7. Automated individual decision-making, including profiling

You have the right not to be subject to decisions based solely on automated processing – including profiling – where such decisions produce legal effects or affect you otherwise in a similarly significantly manner. This shall not apply if the decision

(1) is necessary to enable the concluding or performance of a contract between you and the data controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is based on your explicit consent.

Such decisions, however, must not be based on the special categories of personal data referred to in Article 9(1) GDPR, unless either point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and your legitimate interests are in place.

In the cases referred to in (1) and (3) above, the data controller shall implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

8. Right to lodge a complaint with a supervisory authority

You are furthermore entitled to lodge a complaint with the competent supervisory authority in data protection matters regarding our processing of your personal data.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement if you believe that the processing of your personal data is not compliant with GDPR provisions.

The supervisory authority with which a complaint is lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of judicial remedy in accordance with Article 78 GDPR.

9. General questions and contact options

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to receive information, to demand correction or erasure of your data, or to revoke any consent you have previously granted, please contact our data protection officer. Contact options can be found under [point §1] of this data privacy statement.

§ 3 Collection of personal data when you visit our website

(1) A legal definition of the term “personal data” is provided by Article 4(1) GDPR, according to which it refers to “any information relating to an identified or identifiable natural person”. Personal data is thus all data that can be used to identify you personally, e.g. name, address, e-mail addresses, user behaviour and IP address.

(2) When you visit the website solely for information purposes, i.e. without registering or otherwise sending individual information to us, we collect only those personal data that your browser sends to our server. This information is temporarily saved in a log file. When you submit a request to view our website, we collect the following data, which is required for technical reasons to enable us to display the website and to guarantee its stability and security:

• IP address (anonymised)
• Date and time of your request
• Time zone difference relative to Greenwich Mean Time (GMT)
• Contents of the request (specific page)
• Access status/HTTP status code
• Data volume transferred in each instance
• Website from which the request originated
• Browser used
• Operating system and its interface
• Language and version of the browser software
• User location

The legal basis for collection and storage of this data is provided by Article 6(1) subparagraph 1(f) GDPR

(3) In addition to the data mentioned above, we also save cookies to your computer when you use our website. Cookies are small text files that are saved to your hard drive and assigned to the browser you are using, enabling certain information to be provided to the client that places the cookie (us in this case). Cookies are not able to execute programs or transmit viruses to your computer. Their purpose is to enhance the overall user-friendliness and efficiency of the website.

(4) Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

• Transient cookies (see b)
• Persistent cookies (see c)

b) Transient cookies are deleted automatically when you close your browser. They include, in particular, so-called session cookies, which save what is known as a session ID to enable separate requests from your browser to be assigned to a common session. This allows your computer to be recognised again when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are deleted automatically after a specified time, which can vary depending on the cookie. You can delete cookies at any time by using the security settings of your browser.

d) You can configure your browser settings to suit your preferences, e.g. to decline the acceptance of third-party cookies or to reject all cookies.

§ 4 Further functions and offers of our website

(1) Alongside access to our website solely for information purposes, we offer various additional services that you can use if you so wish. To this end, it is generally necessary for you to enter further personal data, which we then use to provide the service concerned and to which the data processing principles stated above apply.

(2) To facilitate contact with us and to enable you to ask any questions you may have, we offer you the option of contacting us by using a form provided on the website. Use of this form requires that you provide a valid e-mail address, so that we know from whom the query came and to enable us to reply. Further information can be provided voluntarily. Data processing for the purpose of establishing contact with us is performed on the basis of your freely given consent in accordance with Article 6(1) subparagraph 1(a) GDPR. The personal data that we collect in connection with your use of the contact form is processed in Salesforce.

(3) In some cases, we make use of external service providers for the processing of your data, for example Salesforce and Google. Such providers are carefully selected and commissioned by us, are bound to follow our instructions, and are monitored on a regular basis.

(4) Furthermore, we may pass your personal data on to third parties to enable participation in special campaigns or competitions, the conclusion of contracts, or similar services offered by us together with partners. More detailed information is provided when you are asked to disclose your personal data, or below in the description of the offer.

We disclose your personal data to third parties only where:

• you have given your explicit consent to disclosure in accordance with Article 6(1) subparagraph 1(a) GDPR;
• the disclosure is necessary in accordance with Article 6(1) subparagraph 1(f) GDPR to enable the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data;
• we are subject to a legal obligation to disclose the data in accordance with Article 6(1) subparagraph 1(c) GDPR; or
• disclosure is legally permissible and necessary to enable performance of a contract entered into with you in accordance with Article 6(1) subparagraph 1(b) GDPR.

Your personal data are not passed on to third parties for purposes other than those specified.

(5) Insofar as our service providers or partners have their registered offices in a state outside the European Union or the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer or of the service used.

§ 5 Creating a customer account and use of our webshop portals

(1) Soweit Sie ein Kundenkonto für unseren Webshop anlegen möchten, müssen Sie sich mittels Angabe Ihrer E-Mail-Adresse, eines selbst gewählten Passworts sowie Ihres frei wählbaren Benutzernamens registrieren. Es besteht kein Klarnamenszwang, eine pseudonyme Nutzung ist möglich.

(2) Wir verwenden für die Registrierung das sog. Double-opt-in-Verfahren, d. h. Ihre Registrierung ist erst abgeschlossen, wenn Sie zuvor Ihre Anmeldung über eine Ihnen zu diesem Zweck zugesandte Bestätigungs-E-Mail durch Klick auf den darin enthaltenem Link bestätigt haben. Falls Ihre diesbezügliche Bestätigung nicht binnen [24 Stunden] erfolgt, wird Ihre Anmeldung automatisch aus unserer Datenbank gelöscht. Die Angabe der zuvor genannten Daten ist verpflichtend, alle weiteren Informationen können Sie freiwillig durch Nutzung unseres Webshop-Portals bereitstellen.

(3) Wenn Sie unser Webshop-Portal nutzen, speichern wir Ihre zur Vertragserfüllung erforderlichen Daten, auch Angaben zur Zahlungsweise, bis Sie Ihren Zugang endgültig löschen. Weiterhin speichern wir die von Ihnen angegebenen freiwilligen Daten für die Zeit Ihrer Nutzung des Webshop-Portals, soweit Sie diese nicht zuvor löschen. Alle Angaben können Sie im geschützten Kundenbereich verwalten und ändern. Rechtsgrundlage für die Verarbeitung Ihrer Daten ist Art. 6 Abs. 1 S. 1 lit. f DSGVO.

(4) Um unberechtigte Zugriffe Dritter auf Ihre persönlichen Daten, insbesondere Finanzdaten, zu verhindern, wird die Verbindung per TLS-Technik verschlüsselt.

§ 6 Newsletter

(1) By giving your consent, you can subscribe to a newsletter in which we inform you about current offers/products of Koenig & Bauer AG and/or the relevant group company. The advertised goods and services are specified in the declaration of consent.

(2) We use a so-called double opt-in process for registration to receive our newsletter. This means that, after your initial registration, we send an email to the email address that you provide, in which we ask you to confirm that you wish to receive the newsletter. If your registration is not confirmed within [24 hours], the information that you have provided will be blocked and then deleted automatically after one month. Furthermore, we save the IP addresses you used and the times of your registration and confirmation. The purpose of this procedure is to document your registration and to enable us to clarify any misuse of your personal data.

(3) Specifying your first name, surname and e-mail address is mandatory in order to receive the newsletter. Further data that is marked specifically as optional information may be provided voluntarily and is used to address you personally. After receiving your confirmation, we save your e-mail address for the purpose of distribution of the newsletter. The legal basis for this is provided by Article 6(1) subparagraph 1(f) GDPR.

(4) You can revoke your consent and unsubscribe from the newsletter at any time. To cancel your subscription, click on the link provided in each newsletter email or send an email to marketing(at)koenig-bauer.com.

(5) We wish to point out that we analyse your user behaviour in connection with distribution of our newsletter. For this analysis, the emails that are sent to you contain so-called web beacons or tracking pixels, i.e. single-pixel image files that are saved on our website. These web beacons, together with the data specified in § 3, are linked with your e-mail address and an individual ID for the purposes of this analysis.

§ 7 Web analysis and user tracking

The analysis and tracking measures that we employ are intended to ensure a user-friendly design and ongoing optimisation of our website. At the same time, we employ tracking measures to enable statistical evaluation of the use of our website, with the objective of optimising our offers for you. These interests are to be regarded as legitimate within the meaning of the aforementioned regulation. The respective data processing purposes and data categories are specified in the descriptions of the analysis and tracking tools concerned.

The legal basis for our use of analysis and tracking tools is provided by Article 6(1) subparagraph 1(f) GDPR.

§ 8 Integration of third-party content and redirection

There may be situations in which content from third parties, such as videos from YouTube, map material from Google Maps, RSS feeds or graphics from other websites, is embedded within this online service. In such cases, it is always necessary for the user’s IP address to be known to the provider of this content. Without knowledge of the IP address, the content cannot be sent to the user’s browser. The IP address is thus a prerequisite for displaying such content. We endeavour to restrict our use of such content to those service providers that use the IP address solely to deliver the content. We have no influence, however, over whether or not the third-party provider saves the IP address, for example for statistical purposes. Where we are aware of such data retention, we will notify the user accordingly.

1. Embedding of YouTube videos

(1) We have embedded YouTube videos into our online service; these videos are hosted at https://www.Youtube.com and can be played directly from our website. [All such videos are embedded in “extended data protection mode”, which means that no data about you, as a user, is shared with YouTube if you do not play the videos. The data specified under (2) below is only sent when you play the videos. We have no influence over this data transfer.]

(2) When you visit the website, YouTube receives the information that you have called up the corresponding sub-page of our website. Furthermore, the data specified under § 3 of this statement is sent. This will occur irrespective of whether you are logged in to a user account provided by YouTube or no corresponding user account exists. If you are logged in to Google, your data will be allocated directly to your account. To prevent allocation to your profile at YouTube, you must log out before you activate the button. YouTube saves data collected as user profiles and uses this data for purposes of advertising, market research and/or user-tailored website design. Such analysis is carried out in particular to facilitate tailored advertising and to inform other users of the social network about your activities on our website (even in relation to users who are not logged in). You are entitled to object to the creation of such user profiles. To exercise this right, a corresponding request must be addressed to YouTube.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the relevant data privacy statement. This statement also provides information on your rights and on optional settings that serve to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has agreed to be subject to the EU-US Privacy Shield, https://www.dataprivacyframework.gov/s/

2. Embedding of Google Maps

(1) We use the service offered by Google Maps on this website. This permits us to present interactive maps to you on the website and enables convenient direct use of the map function.

(2) When you visit the website, Google receives the information that you have called up the relevant sub-page of our website. Furthermore, the data specified under § 3 of this statement is sent. This will occur irrespective of whether you are logged in to a user account provided by Google or no corresponding user account exists. If you are logged in to Google, your data will be allocated directly to your account. To prevent allocation to your profile at Google, you must log out before you activate the button. Google saves data collected as user profiles and uses this data for purposes of advertising, market research and/or user-tailored website design. Such analysis is carried out in particular to facilitate tailored advertising and to inform other users of the social network about your activities on our website (even in relation to users who are not logged in). You are entitled to object to the creation of such user profiles. To exercise this right, a corresponding request must be addressed to Google.

(3) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider’s data privacy statements. These statements also provide information on your rights and on optional settings that serve to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en.

3. Redirection

All redirection to providers of social media services, such as YouTube, Facebook, etc., is realised by means of links, which means that any data about your visit to our website (e.g. IP address, time, URL) or data present on your device (e.g. cookie information) is only sent to the provider concerned in case of conscious use of the link.

§ 9 Data and IT security

During your visit to our website, we support the highest security encryption set by your browser.

SSL / TLS encryption

This website uses SSL or TLS encryption as a security measure and to protect transfer of confidential content, e.g. contact forms that you send to us as operator of the website. You can verify that you are connected to our website via an encrypted connection when the address in the browser changes from “http://” to “https://” and a padlock icon is displayed on the browser bar.

When SSL or TLS encryption is activated, data that you send to us cannot be read by third parties.

In addition, we employ suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, full or partial loss, destruction and unauthorised access by third parties. These security measures are subject to continuous improvement in line with advances in technology.

§ 10 Links to other websites

Please note that this website may provide links to other websites, including websites that are not operated by Koenig & Bauer and are not subject to this data privacy statement.

§ 11 Amendment and updating of the data privacy statement

This data privacy statement is currently valid in the version dated February 2024. Through further development of our website and our associated offers, or in response to amendments to legal or official regulations, it may become necessary to amend this data privacy statement in the future. Amendments will be announced in good time on this page. You should therefore visit this page regularly to stay informed on the current wording of the data privacy statement. You can view and print out the data privacy statement that is currently valid at any time by visiting our website: https://www.koenig-bauer.com/en/privacy-policy/.