Source: https://www.interroll.in/legal-notices-and-terms/privacy-statement/
Timestamp: 2019-04-26 09:40:24+00:00

Document:
The websites interroll.com, interroll.de, interroll.ch, interroll.us and other interroll domains (hereinafter "websites") are provided and operated by Interroll (Schweiz) AG (hereinafter "Interroll", "we", "us"). As user of the websites you will hereinafter be referred to as "you" or "user".
This privacy statement informs you about which personal data Interroll collects from the users of its website, how and to what purpose these data are collected, processed and used by Interroll, and your rights pertaining thereto. This privacy statement applies to the website and to all services and products offered by Interroll online.
By visiting these websites, you agree to this privacy statement. Should you not agree to this privacy statement, you may not use the websites. Interroll reserves the right to amend this privacy statement from time to time. Interroll, therefore, advises the user to regularly consult this privacy statement. You can contact Interroll at any time, should you have a query regarding this privacy statement.
Personal data means any data relating to you personally such as your name, your postal address or your email address as well as the IP address assigned to you and connection data.
In principle, we only process our users’ personal data to the extent necessary to ensure functionality of the website and to provide our contents and services. As a rule, our users’ personal data are only processed with the user’s consent. An exception applies if the processing of data is permitted by law.
Art. 6 (1) point (a) GDPR serves as the legal basis for processing personal data, should we obtain consent of the data subject. If the processing of personal data is necessary for the performance of a contract to which the data subject is party or if the data subject acts on behalf of a corporate customer which is party to such contract, the legal basis is Article 6 (1) point (b) GDPR. This also applies to any processing necessary for the performance of pre-contractual measures. Should the processing of personal data be necessary for compliance with a legal obligation to which our company is subject, the legal basis is Article 6 (1) point (c) GDPR. If the processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party and if your interests, fundamental rights and freedoms as user do not override the first-mentioned interest, the legal basis for processing is Article 6 (1) point (f) GDPR.
The users’ personal data will be erased or blocked if they are no longer necessary in relation to the purposes for which they were processed. However, data can also be stored as provided for by European or national legislation in Union regulations, laws or other provisions to which Interroll as controller is subject. Upon expiry of a storage period prescribed by the standards referred to, the data are blocked or erased unless further storage is necessary for the conclusion or performance of a contract.
When visiting the website, certain information is transferred to the Interroll servers for technical reasons, such as your IP address and/or your HTTP-Proxy, the document and browser version used on the website from which you are visiting (for example through a link), your language preference, and similar information.
The system temporarily stores the IP address to deliver the website to the user’s computer. This requires the storage of the user’s IP address for the duration of the session. The storage in logfiles ensures the functionality of the website. We also use the data to optimise the website and to ensure security of our IT systems. Our legitimate interest in data processing lies in the purposes described pursuant to Article 6 (1) point (f) GDPR, which is the legal basis for the processing.
Data collected to provide the website will be erased upon termination of the respective session. Data stored in logfiles will be erased after 4 weeks at the latest.
The collection of data for the provision of the website and the storage of data in logfiles is essential for the operation of the website. The user, therefore, has no option to object.
The legal basis for processing personal data by using cookies for analysis purposes that use non-anonymized data is the user’s consent, Article 6 (1) point (a) GDPR. The consent may be withdrawn any time for the future.
This website uses Google Analytics, a web analysis tool of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files, which are stored on your computer and which allow analysing your use of the website (see also item IV of this privacy statement). The information created by the cookie about your use of this website is in general transferred to and stored on a Google server in the USA.
However, as IP anonymization is activated on these websites, your IP address will be previously shortened by Google within the member states of the European Union or parties to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this website in the future (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must click this link again): Disable Google Analytics.
For general information about Google Analytics and privacy, visit www.google.com/intl/en/analytics/privacyoverview.html.
The legal basis for this processing of your data is Art. 6 (1) point (f) GDPR, which allows processing if it is necessary for the purposes of a legitimate interest pursued by our company or by a third party and if your interests, fundamental rights and freedoms as user do not override the first-mentioned interest. This permission standard allows the processing of personal data within the "legitimate interest" of the responsible person, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest is the analysis of the use of our website. Your interests are safeguarded by the anonymization of the IP-address.
Interroll uses the services of HubSpot. If you agree to the use of HubSpot, certain usage data of you will be collected and processed, such as which website you visit, and what content you have downloaded from our websites. The information and the contents of the website are stored on HubSpot, Inc. servers. Interroll uses this information to display and provide you with information that is tailored to your interests.
Legal basis for data processing with the help of HubSpot is your consent, which you can give us when you visit the website, Art. 6 (1) point a GDPR.
Various contact forms can be found on our website which you may use to contact us electronically. If you choose this option, the data entered in the respective input form will be transferred to us and stored in various databases. Interroll uses various data processors for data administration.
When sending the respective contact form, the following data will also be stored: IP address, date and time of registration.
You may also contact us by email. If you do so, we will store this email.
Any personal data entered in the contact forms’ input screen are used solely to process your contact request.
The contact form offers the possibility to contact all business units of Interroll. Your contact request will therefore be forwarded to the Interroll company whose business area and / or territory your contact request concerns. Depending on which business area or territory your inquiry concerns, this may also involve a transfer of your contact request to another country or to a distribution partner of Interroll if Interroll does not cover the desired territory itself.
The legal basis for the processing of the data of your contact request, including any transfer to another Interroll company or a distribution partner of Interroll including a transfer to another country, is our legitimate interest in the processing of the data (Art. 6 (1) point f GDPR). In case of the consent of the user, the consent is the legal basis for the processing pursuant to Art. 6 (1) point a GDPR. If the objective of the contact is to enter into a contract, Article 6 (1) point (b) GDPR is an additional legal basis for processing.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The legal basis for this processing is our legitimate interest (Article 6 (1) point (f) GDPR).
The data will be erased, should they no longer be necessary to achieve the purpose for which they were collected. Personal data entered into the contact form’s input form and any data sent by email will be erased upon termination of the respective conversation with the user. A conversation is terminated where it can be inferred from the circumstances that the issue has been conclusively resolved.
Any additional personal data collected in the course of transmission will be deleted after 7 days at the latest.
If the user contacts us through a contact form or by email, he has the right object at any time to the processing of his personal data. The conversation can then not be continued. If the user gave his consent to the processing, such consent can be withdrawn at any time with effect for the future.
When the respective contact form is sent, the following data are also stored: IP address, date and time of registration.
The data collected during the registration process enable us to provide you with the desired service (periodic sending of industry information, newsletters or magazines). With respect to the industry information, newsletters or magazines subscribed to by the user, the legal basis for processing is the performance of a contract concluded between Interroll and the user regarding the sending of this information (Article 6 (1) point (b) GDPR).
Collection of additional personal data as part of the registration process serves to prevent abuse of the services or of the provided email address. Our legitimate interest pursuant to Article 6 (1) point (f) GDPR serves as legal basis.
If the user gave separate consent to receive information, Article 6 (1) point (a) GDPR serves as legal basis.
The data will be erased, should they no longer be necessary to achieve the purpose for which they were collected. This means that the user's contact details required for sending out the information will be stored as long as the subscription to the newsletter is active.
Subscription to the newsletter, industry information, and magazines can be cancelled at any time. If the user has consented to receive information, such consent can be withdrawn at any time with effect for the future.
When the respective contact form is sent, the following additional data are also stored: IP address, date and time of registration. If required for the performance of Interroll's services requested by the user, the data will be passed on to the respective technical or content-related Interroll company, e.g. for admission tickets to trade fairs, which are administered locally, or for CAD downloads, about which the nearest sales office is informed.
The data collected during the registration process enable us to provide you with the desired service (e.g. download of information, use of the product configurator, providing you with an admission ticket to a trade fair). Article 6 (1) point (b) GDPR (performance of a contract) serves as legal basis in this respect.
Furthermore, contact details provided to us during the registration process are used to provide you with information on our products and services that is tailored to your interests. If legally required, we obtain your consent for this. The legal basis for processing your data in order to provide you with such information (direct marketing) is our legitimate interest (Article 6 (1) point (f) GDPR) or, if you have given us your consent, Article 6 (1) point (a) GDPR.
Collection of the mentioned additional personal data as part of the registration process serves to prevent abuse of the services or of the provided email address. Our legitimate interest pursuant to Article 6 (1) point (f) GDPR serves as legal basis.
Contact details of the user required for sending out further information will be stored as long as the user does not object to the sending, does not withdraw his consent in this regard, or maintains it upon a corresponding request by Interroll.
The user can object to the sending of information on our products and services at any time. If the user has consented to receive information, such consent can be withdrawn at any time with effect for the future.
The data collected during the registration process are required for the initiation and performance of the contract initiated or concluded in the online shop. Article 6 (1) point (b) GDPR (performance of a contract) serves as legal basis in this respect.
Interroll also stores the contact details in order to provide the user with promotional information from Interroll Group companies and their business partners. The user's consent is obtained for this. Article 6 (1) point (a) GDPR (consent) serves as legal basis in this respect.
The data will be erased after the legal retention periods for contract data have expired. Contact details of the user required for sending out information will be stored as long as the user does not withdraw the consent given in this respect.
The user can withdraw his consent to receive promotional information at any time with effect for the future.
Your information will be transferred directly to the competent HR department of Interroll in your country of residence and will be processed by that company.
The data you submit with the application will be processed for the purpose of reviewing your application. The legal basis for this is the initiation of an employment relationship (Article 6 (1) point (b) GDPR or the respective national regulations.
The data will be erased, should they no longer be necessary to achieve the purpose for which they were collected, i.e. if the application does not result in employment, subject to longer statutory retention periods.
Your data are not sold to, exchanged with or passed on to third parties by us. We only share generically aggregated, demographic information that cannot be linked to your personal data or our business partners.
We use external service providers as processors within the meaning of Article 28 GDPR for the administration of our websites and other activities. Our website is hosted by K1 Internet Service Hanno Kirchhoff, Birkenstraße 65, 40233 Düsseldorf. To send newsletters, mailings, or surveys we use the technical platform of HubSpot, Inc, [25 1st St. Cambridge MA 02141, USA]. We also use Google Analytics of Google, LLC [1600 Amphitheatre Parkway Mountain View, CA 94043, USA] for analysis.
Our processors are bound by contract to comply with the applicable legal provisions on data protection and data security. Transfers to HubSpot, Inc. and Google LLC are registered with Privacy Shield.
Each data subject has the right to information under Art. 15 GDPR, the right of rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. To exercise the aforementioned rights, you may turn to the entities mentioned in section 1 (Responsibility for data processing and contact details).
You have the right at any time, for reasons arising out of your particular situation, to object to the processing of personal data relating to you which is based on Article 6 (1) point (f) GDPR (data processing based on the legitimate interest) takes an objection; this also applies to any profiling based on this provision within the meaning of Article 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for that purpose. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made in a form-free manner and should be directed to the entities mentioned in section 1 (Responsibility for data processing and contact details).
If you have given us consent to the processing of your personal data, you may withdraw this consent at any time. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.
Pursuant to Article 77 (1) GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state you live in, work in or suspect the infringement to have taken place in, if you believe that processing of your personal data is not in line with legal provisions, in particular with the GDPR.
Interroll reserves the right to amend this privacy statement from time to time. Interroll will update the date at the top of this page whenever changes are made. Interroll recommends that you consult this statement regularly so that you are always aware of the privacy statement in its currently applicable form. If you continue to use our website after amendments to the privacy statement have been published, you thereby agree to any amendments made to the privacy statement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20