Privacy Policy
Beyond Borders
Privacy Policy
The providers of these pages take the protection of your personal data very seriously. We process your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.
When you use our websites, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Reasons for data collection
We collect and process your data to provide our websites and to enable you to receive the best possible service through convenient access to our services.
Validity of the privacy policy
This privacy policy applies to all Photona GmbH companies and websites associated with:
Laser Components Germany GmbH
Werner-von-Siemens-Str. 15
82140 Olching
Germany
LASER COMPONENTS S.A.S.
45 To Route des Gardes
France 92190 Meudon
France
LASER COMPONENTS UK Ltd.
Goldlay House, 114 Parkway
Chelmsford Essex CM2 7PR
United Kingdom
Laser Components Nordic AB
Skårs led 3
41263 Gothenburg
Sweden
Controller within the meaning of the GDPR
Controller for the processing of personal data necessary for the operation of the website:
Germany
Laser Components Germany GmbH
Werner-von-Siemens-Str. 15, 82140 Olching, Germany
Phone: +49 8142 28 640
E-mail: info(at)
France
LASER COMPONENTS S.A.S.
45 To Route des Gardes
France 92190 Meudon
Phone: +33 139 595 225
E-mail: serviceclient(at)
United Kingdom
LASER COMPONENTS UK Ltd.
Goldlay House, 114 Parkway
Chelmsford Essex CM2 7PR
United Kingdom
Phone: +44 1245 491 499
E-mail: info(at)
Sweden (Denmark, Finland, Norway, Iceland)
Laser Components Nordic AB
Skårs led 3
41263 Gothenburg
Sweden
Phone: +46 31 703 7173
E-mail: info(at)
Data Protection Officer
Germany
Mr. Oliver Kunert
Laser Components Germany GmbH
Werner-von-Siemens-Str. 15
82140 Olching
Tel.: 08142 2864-0
E-mail: datenschutz(at)
France
Mr. Christian Merry
Laser Components
45 To Route des Gardes
92370 Meudon
Tel.: +33 139595225
E-mail: rh(at)
United Kingdom
Chris Varney
LASER COMPONENTS UK Ltd.
Goldlay House, 114 Parkway
Chelmsford Essex CM2 7PR
Phone: +44 1245 491 499
E-mail: info(at)
Sweden (Denmark, Finland, Norway, Iceland)
Mr. Fredrik Wikfeldt
Laser Components Nordic ABSkårs led 3
SE-400 20 Gothenburg
Tel.: +46 (0)31 703 7173
E-mail: info(at)
Legal basis
We process personal data based on the following legal bases:
- Your consent (Art. 6 para. 1 sentence 1 lit. a GDPR) or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed in accordance with Art. 9 para. 1 GDPR.
- In the event of express consent to the transfer of personal data to third countries, data processing is also conducted on the basis of Art. 49 para. 1 lit. a GDPR.
- Your consent to the storage of cookies or access to information in your end device (Section 25 (1) TTDSG)
- for the preparation or performance of contracts (Art. 6 para. 1 sentence 1 lit. b GDPR)
- is necessary for compliance with a legal obligation to which our company is subject (Art. 6 para. 1 sentence 1 lit. c GDPR)
- If vital interests of the data subject or another natural person require the processing of personal data (Art. 6 para. 1 sentence 1 lit. d GDPR)
- based on a legitimate interest assessment (Art. 6 para. 1 lit. f) GDPR). Our legitimate interest then consists in the purposes of data processing listed in each case
We will refer to the relevant terms in connection with the respective processing so that you can classify the basis on which we process personal data in a specific case.
If personal data is processed based on your consent, you have the right to withdraw your consent from us at any time with effect for the future.
If we process data based on a legitimate interest assessment, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR.
Details can be found in "Rights of the data subject".
General note on the storage period
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.
Note on the transfer of data to third countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified
Among other things, we use tools from companies based in third countries that are not secure under data protection law and US tools whose providers may not be certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not secure under data protection law.
We would like to point out that the USA, as a safe third country, generally has a level of data protection comparable to that of the EU. Data transfer to the USA is therefore permitted if the recipient is certified under the "EU-US Data Privacy Framework" (DPF) or has suitable additional guarantees. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of personal data
As part of our business activities, we work together with various external parties. In some cases, it is also necessary to transfer personal data to these external parties. We only pass on personal data to external parties if this is necessary for the fulfillment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR or if another legal basis permits the transfer of data. When using processors, we only pass on our customers' personal data based on a valid contract for Data processing agreement in accordance with Art. 28 GDPR. In the case of joint processing, a joint processing agreement is concluded in accordance with Art. 26 GDPR.
Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply, or the data subject objects to the further processing of this data.
For general data categories, we have set the following deadlines for the deletion of personal data or its anonymization:
- Employee and personnel data will be deleted no later than 10 years after leaving the company, provided there are no legal obligations to the contrary.
- Personal customer data will be deleted or anonymized no later than 5 years after the last contact, provided that there are no legal obligations to the contrary.
- Prospective customer data and contact persons at are deleted or anonymized no later than 5 years after the last contact, provided that there are no legal obligations to the contrary.
The handling of special data (e.g. applicant data, newsletters, etc.) can be found in the other sections of our privacy policy.
1. Data Collection on our Websites
3. Applications
5. Cookies & tracking technologies
6. Objection to advertising e-mails
1. Data collection on our websites
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the websites. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter the websites.
Some of the data is collected to ensure the error-free provision of the websites. Other data may be used to analyze your user behavior or for marketing purposes in order to provide you with the best possible service and convenient access to our services.
Server log files
When you access our websites, our servers automatically collect information of a general nature, in particular for the purpose of establishing a connection, functionality and system security. The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
Categories of personal data
Browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address, user agent.
This data is not merged with other data sources.
Legal basis
Art. 6 para. 1 lit. f GDPR (legitimate interest)
Our interest lies in the technically error-free presentation and optimization of its website - for this purpose, the server log files must be recorded.
Storage duration
We store your data for as long as is necessary to provide you with the processing purposes described above.
Hosting
For the provision and operation of our websites, we have rented corresponding web servers from bgm websolutions GmbH & Co. KG, which provide the corresponding web space for the presentation and use of our websites. bgm is an external web hosting service.
The personal data collected on these websites is stored on the servers of the hoster(s).
External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers and in the interest of a secure, fast and efficient provision of our online offer by a professional provider.
Categories of personal data
IP address, user agent, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website
It is not possible for us to draw conclusions from this data about specific persons due to pseudonymization. This data is not merged with other data sources.
Legal basis
- Art. 6 para. 1 lit. b GDPR (preparation or performance of contracts)
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
Our interest lies in the technical provision, operation and security of the websites.
- If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Recipients / categories of recipients
bgm websolutions GmbH & Co KG
Prof.-Messerschmitt-Str. 1
85579 Neubiberg
Germany
Storage duration
Our host(s) will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Usercentrics - Consent Management Platform
We use the Usercentrics Consent Management Platform of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany as a SaaS solution on our websites to offer you the opportunity to consent to the storage and setting of cookies, to reject them or to revoke your consent in a legally compliant manner via a corresponding consent layer when you visit our websites. We will document your settings in the consent layer for legal purposes. Cookies from Usercentrics are used for this purpose, which stores your cookie settings on our websites. This means that your cookie settings can be retained when you visit our websites again as long as you do not delete the cookies in your browser beforehand.
You can adjust your cookie settings at any time by calling up the consent layer again via the "Fingerprint" button or revoke your consent.
Categories of personal data
IP address, consent(s) or the withdrawal of your consent(s), time of consent, consent ID, template version, banner language, user agent, browser information, device information, time of your visit to the website, geolocation
It is not possible for us to draw conclusions from this data about specific persons due to pseudonymization. This data is not merged with other data sources.
Legal basis
§ Section 25 para. 1 sentence 2 TTDSG and Art. 6 para. 1 lit. c GDPR
Storage duration
Your data will be stored for one year or until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to Usercentrics' privacy policy.
Google Tag Manager
The Google Tag Management System (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland) is used on our websites. Google Tag Manager is a tag management system for managing JavaScript and HTML tags (so-called website tags), which are used for the implementation of tracking and analysis tools. Laser Components uses the tool to control its own 1st party tags (technically necessary) or its own functional tags, as well as to control JavaScript and HTML tags of external third-party services.
The Google Tag Manager is a cookie-free domain and does not collect any personal data. However, the Tag Manager can be used to trigger other tags (cookies/pixels/JavaScripts) that may collect, record and process personal data.
Through technical protocols such as HTTPS, your browser also sends personal data such as your IP address to the Google Tag Manager when you access the websites. However, the Tag Manager does not collect and process this data.
Legal basis
§ Section 25 para. 1 sentence 2 TTDSG and Art. 6 para. 1 lit. f GDPR
We are interested in a fast and uncomplicated, as well as technically easy integration and management of various tools on our websites, as well as the correct implementation of your consent decisions in the consent layer.
Further information
For further details on data processing, please refer to Google's privacy policy.
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Contact form
On our websites, we offer you the opportunity to contact us via contact forms on various areas of interest, to ask us questions directly or to receive further information material. If you contact us via a contact form, personal data will be collected. Which data is collected in each case can be seen from the contact form and depends on the desired type of further exchange. The data is stored for the purpose of processing your request. Mandatory information is marked with an asterisk (*). All other information is voluntary.
We process your personal data in order to comply with your request to contact you by e-mail or telephone or to send you the requested information material. The data will not be used for any other purposes.
Categories of personal data
First and last name, company, address, telephone number, e-mail address, communication content from the message field
Legal basis
- Art. 6 para. 1 lit. a GDPR (consent), if this has been requested; consent can be revoked at any time
- Art. 6 para. 1 lit. b GDPR (preparation or performance of contracts), if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
Our interest lies in the effective processing of the inquiries addressed to us.
Recipients / categories of recipients
Your personal data may be transferred within the Laser Components Group to various specialist departments that process your request.
Storage duration
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. During processing, your data may also be stored at Laser Components subsidiaries located outside the EU/EEA, depending on the requests you have made. The transfer of data takes place based on concluded internal contracts and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Microsoft Bookings
On our websites you have the possibility to make appointments with us, or our account managers with you via Microsoft Bookings.for the appointment booking we use Microsoft Bookings of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
To book an appointment, enter the requested data and the desired date in the form provided. The data entered will be used for the planning, execution and, if necessary, follow-up of the appointment.
Categories of personal data
First and last name, e-mail address, IP address, date and time (of consent and appointment request, further information is voluntary)
Legal basis
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
We are interested in making appointments with interested parties and customers as uncomplicated as possible.
- If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Recipients / categories of recipients
Your personal data may be transmitted within the Laser Components Group to various specialist departments that process your request.
Storage duration
The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. During processing, your data may also be stored at Laser Components subsidiaries located outside the EU/EEA, depending on which department processes your appointment request. The transfer of data takes place on the basis of concluded internal contracts and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Microsoft may also transfer your personal data within the Microsoft network to a third country, at least the USA, on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR (learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses).
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to Microsoft's privacy policy.
Microsoft is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Request by e-mail, telephone or fax
You have the option of contacting us by telephone, fax or e-mail. You will find the contact information for this in various places on our websites.
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.
Categories of personal data
E-mail address, fax number, telephone number, first name, surname, content of request, further details are voluntary
Legal basis
- Art. 6 para. 1 lit. a GDPR (consent), if this has been requested; consent can be revoked at any time
- Art. 6 para. 1 lit. b GDPR (preparation or performance of contracts), if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
Our interest lies in the effective processing of the inquiries addressed to us.
Recipients / categories of recipients
Your personal data may be transmitted within the Laser Components Group to various specialist departments that process your request.
Storage duration
We will retain the data you provide until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. During processing, your data may also be stored at Laser Components subsidiaries located outside the EU/EEA, depending on the requests you have made. The transfer of data takes place on the basis of concluded internal contracts and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Newsletter
With your consent, you can subscribe to our free e-mail newsletter, with which we inform you about current interesting offers. We use the so-called double opt-in procedure to register for the newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter.
As part of the newsletter registration process, you will find out which mandatory information we require from you. Mandatory information is marked with an asterisk (*). All other information is voluntary. After your confirmation, we will save your data for the purpose of sending you the newsletter.
We use newsletter service providers, which are described below, to process and analyze the newsletter:
Inxmail & Superoffice
We use the newsletter providers Inxmail from Inxmail GmbH, Wetzinger Straße 17, 79106 Freiburg, Germany and Superoffice from Superoffice Business Solutions AB, Kilsgatan 4, SE-41104 Gothenburg, Sweden.
With the help of both providers, we control our newsletter distribution and can analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked on. In this way, we can determine, among other things, which links were clicked on particularly often.
We can also recognize whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can recognize whether you have made a purchase after clicking on the newsletter.
Inxmail and Superoffice also allow us to subdivide ("cluster") newsletter recipients according to various categories. The newsletter recipients can be subdivided, for example, according to age, gender, place of residence or product preference (e.g. laser optics or laser diodes), provided we have received this information from you. In this way, the newsletters can be better adapted to the respective target groups.
If you do not wish to be analyzed by Inxmail and Superoffice, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter by sending an e-mail to info@lasercomponents of the controller.
We use Inxmail's anonymized tracking, which only allows us to identify you personally if you have expressly consented to this in advance.
Categories of personal data
E-mail address, title (gender), first and last name, company, country
Legal basis
- Art. 6 para. 1 lit. a GDPR (consent)
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
Our interest lies in safeguarding your interests in complying with legal requirements when sending newsletters.
Recipients / categories of recipients
Inxmail GmbH, Wetzinger Straße 17, 79106 Freiburg, Germany
Superoffice Business Solutions AB, Kilsgatan 4, SE-41104 Gothenburg, Sweden
Storage duration
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Data stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Data processing agreement
We have concluded a data processing agreement (DPA) with each of the providers for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to the Inxmail and Superoffice privacy policies.
Postal advertising
We use your address in compliance with all legal provisions for sending postal advertising (postal advertising).
Categories of personal data
First and last name, company name, address
Legal basis
- Art. 6 para. 1 lit. f GDPR (legitimate interest) in conjunction with recital 47 GDPR
- If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. More specific regulations may be communicated to you during data collection and take precedence over this regulation.
Recipients / categories of recipients
- Laser Components Germany GmbH, Werner-von-Siemens-Str. 15, 82140 Olching, Germany
- LASER COMPONENTS S.A.S., 45 Bis Route des Gardes, France 92190 Meudon, France
- LASER COMPONENTS UK Ltd, Goldlay House, 114 Parkway, Chelmsford Essex CM2 7PR, United Kingdom
- Laser Components Nordic AB, Skårs led 3, 41263 Gothenburg, Sweden
- Lettershops
- Shipping service provider
Storage duration
Your address will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to postal advertising, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.
Lettershops and dispatch service providers process the data for as long as is necessary for the purpose.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Processing of customer and contract data
We collect, process and use personal customer and contract data to establish, structure the content of and amend our contractual relationships. We collect, process and use personal data about the use of these websites (usage data) only insofar as this is necessary to enable the user to use the service or for billing purposes.
Legal basis
Art. 6 para. 1 lit. b GDPR (preparation or performance of contracts)
Storage duration
The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing legal retention periods. Legal retention periods remain unaffected.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Audio and video conferencing
We use online conferencing tools, among others, to communicate with our customers. The individual tools we use are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and the provider of the respective conference tool.
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers. Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company.
Categories of personal data
E-mail address, telephone number, duration of the conference, "context information" in connection with the communication process (metadata), IP address, MAC address, device IDs, browser information, device information.
If content is exchanged, uploaded or provided in any other way within the tool, it is also stored on the tool provider's servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.
Please note that we do not have full control over the data processing procedures of the tools used. Our options are largely determined by the company policy of the respective provider.
Legal basis
- Art. 6 para. 1 lit. b GDPR (preparation or performance of contracts)
- Art. 6 para. 1 lit. f GDPR
Our interest lies in the general simplification and acceleration of communication.
Recipients / categories of recipients
Microsoft teams at Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Storage duration
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.
Microsoft teams:
- If a chat or message in Teams is deleted by a user, it is stored for one year after the last change in an area that can only be accessed by an administrator before it is permanently deleted.
- For Teams, the call list is stored for 90 days and can be viewed by administrators; an end user can only see their own calls from the last 30 days.
- Recordings of Teams meetings made using the recording function
- will be kept for three months before being deleted, unless the person making the recording specifies otherwise.
- Recordings of MS Teams Live Events are stored for 180 days. Such
- Depending on the type of meeting, recordings can be stored for longer than one year, whereby the retention period is determined according to the purpose of the recording.
- If a recording is outdated or obsolete before the end of the retention period, it will be deleted.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. During processing, your data may also be stored at Laser Components subsidiaries located outside the EU/EEA, depending on the department with which you communicate via the online conference tool. The transfer of data takes place on the basis of concluded internal contracts and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Microsoft may also transfer your personal data within the Microsoft network to a third country, at least the USA, on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR (learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses).
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to Microsoft's privacy policy.
Microsoft is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
OneDrive
We have integrated OneDrive on our websites. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
OneDrive enables us to include an upload area on our websites where you can upload content or where our customer advisors can provide you with information material for download. When you upload content, it is stored on the OneDrive servers. When you enter our websites, a connection to OneDrive is also established so that OneDrive can determine that you have visited our websites.
Categories of personal data
It can be assumed that the following categories of personal data are processed by OneDrive:
IP address, user agent, e-mail address, browser information, device information, upload or download timestamp
Legal basis
- Art. 6 para. 1 lit. f GDPR
We are interested in a reliable upload area on our websites.
- If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Recipients / categories of recipients
Microsoft Ireland Operations Limited
Storage duration
We will retain the data you provide until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. During processing, your data may also be stored at Laser Components subsidiaries located outside the EU/EEA, depending on the department to which you provide information or from which department you receive information. The transfer of data takes place on the basis of concluded internal contracts and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Microsoft may also transfer your personal data within the Microsoft network to a third country, at least the USA, on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR (learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses).
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to Microsoft's privacy policy.
Microsoft is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Charts
We use Google Charts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our websites for the visualization of statistical data.
Categories of personal data
IP address, browser information, device information, location information, usage data, user behavior, referrer URL, content viewed
Legal basis
Art. 6 para. 1 lit. f GDPR
Our interest lies in a uniform and appealing presentation of the content on our websites.
Storage duration
The data is deleted as soon as it is no longer required for processing.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU. Personal data may be passed on to service providers and their subsidiaries who provide technologies or auxiliary services to support, operate and maintain Google services. Processing may also involve storage at international organizations outside the EU, at least in the USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR..
Further information
For further details on data processing, please refer to Google's privacy policy, as well as further information on the tool itself, the following link: https://developers.google.com/chart/.
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
2. Data Security
We secure our websites and other systems through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons in accordance with Art. 32 GDPR. Despite regular checks and continuous improvement of our security measures, complete protection against all risks is not possible.
SSL or TLS encryption
Our websites use SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site provider. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
3. Applications
We collect and process personal data from applicants for the purpose of handling the application process we carry out. Applications can be submitted by e-mail, post or via the online application form. We only wish to assess all applicants on the basis of their qualifications and therefore request that applicants refrain from providing information on racial and ethnic origin, political opinions, religious or ideological beliefs or any trade union membership, genetic data, biometric data for the unambiguous identification of a natural person, health data or data on sex life or sexual orientation in their application wherever possible.
Categories of personal data
Gender, name (first and last name), address, date of birth, place of birth, telephone number, e-mail address, photo of the applicant, CV, certificates, cover letter, any other information in the application documents over which Laser Components has no influence
Legal basis
- Art. 88 para. GDPR
- § Section 26 (1) sentence 1 BDSG
Recipients / categories of recipients
Your personal data may be transferred to various departments within the Laser Components Group that are responsible for job advertisements.
Storage duration
If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the legal provisions.
However, if no employment contract is concluded between us and the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller stand in the way of deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
Data may also be stored for longer if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if legal retention obligations prevent deletion.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.
4. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
Right of access by the data subject
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing has taken place, you can request the following information from the controller:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the duration of storage;
- the existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information on the origin of the data if the personal data is not collected from the data subject.
Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.
Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of your personal data:
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the deletion of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
- if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the controller outweigh your reasons.
- If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure
Obligation to erasure
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- The personal data concerning you has been processed unlawfully.
- The erasure of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the deletion by such controllers of any links to, or copy or replication of, those personal data.
Exceptions
The right to deletion does not exist if the processing is necessary
- to exercise the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h) and i) and Art. 9 para. 3 GDPR;
- for the assertion, exercise or defense of legal claims.
Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and
- the processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.
Right of object
IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).
Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To withdraw your consent, click on the "Fingerprint" button on the left-hand side of the page. You will then be shown our consent layer again and you can set your preferences there again.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the controller,
- is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authorities responsible for our respective national companies and responsible parties:
- Germany: Bavarian State Commissioner for Data Protection, P.O. Box 22 12 19, 80502 Munich
- France: Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
- United Kingdom: The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow Cheshire SK9 5AF
- Sweden: The Swedish Privacy Agency, Box 8114, 104 20, Stockholm
5. Cookies & tracking technologies
- Our Internet pages use so-called "cookies". Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.
recognition technologies, the processing is carried out exclusively based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our websites may be restricted.
Necessary cookies: Necessary cookies help us to make our websites technically accessible and usable for you. Essential basic functionalities such as navigation on the websites, the correct display in your browser or consent management via the consent layer are made possible. Our websites cannot function without these cookies. Furthermore, cookies help us to offer you certain services and functions on our websites that you can expect under normal circumstances when visiting a website and to offer you a customized user experience of our websites. Your data is collected on the legal basis of Art. 6 para. 1 lit. f GDPR (legitimate interest), as we assume that it is in your interest that our websites are usable for you and that you consider certain services to be a prerequisite on our websites.
Functional cookies: Functional cookies improve the user experience when you visit our websites and control how our websites are displayed to you. We also use these cookies to display our products and content in such a way that the user experience on our website is as convenient and comfortable as possible for you. Your data is collected on the legal basis of Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TTDSG.
Analysis & Statistics: We want to constantly improve the user experience on our websites, so we use cookies to analyze your visits and where they come from so that we can measure and improve the performance of our websites. They help us answer questions about which pages are most popular, which are least used and how visitors move around the site. All information collected by these cookies is measured anonymously or pseudonymously and analyzed in aggregated form. This enables us to see which functions and content on our pages are used particularly often and frequently and to understand which content and products on our pages are of particular interest to users. Your data is collected on the legal basis of Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TTDSG.
Marketing: These cookies and other technologies are used to show you advertisements on sites on the Internet with content tailored to you that we believe may be particularly relevant to you. For this purpose, data about the use of our websites and about contacts with advertising material on other websites are processed. Pseudonymous user profiles can be created from the data. We can use these profiles for marketing and advertising purposes or to optimize ongoing campaigns. We can also pass these profiles on to marketing and technology partners for advertising management. Some advertising networks set cookies and process your data as independent controllers. Your data is retrieved on the legal basis of Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TTDSG.
If you do not agree to these cookies, you will still receive advertisements that are less targeted to your interests.
In the consent layer, you have the option of either agreeing to the use of all cookies or rejecting them and making an individual selection. Exceptions to this are the necessary cookies that are required to display the website.
Of course, you can also set your Internet browser so that it does not accept cookies. You can usually find information on how to do this in the help function of your browser. However, we would like to point out that in this case the functions of our websites may only be available to a limited extent.
Necessary cookies
List of own cookies used:
Cookie: fe_typo_user
Validity: End of the meeting
Exhibitor: www.lasercomponents.com
This cookie is set by our content management system to save the current user session of the visit.
Cookie: geoip_code[countryCode]
Validity: End of the meeting
Exhibitor: www.lasercomponents.com
This cookie stores information about your country in order to show you the product portfolio available in your country and to provide you with the best contact information.
cookie: spamshield
Validity: End of the meeting
Exhibitor: www.lasercomponents.com
Used to protect against spam caused by spam bots.
Cookie: dp_cookieconsent_status
Validity: 1 year
Exhibitor: www.lasercomponents.com
Saves the knowledge of the technically necessary cookies used.
Cookie: cookieconsent_status
Validity: 1 year
Exhibitor: www.lasercomponents.com
Saves the knowledge of the technically necessary cookies used.
Functional cookies
Vimeo
On our websites we use the video display of Vimeo of Vimeo.com, Inc., 330 West 34th Street, 10th Floor New York, New York 10001, United States of America.
Only plugins from Vimeo are integrated on our websites. When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can directly associate your visit to our websites with your Vimeo account. If you interact with the plugins (e.g. by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
Vimeo uses cookies to recognize website visitors.
We have implemented Vimeo with the "Not Follow" function, which means that your data should not be collected by Vimeo without your consent when you visit our websites.
Categories of personal data
IP address, browser information, cookie information, device information, location information, content viewed
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Recipients / categories of recipients
Personal data may be shared with service providers and their affiliates who provide technology or ancillary services to support, operate and maintain the Vimeo Services.
Storage duration
The data is stored for a maximum of 24 months.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Further information
For further details on data processing, please refer to Vimeo's privacy policy.
If you wish to deactivate Vimeo cookies, you can also use the following link: https://vimeo.com/cookie_policy
Vimeo is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Analysis & Statistics
Matomo (self hosted)
We use the open source web analysis service Matomo sel hosted via our hosting provider's own servers on our websites in order to analyze website usage and optimize our websites. For this purpose, Matomo uses page views, events or similar actions to collect your personal data relating to technical features or activities on our websites. The data collected by Matomo is analyzed by us using Matomo to create reports over different time intervals, which may include statements about geographical origin, length of stay, interaction with the websites or origin.
With the help of the reports, we can analyze how the websites, our services and products are used and derive appropriate optimization measures.
Categories of personal data
IP address, browser information, device information, location information, usage data, user behavior, user agent, cookie ID
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Recipients / categories of recipients
We host Matomo exclusively on our own servers of our hosting provider bgm websolutions GmbH & Co. KG, Prof.-Messerschmitt-Str. 1, 85579 Neubiberg, so that all analysis data remains with us and is not passed on.
Storage duration
The data is stored for a maximum of 5 years due to our product developments and product cycles.
Storage location (data transfer to third country or international organization)
Your data is processed on servers within the EU.
Marketing
Google Ads
We use Google Ads on our websites. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Using Google remarketing technology, we can collect and store information about your user behavior on our websites. The pixels enable Google to collect, process and use information on website usage, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze your visitor behavior on our websites and are used to display advertisements in order to show you relevant and personalized content on external websites that appear to be of interest to you based on your user behavior on our websites.
Google Ads also enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google, which we as website providers can evaluate quantitatively, for example by analyzing which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.
Due to the marketing tools used, your browser sometimes automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Google Ads, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us, as well as which areas of our websites you have viewed. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.
Categories of personal data
IP address, cookie ID, mobile advertising ID (IDAF/GAID), pixel ID, browser information, device information, location information, usage data, user behavior, user agent and advertisements viewed
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Storage duration
The data is deleted as soon as it is no longer required for processing. The log data is anonymized after 9 months, and the cookie information is anonymized after 18 months.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. Personal data may be passed on to service providers and their subsidiaries who provide technologies or auxiliary services to support, operate and maintain Google services. Processing may also involve storage at international organizations outside the EU, at least in the USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Further information
For further details on data processing, please refer to Google's privacy policy.
If you wish to deactivate Google cookies, you can also use the following link: https://safety.google/privacy/privacy-controls/
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Ads Conversion Tracking
On our websites we use Google Ads Conversion Tracking, of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our websites were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.
Categories of personal data
IP address, user agent, cookie ID, date and time of visit, browser information, device information, location information, ads clicked on, user behavior, referrer URL
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Storage duration
The data will be deleted as soon as it is no longer required for processing.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. Personal data may be passed on to service providers and their subsidiaries who provide technologies or auxiliary services to support, operate and maintain Google services. Processing may also involve storage at international organizations outside the EU, at least in the USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Further information
For further details on data processing, please refer to Google's privacy policy.
If you wish to deactivate Google cookies, you can also use the following link: https://safety.google/privacy/privacy-controls/
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Consent Mode (Basic)
On our websites we use Google Consent Mode in the basic version, from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Since March 2024, the use of Consent Mode has been mandatory by Google for the use of various Google services, including Google Ads and Google Ads Conversion Tracking. Using Consent Mode, your consent status is passed on to the Google tags in addition to the Consent Management Platform Usercentrics. This step is necessary for the tags to function as usual according to Google's specifications.
Categories of personal data
IP address, user agent, referrer URL, consent signal, timestamp
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Storage duration
The data will be deleted as soon as it is no longer required for processing.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU. Personal data may be passed on to service providers and their subsidiaries who provide technologies or auxiliary services to support, operate and maintain Google services. Processing may also involve storage at international organizations outside the EU, at least in the USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Further information
For further details on data processing, please refer to Google's privacy policy.
Google is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
LinkedIn Insight Tag
Our websites use the LinkedIn Insight tag of LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we receive information about the visitors to our websites. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better align our site with the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted advertising to visitors to our websites outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.
Due to the marketing tools used, your browser sometimes automatically establishes a direct connection with the LinkedIn server. We have no influence on the scope and further use of the data collected by LinkedIn through the use of this tool and therefore inform you according to our level of knowledge: By integrating the LinkedIn Insight Tag, LinkedIn receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us, as well as which areas of our websites you have viewed. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, there is a possibility that the provider will find out and store your IP address.
Categories of personal data
IP address, cookie ID, device ID, browser information, device information, ISP, user behavior, interaction with advertising media
Legal basis
§ Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent)
Storage duration
The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data will then be deleted within 180 days.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU and USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to LinkedIn's privacy policy.
You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
LinkedIn Corporation is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Hubspot CRM
We use Hubspot CRM on our websites. The provider is Hubspot Inc, 25 Street, Cambridge, MA 02141 USA.
Among other things, Hubspot enables us to manage existing and potential customers and customer contacts. With the help of Hubspot CRM, we are able to record, sort and analyze customer interactions via email, social media or telephone across various channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings).
With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our websites.
Categories of personal data
IP address, browser information, device information, location information, usage data, user behavior, referrer URL, content viewed, email address, first and last name, address, telephone number, company, last contact, contact channel
Legal basis
- Art. 6 para. 1 lit. f GDPR (Hubspot CRM)
We are interested in the most efficient customer management and customer communication possible.
- § Section 25 para. 1 sentence 1 TTDSG and Art. 6 para. 1 lit. a GDPR (consent) for the collection of your user behavior on our websites
Storage duration
Cookies are stored for two years or less.
Storage location (data transfer to third country or international organization)
Your data will be processed on servers within the EU and USA on the basis of the EU-US Data Privacy Framework and concluded EU standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law (Art. 28 GDPR), which guarantees that the service will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further information
For further details on data processing, please refer to Hubspot's Privacy Policy and the Hubspot EU Data Protection Policy
Hubspot Inc. is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
6. Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The providers of this websites expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
7. Our social media presence
This privacy policy applies to the following social media sites
- https://twitter.com/LCGermany
- https://twitter.com/lasercomponents
- https://www.xing.com/pages/laser-components-germany-gmbh
- https://www.linkedin.com/company/laser-components/
- https://vimeo.com/lasercomponents (private account)
- https://www.youtube.com/lasercomponents
Data processing by social networks
We maintain publicly accessible profiles in social networks. The individual social networks we use are listed below.
Social networks such as Facebook, X etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). We have not integrated any Like buttons on our websites. Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the provider of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address.
With the help of the data collected in this way, the providers of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the providers of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the providers of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the provider of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, deletion, restriction of processing, data portability and complaint) both against us and against the provider of the respective social media portal (e.g. Facebook).
Please note that, despite the joint responsibility with the social media portal providers, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data that is stored by the providers of the social networks for their own purposes. For details, please contact the providers of the social networks directly (e.g. in their privacy policy, see below).
Your rights
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.
Social networks in detail
X (formerly Twitter)
We use the short message service X (formerly Twitter). The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
You can adjust your X privacy settings yourself in your user account. To do this, click on the following link and log in: https://twitter.com/personalization.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
Details can be found in the privacy policy of X: https://twitter.com/de/privacy.
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and www.linkedin.com/legal/l/eu-sccs.
Details on how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
Vimeo
We have a profile on Vimeo. The provider is Vimeo, Inc, 555 West 18th Street, New York 10011, USA.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests".
Details on how they handle your personal data can be found in Vimeo's privacy policy: https://vimeo.com/privacy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in YouTube's privacy policy: https://policies.google.com/privacy?.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
