Data protection declaration

1. general note and mandatory information

The following privacy policy applies to the use of our online offering (hereinafter “website”) and our other services. We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

Our website can be visited without registration. Data such as pages accessed or the name of the file accessed, date and time are stored on the server for statistical purposes. This data is analyzed exclusively to ensure trouble-free operation of the site and to improve our offer and does not allow us to draw any conclusions about your person.

Personal data, in particular name, address or e-mail address, are collected on a voluntary basis as far as possible and are only processed by us in accordance with the statutory data protection regulations and this declaration. By using our website and the services offered by us, you agree that the personal data voluntarily provided by you will be stored by us and processed and used in accordance with this privacy policy.

You can save and print out this privacy policy at any time.

The controller for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is

a Poindus Company
Max-Planck-Straße, 10
70806 Kornwestheim, Germany
Managing Director: Shuo-Chien Ma
Tel: +49 7154 8300 0

We have appointed a data protection officer:
Mr. Philipp Herold
Phone: +49 451 – 16 08 52 -21

2. purpose and legal basis of the processing of personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

  1. To be able to process your request when you contact us (e.g. e-mail address, first name, surname);
  2. To be able to process your order (order form).
  3. To process your registration for the workshop
  4. For the technical realization of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information)
  5. To send a newsletter with information about our services and news about our services (e.g. name, e-mail address)
  6. To receive and process an application from you for one of our vacancies

The specific purposes are described for the processing described here (e.g. contact form, web analysis, registration, etc.).

With regard to the legal basis for the processing of your personal data, the following applies:

We process personal data that is required for the establishment, implementation or processing of our range of services (contract processing) on the legal basis of Art. 6 para. 1 lit. b GDPR. Insofar as we obtain your consent for the processing of your personal data, the consent pursuant to Art. 6 para. 1 lit. a GDPR is the legal basis for data processing. Data processing is also permitted if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not prevail. Insofar as we use external service providers as part of commissioned data processing, the processing is carried out on the legal basis of Art. 28 GDPR.

3. personal data collected and processed

As part of our website, we collect and process certain personal data from you. You can recognize which data is specifically processed on the one hand by which data you have to provide when filling out forms on the website (e.g. contact form or order form) and on the other hand we inform you about the processed data for the processing operations described here in each case.

In summary, we collect and process the following data from you via our website:

1. contact form:

  • Surname, first name
  • E-mail address
  • Content of the message

2. online application:

  • Surname, first name
  • Address
  • E-mail address
  • Phone number
  • Cover letter
  • Application documents

3. returns / RMA:

  • Company name, customer number
  • Surname, first name
  • E-mail address
  • Phone number
  • Article number, serial number
  • Invoice number

4. registration workshop / events:

  • Surname, first name
  • Company name
  • E-mail address

We will only collect and process your data for the purposes stated in this privacy policy. Any use beyond the stated purpose requires your express consent. The same applies to the transfer and transmission of your data to third parties.

4. collection of personal data when visiting our website

If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address (anonymized)
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Further information on this can be found under “Cookies” in this privacy policy.

5 Rights of the data subject

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
  • in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • the restriction of processing in accordance with Art. 18 GDPR to demand the erasure of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose the erasure and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller (data portability)
  • pursuant to Art. 7 para. 3 GDPR to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
  • Right to object: If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to the above e-mail address.

6. storage period

The data collected will remain with us until you ask us to delete it, revoke your consent to its storage or after expiry of the legal, statutory or contractual retention periods. Data that is not subject to the retention obligation will be deleted once the purpose limitation no longer applies.

In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will only be stored by us for these legal purposes, but will not be processed in any other way and will be deleted after the statutory retention period has expired.

7 Automated decisions including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Automated decision-making based on the personal data collected does not take place.

8. data security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.

Your personal data is transmitted in encrypted form. We use the SSL (Secure Socket Layer) coding system, but would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we constantly adapt to the state of the art.

Although the servers we use are regularly and carefully backed up, we cannot guarantee that our service will be available at all times; disruptions, interruptions or failures cannot be ruled out.

9. disclosure of your personal data

Your personal data will be passed on as described below.

The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing only takes place in Germany. This is necessary for the operation of the website, as well as for the establishment, execution and processing of the existing user contract and is also possible without your consent.

Data will also be passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

If your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR.

Beyond the aforementioned circumstances, we do not transfer your data to third parties without your consent. Depending on the nature of your request, we may forward your data to our parent company, Poindus Systems Corp. in Taiwan, or one of its subsidiaries in France, the UK or the USA. Should this occur, the data will not be passed on without your express consent.

10. contact (contact form, registration for the workshop, etc.)

You can contact us by e-mail or via our contact form. In this case, we store the personal data transmitted by you in order to process your request and to contact you to process your request. Insofar as we request information via our contact form, we have provided the information required for contacting you (mandatory fields are marked accordingly). The voluntary information serves us to specify your request and to improve the processing of your request. The data requested is transmitted to us by you on a purely voluntary basis.

Depending on the nature of the request, the legal basis for this processing is Art. 6 para. 1 lit. b GDPR for inquiries that you make yourself as part of a pre-contractual measure or Art. 6 para. 1 p. 1 lit. f GDPR, if your request is of a different nature. The legitimate interest arises from the provisions under para. 2) mentioned purposes. If personal data is requested that we do not need for the fulfillment of a contract or to protect legitimate interests, it will be transmitted to us on the basis of your consent in accordance with Art. 6 (6) GDPR. 1 lit. a GDPR.

11. newsletter data

To register for the newsletter, the data requested in the registration process is required. Registration for the newsletter is logged. After registering, you will receive a message to the email address provided asking you to confirm your registration (“double opt-in”). This is necessary to prevent third parties from logging in with your e-mail address.

You can revoke your consent to receive the newsletter at any time and thus unsubscribe from the newsletter.

We store the registration data as long as it is required for sending the newsletter. We store the logging of the registration and the mailing address as long as there is an interest in proving the consent originally given. As a rule, these are the limitation periods for civil law claims, i.e. a maximum of three years.

The legal basis for sending the newsletter is your consent in accordance with. Art. 6 para. 1 sentence 1 a) in conjunction with Art. 7 GDPR in conjunction with § 7 para. 2 No. 3 UWG. The legal basis for logging the registration is our legitimate interest in proving that the mailing was carried out with your consent.

You can cancel the registration at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the above-mentioned contact details (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course you will also find an unsubscribe link in every newsletter.

12. application procedure

We publish vacancies on our website, which you can apply for by e-mail. If you decide to apply for an open position, we will process the personal data you provide and transmit to us exclusively for the purpose of carrying out the application process.

In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by labor law has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for subsequent contact regarding jobs that may be of interest to you, we will continue to store your data in accordance with your consent. We do not pass on your personal data to third parties outside the specific application process without your express consent or without a legal basis.

For the assessment of an application, we do not require any information on the so-called “special categories of personal data” in the application process. This includes data revealing racial or ethnic origin (including your photograph), political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. We strongly recommend that you do not provide any information about the aforementioned data in your stored data. If the data you submit contains such information, we can only process your application if you give us your explicit consent to store these special categories of personal data. We would have to obtain this consent from you separately, which would lead to a delay in the application process.

Please note that applications that you send to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons can intercept and use this data.

13. cookies

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when you visit a website and is temporarily stored on your hard disk. This file as such contains a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser.

We also use a small number of persistent cookies (also small text files that are stored on your end device), which remain on your end device and enable us to recognize your browser on your next visit. These cookies are stored on your hard disk and delete themselves after the specified time. Their lifespan is 1 month to 10 years. This enables us to present our offer to you in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specifically tailored to your interests.

Our legitimate interest in the use of cookies pursuant to Art. 6 para. 1 sentence 1 f) GDPR is to make our website more user-friendly, effective and secure.

The following data and information are stored in the cookies:

  • Log-in information
  • Language settings
  • search terms entered
  • Information about the number of visits to our website and the use of individual functions of our website.

When the cookie is activated, it is assigned an identification number. Your personal data will not be assigned to this identification number. Your name, IP address or similar data that would allow the cookie to be assigned to you are not stored in the cookie. Based on cookie technology, we only receive pseudonymized information, for example about which pages of our store were visited, which products were viewed, etc.

You can set your browser so that you are informed in advance about the setting of cookies and can decide in individual cases whether you want to exclude the acceptance of cookies for certain cases or in general, or that cookies are completely prevented. This may limit the functionality of the website.

14. use of hCaptcha

To protect our contact form from unwanted automated messages, we use the hCaptcha service from Intuition Machines, Inc. By clicking on the ‘Load Captcha’ button, your IP address is transmitted to hCaptcha. The service is provided by Intuition Machines, Inc, 350 Alabama St, #10, San Francisco, CA 94110, USA. Further information on hCaptcha’s privacy policy can be found at

The processing of your data is carried out in accordance with Art. 6 para. 1 lit. f GDPR. As a website operator, we have a legitimate interest in protecting our website from abusive automated spying and spam.

For more information about hCaptcha and Intuition Machines’ privacy policy, please visit the following links: and

17. references and links

When calling up Internet pages to which reference is made on our website, information such as name, address, e-mail address, browser properties, etc. may be requested again. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third-party service providers may have different and separate provisions regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their personal data handling practices before entering personal data.

18. amendment of the privacy policy

We are constantly developing our website in order to provide you with an ever-improving service. We will always keep this privacy policy up to date and adapt it accordingly if and insofar as this should become necessary.

We will of course inform you in good time of any changes to this privacy policy. We will do this, for example, by sending an e-mail to the e-mail address you have provided to us. If further consent is required from you regarding our handling of your data, we will of course obtain this from you before the corresponding changes take effect.

You can access the current version of our privacy policy at any time on the Internet at

Status: September 2018