The protection and security of your (hereafter referred to as “user”) personal data (hereinafter referred to as “pbD”) within the meaning of Art. 4 No. 1 of the General Data Protection Regulation (hereinafter referred to as “GDPR”) are important to us. Accordingly, we comply with the statutory provisions in order to provide appropriate protection for the pbD of each user. In the following, we would like to inform you about the type, scope and purpose of pbD processing:

Ashcroft Instruments GmbH (hereinafter referred to as “Ashcroft”) processes pbD exclusively within the scope of the GDPR as well as within the limits set out in Art. 95 GDPR in conjunction with § 25 Para. 2 TDDDG.

This data protection declaration (hereinafter “DSE”) provides the information pursuant to Art. 13 GDPR for the general use of the website www.ashcroft.eu.

1. Contact details of the person responsible (Art. 13 Para. 1 lit. a) GDPR)

Responsible for the operation of this website and thus for the handling of the pbD is

Ashcroft Instruments GmbH
Max-Planck-Str. 1-9
52477 Alsdorf
Germany

Phone: +49 (0) 2404 5589 0
Fax: +49 (0) 2404 5589 125
E-Mail: sales@ashcroft.com

represented by Managing Director: Steve Culmone
Commercial Register: HRB Aachen: 14345

2. Contact details of the data protection officer (Art. 13 Para. 1 lit. b) GDPR)

The data protection officer responsible for Ashcroft is:

Rechtsanwalt Georg Baumann,
c/o Georg Baumann Informationssysteme GmbH
Eichholzer Str. 80
50389 Wesseling
Germany

Phone: +49 2236 92920
Email: baumann@frag-den-dsb.de

3. Types of personal data
4. Accessing the public area of the website / free download

Each time the website is accessed, the following log files of the respective user are automatically recorded:

(1) Browser type
(2) The user’s operating system
(3) The address of the previously visited website
(4) The IP address of the user
(5) Date and time of access

1. Extranet

If the user is already an Ashcroft customer, Ashcroft will provide the user with individual access data for the extranet. Additional downloads are available there.

When visiting the extranet and as a result of the download, the following log files are also recorded:

(1) Browser type
(2) The user’s operating system
(3) The address of the previously visited website
(4) The IP address of the user
(5) Date and time of access

1. Contact by email

If the user chooses to contact Ashcroft by email, the email address, including all data technically related to the email, and the message content will be stored. In particular, the email address, if personalized, can be pbD within the meaning of Art. 4 No. 1 GDPR, as can the message content or parts thereof.

In addition, the website www.ashcroft.eu also contains the email addresses of all subsidiary companies. Ashcroft is not aware of which form of data processing takes place at the headquarters of the respective subsidiary and may be required under the national legal system of the subsidiary’s headquarters and must be requested by the user from the subsidiary concerned in case of doubt.

1. Use of the contact form

Ashcroft processes the data provided by the user via the contact form:

• Salutation,
• First name,
• Last name,
• Company,
• Street/house number,
• Postcode/location,
• Phone number,
• Email address,
• Message content.

The data to be provided here are partly those of Art. 4 No. 1 GDPR.

1. Submission of application documents

Application documents can also be submitted by email (see subpage “Career”). The data processed in this context are pbD within the meaning of Art. 4 No. 1 GDPR.

4. Purposes of collection and storage of pbD (Art. 13 Para. 1 lit. c) GDPR)
5. Accessing the website / free downloads / extranet

The log files are processed to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of the information technology systems. The data is not evaluated for marketing purposes.

1. Contact

The data provided by the user within the scope of the contact options are processed exclusively for the purpose of processing the user’s request.

1. Application documents

The data is processed to determine the applicant’s qualification and suitability for the position to be filled at Ashcroft.

5. Recipients / third parties / third country transfer (Art. 13 Para. 1 lit. e) and f) GDPR)

Recipients of the data may be third parties other than Ashcroft that process data on behalf of Ashcroft or that have access to the data as part of their service to Ashcroft (e.g. IT service providers).

The user data will not be transferred to third parties (Art. 4 No. 10 GDPR) unless the user expressly consents.

All data is stored on servers or computers within the European Union; a transfer to a third country does not take place and is not intended.

A transfer of pbD to state institutions and authorities is only carried out within the framework of legal regulations.

6. Cookies and analysis tools
7. Cookies

Ashcroft uses so-called “cookies”. Cookies are small text files that store website settings, e.g. in the user’s web browser, as part of the website use. The purpose of cookies is to make the website easier to use. The cookies used by Ashcroft are session ID cookies. They are only stored in the user’s web browser for the current session and are automatically deleted when the browser is closed. Each user is free to prevent the installation of such cookies by changing the settings of their browser accordingly. In this case, however, it may be that not all functions of the website can be used to their full extent.

1. Analysis tools

Ashcroft also uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics also uses cookies (see above), which enable an analysis of the use of the website by the user. The information generated by the cookie about the use of the website is transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on the website, the IP address of the user will be shortened by Google within member states of the European Union or other signatory states to the Agreement on the European Economic Area before this is done. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

Google will use this information on Ashcroft’s behalf to evaluate the use of the website, compile reports on website activity and provide Ashcroft with other services relating to website activity and internet usage. The IP address transmitted by the user’s browser within the scope of Google Analytics is not merged with other Google data. Users may refuse the use of cookies by selecting the appropriate settings on their browser.

Users can also prevent the collection of data generated by the cookies and related to their use of the website (including IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on data protection in connection with Google Analytics in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

7. Social media
8. Facebook

In addition, links are set which lead to the social network “Facebook”, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter “Facebook”).

When the user clicks on the Facebook link provided on www.ashcroft.eu, the user will be directed to Ashcroft’s Facebook profile and data will be transferred to the Facebook server. If the user is logged into Facebook as a member during this time, Facebook will associate this information with the personal Facebook user account.

For more information about Facebook’s collection and use of data, about user rights and privacy options, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/update?ref=old_policy

1. Twitter

Functions of the Twitter service are integrated on www.ashcroft.eu. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the “Re-Tweet” function, the websites visited by the user are linked to the Twitter account and made known to other users. Data is also transferred to Twitter in the process.

Ashcroft would like to point out that we, as provider of the sites, have no knowledge of the content of the transmitted data or its use by Twitter. Further information can be found in the Twitter privacy policy.

1. LinkedIn

Plug-ins of the LinkedIn network are also used. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). When the user clicks on the LinkedIn link provided at www.ashcroft.eu, the user will be directed to Ashcroft’s LinkedIn profile and data will be sent to the LinkedIn server. If the user is logged in as a member of LinkedIn during this time, the operator will associate this information with the user’s personal account.

If the user clicks on LinkedIn’s “Recommend-Button” and the user is simultaneously logged into their account on LinkedIn, LinkedIn is able to assign the visit to Ashcroft’s website to the user’s account. Please note that Ashcroft, as the provider of the pages, has no knowledge of the content of the data transmitted or of its use by LinkedIn.

Further information can be found in the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy.

1. YouTube

Ashcroft makes videos available on a channel hosted on the YouTube platform. The YouTube platform is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”).

When the user clicks on the YouTube link located at www.ashcroft.eu, the user is directed to the channel maintained by Ashcroft and it is transmitted to the YouTube server which Ashcroft websites the user has visited. If the user is logged into YouTube as a member during this time, YouTube associates this information with the personal account.

The user can prevent this by logging out of their YouTube account before accessing the website.

Further information on the handling of user data can be found in the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy.

1. Google Maps

In addition, plug-ins are used for the “Google Maps” service, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043. When the website is accessed, the server is informed which internet page the user has visited. In addition, the IP address of the browser of the user’s end device is stored by Google. Further information is contained in Google’s data protection information: www.google.com/policies/privacy/

8. Legal basis for data processing (Art. 13 Para. 1 lit. c) GDPR)
9. Accessing the website / free downloads

The legal basis for the processing of the data using cookies, analysis tools and social media plug-ins and log files is Art. 6 Para. 1 lit. f GDPR.

1. Extranet

The legal basis for the data processing is Art. 6 Para. 1 lit. b) GDPR.

1. Contact by email

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR, if the sender is not yet a customer or is not already in a business relationship with us in some other way. If a contractual relationship already exists or is to be initiated directly at the initiative of the sender, the legal basis is Art. 6 Para. 1 lit. b. GDPR.

1. Use of contact form

The legal basis for the processing of the data provided is Art. 6 Para. 1 lit. a GDPR. Before sending the data entered in the form, you give your consent to the transmission of your data and to the processing of the same for the purpose of dealing with your request. If the sender is already a customer or otherwise has a business relationship with Ashcroft, or if such a relationship is to be established when contacting Ashcroft, the legal basis is Art. 6 Para. 1 lit. b) GDPR.

1. Submission of application documents

The legal basis for the processing, in particular the temporary storage of the data stated in the application documents, is § 26 BDSG (new).

9. Duration of storage (Art. 13 Para. 2 lit. a) GDPR)

The data will be stored until they are no longer required for the purpose of their collection or until the revocation of granted consent, in each case subject to the restrictions of Art. 17 Para. 3 GDPR.

The data will therefore be deleted in the following periods:

• Log files: automatically every seven days. Archived data are kept for a maximum of four years.
• Download: upon completion. Archived data are kept for a maximum of four years.
• Transmission contact form/email: The data will be deleted one year after the response to the enquiry, unless further communication on the same subject has taken place before the expiry of this period or the data are still required due to a contractual relationship (for the purpose of contract processing/execution) or must be retained in accordance with the statutory retention period due to statutory retention obligations (Art. 17 Para. 3 GDPR).
• Application documents: six months after rejection has been issued. If the applicant has been employed/contracted, the application documents submitted by the applicant are transferred to a personnel file.
• Cookies/Analysis tools: see above.

10. Rights of the user (Art. 13 Para. 2 lit. b) – e), Art. 7 Para. 3 GDPR)

If the legal requirements are met, the user has the right at any time to information about pbD that we have stored about them, Art. 15 GDPR, as well as the right to correction, Art. 16 GDPR, restriction of processing, Art. 18 GDPR, and deletion of their data, Art. 17 GDPR.

If the user has asserted the right to correction, deletion or restriction of processing vis-à-vis Ashcroft, Ashcroft shall notify all possible recipients to whom the pbD in question has been disclosed of such correction, deletion or restriction of processing, unless this proves impossible or involves a disproportionate effort.

Likewise, the user has the right to revoke a consent once granted (Art. 7, Art. 6 Para. 1 lit. a) GDPR), Art. 7 Para. 3 GDPR. The proper revocation of consent does not affect the legality of the data collection carried out up to that point.

In addition, the user has the right to object at any time, for reasons arising from their particular situation, to the processing of the pbD concerning them, which is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR, Art. 21 GDPR.

In addition, if the legal requirements are met, the user has the right to receive their pbD that they have provided to Ashcroft in a structured, common and machine-readable format (right to data portability, Art. 20 GDPR).

In order to exercise these rights, the user shall contact the authorities specified in Sections 1 or 2 above.

Furthermore, the user has the right to appeal to a supervisory authority if the legal requirements are met, Art. 77 GDPR.