in our online shop, we perform a credit check. For this the creditworthiness-relevant data will be obtained from the Schutzgemeinschaft für allgemeine Kreditsicherung, credit bureaus or credit insurance companies for determination of creditworthiness or default risks.

Note on credit card payment: As is usual with credit card payments, the credit card information will be checked.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à.r.l. et Cie, S.C.A.
22–24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects ‘PayPal’ as the payment option during the ordering process in our online shop, data of the data subject will automatically be transferred to PayPal.

With the selection of this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transferred to PayPal usually involve the first name, last name, address, email address, IP address, telephone number, mobile number or other data needed for payment processing.

Such personal data that are connected with the respective order are also necessary for the winding up of the purchase contract. Details on data protection at PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE (for the legal situation as of 25.05.2018).

Note on direct debit process: As is usual with direct debits, your account data will be collected so that the corresponding amount can be debited from your account.

We do not use purely automated processing processes to bring about a decision.

Our website uses technologies at several points to evaluate your usage behaviour and to optimise the website. Cookies, third-party providers and local storage are used for this purpose. Cookies are small text files which are placed on your computer and saved by your browser (locally on your hard drive).

We only use these technologies with your consent (Art. 6 (1) (a) EU GDPR). This enables us to analyse how visitors use our websites. For example, we can then design the website content based on visitors' needs. In addition, cookies allow us to measure the effectiveness of a particular ad and to place it accordingly, for example depending on the topics that a user is interested in.

If you have given your consent to this, you can revoke it at any time for the future by accessing the Consent banner again HERE and changing the relevant setting.

We use Google Tag Manager to manage the various cookies and tools integrated into this website.

On our website, we use the tools and services described in section 14.1. The legal basis for use is your consent, which you provide using the consent banner that is displayed when you first visit our website. Details on the tools and services used can be found in the following sections.

You can, of course, revoke your consent at any time by either deleting the stored opt-in cookie manually in your Internet browser or using appropriate software and then reloading our website, or by clicking on the button "Change data protection settings".

We use the tools and services described below on our website. The legal basis for the use is your consent, which you declare via the consent banner displayed when you first visit our website. You can find details on the tools and services used in the following paragraphs.
You can of course withdraw your granted consent at any time by deleting the stored opt-in cookie in your web browser either manually or via appropriate software and then reloading our web page or clicking on one of the following opt-out links given with the descriptions of the individual tools.

This website uses the ‘Facebook pixel’ from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data processing rests on the legal basis of your consent in accordance with Article 6(1)(a) of the GDPR.
With the help of the Facebook pixel, Facebook can, on the one hand, determine the visitors to our on-line offering as a target group for the display of ads (‘Facebook ads’). We accordingly use the Facebook pixel to display the Facebook ads placed through us only to those Facebook or Instagram users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interest in certain topics or products determined by means of the websites visited), whom we transfer to Facebook (‘Custom Audiences’).
The Facebook pixel is directly integrated by Facebook when our web pages are called up and can store a so-called cookie on your device. If you are already logged in to Facebook when you call up our website or log in afterwards, the visit to our online offering is noted in your profile. This information can be assigned to your person with the help of other information that Facebook has saved about you, e.g. due to the owning of an account on the social network ‘Facebook’.
With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were forwarded to our website after clicking on a Facebook ad (‘Conversion’).
The information collected via the pixel or cookie can additionally be aggregated by Facebook and the aggregated information can be used by Facebook for its own advertising purposes as well as for the advertising purposes of third parties. Thus, Facebook can, e.g., conclude that you have certain interests based on your surfing behaviour on this website and also use this information to advertise offerings from third parties. Facebook can also combine the information collected via the pixel or cookie with further information that Facebook has collected about you through other websites and/or in connection with the use of the social network ‘Facebook’ so that a profile about you can be saved at Facebook Ireland Limited. This profile may be used for advertising purposes.
Moreover, with the help of the Facebook pixel, your behaviour across multiple pages can be tracked after you have viewed or clicked on a Facebook ad. This procedure is used for evaluating the effectiveness of Facebook ads for statistical and market research purposes and can contribute to the optimisation of future advertising measures.
Furthermore, when we use the Facebook pixel, we use the additional function ‘extended comparison’ in which data are transferred in encrypted form to Facebook for formation of target groups (‘Custom Audiences’ or ‘Lookalike Audiences’).

The processing of the data by Facebook takes place within the framework of the Facebook Data Policy: https://www.facebook.com/policy. You can find specific information about the Facebook pixel and the way it works here: https://www.facebook.com/business/help/651294705016616.
We would like to point out that your personal data may be transmitted to the US. The contract required in accordance with data protection laws has been concluded with the provider.

This website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Google Analytics uses cookies, which enable analysis of your use of the website. The information on the use of this website generated by the cookie is usually transmitted to and saved on a Google server in the US.

However, through the activation of IP anonymisation on this website, your IP address is first truncated by Google within Member States of the European Union or in other Contracting Parties to the Agreement on the European Economic Area. The complete IP address is only transmitted to and truncated on a Google server in the US in exceptional cases.

Google uses this information on behalf of the operator of this website to evaluate the use of the website, to compile reports about the website activities and to provide additional services related to use of the website and the internet to the website operator. The IP address transferred by your browser within the scope of Google Analytics is not merged with other data held by Google.

The contract required in accordance with data protection laws has been concluded with the provider.

The legal basis for the use of Google Analytics is your informed consent in accordance with Article 6(1)(a) of the EU GDPR.

The personal data of the users are deleted or anonymised after 38 months.

You can find further information on terms of use and data protection at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.

You can prevent the storage of cookies by making the appropriate setting in the browser software; however, we would like to point out that in this case it may not be possible to use all features of this website to their full extents.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) for Google as well as the processing of these data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively to the browser add-on or in browsers on mobile devices, please click on the following link to prevent the collection by Google Analytics in this website in the future:

An opt-out cookie is placed on your device for this. If you delete your cookies, you must click this link again.

We would like to point out that on this website, Google Analytics has been extended through the code ‘gat._anonymizeIp()’ to guarantee anonymised collection of IP addresses (so-called IP masking).

We use the advertising service Google Ads (formerly Google AdWords) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Via the Display Network, Shopping and Search types that are active with us, your interactions with advertisements placed on Google are measured. For this purpose when you click on one of our web ads placed by Google, a cookie is saved in your browser. Your further activity on the product advertised in the ad is tracked (conversion tracking) through this. With the help of this data, we can measure the effectiveness of our advertising campaigns.

The following data are thereby collected from you: a unique ID, the number/frequency of ads delivered to you (ad impressions) and the actions/clicks carried out by you.

Moreover, we use the Remarketing function within the Google Ads service. With the Remarketing function we can present ads to users of our website based on their interests on other websites within the Google advertising network (in the Google search or on YouTube, so-called Google Ads or on other websites). For this purpose the user interactions on our website, e.g. which offers the user was interested in, is analysed so that users can be shown targeted advertising on other pages even after the visit to our website. For this Google saves a number in the browsers of users who visit certain Google services or websites in the Google Display Network. The visits of these users are recorded via this number, known as a ‘cookie’. This number serves towards the unique identification of a web browser on a specific device and not the identification of a person.

The Google Tag Manager serves towards the administration and control of diverse tags. A cookie is placed in your browser for this. The Tag Manager only administers other tags and does not collect any data itself.

Use of the Google tools takes place on the basis of your consent in accordance with Article 6(1)(a) of the EU GDPR. You can withdraw your consent at any time by clicking on the link https://adssettings.google.com. The withdrawal applies only to the device and the web browser on which it was set. Please repeat the process on all devices if necessary. If you delete the opt-out cookie, you will be prompted again for your consent for the data transfer.

In addition, you can configure your browser accordingly to block third-party ads. You can also permanently block Google Tracking by downloading and installing a corresponding plugin for common web browsers, which can be found here: https://support.google.com/ads/answer/7395996.

Your data are transferred to Google for the evaluation. If you have an account with Google, Google can also merge the data obtained from tracking.

The information on the use of this website generated by the cookie is usually transmitted to and saved on a Google server in the US. The contract required in accordance with data protection laws has been concluded with the provider.

The data obtained via this process are deleted as soon as they are no longer needed for our purposes. In our case this is after 12 months.

Further information on Google and Google’s privacy policy can be found at www.google.com/privacy/ads/

The online service Google AdSense from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’) is used on our website.

Via this service conveyance of advertising content to third-party sites is made possible in that ads displayed on third-party sites are served according to the content of the respective third-party sites. Moreover, interest-based targeting of the website user is enabled through this by means of generation of individual user profiles.

Through the use of Google AdSense, it is hence possible for us to display precisely fitting ads on our website.

Cookies are used for running Google AdSense. They are stored on the user’s device and enable Google to analyse the use of our website by the site visitors. With each visit to our website or its sub-pages on which Google AdSense is integrated, the web browser of the user is caused to transfer personal data, e.g. the IP address, to Google. Through this Google is, amongst other things, put in a position to determine the origin of the visitors and prepare commission statements based on this.

Google AdSense also uses so-called tracking pixels, i.e. miniature graphics integrated into the website, in order to carry out analyses on the log files through this for the purposes of statistical evaluations. Based on these evaluations, Google can, e.g., determine whether, when and how long a website was opened by a user or which links the user clicked on. With this the visitor flow on our website can also be traced.

If the Google AdSense cookie is stored on your device, personal data about you, e.g. your IP address and other data needed for recording of and billing for the displayed advertising content, are transmitted to Google servers, which are mainly located in the US. Moreover, these data may also be transferred by Google to third parties. The contract required in accordance with data protection laws has been concluded with the provider. If you have an account with Google, Google can also merge the data obtained from tracking.

You can find further information on data processing by Google via the following link: https://www.google.com/adsense/start/. You can view Google’s Privacy Policy at www.google.com/privacy/ads/.

Use of the Google tools takes place on the basis of your consent in accordance with Article 6(1)(a) of the EU GDPR. You can withdraw your consent at any time by clicking on the link https://adssettings.google.com. The withdrawal applies only to the device and the web browser on which it was set. Please repeat the process on all devices if necessary. If you delete the opt-out cookie, you will be prompted again for your consent for the data transfer.

In addition, you can configure your browser accordingly to block third-party ads. You can also permanently block Google Tracking by downloading and installing a corresponding plugin for common web browsers, which can be found here: https://support.google.com/ads/answer/7395996.

Various plugins from social networks are integrated on this website. Examples of this are the ‘Like’ button from Facebook or the ‘Share’ buttons from various networks.

If you use one of the embedded social media components, a direct connection to the respective social network will be established through it. The plugin content is then transferred by the respective social network directly to your browser, which integrates it into the website.

The integration of these plugins takes place on our website in each case using the so-called Shariff solution, which was developed by the computer magazine c’t. This means:

The usual social media components transmit user data each time a page is called up and in this way give the social networks precise information about your surfing behaviour (user tracking). For this you neither need to be logged in nor need to be a member of the network.

The social media components from Shariff establish the direct contact between the social network and the website visitor only when the latter actively clicks on the button. Further information regarding this can be found at www.heise.de.

By activating the respective button, you declare your consent to data collection and transfer to the respective social network. You can withdraw the consent at any time via the website of the respective social network.

Through the activation of the plugin, the respective social network receives the information that you have called up the corresponding page of our web presence. If you are logged in to the social network, it can assign the visit to your user account from this moment on, even if you do not confirm the button a second time. When you interact with the plugins, for example by pressing the ‘Like’ button another time or leaving a comment, the corresponding information is transferred from your browser directly to the respective social network and stored there.

Even if you do not have an account, the respective network can collect data about you, e.g. the IP address.

If you do not want a social network to collect data about you via our website, you must log out of the network before visiting our website. You can also install the corresponding blockers for your browser through add-ons.

We would like to point out that with the use of the social media components, data transmission to the US or other countries outside the EU usually takes place. The contract required in accordance with data protection laws has been concluded with each respective provider.

Our website uses components (here: ‘Twitter button’) from the social network Twitter, which is operated by Twitter International Company, The Academy, 42 Pearse Street, Dublin 2, Ireland (‘Twitter’). When you call up a page on our website that contains such a button, your browser can establish a direct connection to Twitter’s servers if the button is active. The content of the button is transferred by Twitter directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Twitter collects with the button, but assume that your IP address is also recorded. To find out about the purpose and extent of data collection and the further processing and use of the data by Twitter as well as your associated rights and setting options for protecting your private sphere, please see Twitter’s Privacy Policy, which you can access via the following link: https://twitter.com/en/privacy.

Our website uses components (here: ‘Insta button’) from the social network Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Facebook’s servers if the button is active. The content of the button is transferred by Facebook directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Facebook collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Facebook as well as your associated rights and setting options for protecting your private sphere, please see Facebook’s Privacy Policy, which you can access via the following link: https://help.instagram.com/519522125107875.

Our website uses components (here: ‘LinkedIn plugin’) from the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to LinkedIn’s servers if the button is active. The content of the button is transferred by LinkedIn directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that LinkedIn collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by LinkedIn as well as your associated rights and setting options for protecting your private sphere, please see LinkedIn’s Privacy Policy, which you can access via the following link: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

Via the link https://www.linkedin.com/psettings/guest-controls, you can unsubscribe to the use of your data for advertising purposes and other LinkedIn services.

Our website uses components (here: ‘Pinterest plugin’) from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (‘Pinterest’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Pinterest’s servers if the button is active. The content of the button is transferred by Pinterest directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Pinterest collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Pinterest as well as your associated rights and setting options for protecting your private sphere, please see Pinterest’s Privacy Policy, which you can access via the following link: https://policy.pinterest.com/en/privacy-policy.

Our website uses components (here: ‘Xing plugin’) from the social network Xing, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (‘Xing’).

When you call up a page on our website that contains such a button, your browser can establish a direct connection to Xing’s servers if the button is active. The content of the button is transferred by Xing directly to your browser, which integrates it into the website. In this case we have no influence over the extent of the data that Xing collects with the button, but assume that your IP address is also recorded.

To find out about the purpose and extent of data collection and the further processing and use of the data by Xing as well as your associated rights and setting options for protecting your private sphere, please see Xing’s Privacy Policy, which you can access via the following link:  https://privacy.xing.com/en/privacy-policy.

Our website uses components (here: ‘YouTube plugin’) from the video portal YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

When you call up a page on our website that contains such a plugin, your browser can establish a direct connection to Google’s servers if the plugin is active. The called-up video is transferred by Google directly to your browser, which integrates it into the website. Moreover, the YouTube server is informed of which of our pages you visited.

To find out about the purpose and extent of data collection and the further processing and use of the data by Google as well as your associated rights and setting options for protecting your private sphere, please see Google’s Privacy Policy, which you can access via the following link: https://policies.google.com/privacy?hl=en&gl=en.

Our website uses components (here: ‘Vimeo plugin’) from the video portal Vimeo, which is operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (‘Vimeo’).

When you call up a page on our website that contains such a plugin, your browser can establish a direct connection to Vimeo’s servers if the plugin is active. The called-up video is transferred by Vimeo directly to your browser, which integrates it into the website. Moreover, the Vimeo server is informed of which of our pages you visited.

To find out about the purpose and extent of data collection and the further processing and use of the data by Vimeo, please see Vimeo’s Privacy Policy at https://vimeo.com/privacy. You can make setting options for protecting your private sphere via the following link: https://vimeo.com/cookie_policy.

Our website includes images from Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.

The Getty Images content is thereby embedded in such a way that a so-called embed code (HTML code) is integrated into our web page. This embed code ensures that when the web page is loaded, the desired third-party content is simultaneously loaded from an external server and shown to the user on the visited web page. This third-party content is thus also immediately loaded when our web page is called up.

For the external server to deliver the requested content to the user, it must have the IP address of the respective user transferred to it so that the operator of the external server can record it and, if necessary, use it for its own purposes. In addition, Getty Images may collect other data, such as, e.g., the page from which the request came, the browser type used or the browser language.

We would like to point out that the uvex group has no influence over which data besides the IP address Getty Images collects and for which purposes it uses these data.

You can find detailed information on embedding of images via Getty Images on the website https://www.gettyimages.com/resources/embed?language=en-US; for information about the data collected by Getty Images and their use, please see the Getty Images Privacy Policy, which you can access via the following link: https://www.gettyimages.com/company/privacy-policy.

For the purpose of uniformly displaying fonts, our website uses so-called web fonts, i.e. fonts that are loaded by the browser from an external source when the page is called up and temporarily stored in the browser cache. This ensures that our website is displayed uniformly and legibly on all devices, regardless of the browser used.

The provider of the web fonts used here is Monotype GmbH, Werner-Reimers-Straße 2–4, 61352 Bad Homburg (Monotype), as operator of the site www.fonts.com.

In order to load and display the web fonts, the respective browser must establish a connection to the servers of fonts.com. Through this the provider receives the information that our website has been called up via the IP address of your browser.

The legal basis for use of the web fonts is Article 6(1)(f) of the EU GDPR (legitimate interest).

If your browser does not support the display of web fonts, your device’s standard fonts will be used instead; this may lead to a degradation of the display quality.

Monotype has published further information on data processing by fonts.com on its website:

www.fonts.com/info/legal and www.fonts.com/info/legal/privacy

We would like to point out that we have no influence over whether or how fonts.com uses your data for its own purposes.

Our website contains links to the social media services of Facebook, Twitter, YouTube, Pinterest and Instagram. You can recognise links to the websites of the social media services by the respective company logos. If you follow these links, you will reach the company presence of the uvex group on the respective social media services. When you click on a link to a social media service, a connection to the servers of the social media service is established. Through this the fact that you visited our website will be transferred to the servers of the social media service. In addition, further data are transmitted to the providers of the social media service. These are, for example:

• address of the web page on which the activated link is located
• date and time of calling up of the web page or activation of the link
• information about the browser and operating system used
• IP address.

If you are already logged in to the corresponding social media service at the time of activation of the link, the provider of the social media service can be in a position to determine your username and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can rule out this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the US and other countries outside the European Union. The data can hence also be processed in countries outside the European Union by the provider of the social media service. Please note that companies in these countries are subject to a data protection law that generally does not protect personal data to the same extent as is the case in the Member States of the European Union.

Please note that we have no influence over the extent, nature and purpose of data processing by the provider of the social media service. You can find further information on use of your data by social media services integrated on our website in the privacy policies of the respective social media services.

Our website also contains – clearly recognizable – links to websites of other companies. If links to websites of other providers exist, we have no influence over the content. Hence, we also cannot accept any responsibility or liability for this content. The respective site providers or operators are always responsible for the content of these sites.

At the time of linking, the linked sites were examined for possible violations and identifiable breaches. No illegal content was found at the time of linking. However, without concrete grounds for suspecting a violation of the law, it is not possible to monitor the content of the linked sites on a permanent basis. If we become aware of violations, we will immediately remove the associated links.

Persons under the age of 16 may not transfer any personal data to us or submit a declaration of consent without the consent of their legal guardians. We would like to ask parents and legal guardians to participate actively in the online activities and interests of their children.

Our website has links to the social media services of Meta, Facebook, YouTube, X, Xing, Pinterest, TikTok and Instagram. You can recognise links to the websites of social media services by the company logo. These links will take you to the uvex group's corporate presence on the particular social media service. When you click on a link to a social media service, a connection to the servers operated by the social media service is established. Information that you have visited our website is transferred in this way to the social media service's servers. Additional data is also transferred to the provider of the social media service. This includes for example:

• Address of the website on which the activated link is located
• Date and time the website was accessed or the link was activated
• Information about the browser and operating system used
• IP address

If you are logged in to the relevant social media service at the time of activating the link, the provider of the social media service may be able to determine your username and possibly even your real name from the sent data, and associate this information with your personal user account with the social media service. You can ensure that this information is not associated with your personal user account if you log out of your user account beforehand.

The servers operated by the social media services are located in the US and other countries outside the European Union. For this reason, the data may also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection legislation that generally does not protect personal data to the same extent as in the Member States of the European Union.

Note also that we have no influence over the scope, nature and purpose of the data processing by the provider of the social media service. For more detailed information on the use of your data by the social media services linked to our website, please refer to the privacy policy of the social media service in question.

The uvex group maintains a presence in the ‘social media’, in this case on Facebook, Instagram, YouTube, Xing, Pinterest and LinkedIn. If we have the control over the processing of your data, we ensure that the applicable data protection provisions are complied with.

In the following you will find the most important information on data protection law in relation to our presence.

Parties responsible for the company presence within the meaning of the EU Data Protection Regulation (EU GDPR) as well as other data protection provisions are, apart from the uvex group, the following:

• Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland 
• Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
• Xing: New York SE, Dammtorstraße 30, 20354 Hamburg, Germany
• Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

However, you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. comment, share, react).

We would like to point out that your data may thereby be processed outside the area of the European Union. The contracts required in accordance with data protection laws have been concluded with all providers.

We maintain the fan pages ourselves to communicate with the visitors to these pages and inform them in this way of our offerings.

Moreover, we collect data for statistical purposes in order to improve and optimise the content and make our offering more attractive. The data required for this (e.g. total number of page views, page activities and data provided by the visitors, interactions) are processed on the part of the social networks and made available to us. We have no influence over the generation and representation.

Moreover, your personal data are processed for market research and advertising purposes by the providers of the social media, but also by the uvex group. It is therefore possible that, e.g., usage profiles are created based on your usage behaviour and the interests yielded from it. Through this, among other things, ads matching your interests can be placed inside and outside the platforms. Cookies are usually saved on your computer for this. Independently of that, data that are not directly collected on your devices may be saved in your usage profiles. The storage and analysis also takes place across devices; this applies in particular, but not solely, if you are registered as a member and logged in to the respective platforms.

Beyond that, we do not collect and process any personal data.

The processing of your personal data by the uvex group takes place based on our legitimate interest in effective provision of information and communication in accordance with Article 6(1)(f) of the EU GDPR.

If you are asked to consent to the data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Article 6(1)(a) and Article (7) of the EU GDPR.

If you are a member of a social network and do not want the network to collect data about you and link it with your saved member data on the respective network via our presence, you must

• log out of the respective network before visiting our fan page,
• delete the cookies that are on your device and
• quit and restart your browser.

After logging in again, however, you can again be recognised by the network as a specific user. For a detailed description of the respective processing and the objection possibilities (opt-out), we refer to the information linked below:

• Facebook:

Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

• Instagram:

Privacy policy: https://help.instagram.com/519522125107875
Opt-out: https://thenai.org/opt-out and http://www.youronlinechoices.com

• YouTube:

Privacy policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de and http://www.youronlinechoices.com

• Xing:

Privacy policy: https://privacy.xing.com/en/privacy-policy
Opt-out: http://www.youronlinechoices.com

• Pinterest:

Privacy policy: https://policy.pinterest.com/de/privacy-policy 
Opt-out: https://help.pinterest.com/en/article/personalization-and-data

• LinkedIn:

Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

Overall, you have the following rights regarding the processing of your personal data:

right to access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability and right to lodge a complaint of illegal processing of your personal data with the responsible data protection authority.

However, because the uvex group does not have complete access to your personal data, you should contact the social media providers directly when making a claim because they each have access to the personal data of their users and can take appropriate measures and provide information.

Should you nevertheless require help, we will of course try to support you.

Please contact the data protection officer as given above. Notes on copyright and artistic works copyright law

If you would like to publish images, texts, diagrams, videos, music etc. on our presence, you should know that you possibly thereby assign all rights of use to the network, which ultimately could have legal consequences for you if you are not the creator or rights holder yourself.