The protection of your personal data when processing personal data when you visit our website is important to us. Your data is protected within the framework of the statutory provisions. We would like to inform you below about the type and extent of the processing of personal data via this website in accordance with Article 13 of the General Data Protection Regulation (GDPR).

I. INFORMATION ON THE RESPONSIBLE BODY

SHERA Werkstoff-Technologie GmbH Espohlstrasse 53 49448 Lemförde Tel.: +49 (0) 5443/99330 E-Mail: info@shera.de

II. INFORMATION ON THE DATA PROTECTION OFFICER

If you have any questions about data protection, our external data protection officer will be happy to help you: Dr. Hans Daldrop from GINDAT GmbH Wetterauer Str. 6, 42897 Remscheid Mail: datenschutz@gindat.de Tel. +49 (0) 2191 / 909 430

III. DATA PROCESSING VIA THE WEBSITE

Your visit to our website is logged. The following data is initially recorded, which your browser sends to us:

• the IP address currently used by your PC or router
• Date and Time
• Browser type and version
• the operating system of your PC
• the pages you viewed
• Name and size of the requested file(s)
• and, if applicable, the URL of the referring website.

This data is collected solely for the purposes of data security, to improve our website and for error analysis on the basis of Art. 6 Para. 1 f GDPR. We reserve the right to use this data in the event of system misuse in order to determine the reasons and triggers of the misuse and, if necessary, to take legal action. Otherwise, the IP address of your computer is only evaluated anonymously (shortened by the last 3 digits).

You can visit our website without providing any personal information.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible. You should therefore send us confidential data by another method, e.g. by post.

Applications

The controller processes the personal data of applicants for the purpose of processing the application process. The legal basis is Section 26 Paragraph 1 Clause 1 of the Federal Data Protection Act (BDSG). Processing can also be carried out electronically. This is particularly the case if an applicant sends the relevant application documents to the controller electronically, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted in accordance with the statutory provisions after the advertised position has been filled, provided that there are no other legitimate interests of the controller that conflict with deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). For this purpose, the data will be stored for 6 months after completion of the application process and then deleted.

We can only process applications if they are sent to the email address "bewerbung@shera.de" or submitted via our application portal. If you use another email address from our company, your application will unfortunately not be recognized by our systems and therefore will not be considered. Please remember that email is not a secure medium. If your application reaches our email server at the email address mentioned above, we protect your applications with high technical and organizational measures. We have no influence on the route your application takes to our company via the public Internet and cannot guarantee the level of protection of your application. If your sending email server supports STARTTLS, our email server will also use STARTTLS and thus ensure transport encryption.

Link: Detailed information on applicant data protection

Contact

Personal data (e.g. your name, address details or contact details) that you provide to us voluntarily, e.g. as part of an inquiry or in any other way, will be stored by us and only processed for correspondence with you and only for the purpose for which you made this data available to us. This data is processed based on our legitimate interest in responding to inquiries from interested parties promptly on the basis of Art. 6 (1) lit. f. GDPR.

Registration

You can register on our website to use additional functions on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. For important changes, such as in the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you in this way. The data entered during registration is processed on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal message to us by e-mail is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation. The data collected during registration is stored by us as long as you are registered on our website and is then deleted. Statutory retention periods remain unaffected.

Newsletter

We offer you the opportunity to order a newsletter via our homepage. When you place an order, personal data is collected from you. To ensure that the newsletter was ordered by you or your email address, you will first receive a confirmation email. Only when you click on the activation link contained therein will you be added to our email distribution list and receive the newsletter. The order for the newsletter is logged for verification purposes (IP address, date, time). You have the option of unsubscribing from the newsletter at any time by notifying us. In particular, you can use the link at the end of each newsletter to unsubscribe. The legal basis is Article 6 Paragraph 1 a GDPR.

We use the Google reCaptcha service to determine whether a person or a computer is making a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a person or a computer: IP address of the device used, the website you visit on our site and on which the Captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks where you have to identify images. The legal basis for the data processing described is Art. 6 Para. 1 lit. f of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing to ensure the security of our website and to protect us from automated entries (attacks).

We use the newsletter service CleverReach to send the newsletter. This service processes the data exclusively in accordance with our orders and instructions in accordance with Art. 28 GDPR.

Secure data transfer

To protect the security of your data during transmission, we use a state-of-the-art encryption method (SSL) over HTTPS.

Processing of data (customer and contract data)

We only process personal data to the extent that it is necessary for the establishment, content design or modification of the legal relationship (master data). This is done on the basis of Art. 6 Paragraph 1 Letter b of GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures. We only process personal data about the use of our websites (usage data) to the extent that this is necessary to enable the user to use the service or to bill them. The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer when concluding a contract for services and digital content

We only transmit personal data to third parties if this is necessary for the purpose of contract execution, for example to the company entrusted with the delivery of the goods or the credit institution commissioned with the payment processing. The data will not be transmitted further or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures.

IV. RECIPIENTS OF PERSONAL DATA

We may engage service providers to carry out and process data processing operations.

The contractual relationships with our service providers are governed by the provisions of Art. 28 GDPR, which contain the legally required points on data protection and data security.

V. DATA COLLECTION BY GOOGLE ANALYTICS

This website uses Google Analytics, a web analysis service provided by Google Ireland Ltd. (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The basis for data processing is Art. 6 Para. 1 f) GDPR.

However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We would like to point out that on this website Google Analytics has been extended by the code "anonymizelp" to ensure an anonymized version of the IP address.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being saved by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

The basis for data processing is your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our Cookie Consent Tool.

VI. GOOGLE WEB FONTS

This site uses so-called web fonts provided by Google for the uniform display of fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com . When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This tells Google that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and attractive presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. If your browser does not support web fonts, a standard font from your computer will be used. You can find more information about Google Web Fonts in Google's privacy policy:

https://www.google.com/policies/privacy/

VII. GOOGLE MAPS

This site uses the Google Maps map service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com .

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

We use Google Maps in the interest of an attractive presentation of our online offerings and to make the locations we specify on the website easy to find. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

If you do not agree to this processing of your data, you have the option of deactivating the "Google Maps" service and thus preventing the transmission of data to Google. To do this, you must deactivate the Java Script function in your browser. However, we would like to point out that in this case you will not be able to use "Google Maps" or will only be able to use it to a limited extent. You can find more information on how user data is handled in Google's privacy policy:

https://www.google.de/intl/de/policies/privacy/

The “eXactly GDPR Google Maps” plugin used for Google Maps comes from www.eXactly-webdesign.de

VIII. USE OF COOKIES

Our website uses so-called cookies. Cookies are small text files that are saved by your browser and stored on your computer. The use of cookies serves to make the website more user-friendly. For example, it is possible to recognize the user for the duration of the session without having to constantly re-enter the user name and password. The cookies do not cause any damage to your computer and are deleted after your session ends. The basis for data processing is Art. 6 Para. 1 f GDPR.

Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies).

Other cookies remain on your device and enable your browser to be recognized the next time you visit (persistent cookies).

The data processing in connection with cookies, which serve solely to ensure the functionality of our online offering, is carried out on the basis of our legitimate interest in accordance with Art. 6 I f) GDPR.

If you do not wish to use cookies, you can set your browser so that cookies are not accepted. Please note, however, that in this case you may not be able to use all the functions of our website.

Facebook Business Tools

We use the Facebook Pixel on our website, a Facebook Business Tool from Facebook Ireland Limited (Ireland, EU). Information about the contact details of Facebook Ireland and the contact details of the data protection officer of Facebook Ireland can be found in the data policy of Facebook Ireland at www.facebook.com/about/privacy .

The Facebook pixel is a JavaScript code snippet that allows us to track the activities of visitors to our website. This tracking is called conversion tracking. The Facebook pixel collects and processes the following information (so-called event data):

• Information about the actions and activities of visitors to our website, such as searching for and viewing a product or purchasing a product;
• Specific pixel information such as the pixel ID and the Facebook cookie;
• Information about buttons clicked by visitors to the website;
• Information present in HTTP headers, such as IP addresses, information about the web browser, the location of the page and the referrer;
• Information about the status of deactivation/restriction of ad tracking.

Some of this event data is information that is stored on the device you are using. Cookies are also used via the Facebook pixel to store information on the device you are using. Such storage of information by the Facebook pixel or access to information that is already stored on your device only takes place with your consent.

Tracked conversions appear in our Facebook Ads Manager and Facebook Analytics dashboard. We may use tracked conversions there to measure the effectiveness of our ads, set custom audiences for ad targeting, run Dynamic Ads campaigns, and analyze the effectiveness of our website's conversion funnels. The features we use through the Facebook pixel are described in more detail below.

Processing of event data for advertising purposes
The event data collected via the Facebook pixel is used to target our ads and improve ad delivery, personalize features and content, and improve and secure Facebook products.

For this purpose, event data is collected on our website using the Facebook pixel and transmitted to Facebook Ireland. This only happens if you have given your prior consent. The legal basis for the collection and transmission of personal data by us to Facebook Ireland is therefore Art. 6 Para. 1 Letter a of GDPR.

This collection and transmission of event data is carried out by us and Facebook Ireland as joint controllers. We have entered into an agreement with Facebook Ireland on processing as joint controllers, which sets out the distribution of data protection obligations between us and Facebook Ireland. In this agreement, we and Facebook Ireland have agreed, among other things,

• that we are responsible for providing you with all information in accordance with Art. 13, 14 GDPR regarding the joint processing of personal data;
• that Facebook Ireland is responsible for enabling the rights of data subjects pursuant to Art. 15 to 20 GDPR with regard to the personal data stored by Facebook Ireland after the joint processing.

You can access the agreement concluded between us and Facebook Ireland at www.facebook.com/legal/controller_addendum .

Facebook Ireland is solely responsible for the processing of the transmitted event data following transmission. For more information on how Facebook Ireland processes personal data, including the legal basis on which Facebook Ireland relies and the options for exercising your rights vis-à-vis Facebook Ireland, please see Facebook Ireland's data policy at www.facebook.com/about/privacy .

Processing of event data for analysis purposes
We have also commissioned Facebook Ireland to prepare reports on the impact of our advertising campaigns and other online content (campaign reports) and to create analyses and insights about users and their use of our website, products and services (analyses) based on the event data collected via the Facebook pixel. For this purpose, we transmit personal data contained in the event data to Facebook Ireland. The personal data transmitted is processed by Facebook Ireland as our processor in order to provide us with the campaign reports and analyses.

Personal data will only be processed to create analyses and campaign reports if you have given your prior consent. The legal basis for this processing of personal data is therefore Art. 6 (1) (a) GDPR.

A transfer of data to Facebook Inc. in the USA cannot be ruled out. The legal basis for this transfer is the standard contractual clauses for the transfer of personal data to processors in third countries. Please note the information in the section "Data transfer to third countries".

Google Marketing Services
We use the Google Ads Conversions marketing service from Google Ireland Limited (Ireland/EU). Google Ads enables us to place ads that are relevant to users in the Google advertising network (e.g. in search results or on other websites), improve campaign performance reports, and prevent a user from seeing ads multiple times. Each Ads customer sets a different conversion cookie. These cookies cannot therefore be tracked across the websites of different Ads customers. A cookie ID is used to record which ads are shown in which browser. This can prevent the same campaign from being shown multiple times. Cookie IDs can also be used to record so-called conversions, i.e. whether a user sees an ad and later visits the advertiser's website and purchases something there.

We use the DoubleClick Floodlight marketing service from Google Ireland Limited (Ireland/EU). The service enables us to track and analyze the actions of users who visit our website after they have seen or clicked on one of our advertisements. For this purpose, so-called "floodlight tags" or tracking pixels and cookies are set on our website. Using this function, we can determine the effectiveness of our online campaigns on our website.

Through remarketing, we can address users who have already interacted with our website. Our ads are delivered when this target group visits a Google website or a website in the Google advertising network. For these purposes, Google executes a code when our website is accessed and so-called (re)marketing tags are integrated into the website. With their help, an individual cookie is stored on the user's device. The cookies can be set by various domains, including google.com, doubleclick.net, googlesyndication.com or googleadservices.com. This file records which websites users have visited, which content they are interested in and which offers were used. In addition, technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer is stored. All user data is only processed as pseudonymous data and does not contain any information with which we can personally identify users. The ads displayed are therefore not specifically displayed for a person, but for the owner of the cookie.

Google Marketing Services will only be used with your consent in accordance with Art. 6 (1) (a) GDPR.

For Google services, a transfer of data to Google Inc. in the USA cannot be excluded. Please note the information in the section "Data transfer to third countries". Further information on data protection at Google can be found in Google's privacy policy at www.google.com/policies/privacy ."

Data transfer to third countries
Visiting our website may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is offered in such a third country. If such an adequacy decision by the European Commission is not available, personal data will only be transferred to a third country if suitable guarantees are in place in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

Unless otherwise stated below, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as appropriate guarantees: eur-lex.europa.eu/legal-content/DE/TXT/ .

IX. YOUR RIGHTS

According to Articles 15-21 GDPR, if the conditions described therein are met, you can assert the following rights with regard to the personal data we process.

Data transfer when concluding a contract for services and digital content

According to Articles 15-21 GDPR, if the conditions described therein are met, you can assert the following rights with regard to the personal data we process.

Right to information

You have the right to information about the personal data concerning you that we process.

Right to rectification

You can request the correction of incomplete or incorrectly processed personal data.

Right to erasure

You have the right to have personal data concerning you deleted, in particular if one of the following reasons applies

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed
• You withdraw your consent on which the processing of your data was based.
• You have asserted a right to object to the processing and there are no overriding legitimate grounds for the processing.
• Your data has been processed unlawfully.

However, the right to erasure does not apply if it conflicts with the legitimate interests of the controller. Legitimate interests are assumed in the following cases:

• Personal data is required to assert, exercise or defend legal claims.
• Deletion is not possible due to retention obligations.

If data cannot be deleted, there may be a right to restrict processing (see below).

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if

• You dispute the accuracy of the data and we therefore check the accuracy,
• the processing is unlawful and you oppose the erasure and request the restriction of use instead,
• we no longer need the data, but you require it to assert, exercise or defend legal claims,
• You have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.

Right to data portability

You have the right to receive the personal data concerning you that you have made available to us in a structured, common and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.

Right to object

The data subject has the right to object at any time, for reasons related to his or her particular situation, to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions.

Right of withdrawal

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

X. STANDARD TIME PERIODS FOR DELETION OF DATA

If there is no statutory retention requirement, the data will be deleted or destroyed if it is no longer required to achieve the purpose of the data processing. Different periods apply to the retention of personal data; for example, data with tax relevance is usually kept for 10 years, other data according to commercial law regulations is usually kept for 6 years. Finally, the storage period can also be based on the statutory limitation periods, which, for example, according to Sections 195 ff. of the German Civil Code (BGB) are usually three years, but in certain cases can be up to thirty years.

XI. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

According to Art. 77 GDPR, every data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of personal data concerning them violates the GDPR. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based:

The State Commissioner for Data Protection Lower Saxony Prinzenstr. 5 30159 Hannover Telephone: 0511 120-4500 Fax: 0511 120-4599 Email: poststelle@lfd.niedersachsen.de

XII. DISCLAIMER

Liability for content

As a service provider, we are responsible for our own content on these pages in accordance with general law (according to Section 7 Para.1 German Telemedia Act). However, as a service provider, we are not obligated to monitor submitted or stored third-party information or to search for evidences that indicate illegal activities (Sections 8 to 10 German Telemedia Act). This does not affect obligations to remove information or to block the use of information in accordance with general law. In this case, liability is only possible at the time of knowledge about a specific violation of law. If we become aware of such violations, we will remove this content immediately.

Liability for links

Our offer contains links to external third-party websites over whose content we have no influence. We therefore cannot accept any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent control of the content of the linked pages is not reasonable without concrete evidence of a legal violation. If we become aware of any legal violations, we will remove such links immediately.

To the website I To the shop