Privacy policy

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is: 

Name and address

Bucher Automation 
Thomas-Alva-Edison-Ring 10
71672 Marbach am Neckar

Telephone: 07141 2550-0
Email: info@bucherautomation.com

Chief Executive Officer: Christian Benz
Supervisory Board Chairman: Stefan Düring


Name and address of external data protection officer

Wolfgang Matzke
KLW GmbH
Parkweg 4
74360 Ilsfeld
Germany

Tel. +49 (0)706291591-0
Email: datenschutz@klw.de

General Information regarding data processing
Scope of processing personal data

We only process our users personal data to the extent necessary for us to provide a functioning website, our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Purpose of and legal basis for processing

Insofar as we obtain the data subject's consent for the processing of personal data the legal basis for processing your data is Article 6(1) sentence 1 f)GDPR. 

When processing personal data necessary to fulfill a contract to which the data subject the legal basis for processing your data is Article 6(1) sentence 1 f)GDPR. 

This also applies to processing personal data that are necessary to carry out pre-contractual measures.

If the processing of personal data is necessary to fulfill a legal obligation of our  company the legal basis for processing your data is Article 6(1) sentence 1 f)GDPR.

In the event that vital interests of the data subject or another natural person require the processing of personal data the legal basis for processing the  data is Article 6(1) sentence 1 f)GDPR.

Is the processing of personal date necessary to protect our legitimate interests as a company or a third party and do not overweight fundamental right of the person concerned  the legal basis for processing the data is Article 6(1) sentence 1 f)GDPR.

Erasure of data and length of storage

The personal data of data subjects will be erased or blocked as soon as the purpose for which it is stored no longer exists. Data may also be stored if required by European or national legislation in EU regulations, laws or other requirements which apply to the controller. Data will also be blocked or erased on expiry of a storage deadline prescribed by one of the above requirements except where continued data storage is necessary in order to conclude or fulfil a contract.

Provision of the website and creation of log files
Description and scope of data processing

Whenever you access our website, our system automatically collects data and information from the computer system of the calling computer: 

The data we collect is:

  • information on browser type and the version used
  • user's operating system
  • user's internet service provider
  • user's IP address
  • date and time of access
  • websites from which the user's system accesses our website 
  • websites accessed by the user's system via our website

The data is also saved in our system's logfiles. This data is not saved with other 

personal data of the user. 


Legal basis for data processing

Legal basis for the temporary storage of data and log files is Art. 6 Para. 1 lit. f GDPR. 

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the homepage to the users device. For that reason the IP address must be stored for the duration of the session. The log files are stored to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems.

In this context the data is not evaluated for marketing purposes. This is our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR. 


How long is data saved for?

The data is erased as soon as it is no longer needed for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the session has ended, however after 14 days at the latest.

Right to withdraw

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is consequently no possibility for the user to withdraw. 

Cookies

On our website we use cookies or similar technologies such as Pixel (collectively "cookies"). Cookies are small text files which are generated automatically by your browser and saved on your end device as if you visit our website.

In the cookie is stored information that results in conjunction with the device being used. 

However, this does not mean that we are getting aware of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you.

We use session cookies, to recognize which of our sites you had already visited. They are automatically deleted when you leave our website. 

On the other hand, to make it easier to use our website we use temporary cookies, which are saved on your device for a specific pre-defined period.

Whenever you revisit our website to make use of the services that we provide you will be automatically recognised and will not have to re-enter information and settings provided on previous visits. 

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies enable us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time. The data processed by cookies are for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser that no cookies are stored on your computer or that a message always appears before a new cookie is created. 

User data collected in this way is pseudonymised by technical means. Thus, it cannot be traced back to the user and is not stored with other personal data of the user. By vistiting our website an information banner informs users about the use of cookies for analysis purposes and refers them to this data protection declaration. 

Management and deletion of cookies

In this context, there is also a note on how the storage of cookies can be prevented in the browser settings. The transmission of flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the flash player. You can find more information on this in the help function of your browser. However, the complete deactivation of cookies can mean that you cannot use all functions of our website.

Google Analytics

Our websites use Google Analytics, a web analytics service offered by Google Inc. Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This usage includes the mode “Universal Analytics”. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and analyse the activities of a user across these devices.

Google Analytics uses cookies that enable an analysis of the use of our website by visitors (you can find out more about cookies in the previous section). The information which the cookie generates on how you use this website is generally transmitted to a Google server in the USA and saved there. However, if you activate the IP anonymiser on this website Google will shorten your IP address in European Union member states or in other signatory states to the Agreement on the European Economic Area beforehand. Only in rare circumstances will the full IP address be transmitted to a Google server in the USA and shortened there. 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information on behalf of the website operator to analyse how you use the website, to compile reports on website activity and provide the website operator with other services related to website and internet use. 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. This is the basis of our legitimate interest in data processing.

You can adjust your web browser settings to stop cookies being saved; however, this may prevent you from using all functions of this website in full. You can also prevent the data generated by the cookie and the data related to your website use from being collected and processed by Google by downloading and installing the browser plug-in from the following link: tools.google.com/dlpage/gaoptout

We use Google Analytics to analyse use of our website and make regular improvements. We can use the statistics obtained to improve our website and the services offered and enhance relevance to the user. For the rare cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Further Information: 

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. 

Terms of usage: http://www.google.com/analytics/terms/de.html
Private policy regulations: http://www.google.com/intl/de/analytics/learn/privacy.html.
Alternative: https://policies.google.com/?hl=de.

Legal basis for the usage of Google Analytics is § 15 Para. 3 TMG and Para. 6 Article 1 lit. f GDPR.


Storage of Data / Automatic data deletion

Data sent by us and linked with cookies, user IDs or advertising IDs will be automatically deleted after 24 months. Data whose retention period has expired is automatically deleted once a month.

Deactivating of Google Analytics

You can adjust your web browser settings to stop cookies being saved; however, this may prevent you from using all functions of this website in full.

You can also prevent the data generated by the cookie and the data related to your website use from being collected and processed by Google by downloading and installing the browser plug-in from the following link: tools.google.com/dlpage/gaoptout.

Google DoubleClick (Google Campaign Manager)

We use the Google DoubleClick online marketing tool. DoubleClick uses cookies to deliver ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once. DoubleClick can also use cookie IDs to track conversions related to ad requests, for example, when a user sees a DoubleClick ad and later uses the same browser to go to the advertiser's website and make a purchase. According to Google, DoubleClick cookies do not contain any personal information.

The marketing tools used allow your browser to automatically establish a direct connection to the Google server. We have no influence on how much data Google collects via these tools or how Google uses that data; the information we provide here therefore reflects what we know at this time: DoubleClick informs Google that you have visited the relevant section of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can correlate the visit to your account. Even if you are not registered with Google or have not logged in, the provider may identify and save your IP address.

In addition, the Campaign Manager (DoubleClick Floodlight) cookies enable us to understand whether you are carrying out certain actions on our website after you call up or click on one of our ads on Google or on another platform via Campaign Manager ( Conversion tracking). Campaign Manager uses this cookie to understand the content that you interacted with on our websites so that targeted advertising can send to you later.

You can adjust your web browser settings to stop tracking being used; however, this may prevent you from using all functions of this website in full.

Alternatively by deactivating conversion-tracking cookies and setting your browser to block cookies from the "www.googleadservices.com" domain, www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies.

You can prevent Google from collecting the data generated by the cookies about your use of the website by installing the browser-plugin: https://support.google.com/adsense/answer/142293?hl=en

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacyhttps://services.google.com/sitestats/de.html.

Alternatively, you can consult the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has committed itself to abiding by the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis for the usage of Google Analytics is Para. 6 Article 1 lit. f GDPR.


Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a tag management system that allows website marketing tags to be managed through a user interface. The Tag Manager tool which implements the tags is a cookie-free domain that does not collect personal data. It triggers other tags which may themselves gather data. Google Tag Manager does not use this data. If it is deactivated at domain or cookie level, the deactivation continues to apply to all tracking tags that are implemented through Google Tag Manager. 


Social-media-link

We operate links to Facebook, Twitter, Instagram, XING, Kununu and LinkedIn on our website. The social bookmarks are only integrated as a link to the corresponding services. If such a link is clicked, you will be directed to the page. We therefore do not process any personal data. However, when calling the linked page data will be processed by the site operator. How the respective provider deals with this data can be found in the respective data protection provisions by calling up the corresponding link:


Facebook

We have a Facebook profile. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield.

We have an agreement with Facebook on the joint processing of data (controller addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement under the following link: https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings independently in your user account. To do this, click on the following link: https://www.facebook.com/settings?tab=ads

For details, see Facebook's privacy policy: https://www.facebook.com/about/privacy/


Twitter

We have a Twitter profile. The provider is Twitter Inc.,1355 Market Street, Suite 900, San Francisco, CA 9410. For details, see Twitter privacy policy

twitter.com/privacy

You can change your data protection settings on Twitter in the account settings
twitter.com/account/settings


Instagram

We have an Instagram profile. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details, see Instagram privacy policy https://help.instagram.com/519522125107875


XING

We have a XING profile. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland
For details, see XING privacy policy https://privacy.xing.com/de/datenschutzerklaerung


Kununu

On our website we use components provided by kununu GmbH, Fischhof 3 Top 7, A-1010 Vienna, Austria. You can identify the plugin from a stylised light green "ku" on a white background. When you visit one of our webpages containing such a plugin, your browser establishes a direct connection with the kununu servers. The provider will transmit the plugin content directly to your browser and integrate it into the website. We have no influence on how much data the above provider collects using the plugin; the information we have therefore reflects what we know at this time. The plugin means that kununu is informed that you have clicked the relevant page on our website even if you do not have a profile with that provider or are not currently logged in. This information – including your IP address – is transmitted to a kununu server and saved there. This may be outside the EEA/in the USA. If you are logged in to this provider when you visit our website, the provider can correlate your visit to our website directly to your profile. If you interact with the plugins, for example by clicking a "Like" button or leaving a comment, the browser will transmit that information directly to the provider's server and stored there. Moreover, this information may be published in the social network and shown to your contacts. For more information on the purpose and extent of kununu's data collection, processing and use please go to www.kununu.com/info/datenschutz


LinkedIn

We operate a social media channel on the LinkedIn platform. Provider is  LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland. LinkedIn is certified according to the EU-US Privacy Shield. LinkedIn uses advertising cookies. If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

You can find details on how they handle your personal data in LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy


YouTube

We have a YouTube profile, and functions and content from the YouTube service may also be integrated on our website. YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

If you visit one of our pages equipped with a YouTube plug-in, a connection is established to the YouTube servers and the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in YouTube's data protection declaration at
https://www.google.de/intl/de/policies/privacy

Opt-Out-Link: https://adssettings.google.com/authenticated

Contact form and email contact
Description and scope of data processing


On our website we provide a contact form, application form and a technical hotline contact form for you to contact us electronically. If a user contacts us in one of these ways the data entered in the input mask will be transmitted to us and saved. This data is:

Contact form

  • Name (required)
  • Email address (required)
  • Your message
  • Company name
  • Department
  • Country
  • Telephone number
  • Fax number
  • Attachment
  • Checkbox

Supplier questionnaire:

Required fields:

  • Company name
  • Country
  • Street, house no.
  • Post code
  • Town
  • Telephone (general)
  • Internet
  • Management, name
  • Management, telephone
  • Management, email
  • Sales, name
  • Sales, telephone
  • Sales, email
  • QS, name
  • QS, telephone
  • QS, email
  • Year of formation
  • Production site
  • Production country
  • Production area
  • Total number of employees
  • Number of development and production employees
  • Number of management/office employees
  • Number of QS employees
  • Total turnover year before last
  • Total turnover last year
  • Core business
  • Reference customers
  • ISO DIN 9001:2001 certified
  • Other certifications 
  • Author, name
  • Author, telephone
  • Remarks

Technical hotline contact form

  • Subject
  • Your question relates to – hardware – software
  • Device type
  • Module/Submodule
  • Firmware version
  • Computer software
  • Windows version
  • Your question(s)
  • Attachment
  • Name (required)
  • Your email address (required)

Application form

  • Address/title (required)
  • First name (required)
  • Family name (required)
  • Email (required)
  • Email (repeat) (required)
  • Which job are you applying for?
  • Speculative application as
  • Documents

Education form

  • Address/title (required)
  • First name (required)
  • Family name (required)
  • Email (required)
  • Which education are you applying for?
  • Speculative education as
  • Documents

At the time the message is sent the following data is also saved:

  • User's IP address
  • Date and time of registration

As part of the registration process you will be asked to give your consent and referred to this data protection statement.

You can also contact us using the email address provided, in which case the user's personal data provided in the email will be saved. 

No other data will be passed onto third parties in this connection. The data is used solely for processing the conversation.


Legal basis for data processing

Where the user has provided consent, the legal basis for processing the data is Article 6(1) a) GDPR.

The legal basis for processing data provided through email transmission is Article 6(1) sentence 1 f) GDPR. If the purpose of the email contact is to enter into a contract the legal basis for processing also includes Article 6(1) sentence 1 b) GDPR. If the registration form is used the legal basis for processing also includes Article 6(1) sentence 1 b) GDPR.


Purpose of data processing

We process personal data from the input mask solely to enable us to establish contact. Where contact is by email this is the necessary legitimate interest in data processing. The other personal data processed during email transmission serve to prevent misuse of the contact form and to safeguard our IT systems.


How long is data saved for?

The data is erased as soon as it is no longer needed for the purpose for which it was collected. With personal data from the contact form input mask and data transmitted by email this is deemed to be the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter concerned has been clarified. Any additional personal data collected during the transmission process is deleted after fourteen days at the latest.

Right to withdraw

The user may, at any time, withdraw consent to personal data being processed. Users who contact us by email may object to their personal data being stored at any time, in which case the conversation cannot be continued. Any personal data which had been stored while contact was being established will then be erased.

Data transfer

We will not disclose your personal data to third parties for purposes other than those listed below:

We will only disclose your personal data to third parties if:

  • you have given your express consent to this pursuant to Article 6(1) sentence 1 a) GDPR.
  • we are legally obliged to do so pursuant to Article 6(1) sentence 1 c) GDPR, and
  • it is permitted by law and is necessary pursuant to Article 6(1) sentence 1 b) GDPR for the purpose of performing contracts with you.


Inclusion in the press mailing list

Description and scope of data processing

It is possible to be included on our press mailing list on our website. When you register, the data you enter in the input mask will be transmitted to us. This data is:

Required fields:

  • Title
  • First name
  • Family name
  • Newspaper/magazine/medium
  • Street, house no. 
  • Post code
  • Town
  • Telephone
  • Email 

The following data will also be collected when you register:

  • User's IP address
  • Date and time of registration

As part of the registration process you will be asked to give your consent and referred to this data protection statement. 

Data collected for shipping purposes will not be passed on to third parties except for shipping purposes.


Legal basis for data processing

Where the user has provided consent, the legal basis for processing the data is Article 6(1) a) GDPR.

 
Purpose of data processing

We process personal data from the input mask solely to enable us to establish contact. The other personal data processed during email transmission serve to prevent misuse of the contact form and to safeguard our IT systems.


How long is data saved for?

The data is erased as soon as it is no longer needed for the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription is active.

The other personal data collected as part of the registration process are usually deleted after a period of seven days.


Right to withdraw

The affected user can cancel the subscription at any time. An email to pr@bucherautomation.com with the subject: “Unsubscribe” is sufficient. This also enables a revocation of the consent to the storage of personal data collected during the registration process.


Data protection statement regarding business cards

We save, use and process the personal data shown on your business card. The legal basis for saving such data is Article 6(1) sentence 1 a), b), c) GDPR. 

This data protection statement informs you how Bucher Automation uses the personal data you provide.  

In accordance with Article 13(1) and (2) EU General Data Protection Regulation (GDPR) and Article 14(1) and (2) GDPR we hereby inform you that any data that we collect will only be used in connection with our current business relationship.  

 
Purpose of and legal basis for processing 

If, at our first contact, you give us your business card or give us your contact data over the phone for the express purpose of entering to business we will save your personal data on the basis of your oral consent (Article 6(1) sentence 1 a) GDPR). In that event, it is necessary to process your data to perform a contract or carry out pre-contractual measures.  

For the purpose of proper implementation of a contractual relationship and in order to perform pre-contractual measures communication may take place by telephone or email. 

Your data will be passed on to our employees as part of our possible business relationship. It will not be passed on to third parties.

A transmission to countries outside the EU does not take place and is also not planned.

 
Erasure of data  

Your personal data will be erased as soon as the purpose for which it is stored no longer exists.

Data may also be stored if required by European or national legislation in EU regulations, laws or other requirements which apply to the controller or if, in an individual case, data must be stored for a longer period because claims have been or may possibly be asserted against us in connection with a contract or pre-contractual measures. 

Where data cannot be erased owing to statutory archiving obligations, we will initially block your data and erase it once the archiving obligation has expired.  

Unless otherwise stated in an individual case this rule applies to all data processing processes listed in this statement.

 
Information duties for information display monitors

To enable us to welcome our business partners and visitors to our offices in some areas there are monitors displaying data regarding our business partners and visitors. 

The data displayed is:

  • Title/address
  • First name
  • Family name
  • Company name 

If the business partner and visitors object to this, consent can be withheld beforehand by sending an email to info@bucherautomation.com.

Job applicants' data will not be shown.

 
Information duties of job applicants and employees

This data protection statement informs you on how Bucher Automation handles information which it collects from your application, correspondence, emails or a job interview. In accordance with Article 13(1) and (2) EU General Data Protection Regulation (GDPR) and Article 14(1) and (2) GDPR we hereby inform you that any data that we collect will only be used in connection with your specific job application. Such data will be necessary if we decide to appoint you. Your data will also undergo processing in the event that you are appointed.


General information

Under Article 4(1) GDPR personal data means any information relating to an identified or identifiable natural person. This includes data such as first and family name, date of birth, private and business contact data, working hours and pay.

Special categories of personal data within the meaning of Article 9(1) GDPR are data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health and sexual orientation.

We will only ever collect and process your personal data within the scope of statutory data protection rules.


Purpose of and legal basis for processing

If you apply by email, we will need some personal data for the application process. We will process your data so that if your application is successful, we can carry out the application procedure (Article 88(1) GDPR in conjunction with § 26(1) BDSG new version). Any personal data that you provide will be treated confidentially.

It may also be necessary to process your personal data in order to protect our legitimate interests as a company, except where such interests are overridden by your interests or fundamental rights and freedoms (Article 6(1) f) GDPR).

A further reason for you to grant consent to our processing your personal data is so that we can keep you in mind for other vacancies which may arise.

If your application is successful and we enter into an employment contract with you, the application data will be recorded in your personal file. Any data which you provide during the application process and then in the employee questionnaire will be processed in order to finalise the employment contract, and to operate and terminate employment relationships. An employment relationship involves for example payment of wages and salaries, remitting wage tax and social insurance contributions to the applicable authorities. Management also has to perform activities such as process optimisation, work organisation, business and HR planning, preparing HR and other decisions. The terms of the employment contract form the legal basis of data processing. The statutory basis is the German Working Hours Act (Arbeitszeitgesetz), the German Works Constitution Act (Betriebsverfassungsgesetz), tax and social insurance legislation, public service employees health act (Gesetz Kommunaler Versorgungsverband), accounting and financial reporting requirements as set out in the German Commercial Code (Handelsgesetzbuch) and tax law.


Categories of data

In your application you provide us with certain personal data. 

This includes data such as name, date of birth, gender, address, contact data and qualifications. Other personal data may emerge from documentation of a job interview or evaluation documents which we compile.

Disclosure of data and categories of recipient

Your data will only ever be disclosed to the HR employees who are responsible for the recruitment process and those employees in the specific departments concerned to the extent necessary for a decision on whether to offer you a position. During the application process no data will be passed on to any third parties.

No data is transmitted to non-EU countries and there are no plans to do this.

Erasure of data

The GDPR requires personal data to be erased once the processing purpose for which it has been collected has been completed. Your data will be erased as soon as the vacancy in question has been filled or the application has been withdrawn. 

If your application is not successful, we will store your data for as long as may be necessary to clarify any subsequent queries or disputes. If the law requires us to keep the data for longer, then we will do so for that purpose. Your data may be stored for longer subject to your consent until you withdraw it so that we can consider your application for future vacancies. Your personal data will be erased once the purpose for which the data was saved has ended or once the statutory archiving period has ended.

Rights of the data subject

The following list includes all rights of the data subject under the GDPR. Rights that are irrelevant to your own website do not have to be mentioned. In this respect, the list can be shortened.

If personal data is processed by you, you are the person concerned in the sense of GDPR and you have the following rights vis-à-vis the person responsible:

Right of access to personal data

You can obtain confirmation from the controller as to whether or not we process your personal data. 

If we do carry out such processing you can request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipient to whom your personal data has been or will be disclosed;

(4) the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;

(5) the existence of a right to have your personal data corrected or erased, the right to have data processing by the controller restricted or to object to such processing; 

(6) the existence of a right to lodge a complaint with the supervisory authority;

(7) where the personal data is not collected from the data subject, any available information as to its source;

(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) General Data Protection Regulation (GDPR) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject:

You have the right to request information on whether your personal data is transferred to a third country or an international organisation. In this connection, you can request to be informed about the appropriate safeguards pursuant to Article 46 GDPR related to the data transfer.

You have the right to obtain from the controller the rectification/completion of inaccurate personal data where such personal data is inaccurate or incomplete. The controller will make such rectification without undue delay.

Right to restriction of processing

You may request that processing of your personal data be restricted where the following applies:

(1) you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of that personal data;
(2) the processing is unlawful and you oppose erasure of the personal data and request that use of such personal data be restricted instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require such data to establish, exercise or defend legal claims, or
(4) you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been verified whether the legitimate grounds of the controller override those of the data subject.

Where processing of your personal data has been restricted, such personal data may, with the exception of storage, only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.

Where processing has been restricted pursuant to the above, the controller will inform you before the restriction of processing is lifted.


Right to erasure

You have the right to request from the controller the erasure of your personal data without undue delay and the controller will erase such personal data without undue delay where one of the following grounds applies:

(1) your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
(2) you withdraw your consent on which the processing is based according to Article 6(1) a), or Article 9(2) a) GDPR, and where there is no other legal ground for the processing;
(3) you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;
(4) your personal data has been unlawfully processed;
(5) your personal data has to be erased in order to comply with a legal obligation in EU or member state law to which the controller is subject;
(6) your personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.


Information to third parties

Where the controller has made your personal data public and is obliged pursuant to Article 17(1) GDPR to erase that personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform any controllers that are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, that personal data. 


Exceptions

You do not have the right to erasure where processing is necessary

(1) to exercise the right of freedom of expression and information,
(2) to comply with a legal obligation which requires processing in EU or member state law to which the controller is subject or to perform a task which is in the public interest or in the exercise of official authority vested in the controller,
(3) on the grounds of public interest in the area of public health pursuant to Article 9(2) h) and i) and Article 9(3) GDPR,
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR
(5) or for the establishment, exercise or defence of legal claims.


Right to be informed

If you have exercised your right to rectification or erasure of personal data or restriction of processing against the controller, the controller must inform each recipient to whom your personal data has been disclosed unless this proves impossible or involves disproportionate effort.

As data subject, you have the right to request that the controller inform you about those recipients.


Right to data portability

You have the right to receive the personal data that you have provided to a controller in a structured, commonly used and machine-readable format.  You also have the right to transmit that data to another controller without being hindered by the controller to which the personal data has been provided where

(1) the processing is based on consent pursuant to Article 6(1) a) or Article 9(2) a) GDPR or on a contract pursuant to Article 6(1) b) GDPR; and
(2) the processing is carried out by automated means.

In exercising this right you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This may not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing of personal data which is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object

You have the right, for grounds related to your particular situation, to object at any time to your personal data being processed pursuant to Article 6(1) e) or f) GDPR; this also applies to any profiling based on such provisions. 

The controller will stop processing your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing serves the establishment, exercise or defence of legal claims.

Where we process your personal data for direct marketing purposes, you have the right to object to processing of such data for direct marketing purposes at any time; this also applies to any profiling associated with such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.

In connection with use of information society services you may – without prejudice to Directive 2002/58/EC (Directive on privacy and electronic communications) – exercise your right to object by means of automated processes using technical specifications.


Right to withdraw the data protection declaration of consent

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

The withdraw must be sent to:

Bucher Automation
Thomas-Alva-Edison-Ring 10
71672 Marbach am Neckar

Telefon: 07141 2550-0
Telefax: 07141 2550-425
E-Mail: info@bucherautomation.com


Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or affects you significantly in a similar manner. This does not apply if the decision 

(1) is necessary for entering into or performing a contract between you as the data subject and a data controller;
(2) is authorised by EU or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests or
(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2) a) or g) GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests are in place.

In the cases referred to in (1) and (3), the data controller will implement suitable measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

 

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR. 

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.


Data security

We use the common SSL (Secure Socket Layer) method in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. 

You can tell whether a single page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.We make use of appropriate technical and organisational security measures to protect your data from accidental or deliberate manipulation, complete or partial loss, destruction or unauthorised access. Our security measures are continually improved in accordance with technological development. 


Updates and changes to our data protection statement

This data protection declaration is currently valid and has the status of March 2020. Due to the further development of our website and offers above or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can call up the current data protection declaration at any time on our website under data protection.