Data is collected in log files, and through search engines and forms, whenever our websites are used. When you visit our websites, our web servers permanently store the following as standard for the purposes of system security: the connection data of the enquiring computer; which of our websites you have visited; the date and duration of the visit; the recognition data of the browser and operating system used; the website from which you came. Additional personal information such as your name, your address, telephone number or e-mail address are not collected, unless these are voluntarily provided by you, e.g. during registration, a survey, a contest, to execute a contract or a request for information. The stored data will be used to track misuse on the web server and then deleted. The time of the last login is also used for advertising purposes, insofar as this is legally permissible.

Scope of processing of personal data

We integrate and use cookies on various pages to enable specific website functions and to integrate external web services. "Cookies" are small text files that your browser can store on your device. These text files contain a unique character string that identifies the browser when you return to the website. The process of saving a cookie file is also called "setting a cookie". Cookies can be set both by the website itself and by external web services.

We also use technologies on our websites that store data in the browser's cache ("local storage technology"). Third parties do not have access to the data stored in your browser's cache.

You can find details of the cookies and local storage technologies processed on our website below in this data protection notice.

Legal basis for the processing of personal data

Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(a) or Art. 49(1)(a) GDPR (consent).

The relevant legal basis can be found in the cookie and local storage table listed later in this section.

As a general rule, in the case of cookies and local storage technology that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies or local storage technologies). Cookies and local storage technologies may also increase the user-friendliness and enable a more personalised presentation of the website. A legitimate interest also exists for cookies and local storage technologies used for website security and therefore also for personal data security. We have balanced your interests with ours concerning the cookies and local storage technologies listed in the table below.

Cookie and local storage technology allows us to analyse and track individual website visitors but only when the website visitor has consented to the use of cookies and local storage technologies. Displaying individualised advertising is also possible only with your consent.

Purpose of data processing

Cookies and local storage technologies are set by our website or external web services to maintain the site's full functionality, to improve user-friendliness or to pursue, with your consent, the stated purpose. Cookie and local storage technology also allows us to identify individual visitors by using pseudonyms, e.g. individual or random IDs. We are then able to provide more personalised services. Details are shown in the following table.

Duration of storage

The cookies listed below are stored in your browser until you delete them or on expiry of the storage duration. Session cookies are deleted when the session has expired. The data stored in the local memory is stored in such a way that it remains in the browser's cache and so on the end device once a browser window or tab is closed, or after the browser is closed. The data stored in the browser's cache can be deleted manually. Most browsers offer you the option to delete data using the "Delete browser data" or "Clear cache" function.

Details are listed in the following tables:

We use Microsoft Teams for telephone and/or video conferences, webinars and virtual tours (collectively: "online meetings"). Microsoft Teams is part of Microsoft 365 from the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

If you are invited to an online meeting by TRUMPF, the following data can be processed: information on participant (first name, surname, e-mail address, profile picture, video picture), online meeting data (subject, description) as well as further data provided by you via the Microsoft Teams' chat function within an online meeting. If required, chat transcripts can be logged by TRUMPF. In this case, the transcripts are stored until the purpose of the transcript recording is no longer valid.

The scope of the data processing by TRUMPF depends on which information you provide.

Legal basis for the processing of your personal data within the framework of online meetings is art. 6 para. 1 lit. b GDPR.

Online meetings are generally not recorded. If the meeting is recorded as an exception, all participants are asked to give their consent before and at the start of the recording. The recording will only take place if consent is given. If TRUMPF records an online meeting with your consent, the recordings are deleted as soon as the purpose for the recordings is no longer valid.

Legal basis for the processing in case of recording is your consent, art. 6 para. 1 lit. a GDPR.

Further details on data protection can be found in Microsoft's data protection statement under  https://docs.microsoft.com/en-gb/microsoftteams/teams-privacy.

We use Google Analytics to analyse and statistically evaluate website usage. The data obtained is used to optimise our website and promotional activities.

Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

We use the Adwords Remarketing function from Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google Remarketing allows us to show you only the products which truly interest you, when you are visiting websites which belong to the Google Display Network (GND). To that end, cookies are saved by your browser in order to recognise you when you visit GND websites again. Through analysis of your website use, you will then be shown advertisements for products which you have already viewed, or which you may be interested in.

When processing your data, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

To prevent the saving of cookies for remarketing, you can change your settings for personalised ads here http://www.google.com/settings/ads. Alternatively, you can proceed as instructed by the website of the NAI – Network Advertising Initiative http://www.networkadvertising.org/managing/opt_out.asp).

We use the Adwords conversion tracking function from Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google conversion tracking allows us to track what happens after a user accesses our advertisement. For example, to identify whether a product is purchased or if there is a subscription to our newsletter. By clicking on our Google ad, a cookie is saved on your device to enable this function. This will not create a personal reference.

When processing your data, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab. 

To prevent cookies for conversion tracking from being saved, you can change the settings in your browser accordingly.

Additional information about conversion tracking can be found here https://support.google.com/adwords/answer/1722022?hl=en.

We provide a social media wall on our web page. For this purpose, we use a plugin/widget from Walls.io GmbH, Schönbrunner Straße 213/215, 1120 Vienna, Austria. As soon as the plugin/widget is loaded by your browser, your IP address, the web page visited and other device-specific information is transmitted to Walls.io GmbH.

For the purposes of marketing and optimisation, products and services from the company wiredminds GmbH (https://www.wiredminds.de/en/) are used. In this context, data is collected, processed and stored – and a pseudonymous usage profile is created from this. Where possible and reasonable, usage profiles are entirely anonymised. Cookies can be used for this. Cookies are small text files which are saved in the visitor's Internet browser for the purposes of recognising the Internet browser. The collected data, which may also contain personal data, is transmitted to wiredminds, or directly collected by wiredminds. wiredminds is permitted to use information left behind from website visits to create anonymised usage profiles. The data collected in this process will not be used to personally identify the visitor of the website without separately granted consent by the data subject. It will also not be combined with personal data about the bearer of the pseudonym. If IP addresses are collected, these are immediately anonymised after they have been collected, by deleting the last block of numbers. You may object to the collection, processing and storing of data at any time, with effect for the future.

We use a content delivery network  (CDN) from Akamai Technologies, Inc., 145 Broadway, Cambridge, Massachusetts, USA. A CDN is a service which can be used to deliver our online content faster, in particular large media files such as graphics or scripts, using regionally distributed servers that are connected via the Internet.

For this purpose, we use the web application protector  service provided by Akamai. This service is used to check every request for possible security risks. This protects our web page against external threats. To ensure this, all data traffic between you and us is routed through Akamai's servers and IT infrastructure. Akamai states that it does not store any personal data.

Our web page also uses "mPulse". This sets a cookie on your end device, which helps us to measure and check the web page's response speed. This may result in the data recorded being passed on to Akamai.

To provide product updates in MyTRUMPF for downloading, we use Akamai's "Download Delivery"  product. Here too, it is possible that your personal data may be processed by Akamai.

When processing your data, as described above, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

Additional information can be found at https://www.akamai.com/legal/privacy-statement

The legal basis for the processing of your data as part of the CDN is art. 6  para.  1 lit b GDPR. The legal basis for the processing of your data as part of mPulse is art. 6 para. 1 lit. a GDPR. Data is transmitted to Akamai on the basis of suitable guarantees providing the affected persons enforceable rights and effective legal redress. We have ensured this via EU standard data protection agreements.

The TRUMPF Group takes all required technical and organisational security measures in order to protect your personal data against loss or misuse. Your data will be stored in a safe operating environment to which the public has no access. In certain cases, your personal data will be encrypted during transmission by so-called Transport Layer Security technology (TSL). This means that data protected by TSL is communicated between your computer and our servers by using a recognised encryption procedure if your browser supports TSL. We use Ingenico Payment Services GmbH (https://www.ingenico.com/epayments) to offer you absolute security of your credit card data. This data is not stored on our servers, but is processed directly by the relevant payment institution. If you wish to contact us by e-mail, we would like to point out that the confidentiality of the transmitted information is not guaranteed. The content of e-mails can be viewed by third parties. Therefore, we recommend that you send us confidential information exclusively by post.

We use Google Maps (a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website to show the location of our sites in the Google Maps plug-in. When using Google Maps, data which is necessary for this use is forwarded, along with additional data.  When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

This can be, for example, device-related information or log file data from servers, including IP addresses or data from the browser's web storage. In this regard, Google writes: "Under certain circumstances, we connect personal data from one service with information and personal data from other Google services."

You can find additional information and details in the data protection conditions for Google services (https://policies.google.com/privacy?hl=en).

These web pages use external fonts from Font Awesome (Fonticons, Inc. 710 Blackhorn Dr., Carl Junction, MO 64834, USA). These web fonts are incorporated when a server is accessed; generally a server from Font Awesome in the USA. This will inform the server about which of our websites you have visited. Font Awesome will also store the IP address of the browser of the vistor's end device to these web pages. 

When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

Additional information about Font Awesome's data protection policy can be found here: https://fontawesome.com/privacy 

We analyse movement, clicking and swiping behaviour on our website on a randomised basis, in order to improve the design of our pages. To do this, we use the Hotjar service, which randomly records a small portion of the session. Hotjar stores this information in a pseudonymised user profile.  When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

The information is used by neither Hotjar nor us to identify individual users. The data are anonymised, stored and deleted after 365 days.

Additional information can be found in Hotjar's data protection policy: https://www.hotjar.com/legal/policies/privacy

In order to optimally cater to your needs and interests, your e-mail address will be used by different companies from the TRUMPF Group for the purposes of advertising. We use the TRUMPF newsletter and other mailings to inform you about us and our offers. To manage our e-mail marketing efficiently, your data is used within the corporation.

If you register via our website, we will verify your identity by means of a confirmation e-mail in a double-opt-in process.

Subscription to mailings can be modified at any time, or cancelled with immediate effect without giving a reason. To do this, please click on the "personal profile" link which is located at the end of the mailing, or send an e-mail to marketing@uk.trumpf.com. In your personal profile, you can cancel the subscription entirely, or modify and supplement the information you have provided. Additionally, subscriptions to individual areas of interest can be edited or deselected.

We use the tool Episerver Campaign (Episerver GmbH, Wallstraße 16, 10179 Berlin, Germany) for our e-mail processes. By setting a tracking pixel when you open our e-mails, information which allows us to evaluate the user behaviour (opening the e-mail, e-mail address, time, IP address) is retrieved. The links in our e-mails are designed in such a way that we can trace whether they have been clicked on. Using this information we can adapt our offers to better suit your interests.

We use LinkedIn Matched Audiences, a service of LinkedIn Marketing Solutions - portfolio of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This service enables us to show you specific interest-related ads for our offers on the websites of the LinkedIn network. To this purpose, the contact data transferred by TRUMPF to LinkedIn is compared with the LinkedIn database.

When using LinkedIn Matched Audiences, data required for use and other data are passed on. When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

We carry out the check on the basis of our legitimate interest, Art. 6 para. 1 sub-item f of the GDPR, which is to provide the content relevant to the contacts with the purpose of product advertisement.

You may object to this use at any time by sending an e-mail to marketing@uk.trumpf.com. You also have the option of prohibiting processing using the settings in your LinkedIn profile. To do so, please use the setting "Interaction with company" which can be found in your settings in the "Display data" section under "Advertising preferences".

Further information on data protection from the third-party provider can be found on the following website: https://www.linkedin.com/legal/privacy-policy.

Our website features an online product finder. The product finder allows us to display suitable products based on your responses to certain questions. The product finder is provided by excentos Software GmbH, Reiterweg 1, 14469 Potsdam (hereinafter referred to as 'excentos').

If you have granted us your consent, your selected responses, navigation activities and any purchases will be stored for optimisation purposes. We process this data for customer service purposes and to provide recommendations.

The product finder can be used without the disclosure of any additional personal data. Further personal data only needs to be disclosed in a form if you request a sample part or quote.

Your data will be processed on the basis of your given consent in accordance with Art. 6 Para. 1 lit. a GDPR

Your responses, navigation activities and any purchases will also be stored in anonymous form in a web analytics system operated by excentos. The user's IP address and usage activities are also recorded by the necessary infrastructure services (such as Cloudflare) as part of the justified balancing of interests to prevent cyber attacks. This is a necessary safety precaution that permits us to offer the product finder services. Data collected in this manner is only stored for a temporary period (up to 4 hours) to allow us to identify any attack patterns. During this period, it may be possible to indirectly assign usage activities to users based on time stamps under certain circumstances. Once this period has ended, excentos will delete the IP addresses, incl. all log data.

By participating in sweepstakes, the participant expressly consents to the TRUMPF Group storing the required data for the period of the sweepstakes and afterwards, to carry out the sweepstakes. Participants also consent to the publishing of their full name on the participating web pages, in the event that they win. There is no claim to such publication. The data collected as part of the sweepstakes will also only be used by the TRUMPF Group in the legally permissible scope for advertising products. The data will not be forwarded to third parties.

At different areas of our website (under "Contact"), visitors have the option to send us questions relating to our products. By clicking the "Send" button, you agree to the collection, processing and use of your data. The data is processed, stored and used to handle your question. For enquiries from the business environment (B2B), it will also be used for the purposes of advertising, if this is permissible without needing consent. You may object to this use at any time, via the contact information listed above. We delete user data once your query has been processed.

On our website we use the Friendly Captcha service from Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee. Friendly Captcha is integrated into our contact forms and is used to differentiate between legitimate requests from humans versus automated and abusive requests from computer programs. The purpose of this data processing is to minimise abusive inquiries via our contact forms.The purpose of this data processing is to minimise abusive inquiries via our contact forms. As soon as you call up our contact form, the following personal data are collected: information about the browser you are using and the operating system, origin and referrer ID, cryptographic puzzle, version of the Friendly Captcha widget and a time stamp. Friendly Captcha also stores an anonymous counter for dynamic adjustments to the cryptographic function. The IP addresses are anonymised using a hash value. The data are sent to a Friendly Captcha server. The server reports back to us whether the request was made by a human or by a computer program and releases the contact field for enquiries from humans. Art. 6 para. 1 letter f GDPR ("Legitimate Interest"). Our legitimate interest is to separate legitimate human enquiries from abusive enquiries generated by computer programs. After your enquiry has been processed, the data collected will be deleted immediately, provided there are no statutory retention periods. Further information can be found in Friendly Captcha's privacy policy at: https://friendlycaptcha.com/legal/privacy-end-users/.

You can upload drawings or images onto our website or have them uploaded via our marketing department. The uploaded content will be deleted at the end of the business relationship. By uploading or transferring this content to TRUMPF, you declare that you own the necessary rights.

You have the option of booking digital events via our website. The data entered when booking a digital event is used for preparation and execution of events. We will store the login data you enter (email address and your self-selected password) for future bookings. Of course, the password is not stored in plain text but as a hash value. We will store your data until you notify us of your desire to have your data deleted. We will delete your data automatically if a booking is not made over a longer period of time.

The notes on data protection listed below under the "MyTRUMPF" tab also apply for the use of the MyTRUMPF customer portal. The general instructions, in particular in relation to your rights, also apply for the use of MyTRUMPF.

You must register with our customer portal in order to use MyTRUMPF. During the registration, we will process the information you provide during the registration process. All information required for the registration process is specifically indicated. You can also provide further data, beyond the necessary information, on a voluntary basis.

We will use your data within the framework of your registration activation, as well as to identify you as the contact person of a customer and to display customer-specific content. During registration, you as a person will be assigned to one of our customers. Other employees of your company can access your information stored in MyTRUMPF using this allocation. The exception is of course the password you select, which we store as a hash value and cannot view in plain text. Third parties have no access, however.

If we activate the MyTRUMPF User Admin function for your company, the customer administrator authorised for your company can view the information you have provided during registration (see notes under "MyTRUMPF User Admin").

Before activating the account, we check all business partners to ensure they are not listed on published sanction lists. A service provider selected by us carries out this check. The name listed during registration is checked to ensure it is not included in the sanction lists. We will block the account if we determine that the name is listed in a sanction list. The check is carried out regularly even after registration due to the fact that the sanction lists are constantly updated. We will store the status of the check. We carry out the check on the basis of our legitimate interest, art. 6  para.  1  lit.  f GDPR. Our legitimate interests consist in ensuring that TRUMPF does not do business with persons included on a sanction list. You are welcome to get in touch with our data protection officer to find out which lists TRUMPF checks specifically.

TRUMPF has a representative in some countries. If this is the case, the representative is given access to the personal data you have provided. We use contractual regulations to ensure with the representatives that the processing of your data is in line with data protection standards.

Apart from that, your data is only processed for your MyTRUMPF account and is deleted at the latest one year after the account has been deactivated. The legal basis for the processing of the information deemed to be necessary is art. 6 para. 1 lit. b GDPR. The legal basis for the provision and processing of your voluntary information is your consent, art. 6 para. 1 lit. a GDPR.

MyTRUMPF can only be accessed after the log-in process has been completed. During the log-in procedure, we process your e-mail address and the password stored as a hash value so that we are able to identify you as the contact person of our customer. This ensures that only authorised users have access to our platform.

During the log-in process, we verify the status of the sanction list check by comparing it with the data in our system. We do not check the sanction lists. Only the authorisation status is read out.

The legal basis for the processing of your data during the log-in procedure is art. 6 para. 1 lit. b GDPR. We carry out the status comparison of the sanction lists' checks on the basis of our legitimate interest, art. 6 para. 1 lit. f GDPR.

You can reset your password with the Recover Password function. You will have to enter the e-mail address you used during registration to do so. After entering the e-mail address, you will receive a link from us which you can use to create a new password. We will store the password you select as a hash value and not in plain text. Third parties have no access, however.

The legal basis for the processing of your e-mail address is art. 6 para.1 lit b GDPR.

We make it possible for customers to manage access to MyTRUMPF with the "MyTRUMPF User Admin" function. We activate the MyTRUMPF User Admin function in agreement with our customers on an individual basis.

Other members of the company can be invited to participate in MyTRUMPF User Admin. The e-mail address of the other members of the company must be entered to do so. The invited members then receive an e-mail with a link to activate the account. If the link for account activation is not used within 30 days of being sent, the account to be activated will be automatically deleted.  The MyTRUMPF User Admin can access the personal data of members of their own organisation. However, access to personal data of users from other organisations is not possible.

The MyTRUMPF User Admin is also authorised to activate or reject members from their own organisation.

The legal basis for the processing is art. 6 para.1 lit b GDPR.

You can upload drawings or images using your MyTRUMPF account. The uploaded content can be viewed by all MyTRUMPF accounts of the same organisation. Uploaded content is stored by TRUMPF until it is deleted by you or at the end of the business relationship. By uploading the content, you declare that you possess the necessary rights.

In the MyTRUMPF customer portal, you can report service cases for your TRUMPF products. Any data entered as part of the report and all subsequent communications via MyTRUMPF will be stored. Mandatory fields are marked accordingly. The amount of the data stored depends on the information you provide. TRUMPF processes your data for analysis and remedial action for the registered service case. Please remember that any personal information provided within the course of a service case registration can be viewed by other members of your company.

If you report a service case via the TRUMPF Service app, the corresponding notes for the TRUMPF Service app additionally apply.

If the storage of your data is no longer needed for the purposes listed above, including billing or other legal requirements, it will be deleted.

The legal basis for the processing is art. 6 para.1 lit b GDPR.

You have access to the TRUMPF E-Shops within your MyTRUMPF account. The data which is provided as part of orders from the E-Shops is used to fulfil these orders and then saved in accordance with the legally stipulated retention periods – for example, 10 years for taxation purposes. Furthermore, the data are used for advertising purposes by the TRUMPF Group, if this is legally permissible without requiring consent from the parties concerned. You can opt out of this use at any time using the contact data listed above.

CONSENT:

TRUMPF analyses the user's order process to check for a possible cancellation of the order process. This data is then evaluated by TRUMPF. TRUMPF uses the data obtained in this manner to get in touch with a user. You hereby agree to TRUMPF carrying out the aforementioned analysis and that TRUMPF may use the knowledge acquired to contact you. You can revoke your consent at any time. Information on exercising the right to revoke consent can be found in the data protection statement under "Your rights".

The legal basis for the processing of data provided during ordering is art.  6  para. 1 lit. b GDPR. Your consent is the legal basis for the evaluation process described, art.  6  para. 1 lit. a GDPR

The notes on data protection which can be downloaded from the app apply for orders using our Easy Order app.

You can use your MyTRUMPF account to book training courses offered by TRUMPF. An active MyTRUMPF account is required to make a booking. The data entered when making a booking is used for preparation and execution of training courses and to contact participants. We provide performance assessments as part of our training courses. If you participate in the assessments, the data you provide for this will be stored and evaluated. A test result is subsequently determined using this data. The test results are transmitted to the participant's employer once the assessment has been completed.

When booking training courses, you can upload a photograph of yourself on a voluntary basis. If conclusions concerning particular categories of personal data can be drawn from the photograph (for example, a person wearing glasses), your consent expressly includes this data as well.

Your contact data will be used to make you aware of further offers from TRUMPF if you agree to this when booking a training course.

The legal basis for the processing of data provided when booking training courses is art.  6  para. 1 lit. b GDPR. We process your voluntarily uploaded photograph based on your consent in accordance with art. 6 para. 1 lit. a GDPR and/or art. 9 para. 2 lit. a GDPR.