Version 1.0: May 2018
We are pleased that you are interested in our web service www.testo-sensor.com and our online shop www.testo-sensor.shop. The protection of your privacy is very important to us. Testo Sensor GmbH, Testo-Strasse 1, 79853 Lenzkirch (hereinafter referred to as “Testo”).
Testo sees it as a matter of corporate responsibility to protect data entrusted to the company. To ensure that you feel secure when visiting our website, we strictly observe the statutory provisions during the processing of your personal data and would like to provide you with detailed information on how your data is handled.
1. Who is responsible for the processing of my data?
The responsibility for the processing of your data when you are visiting this website, in accordance with the EU General Data Protection Regulation (GDPR) lies with
Testo Sensor GmbH
Commercial Register Freiburg 706025
USt-IdNr.: DE 274417683
Prof. Burkart Knospe, Martin Arndt
Phone: +49 7653 965970
For all questions regarding data protection in connection with our products or the use of our website you can also contact our data protection officer at any time. The data protection officer can be contacted at the above postal address as well as the previously specified e-mail address (heading: “FAO Data Protection Officer”).
2. When and for what purpose does Testo collect data concerning you?
2.1. Access data
Each time our website is used, we collect access data, which is automatically transmitted by your browser to enable you to visit the website. The access data includes in particular:
- IP address of the device requesting the connection
- Date and time of the request
- Address of the website called up and the requesting website
- Information on the browser and operating system used
- Online identifiers (e.g. device identifiers, session IDs)
The processing if this access data is required to facilitate the visit to the website and to ensure the long-term functionality and security of our systems. The access data is temporarily stored in internal log files for the previously mentioned purposes, to prepare statistical information on the utilisation of our website, to enhance our website in view of the usage habits of our visitors (e.g. if the proportion of mobile devices calling up the pages increases) and to generally administratively maintain our website. The legal basis is Art. 6, Para. 1, Sentence 1 b GDPR.
The information stored in the log files does not allow any direct conclusions as to your person.
2.2. Making contact
There are various options for contacting us. These include the contact and service request form as well as contact via e-mail. It is evident from the respective input forms, as to which data is collected in each case. In this connection, we process data solely for the purpose of communicating with you. The legal basis is Art. 6, Para. 1 b GDPR. The data we collect when using the contact form is automatically deleted when your enquiry has been completely processed, unless we still require your request to fulfil contractual or statutory obligations (see section “When will your data be deleted?”).
2.3. Registration in online shop
You have the opportunity to register for our login area in the online shop, to enable you to benefit from the full range of functions of our website. It is evident from the respective input forms, as to which data is collected in each case. We have indicated which data is mandatory by marking the respective fields as required fields. Without this data it is not possible to register. The legal basis of the processing is Art. 6, Para. 1 b GDPR.
2.4. Ordering in the online shop
During the order process, we collect the mandatory information required for the processing of the contract:
- Name and surname
- billing and shipping address
- Telephone number
The legal basis of the processing is Art. 6, Para. 1, Sentence 1 b GDPR.
For the purpose of contract performance, we pass your details to the shipping company instructed with the delivery, to the extent that this is required for the delivery of the goods ordered. Depending on which payment service provider you select during the order process, we pass the payment details collected for the purpose of payment processing to the financial institution instructed to process the payment and, if appropriate, to the payment service provider instructed by us, or to the selected payment service.
If Testo is providing payment in advance, e.g. in the case of a purchase on account, to protect our legitimate interests, Testo reserves the right to make enquiries on identity and creditworthiness with service providers specialised in this - Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss - or to make the granting of certain payment terms contingent upon a credit check. The credit report can contain probability values (score values), which are calculated on the basis of scientifically proven mathematical-statistical procedures, where the address data, among other information, flows into the calculation. The information received regarding the statistical probability of a payment default is used by us for a balanced decision on the rationale, implementation or termination of the contractual relationship. Your legitimate interests are considered in accordance with the statutory provisions.
2.5. Applications for positions at Testo
You can apply for open positions at Testo via our application management system MHM eRecruiting. The purpose of collecting data is the selection of applicants for the potential creation of an employment relationship. For the reception and processing of your application, we collect the following data:
- Name and surname
- E-mail address
- Telephone number
- Date of birth
- Salary requirement
- Notice period
- Application documents (e.g. certificates, CV)
The legal basis for the processing of your application documents is Art. 6, Para. 1, Sentence 1 b and Art. 88, Para 1 GDPR in conjunction with national data protection law.
2.6. Other cases of balancing of interest (Art. 6, Para. 1 f GDPR)
We can also use your data on the basis of a balancing of interest for the protection of our legitimate, usually economic interests or those of third parties, whereby if possible we process pseudonymised or anonymised data. This is done for the following purposes:
- Monitoring and improvement of the effectiveness and legal security of business processes
- Credit assessments
- Monitoring, optimisation and further development of services and products
- Conducting of advertising (e.g. postal advertising, re-targeting), market and opinion research
- Assertion of legal claims and defence in legal disputes
- Detention, prevention and solving of crimes
- Safeguarding the security and operating ability of our IT systems
2.7. To fulfil other legal obligations (Art. 6, Para. 1 c GDPR)
We are subject to various legal obligations, e.g. legal retention requirements regarding business documentation as well as export regulations.
3. Disclosure of your data
Insofar as external service providers are used (hosting providers, application management, shipping service provider etc.) to operate this website or to provide services via a Testo Group company, or another Testo Group company is responsible for the processing, the companies concerned receive the access to your data only to the extent necessary for the fulfilment of their respective tasks and functions.
Insofar as these service providers and Testo Group companies process their data outside the European Union, this can lead to your data being transmitted to a country which does not offer the same data protection standards as the European Union. In this case we will ensure that the respective recipients of your data contractually or otherwise guarantee a level of data protection that is equivalent to that of the European Union. You can request a copy of these guarantees.
You can deactivate the option to store these cookies at any time in the system settings of your browser and delete existing cookies. Every user can also view the website without cookies. If you do not accept any cookies, this can, however, lead to a restriction in the functionality of our website.
Cookies required to carry out the electronic communication process or to provide specific functions you requested (e.g. use of the shopping basket), are stored on the basis of Art. 6, Para. 1 f. The operator of the website has a legitimate interest in storing cookies for the purpose of the technically smooth and optimised provision of its services. Insofar as other cookies (e.g. cookies for the analysis of surfing habits) are stored, these are dealt with separately in this privacy statement in the following section.
The legal basis for the data processing described in the following section is Art. 6, Para 1, Sentence 1 f GDPR, based on our legitimate interest to present personalised advertisements to you.
In the following section we would like to explain to you these technologies and the service providers deployed for this purpose in more detail.
The collected data can include the following data, in particular:
- The IP address of the device
- The date and time of the access
- The identification number of a cookie
- The device identification of mobile devices
- Technical information on the browser and the operating system.
The data collected is, however, stored only pseudonymously, so that it is not possible to make any direct conclusion as to the individuals.
In the following descriptions of the technologies we use, you will find information on the options for objection regarding our analysis and advertising measures by way of a so-called opt-out cookie. Please note that after the deletion of all cookies in your browser or the later use of another browser and/or profile, another opt-out cookie must be placed.
Below, are the options for objection regarding your analysis and advertising measures. Alternatively, you can raise your objection via corresponding settings on the websites Truste, NAI, DAA or Your Online Choices, where options for objecting are provided by many advertisers combined. This page permits the listed service provides to deactivate all advertisements at once, by way of opt-out cookies, or alternatively, to handle the setting for each provider individually.
5.1 Google (Universal) Analytics
Google will process the information obtained by the cookies to evaluate your use of the website, to compile reports on the website activities for the website operators, and to provide other services connected to the website use and internet usage.
As shown above, you can configure your browser in such a way that it rejects cookies, or you can prevent the capture of the data generated by cookies and related to your use of our website in the cookie settings of the privacy statement by Google. Alternatively, you can also prevent the processing of such data by Google, by downloading and installing the browser add-on provided by Google (the latter does not work with mobile terminal devices).
Further information to that end can be found in the Privacy statement by Google Analytics.
Google Analytics cookies are stored on the basis of Art. 6, Para. 1 f GDPR. The website operator has a legitimate interest in analysing the user habits to optimise its website as well as his advertising.
We also offer you the possibility of deactivating the detection of your website use data for this website by clicking on the following link: Disable Google Analytics . This sets a special opt-out cookie that prevents the future detection of your use-related data when visiting this website.
5.2 Google AdWords Conversion-Tracking and Remarketing
If you are using a Google account, depending on the settings in the Google account, Google is able to link your web and app browser history with your Google account and use information from your Google account to personalise advertisements. If you do not want such a link to your Google account to be made, you need to log out of Google before calling up our contact page.
6. Use of functions of further providers
6.1 Embedded YouTube videos
We have integrated videos in our website, which are stored at YouTube and which can be played directly from our websites. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), a Group company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). When personal data is transmitted to the USA, Google and the Group company YouTube has subjected itself to the EU-US Privacy Shield. The legal basis is Art. 6, Para. 1, Sentence 1 f GDPR, based on our legitimate interest in the integration of video and image contents.
When you visit our website, YouTube and Google receive the information that you have retrieved the corresponding subpage of our website. This happens regardless of whether you are logged in YouTube or Google or not. YouTube and Google use this data for the purposes of advertising, market research and appropriate design of their websites. If you are calling up YouTube on our website while you are logged in your YouTube or Google profile, YouTube and Google are also able to link this event to the respective profiles. If you do not want such a link to be made, you need to log out of Google before calling up our website.
You can configure your browser as shown above in such a way, that it rejects cookies, or you can prevent the capture of data produced via cookies and related to your use of this website, as well as the processing of such data by Google, by deactivating the button “Ads personalization” in the Google settings for advertising. In this case, Google will only show advertisements that are not personalised.
Further information can be found in the data protection notices by Google, which also apply to YouTube.
YouTube is used in the interest of an appealing presentation of our online websites. This is a legitimate interest in accordance with Art. 6, Para. 1 f GDPR.
8. When will your data be deleted?
In principle, we store personal data only as long as this is required for the fulfilment of contractual or legal obligations which are the reason for the collection of the data. After that, we delete the data immediately, unless we require the data until the expiry of the legal limitation periods for the purposes of evidence in civil claims or due to statutory retention requirements.
For evidentiary purposes, we have to retain contract data for three years after the end of the year the business relationship with you ends. According to statutory limitation periods, potential claims become time-barred no earlier than at this point in time.
After that, we still have to store part of your data for accounting purposes. We have an obligation to do so due to legal documentation requirements, which can arise from the Commercial Code, the Tax Code, the Banking Act, the Money Laundering Act and the Securities Trading Act. The retention periods for documents specified in the above legislation are two to ten years.
9. What are your data protection rights?
You have the right at any time to request information on the processing of your personal data by us. We will explain the data processing to you within the course of providing this information and furnish you with an overview of your stored personal data.
If data stored by us should be incorrect or no longer up-to-date, you have the right for this data to be corrected.
You can also request the deletion of your data. Should the deletion exceptionally not be possible due to other legal provisions, then the data is blocked, so that it is only available for this legal purpose.
Furthermore, you can restrict the processing of your data, e.g. if you are of the opinion that the data stored by us is not correct. You also have the right to data portability, in other words, upon your request, we forward a digital copy to you, containing the personal data that you have provided.
In order to assert the rights described here, you may contact us at any time, via the above-mentioned contact details. This also applies if you wish to receive copies of guarantees for evidence of a reasonable level of data protection.
Furthermore, you have the right to object to the data processing, which is based on Art. 6, Para. 1 e or f GDPR. Finally, you have the right to lodge a complaint at the data protection supervisory authority responsible for us. You can exercise this right at a supervisory authority in the member state of your residence, your employment or the place of the suspected breach. In Baden-Wurttemberg, the competent supervisory authority is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Königstraße 10a, 70173 Stuttgart.
10. Right of revocation and objection
You have the right, in accordance with Article 7, Para. 2 GDPR, to revoke consent once granted to us, at any time. As a consequence, we shall in future no longer continue to process the data that is the object of the consent. The revocation of the consent does not affect the lawfulness of the processing based on the consent up to the time of the revocation.
Insofar as we are processing your data on the basis of legitimate interests in accordance with Art. 6, Para. 1, Sentence 1 f GDPR, you have the right in accordance with Art. 21 GDPR, to raise an objection against the processing of your data, insofar as there are grounds for this, which arise from your special situation or where the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we shall implement also without the need for you to give reasons.
If you wish to use your right to revoke or your right of objection, an informal notification to the above-mentioned contacts is sufficient.
11. Data security
We maintain current technical measures to safeguard data security, in particular for the protection of your personal data against risks during data transmissions as well as against third parties acquiring knowledge of your personal data. These are correspondingly adjusted to the current state of the art. To secure the personal data specified by yourself on our website, we use Transport Layer Security (TLS) which encrypts the information you enter.
12. Amendment of the Privacy Statement
We occasionally update this Privacy Statement, for example when we are adjusting our website or if the legal or official requirements change.