Data protection information sheet

For our customers, suppliers, sales partners and other business
partnersinterests) or the expressly granted consent of our partner in accordancewith Article 6(1)(a) GDPR.

This information tells you about the processing of personal data (hereinafter: ‘data’) in our business relationships and during general business transactions with our customers, sales partners, suppliers and other business
partners (hereinafter: ‘partners’). In particular, we refer to the sendingof our newsletter and provide you information about the contents of ournewsletter as well as the registration, sending and statistical evaluation
procedures. The terms used, such as ‘Processing’ and ‘Controller’, refer tothe definitions set out in Article 4 of the General Data Protection Regulation (‘GDPR’).

If the stated personal data is not made available or we cannot collect it, it
may not be possible to achieve some of the named objectives.

Controller:
Getzner Spring Solutions GmbH
Gottlob-Grotz-Str. 1, 74321 Bietigheim-Bissingen
Germany
Phone number: +49 (0)7142-91753-0
E-Mail: privacy@getzner.com
Data protection officer:
Horst Speichert, e/s/b Rechtsanwälte
Telephone number: +49 (0)711-469058-0
E-Mail: horst@speichert.deTypes of processed data:— Contact details (e.g. first and last name, e-mail address, telephone andfax numbers of contact persons);— In social media (such as Facebook, Instagram, YouTube) user names (firstname, last name, user name) are displayed. We do not store and processthese data ourselves, but rather the respective social networks, but wecan view them.
— Bank details for invoice creation;— Data relating to business transactions and other business relationships(e.g. order details, order/invoice/delivery note numbers, account numbers, financial data, records of discussions and communication history);— Data from publicly accessible sources/information databases (e.g. commercial/trade register numbers, agencies);— Where necessary, information relating to relevant judicial proceedings
and other legal disputes in which our partners are engaged.
Purpose and relevant legal basis of processing:— Communication with partners concerning products, services andprojects;— Planning, performance and administration of (contractual) business
relationships between Getzner and our customers (e.g. to process orders, to advise customers correctly, to obtain payments, for accountingpurposes);— Holding customer surveys, marketing campaigns, market analyses, competitions or similar;— Maintaining and protecting the security of our products and services aswell as our website, preventing and identifying security risks, fraudulent
action or other criminal activities undertaken with harmful intent;— Complying with (i) legal requirements (e.g. retention obligations undertax and commercial law), and (ii) existing obligations regarding compliance screenings (e.g. to prevent money-laundering);— Documenting and managing data in a customer relationship management system (‘CRM system’) or similar enquiry management process;— Resolving legal disputes, enforcing existing contracts and assertin rights,exercising and defending against legal claims.
Processing personal data is necessary to achieve the objectives statedabove, including the performance of our (contractual) business relationshipwith the partner. The legal basis for the processing of this data – unless expressly stated otherwise – is Article 6(1)(b) GDPR (processing to deliver ourservices and perform contractual measures), Article 6(1)(c) (to comply with
our legal obligations) and Article 6(1)(f) (for the purposes of our legitimate

Cooperation with processors and third parties:
In the scope of our processing, we will only transfer data to other entities orcompanies (processors or third parties) or otherwise grant them access tothe data on the basis of permission granted by law (e.g. if transfer of data
to third parties, such as payment service providers, is necessary for performance of a contract pursuant to Article 6(1)(b) GDPR), if you have given
your consent (Article 6(1)(a) GDPR), or we are subject to a legal obligation
to do so (Article 6(1)(c) GDPR) or on the basis of our legitimate interests(use of contractors, web hosting providers etc.) (Article 6(1)(f) GDPR).
If we contract third parties to process data, said third parties (‘processors’)
will be contracted pursuant to Article 28 GDPR.
Data transfer to third countries:
We will only process data in a third country (i.e. outside the European Union(EU) or the European Economic Area (EEA)), or do so by using the servicesof third parties or disclosing or transferring data to third parties, for thefulfilment of our (pre-)contractual duties (Article 6(1)(b) GDPR), on the basis of your consent (Article 6(1)(a) GDPR), on the basis of a legal obligation(Article 6(1)(c) GDPR) or on the basis of our legitimate interests (Article6(1)(f) GDPR). Unless granted permission by law or on the basis of a contract, we will only process or have data processed in a third country if thespecific conditions set out in Article 44 et seqq. GDPR are met. That meansprocessing is conducted on the basis of specific safeguards, such as a dataprotection level that is officially recognised as corresponding to that of theEU or compliance with officially recognised, specific contractual obligations(‘standard contractual clauses’).
Third parties as per GDPR also include our affiliated companies (Getzner
Werkstoffe GmbH (Austria), Getzner Werkstoffe GmbH (Germany), Nihon
Getzner K.K., Byrel Fastening Systems Co., Ltd; Getzner India Pvt. Ltd.,
Beijing Getzner Trading Co., Ltd., Getzner USA, Inc., Getzner France SAS,
Getzner Vibration Solutions Pty Ltd.) - https://www.getzner.com/en/sites.
Detailed information on newsletter sending:Content of the newsletter – purpose:
We send newsletters, emails and other electronic notifications containing
advertising information (hereinafter: ‘newsletters’) for the purpose of informing recipients about our products and services as well as those from ouraffiliated companies. Such communication is only sent with the consent of
the recipient or if permissible by law. If the content of a newsletter is specified in the context of registration for the newsletter, the consent of users isbased on that specified content. In addition, our newsletters contain information about our services and our company.
Double opt-in and logging:A double opt-in process is used for registration for our newsletter. That means that after registering you receive an email requesting confirmation ofyour registration. That confirmation is necessary to ensure that nobody
can register with email addresses that do not belong to them. Registration
for the newsletter is logged to provide proof of the registration process inline with legal requirements. That includes storage of the date and time of
the registration and confirmation, as well as the IP address. Any changes
to your data that are stored with the newsletter sending service will also
be logged.
Registration data:
To register for the newsletter, it is sufficient for you to enter your name/company name and email address. The registration process is logged on thebasis of our legitimate interests pursuant to Article 6(1)(f) GDPR. We havean interest in the use of a user-friendly and secure newsletter system thatserves our business interests, meets the expectations of users and enables
us to prove that consent has been granted.

1/2

The distribution service provider may use recipients’ data in pseudonymised form, i.e. without assigning such data to a user, in order to optimise
or improve its own services e.g. for technical optimisations to the distribution process and how the newsletter is displayed, or statistical purposes.
The distribution service provider does not use the data of our newsletter
recipients to contact them directly and this data is not passed on to thirdparties.
Newsletter – measuring success:
The newsletter contains a ‘web beacon’, i.e. a pixel-sized file that is accessed from our server or the server of our distribution service provider
when the newsletter is opened. During this process, technical information– such as information about your web browser and system, IP address andtime of access – is collected.
This information is used to make technical improvements to the service
based on the technical data or the target groups and their reading habits
based on their locations (which can be identified from the IP address) or
the access times. Data on whether the newsletter has been opened, when
it was opened and which links were clicked, is also collected for statisticalpurposes. Although it is technologically possible to identify individual newsletter recipients from this data, it is neither our intention nor that of any
distribution service provider we use, to monitor individual users. The data
is far more useful to us to identify the reading habits of our users and toadapt our content accordingly, or to send different content based on theinterests of our users.
Storage duration and deletion periods:
Data processed by us will be erased or their processing will be restrictedpursuant to Article 17 and Article 18 GDPR. Unless expressly indicated inthis information document, data stored by us will be erased once they are
no longer required for their intended purpose and erasure of the data is notin conflict with any statutory data retention obligations, unless the storageof the data is necessary for the fulfilment of a contract or an outweighing
legitimate interest. If data are not deleted because they are required forother contractual purposes or permitted by law, their processing will be restricted. That means the data will be blocked and will not be used for otherpurposes. That applies, for example, to data that must be retained pursuant
to provisions under commercial or taxation law.

Rights of data subjects:
You have the right:— to withdraw your consent at any time with effect for the future Pursuant to Article 7(3) GDPR. For this purpose, a corresponding notification via all known communication channels, e.g. by e-mail to privacy@
getzner.com, is sufficient. As a result, we may no longer continue thedata processing based on this consent in the future.
— to request information about your personal data processed by us in accordance with Article 15 GDPR.
— to immediately request the correction of incorrect or incomplete personal data in accordance with Article 16 GDPR.
— to demand the deletion of your personal data stored by us in accordancewith Article 17 GDPR, unless the processing is necessary for the exerciseof the right to freedom of expression and information, for the fulfilmentof a legal obligation, for reasons of public interest or for the assertion,
exercise or defence of legal claims.
— to demand the restriction of the processing of your personal data under
the conditions of Article 18 GDPR.
— in accordance with Article 20 GDPR, to receive your personal data which
you have provided to us in a structured, common and machine-readable
format or to request the transfer to another responsible person.
— complain to a supervisory authority in accordance with Article 77 GDPR.
As a rule, you can contact the supervisory authority at your usual placeof residence or workplace or at our company headquarters. In accordance with Article 21 GDPR, you may object to the processing ofyour personal data due to your particular situation, provided that thepersonal data are processed on the basis of a legitimate interest pursuant to Article 6 (1) lit. f GDPR. If your personal data is processed
for the purpose of direct marketing, you have a general right of objection without regard to your particular situation, which is implemented by us without precondition. If you wish to make use of your rightof objection, a corresponding notification via all known communication
channels, e.g. by e-mail to privacy@getzner.com, is sufficient.
Contacts:
We are happy to support our partners in all matters concerning data security. If you have any questions, we can be reached using the details above.
August 2020

The personal data collected by us will be stored as long as necessary for thefulfilment of the order or until the expiry of statutory storage obligations
and then deleted, for example in accordance with Article 6(1) sentence 1 lit.
c GDPR due to tax and commercial law storage and documentation obligations (usually 6 or 10 years under German commercial code (HGB) or tax
code (AO)) or if you have consented to storage beyond this in accordancewith Article 6 (1) sentence 1 lit. a GDPR.

DSGVO GSS de © Copyright by Getzner Werkstoffe GmbH l 08-2020

Distribution via MailChimp:
The newsletter is distributed by the distribution service provider ‘MailChimp’, an email marketing service from the US-based company Rocket
Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308,
USA. The MailChimp privacy policy can be viewed here: https://mailchimp.
com/legal/privacy/. The distribution service provider is used in the pursuitof our legitimate interests as per Article 6(1)(f) GDPR and in the capacity ofa contracted processor as per Article 28(3) sentence 1 GDPR.

AUSTRIA — Bürs GERMANY — Berlin — Munich — Stuttgart FRANCE — Paris — Lyon JAPAN — Tokyo INDIA — Pune
JORDAN — Amman CHINA — Beijing USA — Charlotte AUSTRALIA — Melbourne
www.getzner.com
2/2