Privacy Policy
Last update: January 16th, 2025
Preamble
With the following privacy policy we inform you which types of personal data we process, for which purposes and to what extent. This privacy statement applies to all processing carried out by us, in particular on our websites, mobile applications and external online presences such as social-media profiles. The terms used are not gender-specific.
Table of Contents
- Preamble
- Controller
- Overview of processing operations
- Data protection officer
- Legal bases
- Security precautions
- Transmission and disclosure
- Third countries
- Cookies
- Commercial services
- Online services and hosting
- Contacting us
- Messenger communication
- Video conferences and online meetings
- Job applications
- Cloud services
- Newsletter and electronic communications
- Online marketing
- Social networks
- Plugins and embedded content
- Erasure
- Changes and updates
- Rights of data subjects
- Terminology and definitions
Controller
Printec-DS HMI Solutions GmbH
Zeppelinstraße 11
D-78256 Steißlingen
Authorised Representative: Mr Thomas Holeczek
E-mail: info@printecds.com
Telephone: +49 (0) 7738 80 241 0
Legal Notice: printecds.com/en/legal-notice
Contact Information of the Data Protection Officer
Jost Spicher
MB Konzept GmbH
Hofstraße 13
D-52499 Baesweiler
spicher@mbkonzept.de
+49 2401 3992181
Overview of Processing Operations
We process inventory data, job-applicant details, content data, contact data, meta/communication data, usage data, contract data and payment data. Data subjects include employees and applicants, business and contractual partners, prospective customers, communication partners, customers and users of online services.
Purposes include providing and improving online services, conversion tracking, recruitment, office and organisational procedures, direct and interest-based marketing, contact and communication, profiling, remarketing, web analytics, security measures, targeting, contractual services and support, and managing inquiries.
Legal Bases for Processing
Processing is based, as applicable, on consent under Article 6(1)(a) GDPR, performance of a contract or pre-contractual measures under Article 6(1)(b), compliance with legal obligations under Article 6(1)(c), and legitimate interests under Article 6(1)(f). Special categories of applicant data are processed only where permitted under Article 9 GDPR. German national data-protection provisions, including the BDSG, may also apply.
Security Precautions
We take appropriate technical and organisational measures in accordance with the state of the art, implementation costs, nature, scope, context and purposes of processing, and the risk to rights and freedoms. Measures protect confidentiality, integrity and availability through physical and electronic access controls, controlled input and transmission, erasure procedures, incident response, privacy by design and privacy by default.
Where possible, IP addresses are shortened (IP masking). We use SSL encryption (https) to protect data transmitted through our online services.
Transmission and Disclosure of Personal Data
Personal data may be transferred or disclosed to other locations, companies or persons where necessary and legally permitted, including payment institutions, IT service providers, hosting providers, and providers of services or content embedded in a website. Appropriate contracts or agreements are used where required. Data may also be shared within our organisation for administrative, contractual or legitimate business purposes.
Data Processing in Third Countries
Where data is processed outside the EU or EEA, or transferred to third-party providers in third countries, we comply with Articles 44–49 GDPR. Transfers are based on consent, contractual or legal necessity, an adequacy decision, recognised safeguards, certifications or EU standard contractual clauses.
Cookies
Cookies are small text files stored by the browser. Technically necessary cookies or local storage may be required for website functions. Other cookies can support analytics, marketing, personalisation and recognition of returning visitors. Cookies cannot execute programs or contain viruses.
| Domain | Name | Description | Memory duration |
|---|---|---|---|
| www.printecds.com | ASP.NET_SessionId | General-purpose session cookie used by Microsoft .NET-based websites to manage an anonymised user session. | Session |
Cookies may be temporary or permanent, first-party or third-party, necessary, statistical, marketing or personalisation cookies. The legal basis is consent where requested, otherwise legitimate interests or contractual necessity. Permanent cookies may remain for up to two years unless a different period is stated. Consent may be withdrawn and cookies may be disabled in browser settings, although that can limit functionality.
Commercial Services
We process data of customers, interested parties and other contractual partners in contractual and pre-contractual relationships, to fulfil obligations, safeguard rights and handle administration. Data may be shared with telecommunications, transport and other auxiliary services, subcontractors, banks, tax and legal advisers, payment providers and authorities where necessary. Data is generally deleted after statutory warranty and comparable obligations, normally after four years, unless a customer account, legal archiving or an assignment requires longer retention.
For technical and engineering services, processing may include inventory, payment, contact and contract data for prospective customers and business partners. The purposes are contractual services and support, communication, organisational procedures and responding to inquiries.
Provision of Online Services and Web Hosting
Hosting providers supply infrastructure, storage, databases, security and technical maintenance. Access data and server log files may include pages and files accessed, date and time, transferred data, browser and operating-system details, referrer URL, IP address and requesting provider. Log files support security, protection from abusive attacks, stability and load balancing. The legal basis is legitimate interest.
Contacting Us
When you contact us by form, e-mail, telephone or social media, we process the information necessary to answer your inquiry and perform requested activities. This may include inventory, contact and content data. The legal basis is contract or pre-contractual measures, or legitimate interest in responding.
Communication via Messenger
Messenger services may be used for communication. Message content may be end-to-end encrypted, but providers can still process metadata such as when communication occurs, device information and possibly location information. You may contact us by telephone or e-mail instead. Consent, contractual necessity or legitimate interest may form the legal basis. You may withdraw consent or object at any time. Messages are deleted under our general retention policy.
WhatsApp: WhatsApp Messenger with end-to-end encryption; provider WhatsApp Inc., USA. Website · Privacy Policy.
Video Conferences, Online Meetings, Webinars and Screen-Sharing
We use third-party platforms for video and audio conferences, webinars and meetings. Data processed may include registration and contact details, visual and voice contributions, chats and shared screens. Providers may process usage data and metadata for security, service optimisation or marketing. The legal basis may be consent, contractual performance or legitimate interest in efficient and secure communication.
GoToMeeting: provided by LogMeIn Ireland Limited and its parent company LogMeIn, Inc. Website · Privacy Policy.
Job Application Process
Applicants provide information needed for assessment and selection, including name, address, contact details and qualifications. Applications may be submitted through an encrypted online form or by e-mail; internet e-mail may not be encrypted end-to-end. Third-party applicant-management services may be used in compliance with legal requirements.
Special categories of data are processed only under the applicable Article 9 GDPR conditions. Unsuccessful or withdrawn applications are generally deleted no later than six months after the process, subject to legal and evidentiary requirements. Successful applications may be processed for the employment relationship. Admission to a talent pool, where offered, is voluntary and may be revoked.
Cloud Services
Cloud services may support document storage, administration, calendars, e-mail, spreadsheets, presentations, document exchange, publication of websites and forms, chats and audio/video meetings. Providers may process master, contact, usage and metadata for security and service optimisation. The legal basis is consent, contractual necessity or legitimate interest in efficient and secure administration.
Dropbox: cloud storage provider Dropbox, Inc., USA. Website · Privacy Policy.
Newsletter and Electronic Communications
Newsletters and electronic communications are sent only with consent or legal permission. Subscription generally requires an e-mail address. We use a double-opt-in procedure and log registration, confirmation times, IP address and changes to demonstrate lawful registration. Unsubscribed addresses may be retained for up to three years to defend against claims. You may withdraw consent or object at any time through the unsubscribe link or our contact details.
Online Marketing
Online marketing may use pseudonymous profiles, cookies and similar technologies to display interest-based content and measure effectiveness. IP masking is used where applicable. Information may include content viewed, websites visited, networks, communication partners, browser, operating system and usage times. Conversion measurement evaluates which marketing activities lead to a contract. Unless otherwise stated, marketing cookies may be stored for two years.
Opt-out information: Europe · Canada · USA · Cross-regional.
Google Analytics and Google Ads: provided by Google Ireland Limited and Google LLC. Analytics · Privacy Policy · Analytics opt-out · Ad settings.
Microsoft Clarity: may record anonymised interaction patterns such as mouse movement, clicks and scrolling to help optimise the website. Leadinfo: may identify anonymous business visitors and visit history where consent is provided; details are available in Leadinfo’s privacy policy.
Profiles in Social Networks
Social networks may collect technical data, cookies and usage information even when a visitor has no account. If you interact with our profiles, the network may process your name, messages, comments and publicly provided profile information. We have limited influence over provider processing and data may be stored outside the EU/EEA. Please consult the providers’ privacy and cookie policies.
Our relevant services include Instagram, LinkedIn and XING. We use their profiles for communication and information. Data-subject rights may be asserted against the relevant provider and against us where joint responsibility applies.
Plugins and Embedded Functions and Content
Embedded graphics, videos, social-media buttons and other content are obtained from third-party providers. Integration may require the user’s IP address. Providers may use pixel tags, cookies and technical information for statistics or marketing. The legal basis is consent where requested, otherwise legitimate interest in analysing, optimising and operating our online services.
YouTube videos: provided by Google Ireland Limited and Google LLC. Website · Privacy Policy.
Erasure of Data
Data is erased in accordance with statutory provisions when consent is withdrawn, permission ends or the purpose no longer applies. If data must be retained for commercial, tax or legal-claim purposes, processing is restricted to those purposes.
Changes and Updates
Please inform yourself regularly about this privacy policy. We adjust it when our processing practices change and will notify you when changes require consent or individual notification. Contact details of companies and organisations may change and should be verified before use.
Rights of Data Subjects
Under Articles 15–21 GDPR, you may have the right to object, withdraw consent, access data, request rectification, request erasure or restriction, receive data portability, and lodge a complaint with a supervisory authority.
Terminology and Definitions
Controller means the person or organisation determining the purposes and means of processing. Conversion tracking measures the effectiveness of marketing. IP masking shortens an IP address to pseudonymise it. Interest-based and behavioural marketing predicts potential interests from behaviour. Personal data concerns an identified or identifiable natural person. Processing covers collection, evaluation, storage, transmission and erasure. Profiling analyses or predicts personal aspects. Remarketing reminds users of products or content in which they showed interest. Targeting tracks behaviour and interests across websites. Web analytics evaluates visitor traffic and interests using pseudonymous cookies and similar technologies.