Privacy

Welcome to the website of PHYWE Systeme GmbH & Co. KG (hereinafter referred to as "PHYWE"). We appreciate your interest in our company. Privacy is of particular importance to PHYWE. When collecting and processing your data, we adhere to the applicable data protection regulations, in particular the General Data Protection Regulation ("GDPR") of the EU.

In this statement, you will find information about the data we collect and process, as well as your rights in this regard. The following privacy policy applies to all processing of personal data carried out by us in the course of our business activities, especially for our websites (including www.phywe.de and www.phywe.com), business communication, and external presences, such as social media profiles (hereinafter collectively referred to as "website").

1. Name and Address of the Controller 

The controller within the meaning of the GDPR is: 

PHYWE Systeme GmbH und Co. KG
Robert-Bosch-Breite 10
37079 Göttingen
Germany

Vertreten durch:
PHYWE Verwaltungs GmbH
Robert-Bosch-Breite 10
37079 Göttingen
Germany

Managing Director: Jörg Siekmann

Phone: 0551 604 - 0
Fax: 0551 604 - 107
Website: www.phywe.com
E-Mail: info@phywe.de

2. Name and Address of the Data Protection Officer

If you have any questions about this privacy policy, please feel free to contact our data protection officer: 

Hubertus Bartkowski
PHYWE Systeme GmbH und Co. KG
Robert-Bosch-Breite 10
37079 Göttingen
Germany

E-Mail: hubertus.bartkowski@phywe.de
Phone: 0551 604 - 0
Fax: 0551 604 - 107

3. Scope of Personal Data Processing 

We generally process personal data of our users only to the extent necessary for providing a functioning website as well as our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where obtaining consent beforehand is not possible for factual reasons and the processing of data is permitted by legal regulations.

4. Legal Basis for Processing Personal Data

Where we obtain the consent of the data subject for processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis.

For processing personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) of the GDPR serves as the legal basis for processing.

5. Data Erasure and Storage Duration

Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for conclusion or performance of a contract.

6. Collection and Processing of Log Data

When visiting our website and each time a subpage or file is accessed, our web server collects the following log information about these processes: IP address, date and time of access, visited page(s), browser type and version, operating system, internet service provider.

All of this information is not evaluated by us in a personally identifiable manner, but is used for the correct delivery of the page, optimization of content and services, ensuring functionality, and preventing cyber attacks.

The data from server log files are kept separate from other personal data and are not linked to them.

7. Use of Cookies

The PHYWE website uses cookies. Cookies are small text files sent by the web server to the user's web browser and stored there for later retrieval. We use cookies to provide user-friendly functionalities and services on our website that would not be possible otherwise. Additionally, cookies help us obtain statistical information about the usage of the site, allowing for optimization.

You can object to the storage of cookies at any time via the appropriate settings in the browser being used, either permanently or temporarily.

8. Contact via Email or Contact Form

When you contact us via email or contact form, we store your data and use it to process your inquiry and in case further inquiries arise. Further use of the data only occurs if you consent to it or if it is legally permissible without consent. Data will not be disclosed to third parties.

9. Registration

On our website, there is the option to register with personal data. The storage and processing of data serve the functionality of the webshop and are necessary for the performance of pre-contractual measures and the fulfillment of the contract for purchases.

10. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

By certifying under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google ensures that EU data protection requirements are also met when processing data in the USA.

Google Analytics uses "cookies", which are text files placed on your computer, to help analyze how you use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be truncated beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. Google will use this information on behalf of the operator of this website, PHYWE, to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator. These evaluations are necessary to protect the legitimate interests of the website operator. The legal basis for this is Article 6(1) Sentence f) GDPR. The data will be automatically deleted after 14 months.

Further information: You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and processing this data by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Finally, you can also prevent the collection of your data by Google Analytics by clicking on the following link to set an opt-out cookie: Disable Google Analytics To prevent tracking across devices, you must make the aforementioned settings on each device. You can find further information and the applicable data protection provisions of Google at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Information about Google Analytics can be found at this link https://www.google.com/intl/de_de/analytics/.

11. Embedded YouTube Videos

On some of our web pages, we offer videos. When the data subject chooses to access them, the video is provided by an external server, operated by a "third party." The operator is YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; "YouTube"). When accessing a video, YouTube is informed which page is visited. If the data subject is logged into a YouTube account, YouTube may personally associate their browsing behavior. You can prevent this by logging out of your YouTube account before accessing the videos. A cookie is set that collects information about user behavior. You can prevent this by disabling the storage of cookies for the Google ad program. Alternatively, you can block the storage of cookies in your browser. This also allows you to block other cookies that YouTube stores for providing its service when using videos.

For further information on data protection at YouTube, please refer to the privacy policy of the parent company Google LLC at: https://www.google.com/intl/de/policies/privacy/

12. Google reCAPTCHA

In our online presence, we use Google reCAPTCHA to verify and prevent interactions on our website by automated access, such as by so-called bots. This is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). By certifying under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google ensures that EU data protection requirements are also met when processing data in the USA. Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, Google may collect other information necessary for the offer and provision of this service. The legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access such as spam.

Google provides further information on the general handling of your user data at https://policies.google.com/privacy

13. Google Remarketing or Google's "Similar Audiences" Component

In our online presence, we use the remarketing or "similar audiences" feature. This is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). By certifying under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google ensures that EU data protection requirements are also met when processing data in the USA. We use this feature to display interest-based, personalized advertising on third-party websites that also participate in Google's advertising network. The legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence. To enable this advertising service, Google stores a cookie with a sequence of numbers on your device during your visit to our website via your internet browser. This cookie collects your visit and use of our website in anonymized form. However, personal data is not disclosed. If you subsequently visit the website of a third party that also uses Google's advertising network, advertisements may appear that are related to our website or our offerings there. For permanent deactivation of this function, Google offers a browser plugin for the most common internet browsers at https://www.google.com/settings/ads/plugin You can also deactivate the use of cookies from certain providers, for example, at http://www.youronlinechoices.com/uk/your-ad-choices or http://www.networkadvertising.org/choices/ through opt-out. Through so-called cross-device marketing, Google may track your usage behavior across multiple devices, so you may still see interest-based, personalized advertising even if you change devices. However, this requires your consent to link your browsing history to your existing Google account.

Google provides further information on Google Remarketing at http://www.google.com/privacy/ads/

14. Google AdWords with Conversion Tracking

In our online presence, we use the advertising component Google AdWords and the conversion tracking feature. This is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). By certifying under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google ensures that EU data protection requirements are also met when processing data in the USA. We use conversion tracking for targeted advertising of our offerings. The legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence. If you click on an advertisement placed by Google, the conversion tracking service we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and are not used for your personal identification. If the cookie is still valid and you visit a specific page of our online presence, both we and Google can evaluate that you clicked on one of our ads placed with Google and that you were then redirected to our online presence. Through the information collected, Google creates statistics about visits to our online presence. We also receive information about the number of users who clicked on our ad(s) and the pages of our online presence subsequently accessed. However, neither we nor other third parties using Google AdWords are able to identify you through this method. You can also prevent the installation of cookies by adjusting your internet browser settings. You can also delete previously saved cookies at any time. The necessary steps and measures depend on the internet browser you are using. For questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. Furthermore, Google also offers further information on this topic and in particular on options to prevent the use of data at

https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/

15. Newsletter / Inxmail

On our website, you have the option to subscribe to a free newsletter. When subscribing to the newsletter, the data from the input mask is transmitted to us. Furthermore, the IP address, date, and time of registration are stored to document the user's consent and prevent misuse of the service and email address. You can revoke your consent to receive the newsletter and the associated processing of your data at any time by email or through a link at the end of each newsletter.

For the dispatch of newsletters, we use services provided by Inxmail GmbH (Wentzingerstr. 17, D-79106 Freiburg/GERMANY; "Inxmail"). As part of the newsletter, a so-called newsletter tracking (also called web beacons or tracking pixels) is used. The pixel-sized file is retrieved from Inxmail's server when the newsletter is opened and, in addition to certain technical data of the recipient (e.g., information about the browser, email client, and system), also captures the IP address and the time of retrieval. Statistical surveys also include determining whether newsletters are opened and which links are clicked. This information is collected anonymously; no assignment of click behavior to a specific newsletter recipient is made. Inxmail provides a privacy policy at https://www.inxmail.de/datenschutz.

16. Facebook-Pixel

We use the so-called "Facebook Pixel" on our website. This is a service provided by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, "Facebook"). The Facebook Pixel allows us to target visitors to our online offering with ads on Facebook. In this way, we aim to ensure that only users interested in our offer are reached with ads. Furthermore, the Facebook Pixel allows us to track the effectiveness of ads on Facebook. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website and advertising to ensure the economic operation of our online presence. Facebook offers further data protection information at https://www.facebook.com/policy.php. Additionally, you have the option to end the display of the Facebook Pixel on our website through the so-called opt-out. The tracking by the Facebook Pixel is currently enabled. Disable tracking now! The status of your opt-out is stored via a cookie in the browser of your device, which prevents the display of the Facebook Pixel. Please note, however, that you must click the above link again if you delete the cookies stored on your device, use a different browser, or change your device.

17. Hotjar Web Analysis

We use Hotjar on our website. This is a web analysis service provided by Hotjar Ltd. (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, "Hotjar"). Hotjar is used by us to analyze the user behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website. With Hotjar, we can log and evaluate your usage behavior on our website, such as your mouse movements or clicks. However, your visit to our website is anonymized. In addition, Hotjar evaluates information about your operating system, internet browser, incoming or outgoing referrals ("links"), geographical origin, as well as the type and triggering of the device you use, for statistical purposes. Hotjar can also solicit direct feedback from you. Hotjar also provides further data protection information at https://www.hotjar.com/privacy. Additionally, you have the option to end the analysis of your usage behavior through the so-called opt-out. By confirming the link https://www.hotjar.com/opt-out, a cookie is stored on your device via your internet browser, which prevents further analysis. Please note, however, that you must click the above link again if you delete the cookies stored on your device.

18. Your Rights

You have the following explicit rights in connection with the processing of data by PHYWE. If you wish to exercise any of these rights, please contact us by email or post at the address mentioned in point 1.

a) Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing exists, you can request the controller to provide you with the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) all available information about the origin of the data if the personal data were not collected from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR, and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

b) Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

c) Right to rectification

You have the right to request the controller to correct or complete personal data concerning you if it is inaccurate or incomplete. The controller shall make the correction without delay.

d) Right to erasure

I. Obligation to erase

You can request the controller to delete personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:

(1) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;

(2) you withdraw your consent on which the processing pursuant to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based, and there is no other legal basis for the processing;

(3) you object to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;

(4) the personal data concerning you have been unlawfully processed;

(5) the erasure of personal data concerning you is required to fulfil a legal obligation under Union or Member State law to which the controller is subject;

(6) the personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

II. Information to third parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested erasure by such controllers of any links to, or copy or replication of, those personal data.

III. Exceptions

The right to erasure does not apply to the extent that processing is necessary

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) as well as Article 9(3) GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR insofar as the right referred to in section I. is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise, or defence of legal claims.

e) Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defence of legal claims; or

(4) if you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

Where processing of personal data concerning you has been restricted under the above conditions, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.

f) Right to notification

If you have exercised your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients vis-à-vis the controller.

g) Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data have been provided, where (1) the processing is based on consent pursuant to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR or on a contract pursuant to Art. 6(1) lit. b GDPR, and (2) the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

h) Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1) lit. e or f GDPR, including profiling based on those provisions. i) Right to withdraw consent

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

19.Changes reserved

We reserve the right to adapt this privacy policy at any time to ensure that it always complies with all current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The currently valid privacy policy applies to your visit.