Privacy policy.

1. Controller

The controller responsible for processing data on this website is:

GRAUCH Vakuummesstechnik GmbH
Hans-Knöll-Str. 6
07745 Jena
Germany
Email: kontakt@grauch.ing

2. General information on data processing

We process personal data only to the extent necessary to provide a functioning website, handle enquiries, communicate with prospective customers, customers, partners and applicants, and ensure the stability and security of our website.

In particular, we process personal data on the following legal bases:

• Article 6(1)(a) GDPR, where you have given consent;
• Article 6(1)(b) GDPR, where processing is necessary to take steps prior to entering into a contract or to perform a contract;
• Article 6(1)(c) GDPR, where we are subject to a legal obligation;
• Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests and these are not overridden by the interests of the data subject.

3. Website provision and server log files

When you access our website, the web server automatically collects information sent by your browser to our server. This includes, in particular:

• date and time of access;
• IP address;
• browser type and version;
• operating system used;
• name of the internet service provider;
• referrer URL;
• pages and files accessed;
• volume of data transferred;
• notification of successful retrieval.

These data are processed to provide the website technically, ensure system security and stability, analyse errors, and detect and prevent abusive or unlawful access.

The legal basis for this processing is Article 6(1)(f) GDPR.

The data are stored only for as long as necessary to achieve the purposes stated above.

4. Hosting and technical service providers

We use external technical service providers to operate our website, particularly for hosting, server operation, maintenance and IT security. These providers process personal data only on our behalf and only to the extent necessary to provide the website and related services.

Where required by law, we enter into data processing agreements with these service providers.

5. Cookies and similar technologies

Our website may use cookies and technically comparable technologies such as local storage, session storage, pixels, tags or scripts.

Where these technologies are technically necessary to provide the website, processing is based on our legitimate interest in a secure and functioning website and, where applicable, the relevant statutory provisions.

Where cookies or similar technologies are not technically necessary, we use them only with your consent.

Further information about the specific cookies used, retention periods, providers and options for withdrawing consent can be found in the cookie notices displayed or the consent management tool used.

6. Contact by email, telephone or other means

If you contact us by email, telephone or other means, we process the data you provide to handle your enquiry and communicate with you. This includes, in particular, your name, contact details, message content and any additional information you provide during our communications.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract. In all other cases, processing is based on Article 6(1)(f) GDPR.

The data are deleted once processing of the enquiry is complete and there are no statutory retention obligations or legitimate interests in further storage.

7. Contact form

Where we provide a contact form on our website, we process the data you enter to handle your enquiry and communicate with you.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract. Otherwise, processing is based on Article 6(1)(f) GDPR.

Mandatory information is marked as such. Without it, we may be unable to process your enquiry.

8. Newsletters and promotional information

If you subscribe to a newsletter or other promotional information, we process your data to send you the information requested.

The legal basis is your consent under Article 6(1)(a) GDPR.

Where required by law, we use a double opt-in procedure. We store the relevant data and timestamps as evidence of subscription and confirmation.

You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in an email or by contacting us.

9. Analytics, audience measurement and optimisation

Where we use analytics or statistics services, we process personal data to evaluate website use, measure its audience, optimise content and functions, and further develop our services commercially and technically.

Where cookies or comparable technologies that are not technically necessary are used for these purposes, this is done only with your consent.

Where processing without consent is permitted, it is based on Article 6(1)(f) GDPR.

9.1 Audience measurement with Cloudflare Web Analytics

On this website, we use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Cloudflare Web Analytics collects aggregated usage statistics, particularly page views, referral sources, browser and device types, and the approximate country of origin of visits. It sets no cookies and does not permanently store personal data. IP addresses are not logged; individual visitors are not recognised across visits.

Provision of the service may involve transferring data to servers operated by Cloudflare, Inc. in the USA. Cloudflare is certified under the EU–US Data Privacy Framework and therefore provides an adequate level of data protection under Article 45 GDPR.

The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest is in privacy-friendly, cookieless audience measurement for statistical evaluation and improvement of our website.

Further information about data protection at Cloudflare is available at https://www.cloudflare.com/privacypolicy/.

10. Embedded content and external services

Our website may embed content and functions from external providers, such as videos, maps, fonts, forms, appointment booking functions, CAPTCHA services or comparable technical services.

When such content is used, personal data, particularly IP addresses, technical usage data or communications data, may be transmitted to the relevant provider.

Where embedding uses cookies or comparable technologies that are not technically necessary, or personal data are processed for marketing or analytics purposes, this is done only with your consent.

Otherwise, processing is based on Article 6(1)(f) GDPR where our legitimate interest lies in presenting our online services in a user-friendly, commercially viable and functional way.

11. External links

Our website may contain links to external websites, including our company profiles on social networks such as LinkedIn.

Clicking such a link takes you away from our website. The operators of the linked websites are solely responsible for their processing of personal data.

We have no influence over data processing by those providers once you leave our website.

12. Presence on social networks

We may maintain company profiles on social networks and platforms, particularly LinkedIn, to provide information about our company, services, developments, events and career opportunities, and to communicate with prospective customers, customers, partners and applicants.

When you visit our profiles on these platforms, we process personal data only to the extent necessary to communicate with you or evaluate interactions on our profiles.

Please note that the platform operators may also process personal data for their own purposes. We have only limited influence over such processing.

13. Job applications

If you submit application documents to us, we process your data solely to conduct the recruitment process and decide whether to establish an employment relationship.

In particular, this may include basic personal details, contact details, communications data, evidence of qualifications, certificates, CV information and other information you provide.

As a general rule, your application data are shared only with people within our company involved in processing your application.

Unless there is a statutory retention obligation or a legitimate interest in longer storage, application documents are deleted after the recruitment process is complete.

14. Recipients of personal data

Your personal data are shared only where permitted by law. Recipients may include, in particular:

• technical service providers;
• hosting providers;
• IT and security service providers;
• communications and software service providers;
• advisers and other processors;
• authorities and other public bodies where disclosure is legally required.

15. Transfers to third countries

Where we use services or content from providers that process data in countries outside the European Union or the European Economic Area, personal data may be transferred to a third country.

Such transfers take place only if the legal requirements are met, in particular where there is an adequacy decision, appropriate safeguards or explicit consent.

16. Retention periods

We store personal data only for as long as necessary to fulfil the relevant purposes or as required by statutory retention obligations.

Data are deleted when they are no longer needed for the relevant purpose, provided no statutory retention obligations or legitimate interests prevent deletion.

17. Your rights

Subject to the applicable legal provisions, you have the right:

• to access the personal data we process about you;
• to have inaccurate data rectified or incomplete data completed;
• to have your personal data erased;
• to restrict processing;
• to data portability;
• to withdraw consent with effect for the future;
• to object to the processing of your personal data;
• to lodge a complaint with a data protection supervisory authority.

18. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing, or the processing serves to establish, exercise or defend legal claims.

19. Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for our company is:

Thuringian Commissioner for Data Protection and Freedom of Information
Häßlerstraße 8
99096 Erfurt
Germany
Email: poststelle@datenschutz.thueringen.de
Telephone: +49 (361) 57-3112900

20. Changes to this privacy policy

We reserve the right to amend this privacy policy following changes in the law, changes to our website or the introduction of new services.