Search

You are here

Privacy Policy | Spectrum

Privacy Policy

The following Privacy Policy applies to the use of our online offering https://spectrum-instrumentation.com (hereinafter referred to as "Website").

Data privacy is very important to us. We collect and process your personal data in compliance with valid data protection regulations, particularly the General Data Protection Regulation (GDPR).

1 Responsible Party (Controller)

Responsible for the collection, processing and use of your personal data as defined in Article 4(7) GDPR:

Spectrum Instrumentation GmbH
Ahrensfelder
Weg 13-17
22927 Gros
shansdorf
Germany

If you want to object to our collection, processing or use of your data in whole or in part as described in this Privacy Policy, you can direct your objection to the responsible party.

You can store and print out this Privacy Policy at any time.

2 General Purposes of Processing

We use your personal data for purposes of operating our Website and for processing inquiries and orders.

3 Which Data We Use and Why

3.1 Hosting

The hosting services we contract provide the following: infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance, all of which we use to operate our Website.

For this purpose we or our hosting services provider process inventory data, contact data, contract data, usage data, meta and communication data from customers, interested parties and visitors to our Website on the basis of our legitimate interests in the efficient and secure availability of our Website pursuant to Article 6 (1)(f) GDPR in conjunction with Article 28 GDPR. 

3.2 Access Data

We collect information about you when you use our Website. We automatically register information about your usage behavior and your interaction with us and data bout your computer or mobile device. We collect, store and use data about every access to our Website (in log files on our server). Access data include:

  • name and URL of file retrieved
  • date and time of request
  • amount of transmitted data
  • HTTP response code
  • browser type and version
  • operating system
  • referrer URL (i.e., the site from which you came to our site)
  • Websites called up over our Website by the user's system
  • user's Internet service provider
  • IP address and the inquiring provider

We use these protocol data for statistical analysis purposes related to the operation, security and optimization of our Website without making any connection to you personally or doing any other profiling. The data also are used for the anonymous capture of traffic to our Website, for registering the scope and type of use of our Website and services, and for billing purposes, i.e., to measure the number of clicks received from cooperation partners. With this information we can provide content with personal and local relevance, analyze data traffic, find and resolve errors and improve our services.

Therein lies our legitimate interest pursuant to Article 6 (1)(f) GDPR.

We reserve the right to examine protocol data if, on the basis of concrete evidence, a justifiable suspicion of illegal use exists. We store IP addresses for a limited time in log files if storage is required for security purposes, for service provision or for invoicing for services, for example, if you use one of our offers. After the ordering process has been aborted or a payment has been received, we erase the IP addresses if they are no longer required for security reasons. We store IP addresses only if we have a concrete suspicion of a criminal offense in connection with the use of our Website. As part of your account, we also store the date of your most recent visit (e.g., at registration, log-in, clicks on links, etc.).

3.3 Cookies

We use session cookies to optimize our Website. A session cookie is a small text file which is sent by the server of an Internet site you visit to your hard drive and stored there temporarily. The files contain a session ID with which requests from your browser can be associated with an entire session. Your computer can then recognize when you return to our Website. These cookies are erased when you close your browser. They permit you to use the shopping cart function, for example, from several different pages on the site.

To a smaller extent we also use persistent cookies (also small text files stored on your end device) which remain on your end device and allow us to recognize your browser on subsequent visits. These cookies are stored on your hard drive and erase themselves after a defined period. Their lifetime varies from one month to 10 years. With the help of cookies, we can make our site more user friendly, effective and secure and tailor the information on our site to your interests.

Our legitimate interest in the use of cookies pursuant to Article 6 (1)(f) GDPR lies in making our Website more user-friendly, more effective and more secure.

The following data and information are stored in the cookies:

  • log-in information
  • language setting
  • search keywords entered
  • information about the number of requests to our Website and the use of individual functions of our Website.

When the cookie is activated, it is assigned an identification number; an association is not made between your personal data and the identification number. Your name, your IP address or similar data which would permit an association of the cookie with you are not stored in the cookie. Based on cookie technology, we receive only pseudonymized information such as which pages of our shop were visited, which products were viewed and the like.

You can set your browser so that you will be advised before a cookie is created. Then you can decide  on a case-by-case basis to accept cookies in certain cases or to exclude them generally or to block them completely. If they are blocked completely, the functionality of the Website may be limited.

3.4 Data for the Fulfillment of Our Contractual Obligations

We process personal data, including name, address, e-mail address, products ordered, invoice and payment data, which we require to fulfill our contractual obligations. The collection of such data is required for contract execution.

The data are erased after expiration of the warranty and of legal retention periods. Data which are linked to a user account (see below) are retained for as long as the account is maintained.

The legal grounds for the processing of those data is Article 6 (1)(b) GDPR because the data are required for the fulfillment of our contractual obligations to you.

3.5 Newsletter

Required data are requested when you register for our newsletter. Registration for the newsletter is logged. After you have registered, you will receive an e-mail at the address you provided and will be asked to confirm the registration ("double opt-in"). The confirmation is necessary to prevent third parties from registering with your e-mail address.

You may revoke your consent to receive the newsletter at any time and thereby discontinue receipt of the newsletter.

We store your registration data for as long as required to send you the newsletter. We store the log of the registration process and the e-mail address to which the newsletter is sent for as long as there is evidence of the originally provided consent; as a rule, the statutes of limitation for civil claims apply for a maximum of three years.

The legal ground for sending the newsletter is your consent as per Article 6 (1)(a) GDPR in conjunction with Article 7 GDPR and § 7 Abs. 2 Nr. 3 Unfair Competition Act (UWG). The legal ground for logging the registration is our legitimate interest in proof that the newsletter is sent with your consent.

You can cancel the registration at any time without incurring any costs beyond transmission costs at the basic price. It suffices to send a message in text (e.g., e-mail, fax, letter) to the contact designated in Section 1. At the end of every newsletter you will find a cancellation link.

3.6 Product Recommendations

We regularly send you – separate from the newsletter – product recommendations via e-mail. In this way we provide you with information about products you may be interested in, based on your most recent purchases of goods and services from us. When doing so, we pay strict attention to the legal regulations. You may object to receipt of product recommendations at any time without incurring any costs beyond transmission costs at the basic price. At the end of every e-mail you will find a cancellation link.

The legal ground for the above is the legal permission described in Article 6 (1)(f) GDPR in conjunction with § 7 Abs. 3 UWG.

3.7 e-mail Contact

When you contact us (e.g., via contact form or e-mail), we process your data to respond to your question and to any potential follow-up questions.

When your data is processed to execute pre-contractual measures which result from your request or to execute a contract if you are already our customer, the legal ground for this data processing is Article 6 (1)(b) GDPR.

We process additional data only if you provide your consent (Article 6 (1)(a) GDPR) or if we have a legitimate interest in the processing of your personal data (Article 6 (1)(f) GDPR). A legitimate interest, for example, lies in responding to your e-mail.

4 Google Analytics

We use Google Analytics, a Web analysis service provided by Google Inc. ("Google"). Google Analytics uses cookies, small text files stored on your computer which permit the analysis of your use of the Website. As a rule, the information about use of this Website by site visitors which is generated by the cookies is transmitted to Google in the USA and stored there.

Therein lies our legitimate interest as per Article 6 (1)(f) GDPR.

Google has voluntarily subjected itself to the Privacy Shield Framework between the European Union and the USA and Google's compliance has been certified. Consequently, Google is required to observe the standards and regulations of European data protection law. More information is available under this link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=A....

We have activated IP anonymization (anonymize IP) on this Website. As a result, your IP address will first be shortened by Google within the Member States of the European Union or in other countries party to the Privacy Shield Framework in the European Economic Area. On our behalf Google will use the information to analyze your use of the Website, to compile reports about Website activities and to provide us with other services related to Website activity and Internet use.

The IP address of your browser obtained within Google Analytics will not be associated with other data from Google.  You can block the installation of cookies by changing your browser settings accordingly; however, we advise you that in that case you may not be able to make full use of all the functions of this Website.

Furthermore, you can prevent the storage of the cookie-generated data related to the use of the Website (including your IP address) and the processing of the data by Google by downloading and installing a browser add-on: http://tools.google.com/dlpage/gaoptout?hl=de.

5 How Long Data Are Stored

If not otherwise specified, we store your personal data only for as long as necessary to fulfill the intended purposes.

In some cases, such as in tax or trade law, lawmakers prescribe the retention of personal data. In those cases we will continue to store data for legal purposes, but will not otherwise process them, and will erase them when the legal retention period has expired.

6 Your Rights as Data Subject of Data Processing

Pursuant to applicable laws, you have several different rights regarding your personal data. If you would like to exercise any of these rights, please send your request per e-mail or standard post to the address in Section 1 along with information that clearly identifies you.

The following paragraphs provide an overview of your rights as the data subject.

6.1 Right to Access and Transparent Information

You have the right to obtain transparent information about the processing of your personal data.

Specifically, you have the right at any time to receive confirmation from us as to whether personal data concerning you are being processed. If that is the case, you have the right to obtain from us information about your stored personal data and a copy of the data at no charge. In addition, you have the right to the following information:

  1. the purposes of the processing;
  2. the categories of personal data concerned;
  3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  5. the existence of the right to request from the responsible party (controller) rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing;
  6. the right to lodge a complaint with a supervisory authority;
  7. where the personal data are not collected from you, any available information as to their source;
  8. the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you.

Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

6.2 Right to Rectification

You have the right to obtain from us the rectification of inaccurate personal data and, if applicable, the completion of incomplete personal data.

Specifically, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

6.3 Right to Erasure ("Right to be Forgotten")

In some cases we are obliged to erase your personal data.

Specifically, pursuant to Article 17 (1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:

  1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  2. you withdraw consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
  3. you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  4. the personal data have been unlawfully processed.
  5. the personal data have to be erased for compliance with a legal obligation in the European Union or Member State law to which we are subject.
  6. the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged pursuant to Article 17 (1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform responsible parties which are processing the personal data that you have requested from them the erasure of any links to, or copy or replication of, those personal data.

6.4 Right to Restriction of Processing

In some cases you have the right to obtain from us restriction of processing of your personal data.

Specifically, you have the right to obtain from us restriction of processing where one of the following applies:

  1. you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data,
  2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  3. we no longer need the personal data for the purposes of processing, but you need the data for the establishment, exercise or defense of legal claims, or
  4. you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of our company override yours.

6.5 Right to Data Portability

You have the right to receive the personal data concerning you in a machine-readable format and to transmit those data or to have them transmitted by us.

Specifically, you have the right to receive the personal data which you have provided to us in a structured, commonly used format, and you have the right to transmit those data to another responsible party without hindrance from us where

  1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and
  2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another responsible party, where technically feasible.

6.6 Right to Object

You have the right to object to our lawful processing of your personal data on grounds relating to your particular situation and our interest in the processing do not override yours.

Specifically, you have the right at any time to object on grounds relating to your particular situation to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such marketing.

Where personal data are processed for scientific or historical research pursuant to Article 89(1) GDPR, you, on grounds relating to your particular situation, have the right to object to processing of your personal data unless the processing is necessary for the performance of a task carried out for reasons of public interest.

6.7 Automated Individual Decision-Making, including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you.

Automated decision-making on the basis of collected personal data does not take place.

6.8 Right to Withdraw Data Protection Consent

You have the right to withdraw your consent regarding the processing of your personal data at any time.

6.9 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that  the processing of personal data relating to you infringes on the regulations.

7 Security of Personal Data

We make every effort to ensure the security of your data within the scope of the applicable data protection law and technical feasibility.

Your personal data is encrypted when we transmit it. That applies to your orders and customer log-in. We use the SSL (Secure Sockets Layer) coding system; we advise you, however, that there may be gaps in the security of data transmission on the Internet (e.g., with communications via e-mail). Data cannot be completely protected from unauthorized access by third parties.

To secure your data, we implement appropriate technical and organizational security measures as per Article 32 GDPR, which we always adapt to the current state of technology.

We do not guarantee that our Website will be available at certain times; failures, interruptions or breakdowns cannot be ruled out. At regular intervals we diligently back up the servers we use.

8 Data Transmission to Third Party, No Data Transmission into Foreign non-EU Country

In principle we use your personal data only within our company.

If and to the extent to which we contract a third party (e.g., a logistics services company) to fulfill  contractual obligations, we transmit to the third party only those personal data in the scope required for the provision of corresponding services.

In the case that we outsource certain parts of data processing (order processing), we contractually oblige the order processor to use personal data only in compliance with the requirements of the data protection law and to guarantee protection of the rights of the data subjects.

Data transmission to places or persons outside the European Union, excluding the cases mentioned in Section 4 of this Privacy Policy, does not take place and is not planned. 

9 Data Protection Officer

If you have questions or concerns regarding data protection, please contact our Data Protection Officer:
Sven Weschler
iqanta GmbH
Harburger Schloßstraße 30
21079 Hamburg

E-Mail: kontakt [at] iqanta.com
Tel: +49 40 794 16 621