Privacy Statement

Data Protection Policy for Laird Thermal Systems

Last update: 17 May 2024

1. Introduction/ Controller

This website for Laird Thermal Systems is operated by
Laird Thermal Systems GmbH
Kunstmühlstraße 12
83026 Rosenheim
Deutschland

E-mail: gdpr@lairdthermal.com
Internet: www.lairdthermal.com

This Data Protection Policy is the basis for the processing of all personal data or user ​​information that we are collecting from you in connection with your usage of our website www.lairdthermal.com.

2. Data Protection Officer

You can reach our data protection officer via E-mail under gdpr@lairdthermal.com or via post under the following address:

​​​intersoft consulting services AG
Beim Strohhause 17, 20097 Hamburg

3. General information about collection and processing of your data

3.1 Scope of processing

We collect and use your personal data exclusively in accordance with the statutory provisions, in particular the General Data Protection Regulation ("GDPR").

With this privacy policy, we inform you about the type, scope, purposes and legal basis of data processing in the context of the use of our website.

3.2 Legal basis

In so far as consent is necessary for processing of personal data the legal basis is Art. 6 para. 1 lit. a) GDPR.
When processing personal data is necessary for the fulfilment of a contract, the legal basis is Art. 6 para. 1 lit. b) GDPR. This is also true for processing that is needed for pre-contractual measures.
If processing of personal data is necessary to ​​fulfil legal obligations of Laird Thermal Systems, Art. 6 para. 1 lit. c) GDPR is the legal basis.
If the processing is necessary to safeguard a legitimate interest of Laird Thermal Systems or a third party and provided that the interest, constitutional rights and constitutional freedom of the affected person do not outweigh the initial interest, Art. 6 para. 1 lit. f) GDPR is the basis for processing.

3.3 Storage and deletion of your data

We only store your data for as long as necessary to fulfil the contractual or legal obligations for which we have collected the data. We will delete the data immediately afterward except where we need the data until the end of the statutory limitation period for evidence purposes, for civil law claims, or due to legal documentation obligations (e.g. tax and commercial retention periods).

We are legally obliged to retain contractual data for evidence purposes for a period of six years from the end of the year in which the business relationship with you ends. After such period we shall retain a part of your data for fiscal and commercial legal documentation obligations. The retention periods for documents are up to ten years.

4. Use of our website

4.1 Visiting our website

Each time you visit our website, we will collect the following personal data, which your browser transmits to our server, for the purpose of providing the website content you have accessed and to ensure the security of the IT infrastructure used, for troubleshooting and for the technical optimization of our website:

• ​​​IP-address
• Date and time of your request
• Difference of time zone in relation to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/ http-status-code
• Amount of transferred data in each case
• Website from which the request originates (Referrer URL)
• Browser
• Operating system and its interface
• Geographic Location

 

We have a legitimate interest in operating ​​an internet presence to inform about our products on the legal basis of Art. 6 para. 1 lit. f) GDPR.

The data will be provided automatically via the browser of the visitor to the website.

The processing of your data is technically necessary; hence the use of the website is not possible without disclosing the personal data listed.
The IP address will be anonymized within a maximum time span of 24 hours. The other data categories mentioned above will be pseudonymised. Pseudonymous usage data will be deleted after six months.

4.2 Contact requests and offer or product information

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address and your name) will be stored by us in order to answer your questions. If we request information via our contact form that is not required to contact you, we have always marked this as optional. We use this information to specify your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 lit. a) GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your request. You can of course revoke this consent at any time for the future.

We delete the data collected in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.

4.3 Use of our chat function

We use Drift Chat for our live chat function on our website. Drift.com, Inc. This software enables visitors to the website to communicate personally with our employees in the form of a real-time chat. To enable this, cookies are used. Drift is generally used to collect the same information that would be collected via a "contact us" form, but through a dialogue. Drift is a SaaS platform that is 100% cloud-based in Amazon Web Services. All data is stored with Amazon Web Services. Further information on this can be found on the Drift GDPR page at: https://www.drift.com/gdpr/.

4.4 Data processing for marketing purposes/Newsletter:

You can subscribe to our newsletter on our website, which we use to inform you about the latest news, offers and discounts. The legal basis for sending the respective newsletter is your consent in accordance with Art. 6 para. 1 lit. a) GDPR in conjunction with section 7 para. 2 no. 3 UWG (“(Protection against) Unfair Competition Act” or “Gesetz gegen den unlauteren Wettbewerb”) or the legal permission according to section 7 para. 3 UWG.

We use the so-called double opt-in procedure to register for our newsletters. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after 3 days.

The information received will be used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter until you cancel your subscription. We also store your current IP address at the time of registration, the time of registration and the confirmation for up to three years after registration (limitation period). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in providing proof of consent previously given, see also Art. 7 para. 1 GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail.

5. CookiePro Cookie Management Solution

We are using the consent management platform (CMP) of CookiePro by OneTrust, Building 600, 1200 Abernathy Road North East, Atlanta, Georgia, 30328, USA. With this tool you have the ​​possibility to comfortably manage your consent regarding cookies that are technically not necessary and to make changes to this regard, e.g. revocation of given consent or objections.
Further, via the tool you can review the necessary information for processing your personal data subject to Art. 13 GDPR by CookiePro CMP as well as the technically not necessary cookies.

6. Cookies

What are cookies? Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies transmit information to the site that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. This prevents you from having to re-enter required form data each time you use the website, for example. The information stored in cookies can also be used to recognize preferences and target content according to areas of interest.

There are different types of cookies: Session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

If we use cookies or similar technologies to access an end device used by you by storing or reading information there, your consent is generally required for this in accordance with Paragraph 25 (1) of the TTDSG. It is irrelevant whether this is personal data or anonymous data.

Exceptions to this consent requirement under the TTDSG apply if the sole purpose is to transmit a message via a public telecommunications network or if access to the terminal device is absolutely necessary in order to provide the service requested by the user (Paragraph 25 (2) TTDSG).

If the data is personal data, the legal basis for processing this data may vary. Insofar as the processing requires consent and you have given this consent, the legal basis is Art. 6 s. 1 a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 s. 1 f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and - with your consent - to tailor our services to preferred areas of interest. We use both transient cookies and persistent cookies for this purpose.

This website uses the following types of cookies, the scope and function of which are explained below:

 

 

LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Salesforce Tower, 415 Mission Street, 3rd Fl,San Francisco, California 94105.

YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC an affiliate of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

You can delete cookies already stored on your device at any time. If you want to prevent the storage of cookies, you can do this via the settings in your Internet browser. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

7. Webanalysis and product analysis services (COOKIES, ADVERTISING AND TRACKING)

7.1 Google Analytics

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there. We use Google Signals. This allows Google Analytics to collect additional information about users who have personalized ads enabled (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.
Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behaviour is recorded in the form of "events". Events can be:

• Page views
• First visit to the website
• Start of session
• Your "click path", interaction with the website
• Scrolls (whenever a user scrolls to the bottom of the page (90%))
• clicks on external links
• internal search queries
• interaction with videos
• file downloads
• seen / clicked ads
• language settings
• Also recorded:
• your approximate location (region)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• your internet service provider
• the referrer URL (via which website/advertising medium you came to this website)
• Purposes of processing

 

On behalf of the operator of this website, Google will use this information to evaluate your [pseudonymous [NOT WHEN USING USER ID]] use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website.
Recipients Recipients of the data are/may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR).
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.
Third country transfer We have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.
Currently Google is Data Privacy Framework certified, therefore information transferred is also covered on the basis of the European Commission's Adequacy Decision 2023/1795 of July 10, 2023.
Duration of storage The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR.
Revocation You can revoke your consent at any time with effect for the future by accessing the cookie settings on any of our websites .and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by

a. not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to disable Google Analytics for Chrome based browsers under https://chromewebstore.google.com/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh?hl=en.

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://policies.google.com/?hl=en

7.2 Tracking for Optimization and Website Performance

Tracking for the purpose of „Optimization and Performance“ serves to analyze the user behavior on our website under performance aspects and for statistical purposes. The analysis can help Laird Thermal Systems to optimize user-friendliness of the website and correct occurring errors.

The tracking technologies used for optimization and performance are:

• Hotjar (7.2.1)
• Pardot - Marketing Cloud Account Engagement (7.2.2)
• New Relic (7.2.3)

The way of functioning of the respective tracking technologies is described below in more detail.

We will use tracking for optimization and performance purposes only if you have given us your prior consent according to Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time, by deselecting the “Optimization and Performance” option in the tracking settings.

7.2.1 Hotjar

If you have given your consent, we use Hotjar, a web analytics service provided by Hotjar Limited, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. Hotjar uses cookies that enable us to analyze your use of our website.

Hotjar collects the following data:

• Date and time of the visit
• Device type
• IP address
• Mouse movements
• Pages visited
• Referrer URL
• Screen resolution
• Unique device identifier
• Language information
• Browser type
• Clicks
• Domain name
• Unique user ID
• Responses to surveys

The information collected by cookies about your use of this website is generally processed in the European Union. This service may transfer visitor data to the USA, which does not offer an adequate level of data protection. There is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse.

The data will be deleted as soon as it is no longer required for the processing purposes.

The legal basis for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by opening the data protection settings below ("Website cookies") and making the corresponding changes there.

7.2.2 Marketing Cloud Account Engagement

If you have given your consent, ​​“Marketing Cloud Account Engagement ”, former “Pardot” will be used on this website, which is one of Salesforce's marketing automation offerings, Salesforce Tower, 415 Mission Street, 3rd Fl, San Francisco, California 94105 USA.

Scope of processing
The marketing platform uses persistent cookies and assigns cookie IDs to individual users for this purpose in order to process and analyze the user behavior of our website visitors and to be able to display advertising in line with user behavior. The analysis is carried out across all devices.

If you have given your consent to the Salesforce cookies, your data collected will also be transferred to the USA and analyzed there. Salesforce is certified under the Data Privacy Framework (DPF) and is listed in the Data Privacy Framework list of the International Trade Administration (ITA). Therefore, Salesforce has publicly committed to complying with the DPF obligations.

As Salesforce servers are distributed worldwide and a transfer to other third countries cannot be completely ruled out without an adequacy decision, we have also concluded the EU standard contractual clauses with the provider. In addition, Salesforce has binding internal data protection regulations within the meaning of Art. 47 GDPR, so-called binding corporate rules. You can find out more about data transfer by Salesforce here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-transfer-mechanisms-FAQ.pdf
We only store your data for as long as is necessary for the stated purposes. The persistent cookie with your user ID (visitor_id) is stored for 365 days and will then be deleted from your device.

Your Data is only collected and stored with your consent in accordance with Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG. This can be revoked at any time with effect for the future.

You can also unsubscribe from data processing at any time on the Salesforce website (https://www.salesforce.com/products/marketing-cloud/sfmc/audience-studio-consumer-choice/).

For more information on Salesforce Privacy Policy, please visit
https://www.salesforce.com/de/company/privacy/

7.2.3 New Relic

We use a plugin of the web analysis service New Relic of New Relic Inc, 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA on this website.

New Relic collects and stores data to analyse visitor behaviour and improve the design of the website and to create user profiles under a pseudonym for optimisation and marketing purposes. New Relic uses a session cookie, which is linked to the New Relic domain, to monitor the traffic for an application.
The cookie is deleted when the browser is closed. New Relic will use this information to evaluate visitor behaviour on our website, to compile reports on website activity and to provide other services relating to website activity and internet usage.

In detail, New Relic collects so-called page view data, AJAX timing data, JavaScript error data and so-called session trace data each time our website is accessed. In this context, the following data is collected

• Time spent in the frontend (browser)
• Time spent in the backend (network and web app)
• Geographical origin of your enquiry (including your IP address)
• Browser type and version and operating system
• User interactions such as scrolling, mouse movements and mouse clicks

Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish a secure level of data protection.

The data collected by the provider will be deleted by the provider after 90 days at the latest. Further information about the scope of data collection by New Relic as well as the related rights and setting options to protect the privacy of users can be found in New Relic's data protection information: https://newrelic.com/termsandconditions/privacy.

Further information on the cookies used can be found at
https://newrelic.com/termsandconditions/cookie-policy and
https://newrelic.com/termsandconditions/cookie-policy/cookie-table.

Data is only collected and stored with express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. This can be revoked at any time with effect for the future.

8. Privacy information for visitors of social media platforms

We have a company page on several social media platforms. This is intended to provide further information about our company and encourage interaction. If you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile that is used also regularly constitutes personal data. This also includes messages and statements made using the profile. In addition, during your visit to a social media profile, certain information is often collected automatically, which may also constitute personal data.

8.1 Social Bookmarks

We have integrated so-called social bookmarks (buttons) as links on our website. Social bookmarks are Internet bookmarks that are stored on a server and made accessible to other users. By clicking on the buttons, you will be redirected to the website the respective provider. This means that user information is only transferred to the respective provider once you have clicked on the integrated graphic. For information on the handling of your personal data when using the services of the providers, please refer to the respective data protection information of the respective provider.

8.2 LinkedIn

8.2.1 LinkedIn page

When you visit our LinkedIn page, we are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (https://www.linkedin.com/help/linkedin/solve) for the processing of your personal data.

We operate our LinkedIn page to inform you and communicate with you as a user, an interested person or as a potential employee/applicant. In accordance with the LinkedIn terms of use, which each user must agree to as part of creating a LinkedIn profile, we may identify subscribers to our page and see their profiles or other information shared. For example, your LinkedIn name and profile picture are visible to us (and other LinkedIn users) when you visit our page or comment on our posts. We therefore only collect personal data that has become an obvious part of our LinkedIn page as a result of your participation. We have no interest in collecting and further processing your individual personal data.

LinkedIn uses small text files that are stored on the various end devices of the users (cookies), to store and further process this information. According to LinkedIn, the cookies used by LinkedIn are for authentication, security, preferences, features and services, personalized advertising, and analysis and research. You can view details of the cookies used by LinkedIn here: https://de.linkedin.com/legal/cookie-policy.

LinkedIn's privacy policy contains further information on data processing.

The operation of the LinkedIn page, including the processing of users' personal data, is based on Art. 6 para. 1 lit. f) GDPR for the implementation of our legitimate interests in an information and interaction opportunity via LinkedIn for and with our users and visitors. For the LinkedIn retargeting cookie and applications via our LinkedIn page, your consent serves as a legal basis, Art. 6 para. 1 lit. a) GDPR. Further legal bases for data processing may arise in individual cases from Art. 6 para. 1 lit. b) or c) GDPR.

We delete personal data as soon as the purpose of the data processing has been achieved and there are no other legal reasons against deleting the data. We delete private messages in our LinkedIn account manually after 6 months.

8.2.2 LinkedIn Insight Tag

We use the LinkedIn Insight Tag on our website. The provider of this service for Europe is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Insight Tag is a conversion tracking and retargeting service. It provides us with information about our website users and enables us to display personalized advertisements on LinkedIn to these users. We also receive pseudonymous reports about the performance of the adverts and information about website interaction. When you visit our website, the LinkedIn Insight Tag establishes a connection to the LinkedIn server. If you are logged into your LinkedIn account at the same time as visiting our website, LinkedIn will recognize your identity. To prevent this, you must log out of your LinkedIn account before accessing the website. You can disable data collection at any time by clicking on the following link if you are logged in to LinkedIn:

https://www.linkedin.com/psettings/enhanced-advertising.

The Insight Tag collects the following data:

• device information,
• IP address,
• referrer URL,
• timestamp,
• time zone,
• browser information,
• visibility of adverts,
• clicks on adverts via conversion tracking,
• user network,
• user agent,
• language and
• website visited

IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised). LinkedIn uses the data for its advertising purposes. Details can be found in LinkedIn's privacy policy at: https://de.linkedin.com/legal/privacy-policy.

The LinkedIn Insight Tag drops a cookie on your visitors' web browsers when they visit your website. Cookie information is matched against LinkedIn’s member data to build your audience. Direct identifiers are removed from this data within seven days, and the data is deleted at 180 days.Recipient of the data is:

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland,

LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

The collected personal data is stored by LinkedIn on its servers in the USA. On 10 July, the European Commission adopted its adequacy decision for the EU-US Data Privacy Framework. LinkedIn Corporation is not yet certified under the EU-US Privacy Framework. A transfer to Singapore is possible. Legal basis for the transfer are the EU Standard Contractual Clauses (SCC).

The use of the LinkedIn Insight Tag is based on your consent. You can revoke your consent at any time with effect for the future by accessing the Cookie Settings to change your settings. The legitimacy of the data processing until your revocation remains unaffected.

If you are logged in to LinkedIn, you can deactivate data collection at any time by clicking on the following link: https://www.linkedin.com/psettings/enhanced-advertising.

8.2.3 LinkedIn Ads

If you have given your consent, we use the online marketing tool LinkedIn Ads. The responsible service provider in the EU is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

For this purpose, we use the LinkedIn Campaign Manager to define target groups of users based on certain characteristics, who are subsequently shown adverts within the LinkedIn network. The users are selected by LinkedIn based on the profile information they provide, and other data provided when using LinkedIn. If a user clicks on an advert and then reaches our website, LinkedIn receives the information that the user has clicked on the advertising banner via the conversion tag integrated on our website.

The LinkedIn Tag enables the recording of websites visited, including the URL, referrer ID, IP address, device and browser settings and timestamps. IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised).

The LinkedIn pixel allows us to show personalized ads outside our website without identifying individual members. It also uses data that does not identify you to improve ad relevance and reach LinkedIn members across different devices. LinkedIn members can control the use of their personal data for advertising purposes via their account settings. LinkedIn refers to the following link to customize advertising preferences:
https://www.linkedin.com/psettings/advertising/actions-that-showed-interest.

We process this data to evaluate our advertising campaigns.

Further information about the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your setting options for protecting your privacy, can also be found in LinkedIn's privacy policy.

Further information on LinkedIn Conversion Tracking can be found at:
https://business.linkedin.com/de-de/marketing-solutions/conversion-tracking#get-started.

Further information on data processing and storage duration can be found at
https://www.linkedin.com/help/linkedin/answer/65521?lang=de

The legal basis for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future by accessing the Cookie Settings to change your settings

8.3 YouTube

We use the services of YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users who have their ordinary residence in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the controller responsible for your data.

To protect your personal data, we use the extended data protection option provided by YouTube. When you access a page in which a YouTube video is embedded, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. However, according to YouTube, data is only transmitted to the YouTube server in "extended data protection mode" when you actively start the video. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. Where data is processed outside the European Economic Area / the EU, where there is no level of data protection in line with the European standard, Google states that it uses standard contractual clauses.

The data protection policies published by Google under https://policies.google.com/privacy will provide you with information about the collection, processing, and use of personal data by YouTube and Google.

9. California Consumer Privacy Act (CCPA)

In addition to the provisions named herein, the following provisions are valid for the residents of the state of California.

The privacy law of California is granting certain rights to its residents regarding their personal data. This chapter explains the rights of consumers and explains, how such rights can be exercised, subject to exceptions granted by law.

1. Your rights according to the privacy law of California:

• The right to know about collected, sold or passed-on data. („Right to know”)

You have the right to know which personal data we have collected about you, including the following:

• Categories of collected personal data
• Categories of sources from which the personal data has been collected
• The business and commercial purpose for which such personal data have been collected or sold
• Categories of third parties, to whom personal data have been passed on
• The specific personal data, that have been collected about you within the legally permitted frame
• The right to request the deletion of personal data („Right to delete”).

You have, subject to certain exceptions, the right to request, that we delete all your personal data that has been collected. As soon as we have received your request and verified your identity we will delete your personal data from our data base (and instruct our service provider to do so as well), except if there is an exception.

• The right to correct wrong personal data („Right to correct“)

You have the right to request the correction of wrong personal data and the update of the data stored by us.

• The right to object to the sale and passing on of personal data

You have the right to object to the sale or the passing on of your personal data. We are not selling any personal data, not even personal data of minors under 16 years of age. You can make use of your right to object to sale and passing on of personal data through clicking the Link „Do not sell or pass on my personal data” on the end of the webpage.

• The right to non-discrimination when exercising your data protection rights.

You have the right to be protected from discrimination when exercising your rights. ​​We will not discriminate against you at any time.

• The right to limit the use of sensitive personal data

​​​Laird Thermal Systems is not using any sensitive personal data in any way that would require you to offer the right to limit their use.

2. This is how you can submit a request to exercise Right to know, delete or correct your rights

You can submit your request via E-mail to gdpr@lairdthermal.com. We will compare the data, that you submit to us with the data we have stored in our data base to be able to grant that your request fulfils the definition of a “verifiable consumer request” according to the Californian data protection laws. Afterwards we will respond to your respective request.

Laird Thermal Systems endeavors to respond to your request within forty-five (45) days after the receipt. Should we need more time (up to 90 days), we will inform you in writing regarding the reason and the extended period. All provided information will refer only to the period of twelve months prior to the verified request. If needed the response will explain the reasons, why we could not answer your request. For request to transfer data Laird Thermal Systems will choose a format to provide personal data, which can be used without limitation and for the unhindered transfer of data from one business to the other business. We are not requesting fees for handling or responding to verifiable requests, except, where it is disproportionate, repetitive or obviously unjustified. Should your request justify a fee, we will let you know the reasons for such and suggest a cost estimate before processing your request.

10. Transfer of Data to third countries

We are using services from providers that are partially based in so called third countries (outside of the European Union or the European Economic Area) or process personal data there, meaning in countries, which do not have an equivalent data protection level. As far as this is the case and the European commission for those countries does not have an adequacy decision (Art. 45 GDPR), we have made appropriate measures to grant an appropriate level of data protection for the transfer of data. This includes amongst others the standard contractual clauses of the European Union or the binding internal data protection rules. When transferring data to partners in the United States who are certified under the Data Privacy Framework (e.g. Google), we transfer your data on the basis of the European Commission's Adequacy Decision.
If a transfer to a third country is foreseen and no adequacy decision or other suitable guarantee is available, there is the possibility and the risk, that authorities of the third country (e.g. intelligence services) gain access to the transferred data to collect and analyze them and that the enforceability of your rights cannot be granted.

11. Your Rights

11.1 General Rights

You have the right to information, rectification, erasure, restriction of processing, objection to processing and data portability. If processing is based on your consent, you have the right to withdraw this consent with effect for the future.

11.2 Rights in data processing based on legitimate interest

In accordance with Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e) GDPR (data processing in the public interest) or on Art. 6 para. 1 lit. f) GDPR (data processing to protect a legitimate interest); this also applies to profiling based on this provision. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right under Art. 21 para. 2 GDPR to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Any complaints regarding the processing of your personal data can be addressed to the responsible supervising authority. You can contact the authority that is responsible for your place/state of residence or to the data protection authority that is responsible for us, which is as follows:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Tel.: 0981 180093-0
Fax: 0981 180093-800
Internet: https://www.lda.bayern.de

12. Existence of automated decision-making including profiling

Automated decision-making including profiling in accordance with Art. 22 GDPR does not take place.

13. Security

The transmission of information through internet or e-mail is not entirely secure. Although we do our best to protect your personal data, we cannot grant the security of your data submitted through the website or via e-mail. Any transmission is made at your own risk. As soon as we receive your data, we will use suitable technical and organizational measures to protect your personal data from loss, theft and unauthorized use, access or alteration.

14. Links

Laird Thermal Systems has no control over the GDPR compliance of websites to which we provide external links. Please inform yourself at the respective websites.

15. Updates

We reserve the right to make changes and adaptations to this Data Protection Policy at any given time under observation and compliance with the respective applicable data protection regulations.

Status: May 2024