Privacy policy
Status: 16 May 2022
Thank you for visiting our website and for your interest in our company and our products. In accordance with the applicable data protection regulations, we would like to inform you below about the personal data we collect when you visit our website and, if applicable, when you receive promotional emails, the purposes for which we use this data and how we use it to optimize our services for you. We reserve the right to publish locally deviating provisions in addition to this privacy policy; the former shall take precedence in the event of a conflict.
A. General
1. Person responsible, data protection officer
Information regarding the company responsible for processing your data and, if applicable, the data protection officer as well as the competent supervisory authority can be found at the bottom of this website or at the top of this website under the tab "Data protection notice", unless otherwise stated in this privacy policy
2. Type of data processed
We do not collect any personal data via our websites without your consent. You alone decide whether you want to disclose this data to us or not, for example in the context of a registration or a download. We need your personal data to process your enquiry or to provide you with access to special information or offers. These data are, among others:
Inventory data/CRM data (e.g. names, addresses, customer history, customer statistics)
Contact details (e.g. email, telephone numbers)
Account data (login, PW # hash)
Contract data (e.g. offers, order, subject matter of the contract, customer category)
Payment data (e.g. bank details, payment history)
Content data (e.g. text input, photographs, videos)
Usage data (e.g. websites visited, interest in content, access times)
Meta/communication data (e.g. device information, IP addresses)
You will find out which data we process in individual cases, for what purpose and on what legal basis in the course of this privacy policy.
3. Category of persons affected
Our website is aimed at visitors and users of the same as well as the online offers, including e-commerce functionalities for our customers, where applicable. Accordingly, we process data from the following groups of persons:
Visitors and users of the website and its online offerings
Customers, interested parties and business partners
Newsletter subscribers
Other communication partners
4. Your rights
If the processing of your personal data is covered by the GDPR, you have the following rights, otherwise the legal provisions applicable to the processing apply. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the data controller. If you would like to assert your rights or would like more detailed information, please contact us or our data protection officer:
a) Rights according to Art. 15 ff. GDPR
You as a data subject have the right to obtain confirmation from the controller as to whether personal data concerning you are being processed; if this is the case, you have a right of access to such personal data and to the information specified in Article 15 of the GDPR. Under certain legal conditions, you have the right to rectification under Article 16 GDPR, the right to restriction of processing under Article 18 GDPR and the right to erasure ("right to be forgotten") under Article 17 GDPR.
In addition, you have the right to receive the data you have provided in a structured, common and machine-readable format (right to data portability) in accordance with Article 20 of the GDPR, insofar as the processing is carried out with the help of automated procedures and is based on consent in accordance with Article 6 (1a) or Article 9 (2a) or on a contract in accordance with Article 6 (1b) of the GDPR.
b) Withdrawal of consent pursuant to Art. 7 (3) GDPR
If the processing is based on consent, you can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
c) Right of appeal
You have the option of contacting us or a data protection supervisory authority with a complaint (Article 77 GDPR). Information regarding the company responsible for processing your data and, if applicable, the data protection officer as well as the competent supervisory authority can be found on this website.
d) Right to object pursuant to Article 21 of the GDPR
In addition to the above rights, you have the right to object as follows:
(1) Right to object on a case-by-case basis: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1e) GDPR (data processing in the public interest) and Article 6 (1f) GDPR (data processing on the basis of a balancing of interests); this also applies to a profiling based on this provision within the meaning of Article 4 no. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
(2) Right to object to the processing of data for advertising purposes: In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for the purposes of such marketing; this includes profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
5. General information on transfer of data to third parties
(1) Apart from the cases described in this privacy policy and unless otherwise regulated in additional privacy policies, your personal data will not be passed on to third parties or otherwise disseminated without your express consent.
(2) Within the responsible Endress+Hauser company, access to your data is granted to those offices that need it to fulfil our contractual and legal obligations or to protect legitimate interests. Furthermore, affiliated companies of the Endress+Hauser Group as well as service providers and vicarious agents employed by us and authorities or third parties may receive data for these purposes.
Service providers, vicarious agents, etc. commissioned by us will be contractually obliged to comply with the applicable data protection laws.
(3) As part of the hosting of our website, your data processed by us is processed by the provider Amazon Web Services, Inc. acting on our behalf on the basis of a processing agreement.
(4) The processing of the promotional email dispatch is carried out using the services and IT systems of the external service provider Oracle (Eloqua), which we have commissioned within the scope of a processing agreement. Further information on this can be found below.
(5) In order to be able to provide you with targeted information and advice on products, we or service providers may use web analysis tools, in particular tracking technology, on our behalf. These enable communication based on needs and advertising. Further information can be found below.
6. Transfer to third countries
(1) Data is only transferred abroad within the scope of the applicable data protection regulations. In particular, as far as this is necessary for the execution of your orders, is required by law (e.g. reporting obligations under tax law), in case you have given us your consent or within the scope of a processing agreement.
Furthermore, we transmit data to affiliated companies for the protection of legitimate interests. In case of transfer of personal data to third countries, we ensure an appropriate level of data protection.
(2) Within the scope of the EU General Data Protection Regulation (GDPR), the following shall apply additionally: Data transfer to countries outside the EU or the EEA (so-called third countries) only takes place within the framework of the applicable data protection regulations.
In the event of the transfer of personal data to third countries, we ensure an appropriate level of data protection, e.g. through special guarantees, such as the adequacy decision by the EU commission that the levels of data protection are essentially equivalent to the EU (e.g. for Switzerland) or compliance with recognized special contractual obligations (so-called "EU standard contractual clauses").
7. Security
(1) We have taken technical and organizational security measures (for the EU according to Art. 24, 32 GDPR) to protect your personal data from loss, destruction, manipulation and unauthorized access. All our employees and all third parties involved in data processing are obliged to comply with the applicable data protection laws and to handle personal data confidentially.
(2) For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
8. Links to other websites
Our websites may contain links to websites of other providers; these websites are not subject to this privacy policy. We carefully check the content of other websites before linking to them. In doing so, we ensure that we only link to websites that adhere to the same high standards of data protection as Endress+Hauser.
We are not responsible for the privacy practices or the content of such other websites. If we become aware of any infringements by third party content, we will remove the content or link immediately.
9. Changes to our privacy policy
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments or legal changes. In these cases, we will also adapt our privacy policy accordingly. Please therefore note the current version of our privacy policy.
B. Visiting our websites
In the following, we would like to inform you about which personal data we process for which purpose and on the basis of which legal basis when you visit our websites.
1. Purpose of the processing
We use your personal data for the following purposes:
For the provision of the website and the online offer, its functions and contents.
For the creation and management of your personal customer account.
To identify you as a contracting party.
For processing your online purchases with us. This includes your orders and returns of purchases made through our website, processing of payment, notifications of delivery status and any problems with delivery. Your personal data may also be processed for the handling of complaints or in the event of warranty rights.
For responding to contact requests and communicating with users.
For the processing of service cases.
For the assertion, enforcement, exercise or defense of and against legal claim(s) and legal dispute(s), and for the detection, investigation and prevention of crime.
For security measures.
For reach measurement.
For the purpose of direct marketing, e.g. in the form of a promotional email or postal advertising.
2. My Endress+Hauser
2.1 Registration for My Endress+Hauser
Registration on our website is required in order to use My Endress+Hauser. In the course of registration, we process the following personal data: Email address as well as a password generated by you.
The deletion of your customer account is possible at any time and can be initiated, for example, by sending a message to the contact option described above or by email. The legal basis for the processing of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).
As a registered customer, you can access your profile and view your orders as well as use other services and functionalities described below.
2.2 Use of the e-commerce functionalities
2.2.1 Ordering goods
When ordering goods via our website, we collect and process your personal data required for the processing of the order. Mandatory data required for the processing of contracts (name and address) are marked separately, other data are voluntary. The legal basis for the processing of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).
2.2.2 Electronic ordering and payment processes
(1) After you have decided to make a purchase as a customer or guest, we collect the following data to carry out the order: first name and surname, company name, communication data, address, delivery address if applicable.
Payments are made by bank transfer after receipt of our invoice. In exceptional cases, an advance payment may be requested. The legal basis for processing your order and payment data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).
(2) Your address, payment and order data will be stored for the duration of the tax and commercial law retention obligations of ten years after completion of the contract and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims.
The legal basis for processing personal data for the purpose of fulfilling legal archiving and retention obligations is the fulfilment of legal obligations (for the EU Art. 6 para. 1 lit. c) GDPR).
2.2.3 Data transfer within the framework of the order
We process the data you provide for the purpose of processing your order. For the fulfilment of the contract, we pass on your data to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. The legal basis for the transfer of this personal data is the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR).
Our service providers may only process or use your data for the purpose for which they were transmitted to them. Insofar as data is passed on to external service providers, we have taken technical and organizational measures to ensure that the data protection regulations are observed.
2.3 Software portal
The electronic software portal (www.software-products.endress.com) is operated worldwide by Endress+Hauser Infoserve GmbH+Co. KG, Colmarer Str. 6, 79576 Weil am Rhein, Germany, as the central data processing center of the Endress+Hauser Group for all subsidiaries and affiliated companies of the Endress+Hauser Group which license and provide software to customers via this portal.
In order to use the software portal, you must register and the personal data collected during registration will be processed (see above).
In the course of software management, the data required for this purpose (relating to the computer, software and the registrant) are also collected, transmitted, stored, linked and processed during the entire lifecycle (e.g. registration and activation).
This data is passed on to specialists for software lifecycle support within the Endress+Hauser Group, viewed and used in order to continuously develop and improve the software and services. The legal basis for this is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR).
By using the software portal, you also confirm that you are using or intend to use software from Endress+Hauser and that you will independently manage the software used throughout its life cycle.
2.4 Services
In our Services area and via contact forms you can report service cases relating to your Endress+Hauser products and view the processing status of current service cases. The data entered as part of the report, as well as the subsequent communication that takes place as part of the case processing, will be saved. Mandatory fields are marked. The scope of the stored data depends on the information you provide.
We process your data to analyze and remedy the reported service case. Please note that the personal information provided in the course of reporting the service case may be viewed by other members of your organization. In addition, the aforementioned information may also be passed on to affiliated companies of the Endress+Hauser Group for the purpose of processing a service case. The legal basis for the processing is the fulfilment of contractual obligations (for the EU Art.6 para. 1lit.b) GDPR).
Search queries made by the user (e.g. knowledge articles already searched for) can be evaluated to provide the user with better and faster support in a current support case. Search queries are also evaluated anonymously in order to continuously improve the quality of our knowledge database. The legal basis for the processing is our legitimate interest (for the EU Art. 6 para. 1 lit. f DSGVO).
3. Contact Forms
(1) At various points on our website, you have the opportunity to enter your personal data in order to contact us or to leave us your feedback. We have marked the respective mandatory information as such. Without these, we cannot provide you with the requested service. At the time of entry, we store this information as well as your IP address and the time (date and time) of submission.
(2) For the processing of data, reference is made to this privacy policy during the submission process. Alternatively, it is possible to contact us via the email addresses provided. In this case, the user's personal data transmitted with the email will be stored. The data will be used exclusively for processing the enquiry.
(3) The legal basis for the processing of data transmitted in the context of the use of the contact form or in the course of sending an email is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR) or the fulfilment of contractual obligations (for the EU Art. 6 para. 1 lit. b) GDPR) if the email contact is aimed at the conclusion of a contract.
(4) The processing of the personal data from the contact form serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
(5) The data shall be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
4. Provision of the website and log files
(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis in the EU is Art. 6 para. 1 lit. f) GDPR):
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access Status/HTTP Status Code
Data volume transferred in each case
Website from which the request comes
Browser as well as language and version of the browser software
Operating system and its interface
(2) The IP addresses of the users are deleted or anonymized after termination of use. In the case of anonymization, the IP addresses are changed in such a way that the individual data on personal or factual circumstances can no longer be assigned to a specific or identifiable natural person or can only be assigned with a disproportionately large effort.
5. Cookies
In addition to the log file data mentioned above, cookies are stored on your computer when you use our website. You can find a detailed overview of the cookies used and their storage duration here.
C. Promotional email communication & web analytics services
1. Promotional email communication
1.1 Registration to receive email
(1) You have the option to sign up for our promotional email communications, with which we will regularly inform you about news such as regarding our products.
(2) Our promotional email communications will only be sent to you on the basis of your active consent (opt-in) and, if required, after additional confirmation of your email address (double opt-in). If you do not confirm your registration within 14 days, your registration will not be considered complete, and you will not receive any promotional email communication from us.
In addition, we store your IP addresses used for registration and confirmation and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. After your confirmation, we store your email address for the purpose of sending you promotional email communication.
(3) The legal basis for the above-mentioned processing operations in the context of promotional email communication is your consent (for the EU Art. 6 para 1 lit. a) GDPR).
(4) If you no longer wish to receive promotional email communications from us, you can unsubscribe at any time, e.g. by clicking on the link provided in each email.
1.2 Promotional email communication after product purchase
(1) If you have purchased products, software or services through our website, we may send you our promotional email communications to the email address you provided at the time of purchase, even if you have not previously signed up to receive emails. This applies to promotional email communications advertising similar products to those you have purchased through our website.
(2) For this purpose, this email address is stored in our database. To prove the legitimacy of the sending of the promotional email communication, we also store your IP address used for the purchase and the time of the purchase.
(3) The legal basis for the above processing operations is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing is the direct advertising of our products to our customers as well as your interest in offers and promotions.
(4) If you no longer wish to receive promotional email communications from us, you can unsubscribe at any time, e.g. by clicking on the link provided in each email.
1.3 Service Provider for Promotional Email Sending
(1) We use Oracle Eloqua Marketing Automation for optimal communication with our customers. The servers are located in the EU. Within the scope of support and administration services, it cannot be ruled out in individual cases that individual employees of the service provider outside the EU may also have access to user data within the scope of their contractual service provision, whereby an appropriate level of data protection is always ensured.
(2) Further information on data protection in connection with the use of Oracle Eloqua Marketing Automation can be found here: Oracle Privacy Policy
1.4 Evaluation of promotional emails
(1) We would like to point out that we evaluate the user behavior of the recipients of our promotional email communication, provided that you have given a corresponding declaration of consent. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files. For the evaluations, we link the collected data or parts thereof and the web beacons with your email address and an individual ID.
Links received in promotional email communications also contain this ID. With the data obtained in this way, we create a user profile in order to better tailor the promotional email communication to your interests. In doing so, we record when you read our emails, which links you click on in them and infer your personal interests from this. We may link this data to actions you have taken on our website.
(2) The legal basis for the evaluation described above is your consent (for the EU Art. 6 para. 1 lit. a) GDPR), which you can give us voluntarily as part of the registration for promotional email communication.
(3) In the case of sending a promotional email communication after a purchase without a separate registration for email communication and declared consent, the legal basis for the tracking described above is the legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR). Our legitimate interest in data processing in the context of tracking is our need to better tailor our promotional email communications to the interests of our customers.
(4) You can object to the tracking described above at any time by unsubscribing from promotional email communications.
2. Web analytics and advertising
2.1 Mapp Intelligence (Webtrekk Analytics)
(1) This website uses the web statistics tool "Map Intelligence (Webtrekk Analytics)", from Mapp c/o Webtrekk GmbH, based in Germany, to collect statistical data on the use of this website and to optimize the offer accordingly. Map Intelligence (Webtrekk Analytics) records the usage anonymously or pseudonymously. The IP address is anonymized immediately after processing and before storage. The legal basis for data processing is our legitimate interest (in the EU Art. 6 para. 1 lit. f) GDPR).
(2) More information about Map Intelligence (Webtrekk Analytics) can be found in the Webtrekk privacy policy: https://www.webtrekk.com/privacy-notice.html
2.2 Google Ads and Google Conversion Tracking
1) This website uses Google Ads, an online advertising program of Google Inc. based in the USA. Within the scope of Google Ads, we use the so-called conversion tracking. The information obtained with the help of the conversion cookie is used to create conversion statistics. We thereby learn the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which we could identify you personally.
The legal basis for the data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR). You have the option to prevent this in the future by setting an opt-out cookie: https://www.google.com/settings/ads/onweb#display_optout
(2) More information on Google Ads and Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy
2.3 Google Tag Manager
(1) This website uses Google Tag Manager as part of Google Ads and Google Conversion Tracking. Tags are small pieces of code on our website that are used to, among other things, measure traffic and visitor behavior, track the impact of online advertising and social channels, use remarketing and targeting, and test and optimize their website.
The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. The legal basis for data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).
(2) Further information on Google Tag Manger can be found in Google's privacy policy: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/
2.4 Google Dynamic Remarketing
(1) We also use the Google Remarketing application. This enables us to display interest-based advertisements when you continue to use the internet, based on websites and offers that you have visited or used on our website. Google uses cookies to recognize your browser when you visit other websites and to target you with interest-based advertisements.
(2) According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing. The legal basis for data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).
(3) Further information on Google Dynamic Remarketing can be found in Google's privacy policy: https://policies.google.com/privacy
2.5 LinkedIn Lead Generation and LinkedIn Matched Audiences
(1) In the context of new customer acquisition, we use the "LinkedIn Lead Generation" and "LinkedIn Matched Audiences" services of LinkedIn Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, in order to be able to target interested parties more precisely.
(2) LinkedIn Lead Generation is a form that enables advertising on the LinkedIn social network (sponsored content). If you are a member of the LinkedIn platform, LinkedIn can assign the call-up of such forms to your profile on LinkedIn.
(3) As a member of LinkedIn, you can provide us with your email address or other user information via the aforementioned forms. The legal basis for the use of LinkedIn Lead Generation is our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR). You have the option to prevent this in the future by setting an opt-out cookie: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
(4) LinkedIn Matched Audiences is a service that enables us to display targeted advertisements about our offers to you on the websites of the LinkedIn network. For this purpose, in the course of so-called contact retargeting, the LinkedIn database is matched with the contact data transmitted by Endress+Hauser to LinkedIn.
(5) We carry out the aforementioned matching and the advertising on LinkedIn on the basis of our legitimate interest (for the EU Art. 6 para. 1 lit. f) GDPR). You have the option to prevent the processing by changing your settings in your LinkedIn profile. You can make the corresponding changes under "Interaction with companies", which can be found in your settings in the "Display data" area under "Advertising settings".
(6) Further information on data protection with LinkedIn Lead Generation and LinkedIn Matched Audiences can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy
2.6 Tealium iQ Tag Management
(1) We use Tealium iQ Tag Management, a service provided by Tealium Inc. based in the USA. Tealium iQ Tag Management enables us to integrate the services listed in this privacy policy by implementing the other cookies and tags. In addition, it enables us to integrate the Consent Manager ("cookie banner"). The legal basis for the data processing is our legitimate interest (in the EU Art. 6 para. 1 lit. f) GDPR).
(2) For further information on Tealium iQ Tag Management, please refer to Tealium's privacy policy: https://tealium.com/privacy/
2.7 Oracle Eloqua Marketing Automation
(1) Oracle Eloqua Marketing Automation is a web analysis tool of Oracle Corp. based in the USA. Oracle Eloqua Marketing Automation may use cookies and so-called web beacon technologies and, like the other web analysis tools, collects certain usage data from you. You can find more information on this in the chapter Cookies.
(2) Insofar as you as a user have not provided any personal data on or via our website (e.g. in the case of consent for our news by email, when filling out a download form), Oracle Eloqua Marketing Automation only serves us for the same purposes as Map Intelligence (Webtrekk Analytics).
In this case, the legal basis for the data processing is our legitimate interest (in the EU Art. 6 para. 1 lit. f) GDPR). We only use the collected data further if you actively provide personal data and have submitted a corresponding declaration of consent. In this case, the legal basis for the data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).
(3) For more information on Oracle Eloqua Marketing Automation, please see: Oracle Privacy Policy
2.8 Hotjar
(1) Hotjar is a web analytics tool provided by Hotjar Ltd, based in Malta, which we use to better understand your needs and optimize the offering and experience on our website. Hotjar works with cookies and other technologies to collect data about our users' behavior and about their terminal devices. Hotjar stores this information on our behalf in a pseudonymized user profile. You can find more information on this in the chapter Cookies.
(2) The legal basis for the aforementioned data processing is your consent (in the EU Art. 6 para. 1 lit. a) GDPR).
(3) Further information on Hotjar can be found in Hotjar's privacy policy: https://help.hotjar.com/hc/en-us/sections/115003180467-Data-Privacy