Privacy
Website data protection statement and at the same time information for data subjects pursuant to Article 13 and Article 14 of the EU General Data Protection Regulation
Contact details for data protection officer: datenschutz@exa-ag.com
General data processing information
Affected data
Personal data is only collected if you communicate it to us yourself. Apart from that, no personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permission is only possible on the basis of your express consent.
Processing purpose
Contract execution
Categories of recipients
Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers
As part of contractual execution, processors could also be used outside the European Union.
Duration of data storage
The duration of data storage depends on the statutory storage requirements and is usually 10 years.
Specific information about the website
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. However, in the event IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Treaty on the European Economic Area. The full IP address will be transmitted to a Google server in the USA and shortened there only on an exceptional basis. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services to website operators relating to website activity and Internet usage. Google will not associate the IP address transmitted under Google Analytics by your browser with other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we should inform you in this case that you might not be able to enjoy all of the functionality of this website to its full extent. You may additionally prevent the recording of the data (including your IP address) to Google that is generated by the cookie and that pertains to your use of the website, or the processing of these data, by downloading and installing the following browser plug-in available through the following link: https://tools.google.com/dlpage/gaoptout 
. In view of the discussion about the use of analytics tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” which means that IP addresses are used only in a shortened form in order to prevent any direct correlation to specific persons. For browsers on mobile devices, please click this link to, in future, prevent anonymous tracking by Google Analytics and to activate a so-called “opt-out cookie” for your browser.
Google AdWords Conversion Tracking
This website uses Google AdWords Conversion Tracking, a web analytics service provided by Google Inc. (“Google”). Google AdWords Conversion Tracking also uses “cookies” stored on your computer that allow analysis of your use of the website. The information generated by the cookie about your use of this website is transmitted to a Google server in the US and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or in so far as third parties process this data on behalf of Google. Google will in no case connect the data with other data from Google. You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser.
Facebook “like” button
This website uses social plugins from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereafter: “Facebook”). When you visit web pages that have a plugin like that, data about your visitor behavior is automatically sent to Facebook’s servers. The website operator has no influence on the nature and extent of the data collected and transmitted to Facebook. If you are logged in to Facebook, Facebook can allocate the visit to your Facebook account. For further information about data privacy on Facebook, please visit: https://www.facebook.com/policy.php
Use of our own “cookies”
This website uses its own “cookies” to increase user-friendliness (“cookies” are text files sent by the web server to the user’s browser and stored there for later retrieval). Our own “cookies” never store any personal information. You can prevent the use of “cookies” in general if you set your browser to disallow the storage of “cookies.”
The call to LinkedIn, LinkedIn, 2029 Stierlin Courtm, Mountain View, CA 94043 USA, is indicated by the “in” sign on a blue background. If you activate our “in” button as part of the 2-click solution, you will be connected to the LinkedIn server and the LinkedIn plug-in will be reloaded on the respective website. The content of the “in” button is sent directly from LinkedIn to your browser and integrated into the website by LinkedIn. There is a possibility that your IP address will be transmitted to LinkedIn in the USA in this way. For details on the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights and options to protect your privacy, please refer to LinkedIn’s privacy policy (https://www.linkedin.com/legal/privacy-policy ) to the “in” button. If you are a LinkedIn member and do not want LinkedIn to collect data about you through our web site and link it to your LinkedIn data stored on LinkedIn, with the “in” button enabled, you will need to log out of LinkedIn before visiting our website.
The call of XING, XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, you can see the sign “x” or “xing” on a green background. If you activate our “XING” button as part of the 2-Click-Solution, a connection with the XING-Server will be established and the XING-Share-Button-functions (especially the calculation / display of the counter value) on the reloaded XING stores no personal data about you by calling this website. XING does not store any IP addresses. There is also no evaluation of your usage behavior on the use of cookies in connection with the “XING Share Button” instead. The current data protection information on the “XING Share Button” and additional information can be found at: https://www.xing.com/app/share?op=data_protection .
Information about other data processing procedures
Specific information about the application process
Affected data
Application information
Processing Purpose
Implementation of application process
Categories of recipients
Public authorities in the event of priority legislation.
External service providers or other contractors, et al for data-processing and hosting. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest, et al Customers and prospects in the context of order acquisition.
Third-country transfers
As part of contractual execution, processors could also be used outside the European Union, et al Email Provider.
Duration of data storage
Application data will generally be deleted within six months after communication of the decision, unless consent has been given for a longer period of data storage.
Specific information for the processing of customer data/prospective parties’ data
Affected data
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose
Contract execution, et al Offers, orders, sale and invoicing, quality assurance.
Categories of recipients
Public authorities in the event of priority legislation. External service providers or other contractors, et al for data-processing and hosting, for shipping, transport and logistics, service providers for the printing and dispatch of information and call centers.
Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest, et al for the credit check on purchase on account, for the electronic dispatch of information, for quality assurance purposes.
Third-country transfers
As part of contractual execution, processors could also be used outside the European Union, et al Email Provider.
Duration of data storage
The duration of data storage depends on the statutory storage requirements and is usually 10 years.
Specific information on the processing of employee data
Affected data
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose
Contract execution within the employment relationship.
Categories of recipients
Public authorities in the event of priority legislation, et al Tax Office, Social Insurance Institution, Professional Association. External service providers or other contractors, et al for data- processing and hosting, for payroll, for travel expenses, for insurance benefits, for vehicle use.
Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest, et al for order-acquisition, insurance benefits
Third-country transfers
As part of contractual execution, processors could also be used outside the European Union, et al Email Provider.
Duration of data storage
The duration of data storage depends on the statutory storage requirements and is usually 10 years.
Specific information for the processing of supplier data
Affected data
Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent.
Processing Purpose
Contract execution, et al Inquiries, Purchasing, Quality Assurance.
Categories of recipients
Public authorities in the event of priority legislation, et al Tax Office, Customs. External service providers or other contractors, et al for data- processing and hosting, accounting, payment processing.
Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest.
Third-country transfers
As part of contractual execution, processors could also be used outside the European Union, et al Email Provider.
Duration of data storage
The duration of data storage depends on the statutory storage requirements and is usually 10 years.
Further information and contacts
In addition, you may invoke your rights to information, correction or deletion at any time, to restrict processing, to object to processing, and to data portability. Here you will find the option to contact us by email (datenschutz@exa-ag.com) or letter (https://www.operational-transfer-pricing.com/impressum). You also have the right to contact the data protection supervisory authority for complaints.