Privacy policy

Thank you for your interest in XTRONIC GmbH, a company of the Schaeffler Group (Schaeffler AG and affiliated companies) and in our services and products. When using our online offer, the protection of your privacy is of great importance. Whenever personal data is processed, we comply with the applicable data protection regulations.

1. General information on data processing

1.1. Scope and purpose of the processing of personal data

As a matter of principle, we collect and use your personal data only insofar as this is necessary to provide a functioning website and our content and services offered on the website. Your personal data is processed either on the basis of your consent or insofar as the statutory provisions permit this data processing even without consent.

1.2.1. Consent Art. 6 para. 1 lit. a DSGVO

Insofar as you have given us consent to process personal data for specific purposes, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of personal data. You can revoke your consent at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.

1.2.2. Pre-contractual and contractual measures Art. 6 para. 1 lit. b DSGVO

The processing of personal data in the context of the performance of contracts to which you are a contracting party or for the implementation of pre-contractual measures that are carried out at your request is based on Art. 6 para. 1 lit. b DSGVO. The purposes of the data processing depend on the respective contractual documents and the subject matter of the contract.

1.2.3. Legal obligation Art. 6 para. 1 lit. c DSGVO

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.

1.2.4. Legitimate interests Art. 6 para. 1 lit. f DSGVO

If processing is necessary to protect a legitimate interest of Schaeffler or a third party (e.g. to assert legal claims and defend against legal disputes; to ensure IT security; to prevent criminal offences; for business management measures and further development of services and products) and if the interests, fundamental rights and freedoms of you as the data subject do not outweigh the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing.

1.3. Data deletion and storage period

We process and store your personal data as long as it is required to fulfil the respective purpose.

If your data is no longer required to fulfil the purpose of the data processing, it will be deleted, unless this deletion conflicts with statutory retention periods. Data that you have given us when giving your marketing consent will be deleted after two months at the latest in the event of revocation, otherwise we will delete the history of our marketing communication with you after 5 years at the latest.

1.4. Access to personal data within the Schaeffler Group and by third parties

Within the Schaeffler Group, access to your data is granted to those offices that require it within the framework of “least privilege” (allocation of user rights to the lowest possible extent) and the “need-to-know” principle (knowledge of data only if necessary).

We may only pass on data to third parties outside the Schaeffler Group if this is necessary, if a legal provision requires this, if you have consented or if the processors commissioned by us have contractually undertaken to comply with the provisions of the DSGVO and the BDSG.

Under these conditions, recipients of personal data may be: Responsible internal departments, which are responsible for the processing of your data, as well as service providers if required.

1.5. IT security and links to third-party websites

The Schaeffler Group uses technical and organisational security measures to protect the data we have under our control against accidental or intentional destruction, manipulation, loss or against access by unauthorised persons. These security measures are constantly being further developed in accordance with the respective new technical possibilities.

Our websites may contain links to websites of other providers. Our information on data protection does not apply to these websites.

1.6. Obligation to provide personal data

When concluding a contract, you must provide the personal data that is required for the establishment, execution and termination of the contract and the resulting obligations for performance or which Schaeffler is legally obliged to collect.

On this website we provide you with services which you can use voluntarily. Without providing your personal data, you may not be able to use our services.

1.7. “Profiling” and automated decision making

We do not use fully automated decision-making in accordance with Art. 22 DSGVO. As a matter of principle, Schaeffler does not use “profiling”. Should we use this in individual cases, we will inform you of this separately if this is required by law and, if necessary, obtain your prior consent.

1.8. Sources of your personal data

We use data that we receive from you through personal contact, registration / application forms or social media channels.

2. Data processing operations during the provision of the website and during the creation of log files

When you visit our website, our web servers record and collect the name of your internet service provider, your IP address, the website from which you visit us, the web pages you visit on our site and the date and duration of your visit as standard. This data is stored in the log files of our systems and is used for problem or error analysis. However, the use of the IP address is limited to the technically necessary scope and is shortened and thus only used anonymously, so that an assignment of the IP address to a user is not possible.

The temporary storage of the shortened IP address by our systems is technically necessary to enable delivery of the website to your end device. The storage in log files is done to ensure the functionality of the website. An evaluation of the data for marketing purposes does not take place in this context.

The legal basis for this data processing lies in our legitimate interest in data processing according to Art. 6 (1) lit. f DSGVO.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, you as a user have no possibility to object.

3. Data processing for services offered on the website

Various services are offered on our website for the use of which personal data is requested from you.

3.1. Use of our contact and enquiry forms

There are contact and enquiry forms on the website which can be used to contact us electronically.

To use the contact forms, you must provide mandatory information marked with an asterisk in the corresponding input mask (e.g. your e-mail address). All other information is optional for you. This personal data is transmitted to the department of our company responsible for processing and stored in our systems. At the time your message is sent, the date and time of entry will be saved. Your consent is obtained for the processing of the data as part of the enquiry process.

The data you enter in the input mask will only be used to process your contact.

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a DSGVO.

The data will be deleted as soon as the communication process has been completed.

You have the option to revoke your consent to the processing of personal data at any time by sending an email to datenschutz@xtronic.de. In this case, all personal data stored in the course of contacting you will be deleted with effect for the future. Depending on the time of your revocation, it may no longer be possible for us to contact you.

It is also possible to contact us via the chat bots provided by us. The previous explanations on data processing apply here. If you use these, the processing of your personal data is based on our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.

3.2. Data processing in connection with cookies and local storage

3.2.1. Cookies

We use cookies so that you can use the website in the best possible way. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s end device. When a user calls up our website, a cookie may be stored on the user’s browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

In the following, we inform you in general about the use of cookies on our website and the associated processing of personal data.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

In addition, we use cookies on our website that enable an analysis of the user’s surfing behaviour.

When calling up our website, the user is informed about the use of cookies and referred to this data protection declaration.

Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. The user data collected through technically necessary cookies are not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

Cookies are stored on the user’s end device and are transmitted to our website by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

The legal basis for the use of necessary cookies is Art. 6 para. 1 p. 1 lit. b DSGVO. For the use of cookies for analysis or marketing purposes, the legal basis is Art. 6 para. 1 p. lit. a DSGVO or Art. 6 para. 1 p. 1 lit. f DSGVO. Cookies serve statistical and personalisation purposes in the further development and relevance of the website and represent a legitimate interest of Schaeffler.

3.2.2. Information on the use of cookies

When you visit the XTRONIC website, information is stored on your terminal device in the form of a so-called “cookie”. Cookies are small text files that enable the analysis of the use of the website, save settings and data in your browser and allow the adaptation of the website to your interests and the display of interest-based advertising on other websites. We do not collect any personal data by means of cookies unless you have given us your express consent to do so.

Below you can find out about the type and function of the cookies used on the XTRONIC website and make your desired setting:

Cookie Settings

 

3.2.3. Local Storage

We use the functionality of the so-called local storage. Your data (master data, status data and programme data) is stored locally in the cache of your browser. If you do not delete the cache of your browser, this information is retained and can be read the next time you visit the website. By using local storage, we enable you to view your data correctly when surfing our website without unnecessarily slowing down this process and overloading interfaces.

If you do not wish to use Local Storage, you can set this accordingly at any time in the settings of your respective browser. Please note that in this case the functionalities of our website will only be available to you to a limited extent or no longer.

The legal basis for the use of local storage is Art. 6 para. 1 p. 1 lit. f DSGVO. For the use of local storage, the legitimate interest of Schaeffler lies in accelerating processes and avoiding system overload.

In particular, we provide the following information about the following services and cookies:

a) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc (“Google”). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that the code “anonymizeIp;” has been added to Google Analytics on this website to ensure anonymised collection of IP addresses (so-called IP masking).

You can prevent the collection by Google Analytics by clicking on the following link Deactivate Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. Alternatively, you can also download and install the available browser plugin.

For more information on the terms of use and data protection of Google Analytics, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

b) Google advertising functions
This website uses the Google advertising functions. Google uses cookies to implement the advertising functions described above. With the help of the cookies, user behaviour when visiting the website can be analysed and then used, for example, for usage and interest-based advertising.

This website uses Google’s remarketing function. Using this function, visitors to the website can be targeted with interest-based advertising if they visit other websites in the Google Display Network or use Google Search and have previously visited certain parts of this website. As part of the remarketing function, the DoubleClick cookie may be placed by Google.

When we implement a communication/marketing campaign that has online advertising as a target channel, we use AdWords where you are shown ads based on your likely interests and usage of this website, using the remarketing function. Depending on the objective of the advertising campaign, this may involve placing a so-called conversion cookie or the Google ad preferences cookie to record whether a user has seen and clicked on the advertisement.

Google Analytics advertising features generate reports on impressions on the Google Display Network and reports on the presumed demographic characteristics and likely interests of visitors to the website. We learn your presumed demographic characteristics and likely interests from how you use our websites and apps or from other companies that also use Google’s advertising features to understand your likely interests. This information is stored in the Google Ads Preferences cookie and the Google DoubleClick cookie and may be shared with third parties such as advertisers.

Google will not merge the IP address transmitted by your browser with any other data held by Google. No personal data will be collected, transmitted or analysed.

You can find out how to prevent the collection of data by Google advertising functions by clicking on the following link: https://support.google.com/ads/answer/2662922.

Further information on the Google advertising functions and the cookies used as well as the data protection declaration of the Google advertising functions can be found at: https://www.google.com/policies/technologies/ads/ or at https://policies.google.com/.

3.2.4 Managing cookies

You can object to the use of cookies, which means that no cookies will be placed on your end device. This can be done, for example, by making the appropriate setting in your internet browser. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

If you only wish to deactivate individual cookies or services on our website, you will find the necessary information on the respective services here:

Cookie Settings

In the following, we have compiled links where you can find detailed information on how to deactivate cookies in common browsers:

Internet Explorer

Mozilla Firefox

Google Chrome

Safari

In addition, we would also like to refer you to the deactivation page of the network advertising initiative http://www.networkadvertising.org/managing/opt_out.asp and the deactivation page of the Digital Advertising Alliance http://www.aboutads.info/choices.

3.3. Data processing in connection with social media networks

The following information of the data protection declaration applies to the appearances of XTRONIC GmbH in social media or third party platforms:

Twitter
LinkedIn
Instagram
YouTube
XING
Facebook

The declaration on the processing of personal data below refers purely to the processing by XTRONIC itself. The providers of the listed social media themselves process personal data of registered users, but also of non-registered visitors to their websites. They are responsible for this themselves and the user or visitor should obtain information directly from the providers of the social media about the processing of their personal data.

The respective legal entity within the Schaeffler Group’s presence, in this case XTRONIC GmbH, is responsible for the collection of data on the above-mentioned social media presences.

We collect and process personal data in the course of the use of our social media sites by the data subjects and may transfer your data to an internal system for processing.

3.3.1. Processing of your personal data when you contact us

If you provide us with personal data by contacting us, e.g. by email or through a direct message on social media, we will process your data in accordance with Art Measures that take place at your request or in accordance with Art. 6 Paragraph 1 Sentence 1 Letter f GDPR due to our legitimate interest in answering your request. We process the data that you provide to us directly via your request. On social media, this is your username and photo, as well as the message you send us. We may also visit your public profile and store data from it if it is necessary for the purposes mentioned above.
The data mentioned is processed in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of Schaeffler’s legitimate interest in providing users with targeted information about us and our services as well as the optimal design of our social media presence effective communication with users. If the users are asked by the respective providers of the social media networks for their consent to this data processing (e.g. when registering by ticking a checkbox or confirming a corresponding button), the legal basis for the processing is Article 6 Paragraph 1 Sentence. 1 lit. a GDPR.

3.3.2. Processing of personal data by XTRONIC within social media networks

On all of our social media sites, we receive messages about whether social media users like our posts there, find them interesting, share or recommend or comment (depending on the function of the social media), etc. We can also see a list of our respective followers or subscribers, as well as a list of visitors to our social media presence on Xing. We can also see when you leave reviews about our company, provided that review is linked to the respective social media presence.
The data mentioned is processed in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of Schaeffler’s legitimate interest in providing users with targeted information about us and our services as well as the optimal design of our social media presence effective communication with users. If the users are asked by the respective providers of the social media networks for their consent to this data processing (e.g. when registering by ticking a checkbox or confirming a corresponding button), the legal basis for the processing is Article 6 Paragraph 1 Sentence. 1 lit. a GDPR.

3.3.3. Processing of statistical data within social media networks

We also receive statistical evaluations from all social media providers about the use of our social media presence. In addition to the information mentioned under 3.3.1., this only contains anonymized form, such as (depending on the provider) demographic data, an anonymized analysis of the interaction and reach of our social media appearances and posts, anonymized information such as languages, interests, end devices used by our users. The data mentioned is processed in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of Schaeffler’s legitimate interest in providing users with targeted information about us and our services as well as the optimal design of our social media presence effective communication with users. If the users are asked by the respective providers of the social media networks for their consent to this data processing (e.g. when registering by ticking a checkbox or confirming a corresponding button), the legal basis for the processing is Article 6 Paragraph 1 Sentence. 1 lit. a GDPR.

3.3.4. Processing of data for advertising purposes and creation of usage profiles by social media network providers

The data mentioned under 3.2.1 and 3.2.2 can also be processed for market research and advertising purposes. This happens, for example, when we place advertisements on the respective social media. However, the data is processed by the respective providers. Please also note that they can create usage profiles based on your usage behavior. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that correspond to your interest profile. Please find out more about this from the social media providers.
The social media providers do not act under instructions, but rather process your data under their own responsibility. Information about the providers and their contact details can be found on their websites. There you will also find information about the processing of your personal data. We would like to point out that your data may be processed by social media providers outside the European Union. This may result in risks for you because, for example, it could make it more difficult to enforce your rights. Please find out more about this from the social media providers.

4. Your rights as a data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards us as the person responsible:

4.1. Right to information (Article 15 GDPR)

You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information from us about the information required by law (see Art. 15 Para. 1 GDPR) and to be informed about suitable guarantees in accordance with Art. 46 GDPR in connection with the transfer if they concern you personal data is transferred to a third country or to an international organization. There are restrictions according to Sections 34 and 35 BDSG.

4.2. Right to rectification (Article 16 GDPR)

You have the right to rectification and/or completion if the personal data processed is incorrect or incomplete. We must make the correction immediately.

4.3. Right to restriction of processing (Article 18 GDPR)

Under the legal requirements (see Article 18 Para. 1 GDPR), you can request that the processing of personal data concerning you be restricted. For the consequences of the restriction, please see Article 18 Paragraphs 2 and 3 GDPR.

4.4. Right to deletion (Article 17 GDPR)

You can request that the personal data concerning you be deleted immediately, and we are obliged to delete this data immediately if one of the reasons in accordance with Article 17 Para. 1 GDPR applies. There is no right to deletion in the cases of Art. 17 Para. 3 GDPR. The restrictions in accordance with Sections 34 and 35 BDSG continue to apply.

4.5. Right to information

If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves to be the case as impossible or involves disproportionate effort. You have the right to be informed about these recipients.

4.6. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. For details, we refer to Art. 20 GDPR.

4.7. Right to object (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR. Further details can be found in Article 21 GDPR. In addition, you have the right to complain to the data protection supervisory authorities in accordance with Art. 77 GDPR in conjunction with Section 19 BDSG.

5. Name and address of the person responsible

XTRONIC GmbH
Herrenberger Strasse 56
71034 Böblingen

Phone: +49 7031 20947-0
Fax: +49 7031 20947-101
E-Mail: info@xtronic.de

6. Address of the data protection officer

XTRONIC GmbH
Data Protection Officer
Herrenberger Straße 56
71034 Böblingen
Phone: +49 7031 20947-0
Fax: +49 7031 20947-101
E-Mail: datenschutz@xtronic.de

Status: Version 2.0, 10/2021

Information of Data Processing

The protection of your personal data is a matter of great importance to us and a high priority for our company. Adherence to these legal stipulations is a matter of course for us. The following information provides an overview of how we process your personal data and your rights under data protection law.