Privacy Policy E-Newsletter

26th September 2024

Table of contents

  1. General
  2. Contact
  3. Newsletter
  4. Marketing Cloud Account Engagement
  5. Your rights
  6. Right to object
  7. Withdrawal of consent
  8. Changes to this Privacy Policy

1 General

We appreciate your interest in our newsletter and our company.

Below we inform you about personal data collected when you visit this website. Personal data is factual or personal information about a specific or specifically identifiable person, for example name, address, email address and user behavior.

Controller in accordance with Article 4 no. 7 EU General Data Protection Regulation (GDPR):

Heidelberg Engineering GmbH
Max-Jarecki-Strasse 8
69115 Heidelberg
Germany
Email: info[at]HeidelbergEngineering.com

For further contact information please refer to the Publisher section.

You can reach our Data Protection Officer at:

CL Compliance und Datenschutz GmbH & Co KG
Douglasstraße 11 – 15
76133 Karlsruhe
Germany
Phone: +49 721 91250880
Email: HeidelbergEngineering[at]compliance-datenschutz.de

2 Contact

You can send us your inquiry to the email addresses we provide or use our general contact form. The personal data that you provide to us as part of your inquiry will solely be stored and used by us to respond to your inquiry. We delete this personal data after the storage is no longer necessary or restrict the processing if there are statutory storage obligations.

The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR, when using the contact form also Article 6 paragraph 1 s. 1 lit. a GDPR. If you contact us in connection with an existing contract or a contract you wish to enter into with us, additional legal basis is Article 6 paragraph 1 s. 1 lit. b GDPR.

3 Newsletter

With your consent to the collection, processing and use of your data, you can subscribe to our newsletters on various topics, with which we inform you regularly about products, training offers, learning materials, events and news. To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm your newsletter subscription. In order to prove your registration and, if necessary, to be able to clarify a possible misuse of your personal data, we log the subscription to the newsletter. We save the sending of the confirmation mail and the receipt of your hereby requested response as well as the data of the registration and confirmation. The data will be used solely by Heidelberg Engineering and will not be passed on to third parties. If you do not confirm your registration within two weeks, your information will be deleted.

The only mandatory data for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and will be used to address you personally. The legal basis is Article 6 paragraph 1 s. 1 lit. a GDPR.

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time. To do so, click on the link provided in each newsletter, send an email to Newsletter@HeidelbergEngineering.com or send a message to the contact details of the controller as stated in this privacy policy.

Please note that we analyze your user behavior when sending the newsletter. For this analysis, the emails sent contain tracking pixels, so-called one-pixel image files, and personalized tracking links. We use this data to find out which topics are of interest to you and to improve the content provided. We record whether and when the newsletters we send to you are opened and which links are clicked on. The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

Tracking based on the one-pixel image files is prevented if you have deactivated the display of images in your email program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place. Clicks on personalized tracking links are always logged.

To provide our newsletter service, we use the marketing automation solution Salesforce Marketing Cloud Account Engagement, which we explain in the “Marketing Cloud Account Engagement” section of this Privacy Policy.

4 Marketing Cloud Account Engagement

We use Marketing Cloud Account Engagement – MCAE (formerly known as Pardot), the marketing automation solution of Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA, which is linked to our Salesforce CRM system. In addition to the Salesforce infrastructure, MCAE uses Amazon Web Services, Inc. as a hosting provider (third-party hosting provider). The data processing is carried out on our behalf on the basis of a contract data processing agreement that we have concluded with Salesforce.

We use the MCAE software in online marketing for:

  • systematically recording, analyzing and optimizing our website
  • provision of personalized content and product recommendations
  • implementation of (automated) marketing campaigns and advertising activities
  • measuring the success of marketing campaigns
  • implementation of our email newsletter service
  • provision of landing pages and forms

The legal basis is Article 6 paragraph 1 s. 1 lit. f GDPR.

To register for our email newsletter service, we provide you with a MCAE form embedded in our website or – if your browser does not display the form – directly with a link to the form created in MCAE. When you click on the subscribe button in this MCAE form, a session cookie called “Pardot” is set in your browser by MCAE. We have no influence on the setting of the cookie and its content.

For more information on Salesforce, please visit:

5 Your rights

You have the following rights concerning your personal data:

  • Right of access regarding the personal data concerning you that we process as controller (Article 15 GDPR)
  • Right to rectification of the personal data concerning you if they are stored incorrectly or incompletely (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to request the restriction of the processing of personal data concerning you (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to the processing of personal data concerning you (Article 21 GDPR).

Furthermore, you have the right  to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR).

Pursuant to Article 22 GDPR, you principally have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, we do not use such automated decision-making processes.

6 Right to object

If we process your personal data as part of a weighing of interests based on our overriding legitimate interests (legal basis Article 6 paragraph 1 s. 1 lit. f GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation.

If you exercise your right to object, we will no longer process this personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

7 Withdrawal of consent

If you have given consent to the processing of your personal data, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8 Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy in accordance with legal data protection regulations. The currently valid version can be viewed at any time in the Privacy Policy area of our website.