隱私保護聲明

1.1 Objective and responsibility 

(1) The purpose of this privacy policy is to inform you about the nature, scope and purpose of the processing of personal data on our website www.argor-heraeus.com and the associated websites, functionalities and content (hereinafter collectively referred to as "website"). The privacy notice applies regardless of the systems, platforms and devices (e.g. desktop or mobile) on which the website is made available.  

(2) The provider of the website and legally responsible for it under privacy law is ARGOR-HERAEUS SA, Via Moree 14, CH-6850 Mendrisio (hereafter referred to as the “provider”, “we” or “us”). 

For further details as well as how to contact us, please see the legal information on our website. 

(3)  Our Data Protection Team can be reached via the following email address: 

dataprotection.argor@heraeus.com 

or by post: 

Data Protection Team 

ARGOR-HERAEUS SA 
Via Moree 14 
CH-6850 Mendrisio. 

(4) The term “user” includes all customers and their employees as well as visitors to our website. 

1.2 Legal basis 

(1) We collect and process personal data on the following legal basis in accordance with Art. 31 Swiss Data Protection Act (DSG): 

• Processing justified by a consent of the data subject 

• Processing to safeguard legitimate overriding private or public interest 

• Processing justified by law. 

(2) Regarding General Data Protection Regulation (GDPR) your personal data is collected and processed on the following legal basis: 

• Consent in accordance with Art. 6 (1) (a) GDPR. Consent is a statement of intent, freely given in a specific instance in an informed and unambiguous manner in the form of a declaration or another unequivocal affirmative act, where the data subjects make it clear that they consent to the processing of their personal data. 

• Necessity for the performance of a contract or in order to take steps prior to entering into a contract in accordance with Art. 6 (1) (b) GDPR, i.e., the data is necessary for us to carry out our contractual obligations to users or we need the data in order to prepare a contract with users. 

• Processing for compliance with a legal obligation in accordance with Art. 6 (1) (c) GDPR, i.e., the data processing is required on the basis of a law or some other requirement. 

• Processing to safeguard legitimate interests in accordance with Art. 6 (1) (f) GDPR, i.e., the processing is necessary to safeguard our legitimate interests or those of a third party, provided the interests do not outweigh the fundamental rights and freedoms of users who require the protection of personal data. 

1.3 Data subject rights 

You can assert your rights as a data subject with regard to your processed personal data at any time using the contact details of the Data Protection Team given above. 

As a data subject, you have the following rights according to DSG: 

• Right to information in accordance with Art. 25 DSG 

• Right to transfer data in accordance with Art. 28 DSG 

• Right to rectification in accordance with Art. 32 (1) DSG 

• Right to file a lawsuit in accordance with Art. 32 (2) DSG 

• Right to file a complaint with a supervisory authority in accordance with Art. 49 DSG 

As a data subject, you have the following rights according to GDPR. 

• Right to revoke consent: If personal data is processed on the basis of consent, you have the right to revoke this consent at any time for the future in accordance with Art. 7 GDPR. 

• Right to information: In accordance with Art. 15 GDPR, you can request confirmation of whether their data is being processed. If this is the case, users have the right to information regarding the information at no charge. 

• Right to rectification: If personal data has been processed while incorrect, you have the right, to request that this data be corrected immediately in accordance with Art. 16 GDPR. 

• Right to erasure: If you have revoked your consent, objected to the processing of your personal data (and there are no overriding legitimate reasons for the processing), your personal data is no longer necessary for the original purpose of the processing, there is a corresponding legal obligation or personal data has been processed unlawfully, you have the right to request the deletion of their personal data in accordance with Art. 17 GDPR. 

• Right to restriction of processing: Under the provisions of Art. 18 GDPR, you have the right to demand that the processing of their personal data be restricted. 

• Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive the personal data they provided in a structured, commonly used and machine-readable format. 

• Right to object: If processing the personal data is necessary to safeguard the legitimate interests of our company, you can object to the processing at any time in accordance with Art. 21 GDPR. 

• Right to file a complaint: In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the responsible supervisory authorities. 

1.4 Deletion of data 

Your personal data is deleted as soon as the purpose for which it was collected has ceased to exist and there are no other legal or contractual obligations to retain it. 

1.5 Security measures 

State-of-the-art organizational and technical security measures are in place to ensure compliance with relevant legal provisions and to protect personal data against accidental or intentional manipulation, loss, destruction and unauthorized access. 

1.6 Transfer of data to third parties and third-party providers 

(1) We transfer data to third parties exclusively in accordance with legal provisions. We only transfer user data to third parties if necessary or for other purposes necessary to meet our contractual obligations to users or legal requirements. 

(2) Where we use sub-contractors to provide our services, we will take appropriate legal precautions and technical and organizational measures to protect personal data in accordance with applicable legal provisions. 

(3) If, within the scope of this privacy policy, we use content, tools or resources of other providers (hereinafter collectively referred to as “third-party provider“) whose registered office is in a third country, it must be assumed that data are transferred to such third countries. 

(4) Third countries are countries where the GDPR does not apply directly, i.e., in principle, all countries outside the EU or the European Economic Area. Data may only be transferred to third countries if an adequate level of data protection is ensured, if users have given their consent or if the transfer of such data is permitted by law. 

1.7 Obligation to provide personal data 

We do not make the conclusion of contracts with us conditional on you providing us with personal data beforehand. In principle, there is no legal or contractual obligation for you as a customer to provide us with your personal data; however, it may be that we can only provide certain offers to a limited extent or not at all if you do not provide the data required for this. If this should exceptionally be the case with the products and services we offer, you will be informed of this separately. 

1.8 Automated decision-making process 

We do not intend to use any personal information collected from you for any automated decision-making process (including profiling). 

2.1 Hosting & CDN 

We host our website externally and use a content delivery network (CDN) to provide our website quickly, reliably and securely. 

(1) Amazon Web Services 

We use the services and infrastructure of Amazon Web Services to operate our website and its components. Provider is Amazon Web Services, EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter referred to as “Amazon”). 

When you visit our website, Amazon records various logfiles, including your IP addresses. Amazon is used on the basis of Art. 6 (1) (f) GDPR and Art. 31 DSG. We have a legitimate interest in a secure, fast and efficient provision of our website by a professional provider. 

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

The data transfer to the United States is based on the Standard Contract Clauses of the EU Commission. You can find the details here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/ 

(2) Fastly 

We use the Content Delivery Network (CDN) Fastly. Provider is Fastly, Inc., 475 Brannan St 300, San Francisco, United States (hereinafter referred to as “Fastly”). 

Fastly is a globally distributed content delivery network. For the technically necessary transactions, the information transfer between your browser and our website is routed via Fastly's content delivery network. Fastly is used on the basis of our legitimate interest in displaying our website as quickly, uninterrupted, error-free, and secure as possible (Art. 6 (1) (f) GDPR and Art. 31 DSG). 

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

The data transfer to the United States is based on the Standard Contract Clauses of the EU Commission. You can find the details here: https://www.fastly.com/de/data-processing 

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail 

2.2 Data processing on this website 

When accessing our website, information is automatically transmitted from your browser to us; this includes the name of the website and files that are accessed, the date and time they are accessed, the quantity of data transmitted, reports about successful access, the browser type and version, your operating system, the referrer URL (the page you visited prior to visiting our website), your IP address and the requesting provider. 

The processing of your above-mentioned personal data is technically necessary for offering our website as a service to you and is carried out based on our legitimate interests in accordance with Art. 6(1) (f) GDPR and Art. 31 DSG regarding the operation of our website and, to ensure the safeguarding of the security of the processing (e.g., to prevent and identify cyber-attacks). 

The collection and storage of your personal data in log files is necessary for the provision of the website. For this reason, you may not request the deletion or correction of this data or object to its processing. 

2.3 Contacting us  

When you contact us (via contact form or e-mail or telephone) the request including all resulting personal data (name, request, contact details) will be stored and processed by us for the purpose of processing your request. 

This data is processed based on Art. 6 (1) (b) GDPR and Art. 31 DSG if the request is related to the fulfillment of an order or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR and Art. 31 DSG), if applicable. 

Your information may be stored in our customer relationship management systems (“CRM systems”). The legal basis for the further processing of your data is the preparation of a business transaction (in accordance with Art. 6 (1) (f) GDPR and Art. 31 DSG). 

2.4 Consent Management for data processing and use of cookies 

We use a Consent Management Platform (CMP) called CookieFirst to obtain the legally required consent for the use of cookies and other technologies, e.g. objects in local and session storage, and to legitimize the subsequent data processing via consent, if required. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. You can find more information here:  https://cookiefirst.com 

We use the CMP to fulfill legal obligations. Data processing is based on Art. 6 (1) (c) GDPR and Art. 6 DSG. 

In detail, we use CookieFirst to obtain your valid consent for the use and storage of information on the device you use to access our website as well as for a subsequent data processing via consent, if required, and to properly document this we use a consent management platform. 

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies and information and for data processing on the basis of your consent. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies and information to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned. 

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected: 

• Your consent status or the withdrawal of consent 

• Your IP address 

• Information about your Browser 

• Information about your Device 

• The date and time you have visited our website 

• The webpage URL where you saved or updated your consent preferences 

• The approximate location of the user that saved their consent preference 

• A universally unique identifier (UUID) of the website visitor that clicked the cookie banner 

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

2.5 Use of cookies 

We only use non-essential cookies, if you have given your express consent (opt-in) in accordance with Section Art. 5 (3) Directive 2002/58/EC (also known as “ePrivacy Directive” hereinafter referred to as “ePD“). In addition, if you do not want to have cookies or other information stored on your computer you can deactivate the corresponding option in your system settings on their browser. Stored cookies can also be deleted in the browser’s system settings. Disabling cookies or similar technologies may limit the functionality of this website. 

If you have consented to the storage of cookies and information on your device or to the access to information stored on your device, both activities are carried out on the basis of Section Art. 5 (3) ePD. 

We obtain user-consent to use cookies on all websites within the domain www.argor-heraeus.com 

You can change your cookie settings here

2.6 Google Tag Manager (GTM)  

We use the Google Tag Manager service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). 

Google Tag Manager (“GTM”) is used to centrally manage and control scripts and services (“tags”) on our website. GTM also ensures the proper functioning of the Consent Management Platform (CMP), which manages user consent.

Tags are small pieces of code used to integrate and control services such as analytics, marketing, or functionality on a website. GTM is used on our website solely as a control and management function for external services, ensuring that scripts requiring consent - such as analytics or marketing tools - are only activated after you have given your active consent. For embedded content (e.g., videos or social media elements), GTM ensures that such content is not loaded and displayed automatically, but only after you have given your active consent. Prior to this, only an information banner is displayed.

Google Tag Manager itself does not set any cookies or process any personal data; its sole purpose is to trigger the tags described. Depen-ding on the service being loaded, the loading process may trigger device access requiring consent and data transmission. Which (personal) data is processed and how long it is stored depends entirely on the individual services integrated via GTM.

The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the simple and efficient integration and management of tags on our website. To the extent that consent is required for certain processing activities, such processing is carried out exclusively on the basis of your prior consent pursuant to Article 6(1)(a) of the GDPR and Art. 31 DSG and Article 5(3) of the ePD, provided that the consent covers the storage of cookies or access to information on the user’s device. Consent may be revoked at any time.

The data collected by the individual tags may be transferred to Google’s servers in the United States and processed there. Google is certified under the EU-U.S. Data Privacy Framework, which is intended to ensure an adequate level of data protection.

2.7 Server-side tracking with Google Tag Manager (sGTM) 

In addition to the client-side Google Tag Manager (GTM), we use a server-side Google Tag Manager (“sGTM”) to technically control the collection and processing of data. In this process, tracking or analytics information is not transmitted directly from the browser to third-party providers, but is first sent to a server operated by us. There, the data is pseudonymized or aggregated in advance before being forwarded to services such as Google Analytics or other analytics or marketing platforms.

This architecture provides greater control over which information is shared with third parties and reduces reliance on browser-based tracking mechanisms. Depending on the configuration, server-side first-party cookies may also be used.

The processing is based on Article 6(1)(f) of the GDPR and Art. 31 DSG, as we have a legitimate interest in data-protection-friendly and efficient web analytics. To the extent that consent is required for certain processing activities, processing is carried out exclusively on the basis of your prior consent pursuant to Article 6(1)(a) of the GDPR and Art. 31 DSG and Article 5(3) of the ePD, insofar as the consent covers the storage of cookies or access to information on the user’s device. Consent may be revoked at any time.

For more information about Google's data processing practices, please review Google's Privacy Policy at the following links: https://policies.google.com/privacy?hl=en and https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

2.8  Google Analytics 

This website uses functions of the web analysis service Google Analytics either directly in your browser (client-side tracking) or indirectly on our webserver (server-side tracking). The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. 

The website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their device. 

The purpose of using Google Analytics is to enable the user to be recognized for the purpose of analyzing user behavior through the use of various technologies (e.g., cookies or device fingerprinting). We use demographic characteristics for our analyses. The information collected by Google about the use of our website is usually transmitted to a Google server in the United States and stored there. 

The use of Google Analytics is based on your consent according to Art. 6 (1) (a) GDPR and Art. 31 DSG. You may withdraw your consent at any time with future effect.

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service 

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. 
You can object to the collection and storage of data at any time with effect for the future. You can object to the future collection and storage of your data by Google Analytics by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout. 

Data stored by Google at the user and event level that is linked to cookies, user identifiers (e.g., User ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) are anonymized after 26 months or deleted. You can find details on this under the following link: https://support.google.com/analytics/answer/7667196. 

You can find more information about the use of data by Google as well as settings and opt-out options on Google’s websites:  https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when using the websites or apps of our partners”), https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes), https://www.google.de/settings/ads (“Managing information that Google uses to show you advertising”). 

2.9 Friendly Captcha 

 We use the service "Friendly Captcha" (www.friendlycaptcha.com) on our website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.  

Friendly Captcha is a protective solution designed to make the use of our website by automated programs and scripts (known as "bots") more difficult. 

Friendly Captcha does not set or read any cookies on the visitor's end device. For more information on data protection when using Friendly Captcha, please refer to https://friendlycaptcha.com/legal/privacy-end-users/. 

The legal basis for processing is our legitimate interests in protecting our website from abusive access by bots, including spam protection and defense against attacks (e.g. mass requests), Art. 6 (1) (f) GDPR and Art. 31 DSG. 

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

2.10 LinkedIn Insight Tag 

We use the service LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, to measure conversions. 
This tool creates a cookie on your web browser. We set the cookie exclusively with your consent in accordance with Section Art. 5 (3) ePD. The processing of the data is based exclusively on your consent (Art. 6 (1) (a) GDPR and Art. 31 DSG). 

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

The cookie enables the collection of data regarding LinkedIn member’s visits on our website including the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. The IP addresses are truncated or hashed (when used for reaching LinkedIn members across devices), and LinkedIn members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining pseudonymized data is then deleted within 180 days. 

LinkedIn does not share any personal data with us, but offers anonymous reports on website audience and display performance. 

LinkedIn members can control the use of their personal data for advertising purposes through their account settings:  https://www.linkedin.com/psettings/advertising/actions-that-showed-interest 

You can opt out of LinkedIn’s analysis of user behavior and targeted adver-tising by clicking the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

Further information on data protection at LinkedIn can be found in LinkedIn's data protection information: https://www.linkedin.com/legal/privacy-policy 

2.11 YouTube

We embed videos from the YouTube website. The operator of the YouTube is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. 

When you visit a page of our website in which a YouTube video is embedded, YouTube is technically informed which of our pages you have visited. 

YouTube also uses technologies that make it possible to obtain information about visitors to this website. This information is used, among other things, to compile video statistics in order to improve the user-friendliness of the website and prevent attempted fraud. 

If you are logged into your YouTube account while visiting our site, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. 

We use YouTube based on our legitimate interest in an appealing presentation of our website in accordance with Art. 6(1)(f) GDPR and Art. 31 DSG. If a corresponding consent has been given, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR, Art. 31 DSG and Section Art. 5 (3) ePD, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the DSG. This consent can be revoked at any time with effect for the future. 

Further information on data processing by YouTube can be found in YouTube's data protection regulations: https://policies.google.com/privacy?hl=en 

2.12 Wistia

We embed videos from the Wistia website. The operator of Wistia is Wistia, Inc. 120 Brookline St Cambridge, MA, 02139-4503 United States. 

When you visit a page of our website in which a Wistia video is embedded, Wistia automatically receives and records information on their server logs including data related to media viewing, listening to, or accessing (including when you stop and start media, how many and which media of a particular Wistia customer you watched, and how many times you watched, listened to, or accessed particular media), data related to use of Wistia services, IP address, device, “cookie” information, and the page you requested. 

We use Wistia based on our legitimate interest in an appealing presentation of our website in accordance with Art. 6 (1) (f) GDPR and Art. 31 DSG. If a corresponding consent has been given, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR, Art. 31 DSG and Section Art. 5 (3) ePD, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the DSG. This consent can be revoked at any time with effect for the future. 

Further information on data processing by Wistia can be found in Wistia’s data protection regulations: https://wistia.com/privacy 

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail 

We use the Microsoft Dynamics 365 CRM system from Microsoft (service provider is Microsoft Ireland Opera-tions Limited, One Microsoft Place, South County Business Park, Leop-ardstown, Dublin 18, D18 P521 Ire-land; hereinafter “Microsoft”) as a cloud service, which means that the data is processed in Microsoft data centers.

We use your data solely for the tech-nical processing of inquiries and do not share it with third parties.

We use the system primarily to man-age customers and prospects (leads) and to process user inquiries more quickly and efficiently. The use of the system is based on our legitimate in-terest pursuant to  Art. 6 (1)(a) GDPR and Art. 31 DSG.

We have entered into a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR and Art. 9 DSG for the use of the aforementioned service. 

Microsoft 's parent company is locat-ed in the United States and is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF is required to comply with these data protection standards. For more information, please contact the provider via the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail 

Further data privacy information can be found in the Microsoft privacy policy at https://privacy.microsoft.com/en-US/privacystatement 

4.1  Mailings

We use the Microsoft Dynamics 365 Customer Insights – Journeys auto-mation system from Microsoft (ser-vice provider is Microsoft Ireland Op-erations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521 Ireland - hereinafter referred to as "Microsoft Dynamics" - to conduct marketing campaigns, for analytical purposes, and to contact customers and prospects in a way tailored to specific target groups. The data is processed within the European Uni-on.

In particular, we use the system to send email notifications (e.g., in connection with the provision of downloads), for event management (e.g., to manage event participants), and to provide landing pages and contact forms.  

The use of Microsoft Dynamics, the collection and analysis of statistics, and the logging of the registration process for email communication are carried out, depending on the specific use case, based on your consent pursuant to Art. 6 (1) (a) of the GDPR and Art. 31 DSG or on the basis of our legitimate interests in the efficient implementation of marketing and communication measures and the optimization of customer-related processes pursuant to Art. 6(1) (f) of the GDPR and Art. 31 DSG. If such consent has been provided, processing is carried out exclusively on the basis of Art. 6(1) (a) GDPR and Art. 31 DSG and Art. 5 (3) ePD, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). This consent may be revoked at any time with future effect.

System components that are integrated on our website (e.g. forms) use so-called “cookies”, which are stored on the user's computer and enable us to analyze how the website is used. Specifically, the following information is collected: client ID, geographic location, browser type, duration of the visit, and pages viewed. 

Email tracking: The statistical information collected also includes whether the respective email was opened, when it was opened and which links you clicked on. This information can technically be assigned to individual e-mail recipients. 
 

4.2 Double opt-in and collection of data for newsletters and white paper requests: 

Subscription to our newsletters and requests for white papers are generally subject to a "double opt-in" pro-cess. This means that after subscribing to our newsletter or requesting a white paper, you will receive an email asking you to confirm your request. Such confirmation is necessary to ensure that individuals do not sign up using someone else’s email address. Your request is logged so that the registration process can be verified in accordance with legal requirements. This includes recording the date and time of your request and confirmation, as well as your IP address. Any changes to your data stored by us are also logged.

Unsubscribing from newsletters: You can unsubscribe from the newsletter at any time, which means you can withdraw your consent to receive it. There is an unsubscribe link at the bottom of every newsletter. Your per-sonal data processed in connection with the sending of the newsletter will be deleted after you unsubscribe.

Further data protection information can be found in the Microsoft data protection declaration at   https://privacy.microsoft.com/en-US/privacystatement. 

Further information on the use of cookies in connection with the system can be found at https://docs.microsoft.com/en-US/dynamics365/marketing/cookies. 

6.1 Online Presence and Social Media

We maintain a presence in social networks and platforms in order to be able to communicate with active customers, interested parties and users who are active there and to provide information to users there about our services. 

Please note that user data may be processed outside of the European Union and Switzerland. This may imply risks for users because, for example, it could be more difficult to enforce user rights. 

In addition, user data is generally processed for market research and advertising purposes. For example, user behavior and the resulting information about the user’s interests can be used to create user profiles. The user profiles can, in turn, be used to place advertisements, for example, within and outside of platforms that are supposedly in line with user interests. For these purposes, cookies that record the user’s behavior and interests are generally stored on the user’s computer. In addition, data can also be stored in the user profiles separately from the users' devices (in particular if the users are members of the relevant platforms and are logged in to them). 

Users’ personal data is processed on the basis of our legitimate interest pursuant to Article 6(1) (f) of the GDPR and Art. 31 DSG for the purpose of providing information to users and communicating with them. If users are asked to consent to data processing by the respective providers (i.e., to give their consent, e.g., by checking a box or clicking a button), the legal basis for the processing is consent pursuant to Article 6(1) (a) of the GDPR and Art. 31 DSG.

Please note that if you have any requests for information or wish to exercise your rights, it is best to contact the respective provider directly. Only the providers have access to your data and can take appropriate action and provide information. If you still need assistance, please feel free to contact us.

For a detailed overview of the processing and opt-out options discussed in this paragraph, see the information from the provider in the following links: 

a) Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) 

• Privacy policy: https://policies.google.com/privacy   

• Opt-out: https://adssettings.google.com/authenticated 

b) LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) 

• Privacy policy: https://www.linkedin.com/legal/privacy-policy 

• Opt-out: https://www.linkedin.com/psettings/guest-controls 

7.1 SurveyMonkey

We collect feedback from our customers at regular intervals and on various occasions. We use your information to contact you and ask you to participate in the survey. Participation in customer surveys is always voluntary.

We use “SurveyMonkey Software” from SurveyMonkey Europe UC (Shelbourne Road, Dublin, Ireland) to conduct customer surveys. Please review their privacy policy and find more information at the following link: en.surveymonkey.com/mp/legal/privacy/

The legal basis for data processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR and Art. 31 DSG.

To use the service mentioned above, we have entered into a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR and Art. 9 DSG.

In most cases, we generate an ID for your questionnaire so that we can link your responses to a specific process and, as a rule, to you personally. We do not share your personal data with the provider of the survey tool. If the survey invitation is sent via the provider’s software, we will first transmit your business contact information to the provider: first name, last name, company name, and email address.

As part of the survey, we may also collect personal data, such as your interest in products, your assessment of your experiences with Heraeus, or your phone number for follow-up questions. We will use your responses to continuously improve our offerings - in collaboration with you, if applicable. In this context, we will contact you if there is a reason to do so, e.g., because you have expressed a request, a suggestion, or an expectation. If you participate in a contest offered by us as part of the survey, we may also use your data to contact you regarding the contest, to inform you of any prize you may have won, and to coordinate the next steps with you.

If you would like your responses to be deleted after the survey begins or even after you submit them, you can let us know at any time - for example, in your reply to the survey invitation. We will then immediately delete your responses from the survey tool and - provided they have been forwarded and no legal regulations prevent it - from our systems. Regardless of this, your data will be deleted from our systems no later than the expiration of the statutory retention periods.

We reserve the right to change the privacy policy in order to adapt to changes in the legal situation or to changes in our services and data processing. However, this only applies to policies regarding data processing. 

If the consent of the user is required or if elements of the privacy policy contain components of the contract agreed the user, the changes will only be made with the user's consent. 

Users are requested to familiarize themselves regularly with the content of the privacy policy. 

Last updated: June 2026