Data protection is more important than ever – ITW’s privacy policy 

Privacy Policy

We operate our websites in accordance with the principles set out below:

We undertake to comply with the statutory provisions on data protection and endeavour to always observe the principles of data avoidance and data minimisation.

1. Name and address of the controller and the data protection officer

a) The controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States of the European Union, as well as other data protection regulations, is:

ITW Industrie-Technik Werth GmbH
Brachtstraße 20
63633 Birstein
Tel.: 06054/909000
Fax: 06054/909009
info@itw-technik.de
www.itw-technik.de

b) The Data Protection Officer

You can contact the data protection officer of the controller as follows:
Steve Wagner, datenschutz@itw-technik.de

2. Definitions

We have drafted our privacy policy in accordance with the principles of clarity and transparency. Should there nevertheless be any ambiguities regarding the use of various terms, the relevant definitions can be viewed here.

3. Legal basis for the processing of data

a.) Processing of personal data under the GDPR

We process your personal data, such as your surname and first name, your email address and IP address, etc., only where there is a legal basis for doing so. In particular, the following provisions of the General Data Protection Regulation apply here:

• Article 6(1)(a) GDPR: The data subject has given consent to the processing of personal data concerning them for one or more specific purposes.
• Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Article 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject
• Article 6(1)(d) GDPR: Processing is necessary to protect the vital interests of the data subject or of another natural person
• Article 6(1)(e) GDPR: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• Article 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child

However, we will always remind you at the relevant points in this privacy policy of the legal basis on which your personal data is processed.

b.) Consent of legal guardians pursuant to Article 8(1), second sentence, alternative 2 of the GDPR

A legal guardian must consent to all data processing within the scope of this website for which the consent of a minor under the age of 16 is required.

Information on the individual data processing operations, their purposes and the categories of data concerned for which the data subject’s consent is required can be found in the privacy policy.

You may withdraw your consent at any time by sending a written notice of withdrawal to the contact details of the controller. Processing prior to withdrawal remains lawful.

c.) Processing of information pursuant to Section 25(1) TDDDG

We also process information in accordance with Section 25(1) of the TDDDG by storing information on your terminal equipment or accessing information already stored on your terminal equipment. This may include both personal data and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. An end device is defined as any device connected directly or indirectly to the interface of a public telecommunications network for the purpose of transmitting, processing or receiving messages, Section 2(2)(6) TDDDG.

We generally process this information on the basis of your consent, Section 25(1) TDDDG.

Where an exception under Section 25(2)(1) and (2) of the TDDDG applies, we do not require consent. Such an exception applies where we access or store the information solely for the purpose of transmitting a message via a public telecommunications network, or where this is strictly necessary to enable us to provide a telemedia service that you have expressly requested. You may withdraw your consent at any time.

We would like to inform you that the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

4. Disclosure of personal data

The disclosure of personal data also constitutes processing within the meaning of section 3 above. However, we would like to take this opportunity to provide you with further specific information regarding the disclosure of data to third parties. The protection of your personal data is of the utmost importance to us. For this reason, we exercise particular caution when it comes to disclosing your data to third parties.

Data will therefore only be disclosed to third parties if there is a legal basis for the processing. For example, we disclose personal data to individuals or companies acting as data processors on our behalf in accordance with Article 28 of the GDPR. A data processor is anyone who processes personal data on our behalf – that is, in particular, under our direction and supervision.

In accordance with the requirements of the GDPR, we enter into a contract with each of our data processors to oblige them to comply with data protection regulations and thus ensure comprehensive protection of your data.

5. Retention period and erasure

We will delete your personal data insofar as it is no longer necessary for the purposes for which it was collected or otherwise processed, and the processing is not required for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

6. SSL or TLS encryption[1]

For security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Collection and storage of personal data, as well as the nature and purpose of its use

a. ) External hosting

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. For this reason, all personal data collected on our website is stored on our host’s servers, unless an external third-party service is integrated. This may include your IP address, email address, communication data or similar information. You can find out exactly which personal data is involved below in the descriptions of the individual functions and services we provide. Should we use an external third-party service, this will be made clear in the description of the respective service or tool.

The hosting provider processes your data only on our instructions and to the extent necessary to fulfil the services on the website. The hosting provider does not process the data for its own purposes. We have concluded a data processing agreement[2] with them.

b) When visiting the website

When you visit our website, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which the access is made (referrer URL)
• Browser used and, where applicable, your computer’s operating system, as well as the name of your internet service provider

We process the aforementioned data for the following purposes:

• To ensure a smooth connection to the website
• To ensure a user-friendly experience on our website
• To evaluate system security and stability
• Error analysis
• For other administrative purposes

Data that allows identification of your person, such as your IP address, is deleted after 7 days at the latest. Should we store the data beyond this period, it will be pseudonymised so that it can no longer be linked to you.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of identifying you personally.

c.) Contact form[3]

We provide a form on our website so that you can contact us at any time. To use the contact form, you must provide a name for a personal greeting, as well as your company name and a valid email address so that we know who the enquiry is from and can process it. You may also provide your address and telephone number on a voluntary basis to facilitate contact.

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there and your IP address, will be processed in accordance with Article 6(1)(b) and (f) of the GDPR for the purpose of carrying out pre-contractual measures in response to your enquiry or for the purposes of our legitimate interests, namely the conduct of our business activities.

Enquiries and the associated data will be deleted no later than 3 months[4] after receipt, provided they are not required for a further contractual relationship.

8. Rights of the data subject

You have the following rights:

a) Right of access

In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us. This right of access includes information regarding

• the purposes of processing
• the categories of personal data
• the recipients or categories of recipients to whom your data has been or will be disclosed
• the envisaged storage period or, at least, the criteria for determining the storage period
• the existence of a right to rectification, erasure, restriction of processing or objection
• the existence of a right to lodge a complaint with a supervisory authority
• the source of your personal data, if it was not collected by us
• the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details

b) Rectification

Under Article 16 of the GDPR, you have the right to have inaccurate or incomplete personal data stored by us rectified without delay.

c) Erasure

Under Article 17 of the GDPR, you have the right to request the erasure of your personal data from us without undue delay, provided that further processing is not necessary for any of the following reasons:

• the personal data is still necessary for the purposes for which it was collected or otherwise processed
• for the exercise of the right to freedom of expression and information
• to comply with a legal obligation which requires processing under the law of the European Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of such processing
• for the establishment, exercise or defence of legal claims

d) Restriction of processing

You may request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR on any of the following grounds:

• You contest the accuracy of your personal data.
• The processing is unlawful and you object to the erasure of the personal data.
• We no longer require the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims.
• You object to the processing in accordance with Article 21(1) of the GDPR.

e) Notification

If you have requested the rectification or erasure of your personal data or a restriction of processing in accordance with Article 16, Article 17 or Article 18 of the GDPR, we will inform all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you of these recipients.

f) Data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.

You also have the right to request that this data be transmitted to a third party, provided that the processing was carried out using automated means and is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) of the GDPR.

g) Withdrawal of consent

You have the right, in accordance with Article 7(3) of the GDPR, to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal. We may no longer continue data processing based on your withdrawn consent.

h) Complaint

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

i) Objection

Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will implement without you needing to specify your particular situation. If you wish to exercise your right of withdrawal or objection, simply send an email to datenschutz@itw-technik.de.

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and us
2. is permitted under European Union or Member State legislation to which we are subject, and such legislation provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests
3. is based on your explicit consent

However, these decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in 1.) and 3.), we take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request human intervention on our part, to state your own point of view and to challenge the decision.

9. Changes to the Privacy Policy

Should we amend the Privacy Policy, this will be indicated on the website.

 

Date: 11 May 2026