Privacy policy in compliance with Articles 13 and 14 of the GDPR - Compliance with information obligations

1. Data processing controller

In accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR), the controller is

Alicona Imaging GmbH
Dr. Auner Strasse 19
8074 Raaba bei Graz
Tel: +43 316 403010 700
Fax: +43 316 403010 711
e-mail: office.alicona@bruker.com

2. Data processing by persons within the company

2.1 Data processing in accordance with Article 13 GDPR

We process data voluntarily provided to us by various people, for example by sending a query by email or in order to initiate and conclude a contract or a business relationship. We also process data provided by people who take part in events or training courses.

2.2 Data processing in accordance with Article 14 GDPR

We also process data of people which may be part of a contractual relationship, which we have been given in an authorized manner by third parties (e.g. business managers may send us their employees’ data).

2.3 Data subjects

We process the following data of interested parties: Company, name of contact, professional contact details and address information.

We process the following data of customers: Company, title and name of contacts, professional address information and contact details, bank details, contract data.

We process the following data of suppliers and business partners: Company, title and name of contacts, professional address information and contact details, bank details, contract data.

We process the following data of participants in webinars and events: Title, first and last name, company, email address, zip code, country. You can also choose to give us your town/city and your telephone number.

2.4 Disclosure of data

We will only disclose personal data to third parties if this is required for the purpose of contract processing and contractual performance, or to meet legal requirements.

2.5 Storage/erasure of data

We will erase data once it is no longer necessary to store them, or if requirements such as legal retention obligations no longer apply. When the data are processed on the basis of your consent, we will restrict the processing or erase the data if you withdraw your consent – unless legal regulations say otherwise.

2.6 Making contact by email

When you contact us by email, we store the data you provide on the basis of our legitimate interest in answering your questions. We will erase the data this communication produces once it is no longer necessary to store them, or we will restrict the processing of these data if legal retention obligations apply.

2.7 Legal basis

The legal basis for processing the data is

• initiating and performing a contract in accordance with Article 6(1)(b) GDPR.
• meeting legal requirements in accordance with Article 6(1)(c) GDPR (for example, legal retention and documentation obligations).
• acting in the legitimate interests of our company in accordance with Article 6(1)(f) GDPR (for example for statistical analysis, use of software).
• consent obtained in accordance with Article 6(1)(a) GDPR (for example use of our contact forms, when processing image data or for advertising purposes).

3. Data processing on our website for newsletters, job applications, downloads, webinars, online demos

​​​​​​3.1 Newsletter

You have the option to subscribe to our newsletter. For this, we require at least your title, your first and last name, and your email address. You can also choose to tell us which industry you work in. You can unsubscribe from the newsletter at any time. Once you have unsubscribed, we will no longer use your data when we send out the newsletter. If there is no business relationship of any kind between you and us, and if no legal retention obligations apply, we will erase your data after you unsubscribe from the newsletter.

Legal basis: Article 6(1)(a) GDPR

3.2. Job applicants

3.2.1 General information

If you send us your application documents by email, we will process the personal data they contain as well as your résumé and your references for the purpose of selecting staff and filling vacancies. If we do not offer you a job, we will erase your documents 7 months after notifying you that your application was unsuccessful.

Legal basis: Article 6(1)(b) GDPR

You may wish for us to retain your application documents for the purpose of making contact at a later date. If so, we will make contact with you to obtain your consent. If you give us this explicit consent, we will store your application data as well as the consent you have given. If there is no further opportunity to fill a vacancy at our company within a year, we will erase your entire application data one year after you give us your consent.

Legal basis: Article 6(1)(a) GDPR

3.2.2 Application platforms

We use various online application platforms to recruit staff for our company. People interested in working for us have the option to apply on these application platforms using a form provided by the operator of the platform. Applicants decide for themselves which data they provide when using these online portals. You also have the option to upload application documents. The operator of the application portal will send us the personal data you enter and the documents you upload. Both we and the application platform process these data as controllers as defined by the GDPR. Please familiarize yourself with the privacy policies of the respective portal operators. In this regard, section 3.2.1 applies for us.

Legal basis: Article 6(1)(a) GDPR

3.3 Downloads

You can download various (webinar) recordings, product information, whitepapers, posters etc. from our website. To do this, we require your title, first and last name, company, email address, zip code and country. You can also choose to give us your town/city and your telephone number. In addition, you can request informational material from us which we will be happy to send to you until you withdraw this request. You can withdraw this request to receive information at any time.

Legal basis: Article 6(1)(a) GDPR

3.4 Webinars

On our website, you can register for webinars. To do this, we require your title, first and last name, company, email address, zip code and country. You can also choose to give us your town/city and your telephone number. In addition, you can request informational material from us which we will be happy to send to you until you withdraw this request. You can withdraw this request to receive information at any time.

Legal basis: Article 6(1)(a) GDPR

3.5 Registering for an online demo

On our website, you can register for an online demo. To do this, we require your title, first and last name, company, email address, zip code and country. You can also choose to give us your town/city and your telephone number. In addition, you can request informational material from us which we will be happy to send to you until you withdraw this request. You can withdraw this request to receive information at any time.

Legal basis: Article 6(1)(a) GDPR

4. Data processing when you visit our website

4.1 Using the website to obtain information

If you use our website simply to obtain information, we only collect the personal data that your browser sends to our server. When viewing our website, at most we only collect the data which are technically required for us in order to display our website and to ensure its stability and security:

• IP address
• Date and time of request
• Time difference from Coordinated Universal Time (UTC)
• Content of request (specific page)
• Access status / HTTP status code
• Website the request came from
• Browser
• Operating system and its user interface
• Language and version of the browser software

Legal basis: Article 6(1)(f) GDPR

4.2 Cookies

As well as the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you use, and which send certain information to the organization (in this case us) that set the cookie. Cookies cannot run any programs or transmit viruses to your computer.

The cookie allows us to identify you when you visit our website again, without you having to enter data you have previously entered.

For example, when a connection is established between our web server and your browser, the information contained in the cookies is used to determine whether you are logged in and which data you have already entered, or to identify you as the user. Most web browsers automatically accept cookies.

By using our website, you give your consent to the use of these cookies (provided that your browser settings are configured to accept cookies).

4.2.1 Transient cookies

Transient cookies are automatically deleted when you close your browser. A primary example are session cookies, which save a "Session ID” that allows various requests from your browser to be associated with one session. This allows us to recognize your computer when you return to our website. The session cookies are deleted when you log out or close your browser.

4.2.2 Persistent cookies

Persistent cookies are automatically deleted after a specified period of time, which varies depending on the cookie. You can delete these cookies in your browser’s security settings at any time.

4.2.3 Third-party cookies

Third-party cookies come from other providers, rather than from the website operator. They can, for example, be used to collect information for advertising purposes, to provide tailored content for users, and to produce web statistics.

4.2.4 Browser

By default, most browsers are configured to accept all cookies. You can configure your browser to inform you when cookies are used and to only allow cookies in individual cases, to accept cookies in particular cases, or to refuse all cookies and to automatically delete cookies when you close your browser. Disabling cookies may restrict the functionality of our website.

You can remove cookies stored on your computer at any time by deleting the temporary internet files.

Legal basis: Article 6(1)(f) GDPR (for technical cookies), Article 6(1)(a) GDPR (for all other cookies)

4.3 Data processing in the USA

When you visit our website, personal data may be sent to the USA. If this is the case, we will indicate this separately in this Privacy Policy.

Article 46 GDPR requires appropriate safeguards to be in place for transferring data to a third country or an international organization. These safeguards do not exist for the USA.

Primary potential risks for you as the data subject that could currently result from the information mentioned above include:

• Your personal data may be disclosed to other third parties (e.g. US authorities) by the respective service provider, going beyond the intended purpose of fulfilling the order.
• You may subsequently be unable to claim or enforce your right of access with regard to the respective service provider.
• There is a higher risk that data may not be processed appropriately, as the scope and nature of the technical and organizational measures to protect personal data may not fully correspond to the GDPR requirements.

By consenting to the processing of (advertising and marketing) cookies, you explicitly give your consent for data transfer to the USA. You can remove cookies stored on your computer at any time by deleting the temporary internet files.

Legal basis: Article 6(1)(a) GDPR

5. Social media presence

We use the LinkedIn, YouTube, Facebook, Twitter and Instagram social medial sites. When you visit our social media sites, personal data such as the IP address of the respective provider are processed and cookies are used to collect data. Please see the privacy policy of the respective service to find out which exact information is transmitted. It will also give you contact information and explain the various settings you can configure.

We aim for full customer satisfaction, and we primarily use these services to contact and communicate with customers. We also view social media as an additional channel alongside our existing information services.

Services relating to the USA usually involve sending the collected data to a server in the USA, where they are stored. We have no influence or any way of controlling how and to what extent these services process and use these data, or disclose these data to third parties. Please see the detailed information in the privacy policies of the respective services for the options you have in the settings for these services to restrict the processing of these data.

Please also note that use of these services and their features is your responsibility. This applies in particular to use of interactive features (such as sharing, commenting or rating).

The providers of these social media services have made corresponding agreements with us – in most cases these agreements relate to the shared responsibility for data processing. We use social media on the basis of our legitimate business interest.

Legal basis: Article 6(1)(f) GDPR

6. Data processing for Google services

We have agreed a contract with Google Ireland Limited ("Google”), a company registered and operated in accordance with Irish law (Company Registration Number: 368047) which is based in Gordon House, Barrow Street, Dublin 4, Ireland. However, data may still be sent from Europe to the USA, and we as a company have no influence over this.

By using this service, personal data may be transferred to the USA! For more information, see section 4.3 of this Privacy Statement.

6.1 Google AdSense

This website uses Google AdSense to embed adverts. Google AdSense uses cookies which allow your use of our website to be analyzed. Google AdSense also uses web beacons, invisible graphics which allow Google to analyze clicks on this website, traffic on the website and similar information. The data obtained using cookies and web beacons, your IP address and the delivery of advertising formats are sent to a Google server based in the USA and stored there. Google may disclose these data to third parties, if this is legally required or if Google commissions data processing from third parties. However, Google will combine your IP address with the other stored data. You can configure settings in your internet browser to prevent cookies from being stored on your computer, though this may restrict the functionality of the content of this website. By using this website, you consent to the processing of your personal data by Google in the manner and to the extent described above and for the purpose described above.

Legal basis: Article 6(1)(a) GDPR

6.2 Google Ads Remarketing for Google Analytics

We have integrated Google Ads Remarketing on our website. This service allows us to display targeted adverts to people visiting the website. The browser stores cookies which allow the website visitor to be identified when they visit other websites which belong to the Google advertising network. Advertising campaigns can be shown to the user featuring content which they have previously accessed on other websites.

Legal basis: Article 6(1)(a) GDPR

6.3 Google Gstatic

Gstatic is a domain used by Google to load static content to another domain name, in order to reduce bandwidth usage and increase network performance for end users.

Legal basis: Article 6(1)(a) GDPR

6.4 Google Maps

This website uses the Google Maps service, which allows us to display interactive maps within our website and makes the map functionality easy for you to use. When you visit our website, Google receives the information that you have visited the respective website page. The data mentioned in the "Using the website to obtain information” section above are also sent to Google. This happens whether or not you have a Google user account with which you have logged in. If you have logged in to Google, your data will be directly associated with your account. If you do not want these data to be assigned to your Google profile, you must log out before you use Google Maps on our website. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or designing its website to meet demand. The main aim of this evaluation (which is carried out even for users who have not logged in) is to provide advertising that meets demand and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles – please contact Google to exercise this right.

For more information about the purpose and scope of data collection and processing by the plug-in providers, please see the privacy policies of these providers. They will also give you more information about your rights in this regard and the configuration options you have to protect your privacy: https://policies.google.com/privacy?hl=en.

Legal basis: Article 6(1)(a) GDPR

6.5 Google Tag Manager

We use Google Tag Manager to identify your user behavior. Google Tag Manager is a solution that provides an interface for managing website tags. The tool itself processes the user’s IP address data, and it triggers other tags which in certain circumstances collect data. Google Tag Manager does not access these data.  It can set cookies, both in the administrator’s preview and debug mode and outside of this mode. If a setting is disabled at domain or cookie level, it remains for all tracking tags implemented with Google Tag Manager.

For more information, see https://support.google.com/tagmanager/?hl=en.

Legal basis: Article 6(1)(a) GDPR

7. Data processing when using LinkedIn

Our website uses features provided by the social media network LinkedIn, and our company also has its own LinkedIn profile. The provider is the LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085 USA.

By using this service, personal data may be transferred to the USA! For more information, see section 4.3 of this Privacy Statement.

Each time you visit one of our web pages that contain the LinkedIn features, a connection to the LinkedIn servers is established. LinkedIn receives the information that you have visited our websites with your IP address. If you are logged in to your LinkedIn account and click on the LinkedIn buttons, LinkedIn can associated your visit to our website with you and your user account. Please note that we, as the provider of the sites, have no knowledge of the content of the transmitted data or of how LinkedIn uses them. For more information, see the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

Legal basis: Article 6(1)(a) GDPR

7.1 Data processing when using LinkedIn Analytics

Our website uses features provided by the social media network LinkedIn. The provider is the LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085 USA.

By using this service, personal data may be transferred to the USA! For more information, see section 4.3 of this Privacy Statement.

The LinkedIn Insight Tag allows data to be collected about visits to our website, including the URL, referrer URL, IP address, device and browser properties, time stamp and page views. These data are encrypted, anonymized within seven days, and the anonymized data are erased within 90 days. LinkedIn does not share personal data with us; it merely provides summary reports of the website target market and advertising performance. LinkedIn also offers retargeting for website visitors, which means we can use these data to display targeted advertising outside our website without the LinkedIn member being identified. LinkedIn members can control how their personal data are used for advertising purposes in their account settings. The LinkedIn privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.

Legal basis: Article 6(1)(a) GDPR

8. Data processing when using Matomo

We have integrated the web analytics service Matomo (www.matomo.org), formerly Piwik, provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand ("Matomo”) into our website for statistical analysis of user behavior and for optimization and marketing purposes. The EU Commission has decided that New Zealand ensures an adequate level of data protection, which means data can be transferred in accordance with Article 45 GDPR. By installing and integrating Matomo on our own server, we guarantee that no data will be sent to third parties. And we use Matomo with settings that ensure no cookies are used.

The following data are processed: browser type, browser version, operating system, country of origin, date and time of server request, number of visits, duration of visit to the website, and the external links you click on. The IP address is anonymized before it is stored. Pseudonymized user profiles can be generated and evaluated using these data. The collected data are processed on our servers and are not sent to third parties.

The information generated in the pseudonymized user profile are not used to personally identify the website visitor and are not combined with personal data about the subject of the pseudonym.

For more information, please see the Matomo privacy policy at https://matomo.org/gdpr/.

Legal basis: Article 6(1)(a) GDPR

9. Data processing when using the live chat

9.1 Olark

Visitors to our website can use the Olark live chat tool to speak to one of our advisors. This is provided by Habla Inc. (dba Olark), 427 N Tatnall St, 63602, Wilmington, DE 19801, USA. We require your name, company name and email address in order to give you the best possible advice.

By using this service, personal data may be transferred to the USA! For more information, see section 4.3 of this Privacy Statement. By using Olark, you consent to data processing in the USA.

Legal basis: Article 6(1)(a) GDPR

9.2 Pardot

Our chat service uses Pardot, a marketing automation platform provided by Salesforce. We have agreed a corresponding order processing contract with Salesforce. The data are processed exclusively within the EU.

Pardot allows us to gain potential customers using the chats and to display behavior of chat users in our data sets. To do this, Pardot tracks the chat with the website user and stores the data disclosed during the chat.

Legal basis: Article 6(1)(a) GDPR

10. Data processing when using YouTube

We have a YouTube channel, and we have embedded YouTube videos into our website which are stored on https://www.YouTube.com. When you watch one of our YouTube videos, a connection to the YouTube servers is established which tells YouTube which sites you are visiting. The company which operates YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited., Gordon House, Barrow Street, Dublin 4, Ireland.

By using this service, personal data may be transferred to the USA! For more information, see section 4.3 of this Privacy Statement.

For more information on data protection at YouTube, see the provider’s privacy policy at https://policies.google.com/privacy?hl=en.

Legal basis: Article 6(1)(a) GDPR

11. Your rights

You have the following rights with regard to your personal data stored by us:

• Right of access, right to rectification, right to erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to lodge a complaint with the Austrian data protection authority, Barichgasse 40-42, 1030 Vienna, Tel.: +43 1 52 152-0

e-mail: dsb@dsb.gv.at

If you believe that we have broken Austrian or European data protection laws when processing your data, and have infringed your rights as a result, please contact us so that all questions can be resolved.

Please send your queries and your concerns by email to office.alicona@bruker.com, or get in touch with us via the contact details provided.

If you believe that we have broken Austrian or European data protection laws when processing your data, and have infringed your rights as a result, please contact us so that all questions can be resolved.

Please send your queries and your concerns by email to office.alicona@bruker.com, or get in touch with us via the contact details provided.

12. Changes to this Privacy Policy

We reserve the right to make changes to our Privacy Policy from time to time. We will publish all changes to our Privacy Policy on this page. Please make sure you read the latest version of our Privacy Policy.