Here you’ll find Exaktera’s Privacy Policy.
With the following privacy policy we would like to inform you which types of your personal data (hereinafter also abbreviated as “data”) we process for which purposes and in which scope.
The privacy statement applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online services”).
The terms used are not gender-specific.
Last Update: 16. February 2022
Controller
Exaktera LLC
200 Newbury Street
MA 02116 Boston
USA
E-mail address: info@z-laser.de
Phone: +49 (0) 761 296 4444
Legal Notice: https://www.exaktera.com/imprint.html
Merzhauser Straße 134
79100 Freiburg / Germany
Telefon: +49 761/29644-399
E-Mail: dsb@z-laser.de
The following table summarises the types of data processed, the purposes for which they are processed and the concerned data subjects.
Inventory data.
Contact data.
Content data.
Usage data.
Meta/communication data.
Communication partner.
Users.
Provision of contractual services and customer support.
Contact requests and communication.
Feedback.
Marketing.
Provision of our online services and usability.
We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input, transmission, securing and separation of the data.
In addition, we have established procedures to ensure that data subjects’ rights are respected, that data is erased, and that we are prepared to respond to data threats rapidly.
Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and service providers, in accordance with the principle of privacy by design and privacy by default.
In the context of our processing of personal data, it may happen that the data is transferred to other places, companies or persons or that it is disclosed to them.
Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are embedded in a website.
In such a case, the legal requirements will be respected and in particular corresponding contracts or agreements, which serve the protection of your data, will be concluded with the recipients of your data.
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third party services or disclosure or transfer of data to other persons, bodies or companies, this will only take place in accordance with the legal requirements.
Subject to express consent or transfer required by contract or law, we process or have processed the data only in third countries with a recognised level of data protection, on the basis of special guarantees, such as a contractual obligation through so-called standard protection clauses of the EU Commission or if certifications or binding internal data protection regulations justify the processing (Article 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).
The data processed by us will be erased in accordance with the statutory provisions as soon as their processing is revoked or other permissions no longer apply (e.g. if the purpose of processing this data no longer applies or they are not required for the purpose).
If the data is not deleted because they are required for other and legally permissible purposes, their processing is limited to these purposes.
This means that the data will be restricted and not processed for other purposes.
This applies, for example, to data that must be stored for commercial or tax reasons or for which storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.
In the context of our information on data processing, we may provide users with further information on the deletion and retention of data that is specific to the respective processing operation.
Cookies are small text files or other data records that store information on end devices and read information from the end devices.
For example, to store the login status in a user account, the contents of a shopping cart in an e-shop, the contents accessed or the functions used.
Cookies can also be used for various purposes, e.g. for purposes of functionality, security and convenience of online offers as well as the creation of analyses of visitor flows.
Information on consent:
We use cookies in accordance with the statutory provisions. Therefore, we obtain prior consent from users, except when it is not required by law.
In particular, consent is not required if the storage and reading of information, including cookies, is strictly necessary in order to provide an information society service explicitly requested by the subscriber or user.
The revocable consent will be clearly communicated to the user and will contain the information on the respective cookie use.
Information on legal bases under data protection law:
The legal basis under data protection law on which we process users’ personal data with the use of cookies depends on whether we ask users for consent.
If users consent, the legal basis for processing their data is their declared consent.
Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in a business operation of our online services and improvement of its usability) or, if this is done in the context of the fulfillment of our contractual obligations, if the use of cookies is necessary to fulfill our contractual obligations.
For which purposes the cookies are processed by us, we do clarify in the course of this privacy policy or in the context of our consent and processing procedures.
Retention period:
With regard to the retention period, a distinction is drawn between the following types of cookies:
Temporary cookies (also known as “session cookies”): Temporary cookies are deleted at the latest after a user has left an online service and closed his or her end device (i.e. browser or mobile application).
Permanent cookies: Permanent cookies remain stored even after the terminal device is closed. For example, the login status can be saved, or preferred content can be displayed directly when the user visits a website again. Likewise, user data collected with the help of cookies can be used for reach measurement.
Unless we provide users with explicit information about the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.
General information on revocation and objection (opt-out):
Users can revoke the consent they have given at any time and also file an objection to processing in accordance with the legal requirements in Art. 21 DSGVO (further information on objection is provided as part of this privacy policy).
Users can also declare their objection by means of the settings of their browser, e.g. by deactivating the use of cookies (whereby this may also limit the functionality of our online services).
An objection to the use of cookies for online marketing purposes, can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
In addition, users can receive further objection notices from us at appropriate points as part of the information on the service providers and cookies used.
Further information on processing methods, procedures and services used:
In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers they manage) the online services can be accessed.
For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.
The data processed within the framework of the provision of the hosting services may include all information relating to the users of our online services that is collected in the course of use and communication.
This regularly includes the IP address, which is necessary to be able to deliver the contents of online services to browsers, and all entries made within our online services or from websites.
Further information on processing methods, procedures and services used:
We use blogs or comparable means of online communication and publication (hereinafter “publication medium”).
Readers’ data will only be processed for the purposes of the publication medium to the extent necessary for its presentation and communication between authors and readers or for security reasons.
For the rest, we refer to the information on the processing of visitors to our publication medium within the scope of this privacy policy.
When contacting us (e.g. via contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.
The response to the contact inquiries as well as the management of contact and inquiry data in the context of contractual or pre-contractual relationships is carried out to fulfill our contractual obligations or to respond to (pre)contractual inquiries and otherwise on the basis of legitimate interests in responding to the inquiries and maintaining user or business relationships.
Further information on processing methods, procedures and services used:
We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. This may entail risks for users, e.g. by making it more difficult to enforce users’ rights.
In addition, user data is usually processed within social networks for market research and advertising purposes.
For example, user profiles can be created on the basis of user behaviour and the associated interests of users.
The user profiles can then be used, for example, to place advertisements within and outside the networks which are presumed to correspond to the interests of the users.
For these purposes, cookies are usually stored on the user’s computer, in which the user’s usage behaviour and interests are stored.
Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective networks or will become members later on).
For a detailed description of the respective processing operations and the opt-out options, please refer to the respective data protection declarations and information provided by the providers of the respective networks.
Also in the case of requests for information and the exercise of rights of data subjects, we point out that these can be most effectively pursued with the providers.
Only the providers have access to the data of the users and can directly take appropriate measures and provide information.
If you still need help, please do not hesitate to contact us.
We kindly ask you to inform yourself regularly about the contents of our data protection declaration.
We will adjust the privacy policy as changes in our data processing practices make this necessary.
We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that addresses may change over time and to verify the information before contacting us.
As data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:
This section provides an overview of the terms used in this privacy policy.
Many of the terms are drawn from the law and defined mainly in Article 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended above all for the purpose of comprehension.
The terms are sorted alphabetically.
