We (meaning the specific company identified on this page as being the operator of this website) believe that protecting the security and privacy of your personal data is important. This Privacy Notice explains how we collect, store, use, disclose and transfer (hereinafter “process”) your personal data. The personal data that we collect about you depends on the context of your interactions with us, the products. services and features that you use, your location, and applicable law.
Categories of personal data processed, and purpose of the processing
When visiting our websites or using our applications, or online services (each an “Online Offering”), we process information which you have actively and voluntarily provided about yourself, or which has been generated by us in connection with your use of the Online Offerings, and includes the following categories of personal data:
We process your personal data for the following purposes:
Cookies
Our Online Offerings may use cookies, i.e., small files containing certain information that are stored on your device. If used by us without your consent, these cookies are strictly necessary to provide certain functionalities of an Online Offering to you or to provide you with a service that you requested via the Online Offering. Other cookies (e.g., cookies for marketing purposes) will only be used if you have given your consent.
Online Offerings provided by your organization
Our Online Offerings may be provided to you for your use by the organization to which you belong, such as our enterprise customers. If your organization provides you with access to an Online Offering, our processing of personal data provided by or collected from you or your organization in connection with the Online Offering’s content is performed under the direction of your organization and is subject to a data processing agreement between your organization and us. In such instance, your organization is responsible for any personal data contained in such content and you should direct any questions about how personal data contained in such content is used to your organization.
Links to other websites
This Privacy Notice applies only to Online Offerings that link to this Privacy Notice and not to other websites or applications of our affiliates that have their own Privacy Notice or which are operated by third parties. This Privacy Notice also does not apply in situations where we only process information on behalf of our Business Partners, e.g., when we act as a web hosting or cloud provider. We may provide links to other websites and applications which we believe may be of interest to you. We are not responsible for the privacy practices of such other websites or applications.
Categories of personal data processed, and purpose of the processing
In the context of the business relationship with us, we may process the following categories of personal data of consumers and contact persons at (prospective) customers, suppliers, vendors and partners (each a “Business Partner”):
We may process the personal data for the following purposes:
Where and as permitted under applicable law, we may process your contact information for direct marketing purposes (e.g. trade show invitations, newsletters with further information and offers concerning our products and services) and to carry out customer satisfactions surveys, in each case also by e-mail. You may object to the processing of your contact data for these purposes at any time by writing to [email protected] or by using the opt-out mechanism provided in the respective communication you received.
We may transfer your personal data to:
The recipients of your personal data may be located outside of the country in which you reside. Personal data published by you on Online Offerings (such as chat rooms or forums) may be globally accessible to other registered user of the respective Online Offering.
Unless indicated otherwise at the time of the collection of your personal data (e.g. within a form completed by you), we erase your personal data if the retention of that personal data is no longer necessary for the purposes for which they were collected or otherwise processed, or to comply with legal obligations (such as retention obligations under tax or commercial laws).
The data protection laws in the jurisdiction in which you reside may entitle you to specific rights in relation to your personal data.In particular, and subject to the legal requirements, you may be entitled to
To protect your personal data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use adequate physical, technical and organizational security measures.
Our Data Privacy Organization provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights. The Data Privacy Organization may be contacted at: [email protected].
The Data Privacy Organization will always use reasonable efforts to address and settle any requests or complaints you bring to its attention. Besides contacting the Data Privacy Organization, you always have the right to approach the competent data protection authority with your request or complaint.
The specific company identified on this page as being the operator of this website is the data controller in the meaning of the General Data Protection Regulation for the processing activities described in this Privacy Notice.
In the course of our business relationship with you, we may share Business Partner contact information with affiliated Siemens companies. We and these Siemens companies are jointly responsible for the proper protection of your personal data (Art. 26 General Data Protection Regulation). To allow you to effectively exercise your data subject rights in the context of this joint controllership, we entered into an agreement with these Siemens companies granting you the right to centrally exercise your data subject rights under section 6 of this Privacy Notice against Siemens Aktiengesellschaft, Germany.
To exercise your rights, you may reach out to: [email protected].
Legal basis of the processing
The General Data Protection Regulation requires us to provide you with information on the legal basis of the processing of your personal data.
The legal basis for our processing data about you is that such processing is necessary for the purposes of
In some cases, we may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for us processing that data about you may (in addition or instead) be that you have consented (Article 6 (1) (a) General Data Protection Regulation) (“Consent”).
Purpose | Legal Basis |
---|---|
Processing of personal data in the context of Online Offerings | |
To provide the Online Offering’s services and functions which includes creating and administering your online account, updating, securing, and troubleshooting, providing support, as well as improving and developing our Online Offerings, | Contract Performance (Article 6 (1) (b) General Data Protection Regulation) |
To bill your use of the Online Offering | Contract Performance (Article 6 (1) (b) General Data Protection Regulation) |
To verify your identity | Contract Performance (Article 6 (1) (b) GDPR) |
To answer and fulfill your requests or instructions | Contract Performance (Article 6 (1) (b) GDPR) |
To process your order or to provide you with access to specific information or offers | Contract Performance (Article 6 (1) (b) GDPR) |
To send you marketing information or to contact you in the context of customer satisfaction surveys as further explained in Section 3 | Consent, if voluntarily provided (Article 6 (1) (a) GDPR) |
As reasonably necessary to enforce the Online Offering’s terms, to establish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks on our information technology systems | Compliance with Legal Obligations (Article 6 (1) (c) GDPR |
Processing of personal data related to your business relationship with us | |
Communicating with Business Partners about our products, services and projects, e.g. by responding to inquiries or requests or providing you with technical information about purchased products | Contract Performance (Article 6 (1) (b) GDPR) |
Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services; | Contract Performance (Article 6 (1) (b) GDPR) |
Administrating and performing market analysis, sweepstakes, contests, or other customer activities or events; | Consent, if voluntarily provided (Article 6 (1) (a) GDPR) |
Conducting customer satisfaction surveys and direct marketing activities as further explained in Section 3; | Consent, if voluntarily provided (Article 6 (1) (a) GDPR) |
Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities; | Legitimate Interest (Article 6 (1) (f) GDPR) |
Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and our policies or industry standards; | Compliance with Legal Obligations (Article 6 (1) (c) GDPR) |
Solving disputes, enforce our contractual agreements and to establish, exercise or defend legal claims. | Compliance with Legal Obligations (Article 6 (1) (c) GDPR) |
International data transfers
Your competent data protection authority
In case of data privacy related concerns and requests, we encourage you to contact our Data Privacy Organization at [email protected]. Besides contacting the Data Privacy Organization, you always have the right to approach the competent data protection authority with your request or complaint.
A list and contact details of local data protection authorities is available here.
If you are a U.S. resident, then please take note of the following:
Do Not Track
At this time our Online Offerings do not recognize or respond to “Do Not Track” browser signals. For more information on “Do Not Track”, please visit your browser’s support page.
Usage by Children
This Online Offering is not directed to children under the age of thirteen. We will not knowingly collect personal data from children under the age of thirteen without insisting that they seek prior parental consent if required by applicable law. We will only use or disclose personal data about a child to the extent permitted by law, to seek parental consent, pursuant to local law and regulations or to protect a child.
State Rights
Depending on the US state in which you reside, you may have special rights with respect to your personal data. For information regarding any of those rights, please click here.
This section applies and provides you with further information if the processing by one of our companies (i) occurs in Brazilian territory, (ii) concerns the data of individuals located in Brazilian territory, (iii) comprises personal data collected in Brazilian territory or (iv) has as its objective the offer or supply of goods or services to individuals located in Brazilian territory. In these cases the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados - LGPD) applies to the processing of your personal data and the following additions and/or deviations apply to sections 2, 5, 6, 9, of this Data Privacy Notice:
Retention Periods
As allowed under article 16 of LGPD we may retain your personal data to comply with legal or regulatory obligations (such as retention obligations under tax or commercial laws), during the legal statute of limitation period, or for the regular exercise of rights in judicial, administrative or arbitration proceedings.
Your rights
Additionally to the rights mentioned in this Data Privacy Notice, you are entitled under LGPD to:
Legal basis of the processing
The Brazilian General Data Protection Law requires us to provide you with information on the legal basis of the processing of your personal data.The legal basis for our processing is:
International transfers
Following the LGPD requirements defined in the Article 33 of Brazilian General Data Protection Law, in the event that we transfer your personal data outside the Brazilian territory, we ensure that your data is protected in a manner which is consistent with the Brazilian General Data Protection Law, we will follow the applicable law and decisions imposed by the proper authority.
Your competent data protection contact
If this section applies, you may also contact our Brazilian Data Privacy Organization at [email protected].
For Business Partners and users located in South Africa, please take note of the following:
In terms of section 1 of the Protection of Personal Information Act, 2013 (“POPI”), “personal data” or “personal information” includes “information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing, juristic person.”
The corresponding legal grounds and conditions for lawful processing of personal data in South Africa are contained in Sections 8 to 25 of POPI, and relate to “Accountability”; “Processing limitation”; “Purpose specification”; “Further processing limitation”; “Information quality”; “Openness”; “Security safeguards” and “Data subject participation”.
In terms of section 69 of POPI, the processing of personal information of a data subject for the purposes of direct marketing by means of any form of electronic communication, including automatic calling machines, facsimile machines, sms’s or e-mail is prohibited unless the data subject has provided consent to the processing, or is, subject to further conditions, an existing customer of the responsible party.
For purposes of a Data Subject exercising its rights further enquiries and the exercise of its rights in relation to access, objection to, and complaints in respect of the processing of personal data, the contact particulars of the Information Regulator of South Africa, are as follows:
JD House, 27 Stiemens Street
Braamfontein
Johannesburg
2001
PO Box 31533
Braamfontein
Johannesburg
2017
Complaints: [email protected]
General enquiries: [email protected]
This section applies and provides you with further information if the processing by one of our companies is located within the borders of People’s Republic of China (“PRC”) or concerns the data of individuals within the borders of PRC.
Processing of sensitive personal information
According to the PIPL, sensitive personal information means personal information that, once leaked or illegally used, may easily cause harm to the dignity of natural persons grave harm to personal or property security, including information on biometric characteristics, religious beliefs, specially-designated status, medical health, financial accounts, individual location tracking, etc. as well as the personal information of minors under the age of 14.
In addition to the payment data mentioned in section 2 of this Data Private Notice, we will, in principle, not process your sensitive personal information. In case your sensitive personal information will be proceed, we will notify you about the necessity of processing and effects on the individual’s rights and interests, and obtain your specific consent if applicable.
Transfer and disclosure of personal data
Following the requirements defined in the Article 23 of PIPL, additionally to the contents mentioned in section 4, we, in principle, will not transfer or share your personal information to third party controllers, unless (1) obtain your specific consent if applicable, or (2) to fulfill the statutory duties under local laws and regulations.
International Transfer
You acknowledge that your data will be transferred and proceed outside of PRC. We will follow the applicable laws and decisions imposed by the competent authority, and ensure that your data is protected in a manner which is consistent with the PRC Personal Information Protection Law. If you or the company you work for is a Business Partner, please be aware that Siemens is a multi-national company, and for the purpose of concluding or fulfilling the contract/agreement with you or the company you work for, you understand and agree that we may transfer your personal information to foreign affiliated companies.
Legal Basis of the processing
The PIPL requires us to provide you with information on the legal basis of the processing of your personal data.The legal basis for our processing is:
Usage by Children
This Online Offering is not directed to children under the age of fourteen (14). We will not knowingly collect personal data from children under the age of fourteen (14) without prior parental consent if required by applicable law. We will only use or disclose personal data about a child to the extent permitted by law, to seek parental consent, pursuant to local law and regulations or to protect a child.