Privacy Policy

1. Controller

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) and other applicable data protection provisions is:

SSM Electronics & Handels GmbH
trading as ETUK EUROPE
Daimler-Straße 10
78256 Steißlingen
Germany

Email: [email protected]

A data protection officer has not been appointed.

2. General information on the processing of personal data

We process personal data exclusively in accordance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and supplementary national data protection laws.

Personal data within the meaning of Art. 4(1) GDPR is any information relating to an identified or identifiable natural person.

Personal data is processed in particular if

To the extent that information is stored on or retrieved from the user's device in the course of using our website, the provisions of the Telecommunications-Digital Services-Data Protection Act (TDDDG), in particular Section 25 TDDDG, shall also apply.

3. Provision and hosting of the website

We use the service Webflow to create and host our website.

The provider is:

Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA

Each time our website is accessed, Webflow and the technical infrastructure used for this purpose process data that is necessary to transmit the website to the user's device.

This may include, in particular, the following data:

IP address, date and time of access, URL accessed, referrer URL, browser used, browser version, operating system, and other technical connection and communication data.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free, secure, stable, and efficient provision of our website.

Where Webflow processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Personal data may also be processed in third countries, particularly in the United States of America. Further information on this can be found in the section "Data transfer to third countries."

4. Server log files

When you visit our website, log data may be automatically collected and processed by the hosting and infrastructure providers we use.

This may include, in particular:

Processing is carried out to ensure the functionality, stability, and security of the website, as well as to detect and prevent technical malfunctions and unauthorized access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper and secure provision of our website.

5. Contact and inquiry forms

We provide various contact and inquiry forms on our website.

Depending on the type and purpose of the respective form, the following personal data in particular may be collected:

Surname, first name, company, email address, telephone number, location or country, vehicle interest, intended use, project details, quantity, and other information voluntarily provided by the user.

The forms are technically provided via Webflow. The data entered there may therefore be processed by Webflow and stored as part of the technical provision.

The information provided is forwarded to our business email address and used by us exclusively for processing the respective inquiry.

If the contact is aimed at concluding a contract or is in connection with an existing contractual relationship, the processing is based on Article 6 (1) (b) of the GDPR.

In other cases, processing is based on Article 6 (1) (f) of the GDPR. Our legitimate interest lies in the appropriate processing and answering of business inquiries.

The data will be deleted as soon as the purpose of its processing no longer applies and no statutory retention obligations or other legal grounds prevent deletion.

We ask that you do not transmit any special categories of personal data within the meaning of Article 9 of the GDPR via publicly accessible contact forms unless this is strictly necessary.

6. Contacting us by email

When contacting us by email, we process the personal data transmitted by the sender for the purpose of processing and responding to the respective inquiry.

We use Microsoft 365 for our business email communication.

In this context, personal data may be processed in particular by the following companies:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

If the communication serves the implementation of pre-contractual measures or a contract, the legal basis is Article 6 (1) (b) of the GDPR.

Otherwise, processing is based on Article 6 (1) (f) of the GDPR. Our legitimate interest lies in efficient and appropriate business communication.

7. Cookies and comparable technologies

Our website may use cookies and comparable technologies, in particular local storage or similar storage mechanisms.

If the use of such technologies is strictly technically necessary for the provision of a digital service expressly requested by the user, access to or storage of information on the end device takes place on the basis of Section 25 (2) of the TDDDG.

For cookies or comparable technologies that are not technically necessary, we generally obtain the user's consent before use in accordance with Section 25 (1) of the TDDDG.

Insofar as the respective technology is also associated with the processing of personal data, this is based on Art. 6 (1) (a) GDPR.

Consent granted can be revoked or changed at any time with future effect via the privacy settings provided on our website.

8. Consent management with Cookiebot

Where a consent management system is used on our website, we use Cookiebot CMP.

The provider is:

Usercentrics A/S
Havnegade 39
1058 Copenhagen
Denmark

Cookiebot is used to obtain, manage, and document the consent granted or refused by the user.

In this context, information regarding consent status, a consent ID, the time and scope of consent, browser information, IP address, and technical device information may be processed.

Processing is based on Art. 6 (1) (c) GDPR insofar as it serves to fulfill legal obligations to provide evidence in connection with consent.

Insofar as processing is also necessary for the proper management of consent, it may additionally be based on Art. 6 (1) (f) GDPR.

The technologies required for storing and retrieving consent decisions are used in accordance with Section 25 (2) of the TDDDG.

9. Google Analytics 4

Provided you have given your consent, we use Google Analytics 4 on our website.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics is used for the statistical analysis of the use of our website.

In particular, the following information may be processed:

We use Google Analytics exclusively for reach measurement, statistical analysis, and the optimization of our website.

The use of Google Analytics for the purposes of personalized advertising or in connection with Google Ads campaigns is not intended for this website.

Processing takes place exclusively after prior consent on the basis of Art. 6 (1) (a) GDPR. Insofar as information is stored on or read from the end device, this is additionally based on Section 25 (1) TDDDG.

The retention period we have set for user and event data is 14 months.

You may withdraw your consent at any time with future effect via the privacy settings.

Processing by Google may also take place in the United States of America.

10. Microsoft Clarity

Provided you have given your consent, we use Microsoft Clarity.

The provider for users within the European Economic Area is:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

Microsoft Clarity is used to analyze user behavior on our website.

The service enables, in particular, the creation of heatmaps and the technical reconstruction of user sessions.

In particular, the following data may be processed:

Session recordings are a technical reconstruction of user interactions based on the collected interaction data.

Processing is carried out exclusively based on your prior consent in accordance with Art. 6(1)(a) GDPR and, insofar as access to the end device occurs, in accordance with Section 25(1) TDDDG.

You may withdraw your consent at any time with future effect via the privacy settings.

Personal data may also be processed in third countries, particularly in the United States of America.

11. Wistia

Videos from the service Wistia can be embedded on our website.

The provider is:

Wistia, Inc.
120 Brookline Street
Cambridge, MA 02139
USA

When you visit a page with embedded Wistia content, a connection to Wistia's servers may be established.

In particular, the following information may be processed:

If Wistia uses non-essential cookies, local storage technologies, or similar mechanisms, the relevant content will generally only be loaded after prior consent has been given.

The legal basis for processing in this case is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Where technically possible and appropriate, Wistia can be operated in a data-protection-friendly or "privacy mode."

A transfer of personal data to the United States of America cannot be ruled out.

12. Google Maps

Our website may include maps from the service Google Maps.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Maps is used to provide a user-friendly display of geographical information and locations.

When loading a Google Maps map, your IP address, technical device information, browser information, and information about the page accessed may be transmitted to Google.

Where consent is required for this, Google Maps will only be loaded once you have provided it.

The legal basis is Art. 6(1)(a) GDPR and, insofar as information is accessed on the end device, Section 25(1) TDDDG.

You may withdraw your consent at any time with future effect.

Personal data may also be processed in the United States of America.

13. LinkedIn content

Our website may include content from the social network LinkedIn.

The provider for users within the European Economic Area is:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland

When embedded LinkedIn content is loaded, a direct connection may be established between the user's device and LinkedIn's servers.

In this process, data such as the IP address, browser and device information, time of access, the website visited, and interaction data may be processed.

Where consent is required for this, LinkedIn content will only be loaded after such consent has been granted.

The legal basis is Article 6 (1) (a) of the GDPR in conjunction with Section 25 (1) of the TDDDG.

Should the LinkedIn feed be integrated via a third-party provider rather than directly from LinkedIn in the future, this third-party provider must also be taken into account under data protection law.

14. Google reCAPTCHA

To protect our website, and in particular our online forms, from automated entries, spam, abuse, and other attacks, we may use Google reCAPTCHA.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When using reCAPTCHA, technical information about the device used, the IP address, browser information, interaction data, and other information required to detect automated access may be processed.

Processing is generally carried out on the basis of Article 6 (1) (f) of the GDPR.

Our legitimate interest lies in protecting our website, our technical systems, and our forms from automated attacks, spam, and other forms of misuse.

If information is stored on or read from the end device as part of the specific implementation and no exception under Section 25 (2) of the TDDDG applies, the service will only be used after obtaining consent in accordance with Section 25 (1) of the TDDDG.

Data transfer to the United States of America cannot be ruled out.

15. jsDelivr

We use the content delivery network jsDelivr to deliver technical resources.

jsDelivr is primarily used to provide JavaScript files that are necessary for the display and functionality of our website.

When retrieving these resources, the user's browser connects to the jsDelivr infrastructure. In this process, the following data in particular may be processed:

Processing is carried out on the basis of Art. 6 (1) (f) GDPR.

Our legitimate interest lies in the efficient, secure, and technically reliable provision of the resources required for our website.

If no information is stored on or read from the end device within the meaning of Section 25 (1) TDDDG, no separate consent under Section 25 TDDDG is required.

16. UNPKG and Phosphor Icons

To provide icons and their associated stylesheets, we may retrieve resources from Phosphor Icons via the content delivery network UNPKG.

When accessing the corresponding pages, the user's browser establishes a connection to unpkg.com.

In this context, data such as the IP address, browser information, accessed resources, referrer, and other technical connection data may be processed.

Processing is carried out on the basis of Art. 6 (1) (f) GDPR.

Our legitimate interest lies in the consistent, reliable, and high-performance presentation of our website.

If no information is stored on or read from the end device within the meaning of Section 25 (1) TDDDG through this integration, no separate consent is required.

17. Recipients of personal data

Within our company, only those departments and individuals who require access to personal data to fulfill their respective purposes are granted such access.

Furthermore, we may transfer personal data to external service providers that assist us, particularly in the areas of hosting, IT infrastructure, email communication, website analysis, consent management, and the provision of external content.

Where these service providers process personal data on our behalf, such processing is carried out based on a contract in accordance with Art. 28 GDPR.

Personal data is generally only passed on to other third parties if there is a legal basis for doing so, if consent has been given, or if we are legally obligated to do so.

18. Data transfer to third countries

When using individual services, personal data may be processed outside the European Union and the European Economic Area.

Any such transfer will only take place in compliance with the requirements of Art. 44 et seq. GDPR.

Insofar as an adequacy decision by the European Commission pursuant to Art. 45 GDPR exists for the third country in question, the data transfer may be based on this.

For data transfers to the United States of America, an adequacy decision based on the EU-US Data Privacy Framework may apply, provided the respective recipient is certified accordingly.

In other cases, the standard contractual clauses approved by the European Commission pursuant to Art. 46(2)(c) GDPR may be used as appropriate safeguards.

Notwithstanding these safeguards, data processing in third countries may involve a level of data protection that differs from that of the European Union.

19. Storage duration

We store personal data only for as long as is necessary to fulfill the respective processing purposes.

Where statutory retention obligations exist, the data in question will be stored for the duration of the respective statutory retention period and subsequently deleted.

Insofar as the processing is based on consent, the processing will continue until the consent is revoked, unless another legal basis permits or requires further processing.

Insofar as personal data is processed on the basis of Art. 6(1)(f) GDPR, it is generally stored only for as long as the legitimate interests persist and there are no overriding interests of the data subject.

20. Revocation of consent

Insofar as the processing of personal data is based on Art. 6(1)(a) GDPR, any consent given may be revoked at any time with effect for the future.

The lawfulness of the processing carried out up to the time of revocation remains unaffected by this.

Consents for cookies, analysis services, and external content can be changed or revoked, in particular, via the privacy settings provided on our website.

21. Right to object pursuant to Art. 21 GDPR

If personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, data subjects have the right, pursuant to Art. 21 GDPR, to object to the processing at any time for reasons arising from their particular situation.

In the event of an objection, we will generally no longer process the personal data in question, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or if the processing serves the establishment, exercise, or defense of legal claims.

22. Rights of data subjects

Data subjects have the following rights, provided the legal requirements are met:

To exercise these rights, simply send a notification to:

23. Right to lodge a complaint with a data protection supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority under Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany

24. Obligation to provide personal data

The provision of personal data is generally not required by law or contract.

However, if personal data is required to process an inquiry, prepare a quote, carry out pre-contractual measures, or fulfill a contract, it may not be possible to process your request without the necessary information.

25. Automated decision-making

We do not use automated decision-making, including profiling, as defined in Article 22 of the GDPR.

26. Data security

Taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, we implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect personal data against loss, manipulation, unauthorized access, and other forms of unlawful processing.

Our website uses SSL/TLS encryption for data transmission.

27. Changes to this privacy policy

We reserve the right to update this privacy policy as necessary due to changes in legal requirements, regulatory guidelines, technical developments, or changes to the services we provide.

The current version published on this website is authoritative.

‍